% Key papers for Transferable adversarial examples (scime atlas, https://atlas.scime.ai). Authors are not included: add them from the paper pages.

@inproceedings{cvpr2019_improving_14314,
  title = {{Improving Transferability of Adversarial Examples With Input Diversity}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2019},
}

@inproceedings{iclr2017_delving_28339,
  title = {{Delving into Transferable Adversarial Examples and Black-box Attacks}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2017},
  url = {https://openreview.net/forum?id=Sys6GJqxl},
}

@inproceedings{cvpr2019_evading_14157,
  title = {{Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2019},
}

@inproceedings{cvpr2021_enhancing_16954,
  title = {{Enhancing the Transferability of Adversarial Attacks Through Variance Tuning}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2021},
}

@inproceedings{cvpr2019_feature_14205,
  title = {{Feature Space Perturbations Yield More Transferable Adversarial Examples}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2019},
}

@inproceedings{iclr2020_skip_29308,
  title = {{Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2020},
  url = {https://openreview.net/forum?id=BJlRs34Fvr},
}

@inproceedings{cvpr2022_improving_19059,
  title = {{Improving Adversarial Transferability via Neuron Attribution-Based Attacks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2020_boosting_15210,
  title = {{Boosting the Transferability of Adversarial Samples via Attention}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{cvpr2020_towards_16366,
  title = {{Towards Transferable Targeted Attack}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{aaai2020_learning_103703,
  title = {{Learning Transferable Adversarial Examples via Ghost Networks}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2020},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/6810},
}

@inproceedings{cvpr2020_efficient_15460,
  title = {{Efficient Adversarial Training With Transferable Adversarial Examples}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{cvpr2021_improving_17179,
  title = {{Improving the Transferability of Adversarial Samples With Adversarial Transformations}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2021},
}

@inproceedings{cvpr2024_boosting_22860,
  title = {{Boosting Adversarial Transferability by Block Shuffle and Rotation}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30886},
}

@inproceedings{neurips2019_cross_58066,
  title = {{Cross-Domain Transferability of Adversarial Perturbations}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2019},
  url = {https://nips.cc/virtual/2019/poster/14237},
}

@inproceedings{cvpr2022_improving_19068,
  title = {{Improving the Transferability of Targeted Adversarial Examples Through Object-Based Diverse Input}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2022},
}

@inproceedings{cvpr2020_enhancing_15482,
  title = {{Enhancing Cross-Task Black-Box Transferability of Adversarial Examples With Dispersion Reduction}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2020},
}

@inproceedings{cvpr2023_improving_21245,
  title = {{Improving the Transferability of Adversarial Samples by Path-Augmented Method}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21158},
}

@inproceedings{cvpr2023_towards_22390,
  title = {{Towards Transferable Targeted Adversarial Examples}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/21366},
}

@inproceedings{neurips2021_on_62614,
  title = {{On Success and Simplicity: A Second Look at Transferable Targeted Attacks}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2021},
  url = {https://nips.cc/virtual/2021/poster/26087},
}

@inproceedings{cvpr2023_enhancing_20919,
  title = {{Enhancing the Self-Universality for Transferable Targeted Attacks}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2023},
  url = {https://cvpr.thecvf.com/virtual/2023/poster/22502},
}

@inproceedings{cvpr2024_ensemble_23379,
  title = {{Ensemble Diversity Facilitates Adversarial Transferability}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29823},
}

@inproceedings{aaai2024_boosting_5307,
  title = {{Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28133},
}

@inproceedings{cvpr2024_learning_23991,
  title = {{Learning to Transform Dynamically for Better Adversarial Transferability}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29896},
}

@inproceedings{cvpr2024_towards_25063,
  title = {{Towards Transferable Targeted 3D Adversarial Attack in the Physical World}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/31338},
}

@inproceedings{cvpr2024_strong_24898,
  title = {{Strong Transferable Adversarial Attacks via Ensembled Asymptotically Normal Distribution Learning}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/30146},
}

@inproceedings{cvpr2024_improving_23783,
  title = {{Improving Transferable Targeted Adversarial Attacks with Model Self-Enhancement}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2024},
  url = {https://cvpr.thecvf.com/virtual/2024/poster/29361},
}

@inproceedings{aaai2024_ags_5090,
  title = {{AGS: Affordable and Generalizable Substitute Training for Transferable Adversarial Attack}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28365},
}

@inproceedings{aaai2024_lrs_6411,
  title = {{LRS: Enhancing Adversarial Transferability through Lipschitz Regularized Surrogate}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28430},
}

@inproceedings{aaai2024_towards_7623,
  title = {{Towards Transferable Adversarial Attacks with Centralized Perturbation}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/28427},
}

@inproceedings{aaai2024_transferable_7638,
  title = {{Transferable Adversarial Attacks for Object Detection Using Object-Aware Significant Feature Distortion}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2024},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/27920},
}

@inproceedings{cvpr2025_improving_26611,
  title = {{Improving Transferable Targeted Attacks with Feature Tuning Mixup}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/35163},
}

@inproceedings{aaai2025_improving_9533,
  title = {{Improving Integrated Gradient-based Transferable Adversarial Examples by Refining the Integration Path}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32722},
}

@inproceedings{cvpr2025_boosting_25608,
  title = {{Boosting Adversarial Transferability through Augmentation in Hypothesis Space}},
  booktitle = {IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)},
  year = {2025},
  url = {https://cvpr.thecvf.com/virtual/2025/poster/35262},
}

@inproceedings{aaai2025_enhancing_8948,
  title = {{Enhancing Adversarial Transferability with Adversarial Weight Tuning}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2025},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/32203},
}

@inproceedings{iclr2024_rethinking_33824,
  title = {{Rethinking Model Ensemble in Transfer-based Adversarial Attacks}},
  booktitle = {International Conference on Learning Representations (ICLR)},
  year = {2024},
  url = {https://iclr.cc/virtual/2024/poster/19251},
}

@inproceedings{neurips2024_transferability_71317,
  title = {{Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness}},
  booktitle = {Advances in Neural Information Processing Systems (NeurIPS)},
  year = {2024},
  url = {https://neurips.cc/virtual/2024/poster/95930},
}

@inproceedings{aaai2026_transferable_99878,
  title = {{Transferable Hypergraph Attack via Injecting Nodes into Pivotal Hyperedges}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/36999},
}

@inproceedings{aaai2026_transferability_101119,
  title = {{Transferability of Adversarial Attacks in Video-based MLLMs: A Cross-modal Image-to-Video Approach}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/37420},
}

@inproceedings{aaai2026_boosting_105666,
  title = {{Boosting Adversarial Transferability via Ensemble Non-Attention}},
  booktitle = {AAAI Conference on Artificial Intelligence (AAAI)},
  year = {2026},
  url = {https://ojs.aaai.org/index.php/AAAI/article/view/38422},
}