% Key papers for Decision-based boundary attacks (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{cvpr2020_qeba_16077,
  title = {{QEBA: Query-Efficient Boundary-Based Blackbox Attack}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{iclr2018_decision_28641,
  title = {{Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2018},
  url = {https://iclr.cc/virtual/2018/poster/19},
}

@inproceedings{icml2019_white_37857,
  title = {{White-box vs Black-box: Bayes Optimal Strategies for Membership Inference}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2019},
  url = {https://icml.cc/virtual/2019/poster/4066},
}

@inproceedings{cvpr2022_investigating_19102,
  title = {{Investigating Top-k White-Box and Transferable Black-Box Attack}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2020_polishing_16052,
  title = {{Polishing Decision-Based Adversarial Noise With a Customized Sampling}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{aaai2023_unfooling_4903,
  title = {{Unfooling Perturbation-Based Post Hoc Explainers}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25847},
}

@inproceedings{aaai2023_defending_3434,
  title = {{Defending Black-Box Skeleton-Based Human Activity Classifiers}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2023},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/25352},
}

@inproceedings{aaai2020_optimal_101900,
  title = {{Optimal Attack against Autoregressive Models by Manipulating the Environment}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2020},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/5760},
}

@inproceedings{aaai2024_ttts_7487,
  title = {{TTTS: Tree Test Time Simulation for Enhancing Decision Tree Robustness against Adversarial Examples}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/30090},
}

@inproceedings{neurips2021_characterizing_61519,
  title = {{Characterizing the risk of fairwashing}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2021},
  url = {https://nips.cc/virtual/2021/poster/27065},
}

@inproceedings{neurips2024_when_71294,
  title = {{When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/95953},
}

@inproceedings{aaai2025_adba_7954,
  title = {{ADBA: Approximation Decision Boundary Approach for Black-Box Adversarial Attacks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32821},
}

@inproceedings{icml2020_robust_38714,
  title = {{Robust and Stable Black Box Explanations}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2020},
  url = {https://icml.cc/virtual/2020/poster/6726},
}

@inproceedings{icml2021_a_38994,
  title = {{A Zeroth-Order Block Coordinate Descent Algorithm for Huge-Scale Black-Box Optimization}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2021},
  url = {https://icml.cc/virtual/2021/poster/9407},
}

@inproceedings{icml2023_preprocessors_42743,
  title = {{Preprocessors Matter! Realistic Decision-Based Attacks on Machine Learning Systems}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2023},
  url = {https://icml.cc/virtual/2023/poster/24809},
}

@inproceedings{iclr2023_bort_32460,
  title = {{Bort: Towards Explainable Neural Networks with Bounded Orthogonal Constraint}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2023},
  url = {https://iclr.cc/virtual/2023/poster/12080},
}

@inproceedings{icml2021_popskipjump_39794,
  title = {{PopSkipJump: Decision-Based Attack for Probabilistic Classifiers}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2021},
  url = {https://icml.cc/virtual/2021/poster/9475},
}

@inproceedings{icml2025_advagent_47893,
  title = {{AdvAgent: Controllable Blackbox Red-teaming on Web Agents}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2025},
  url = {https://icml.cc/virtual/2025/poster/44710},
}

@inproceedings{aaai2026_fading_108794,
  title = {{Fading the Digital Ink: A Universal Black-Box Attack Framework for 3DGS Watermarking Systems}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/41146},
}

@inproceedings{iclr2023_roco_31970,
  title = {{ROCO: A General Framework for Evaluating Robustness of Combinatorial Optimization Solvers on Graphs}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2023},
  url = {https://iclr.cc/virtual/2023/poster/11370},
}

@inproceedings{icml2026_inducing_53764,
  title = {{Inducing Overthink: Hierarchical Genetic Algorithm-based DoS Attack on Black-Box Large Language Reasoning Models}},
  booktitle = {International Conference on Machine Learning (ICML)},
  year = {2026},
  url = {https://openreview.net/forum?id=iSk9sTfuYQ},
}

@inproceedings{neurips2025_interpreting_76205,
  title = {{Interpreting Emergent Features in Deep Learning-based Side-channel Analysis}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2025},
  url = {https://openreview.net/forum?id=GjkuXI7hX7},
}

@inproceedings{iclr2026_black_88415,
  title = {{Black-Box Privacy Attacks on Shared Representations in Multitask Learning}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2026},
  url = {https://openreview.net/forum?id=mTsWEVhcZM},
}