Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE. - Wenzhao Xiang 001; Chang Liu 077; Shibao Zheng (CoRR, 2021)

You Cannot Easily Catch Me: A Low-Detectable Adversarial Patch for Object Detectors. - Zijian Zhu; Hang Su 006; Chang Liu 077; Wenzhao Xiang 001; Shibao Zheng (CoRR, 2021)

Adversarial Attacks on ML Defense Models Competition. - Yinpeng Dong; Qi-An Fu; Xiao Yang; Wenzhao Xiang 001; Tianyu Pang; Hang Su 006; Jun Zhu 001; Jiayu Tang; Yuefeng Chen; Xiaofeng Mao; Yuan He 011; Hui Xue 001; et al. (CoRR, 2021)

Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness. - Xiao Yang; Yinpeng Dong; Wenzhao Xiang 001; Tianyu Pang; Hang Su 006; Jun Zhu 001 (CoRR, 2021)

Unrestricted Adversarial Attacks on ImageNet Competition. - Yuefeng Chen; Xiaofeng Mao; Yuan He 011; Hui Xue 001; Chao Li; Yinpeng Dong; Qi-An Fu; Xiao Yang; Wenzhao Xiang 001; Tianyu Pang; Hang Su 006; Jun Zhu 001; et al. (CoRR, 2021)

Improving the robustness of adversarial attacks using an affine-invariant gradient estimator. - Wenzhao Xiang 001; Hang Su 006; Chang Liu 077; Yandong Guo; Shibao Zheng (Comput. Vis. Image Underst., 2023)

AEMIM: Adversarial Examples Meet Masked Image Modeling. - Wenzhao Xiang 001; Chang Liu 077; Hang Su 006; Hongyang Yu 001 (CoRR, 2024)

Wavelet-Driven Masked Image Modeling: A Path to Efficient Visual Representation. - Wenzhao Xiang 001; Chang Liu 077; Hongyang Yu 001; Xilin Chen 001 (AAAI, 2025)

Improving model generalization by on-manifold adversarial augmentation in the frequency domain. - Chang Liu 077; Wenzhao Xiang 001; Yuan He 011; Hui Xue 001; Shibao Zheng; Hang Su 006 (J. Vis. Commun. Image Represent., 2025)

RobustPrompt: Learning to defend against adversarial attacks with adaptive visual prompts. - Chang Liu 077; Wenzhao Xiang 001; Yinpeng Dong; Xingxing Zhang 001; Liyuan Wang; Ranjie Duan; Shibao Zheng; Hang Su 006 (Pattern Recognit. Lett., 2025)

A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking. - Chang Liu 077; Yinpeng Dong; Wenzhao Xiang 001; Xiao Yang; Hang Su 006; Jun Zhu 001; Yuefeng Chen; Yuan He 011; Hui Xue 001; Shibao Zheng (Int. J. Comput. Vis., 2025)