Papers on “adversarial attacks”
Research on “adversarial attacks” in the 480 tracked journals: papers per year and category, the journals, institutions and countries publishing it, the keywords studied with it and its most-cited papers. It is not among the most frequent keywords of the last 30 days, so this page has no list of its latest papers. Also as Markdown.
← Top research keywords · Keyword trends
Key findings#
- From 2017 to 2026 (so far), the keyword “adversarial attacks” appeared in 713 papers in the tracked journals, most of them in AI (613), information systems (88) and operations research (8).
- 119 of them were published in 2025, against 5 in 2017.
- Since 2023, the institutions with the most of these papers were Chinese Academy of Sciences (20), Tsinghua University (17) and National University of Defense Technology (14).
- The journals publishing most of them were Neural Networks (49), Computers & Security (47) and Expert Systems with Applications (41).
- The most-cited of them is “Adversarial Examples: Attacks and Defenses for Deep Learning” (IEEE Transactions on Neural Networks and Learning Systems, 2019), with 1,731 citations.
Papers per year#
20172026 (so far)
| Category | 2017 | 2018 | 2019 | 2020 | 2021 | 2022 | 2023 | 2024 | 2025 | 2026 (so far) |
|---|---|---|---|---|---|---|---|---|---|---|
| AI | 4 | 1 | 10 | 33 | 63 | 64 | 89 | 133 | 105 | 111 |
| Information Systems | 1 | 2 | 0 | 5 | 6 | 22 | 25 | 15 | 11 | 1 |
| Operations Research | 0 | 0 | 0 | 1 | 2 | 1 | 0 | 2 | 2 | 0 |
| Finance | 0 | 0 | 0 | 0 | 0 | 0 | 2 | 0 | 0 | 1 |
| Statistics | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 0 |
| All categories | 5 | 3 | 10 | 39 | 71 | 87 | 116 | 150 | 119 | 113 |
Where the papers come from#
| # | Journal | Papers |
|---|---|---|
| 1 | Neural Networks | 49 |
| 2 | Computers & Security | 47 |
| 3 | Expert Systems with Applications | 41 |
| 4 | Knowledge-Based Systems | 40 |
| 5 | Pattern Recognition | 39 |
| 6 | IEEE Transactions on Pattern Analysis and Machine Intelligence | 30 |
| 7 | Information Sciences | 29 |
| 8 | IEEE Transactions on Artificial Intelligence | 24 |
| 9 | IEEE Transactions on Neural Networks and Learning Systems | 22 |
| 10 | Neural Computing and Applications | 20 |
| # | Institution | Papers |
|---|---|---|
| 1 | Chinese Academy of Sciences | 20 |
| 2 | Tsinghua University | 17 |
| 3 | National University of Defense Technology | 14 |
| 4 | Northwestern Polytechnical University | 14 |
| 5 | University of Electronic Science and Technology of China | 14 |
| 6 | Southeast University | 13 |
| 7 | Beihang University | 12 |
| 8 | Nanyang Technological University | 12 |
| 9 | Wuhan University | 12 |
| 10 | Hong Kong Polytechnic University | 11 |
| # | Country | Papers |
|---|---|---|
| 1 | China | 324 |
| 2 | United States | 59 |
| 3 | Australia | 39 |
| 4 | Hong Kong | 33 |
| 5 | United Kingdom | 27 |
| 6 | Singapore | 22 |
| 7 | India | 21 |
| 8 | South Korea | 16 |
| 9 | Germany | 12 |
| 10 | Japan | 12 |
| # | Keyword | Papers |
|---|---|---|
| 1 | adversarial robustness | 106 |
| 2 | black-box attacks | 65 |
| 3 | adversarial examples | 53 |
| 4 | adversarial training | 53 |
| 5 | adversarial defense | 51 |
| 6 | robustness | 42 |
| 7 | graph neural networks | 39 |
| 8 | transferability | 29 |
| 9 | adversarial perturbations | 26 |
Most-cited papers#
| # | Citations | Per month | Title | Journal | Published | Authors |
|---|---|---|---|---|---|---|
| 1 | 1,731 | 18.5 | Adversarial Examples: Attacks and Defenses for Deep Learning | IEEE Transactions on Neural Networks and Learning Systems | 2019-01-14 | Xiaoyong Yuan, Pan Li He, Qile Zhu et al. |
| 2 | 683 | 13.0 | Backdoor Learning: A Survey | IEEE Transactions on Neural Networks and Learning Systems | 2022-06-22 | Yiming Li, Yong Jiang, Zhifeng Li et al. |
| 3 | 548 | 7.0 | Understanding adversarial attacks on deep learning based medical image analysis systems | Pattern Recognition | 2020-05-01 | Xingjun Ma, Yuhao Niu, Lin Gu et al. |
| 4 | 407 | 11.4 | Artificial Intelligence Trust, Risk and Security Management (AI TRiSM): Frameworks, applications, challenges and future research directions | Expert Systems with Applications | 2023-11-16 | Adib Habbal, Mohamed Khalif Ali, Mustafa Ali Abuzaraida |
| 5 | 331 | 3.6 | Hiding Images within Images | IEEE Transactions on Pattern Analysis and Machine Intelligence | 2019-02-28 | Shumeet Baluja |
Cite this page
Scholar4AI. (2026). Papers on “adversarial attacks”. Journal and Conference Research Rankings. Retrieved November 5, 2026, from https://scholar4ai.com/keywords/adversarial-attacks
@misc{scholar4ai-keywords-adversarial-attacks,
author = {{Scholar4AI}},
title = {Papers on “adversarial attacks”},
year = {2026},
howpublished = {\url{https://scholar4ai.com/keywords/adversarial-attacks}},
urldate = {2026-11-05},
note = {Journal and Conference Research Rankings; data from OpenAlex (CC0); licensed CC BY-NC 4.0}
}