---
title: "Adversarial attacks research: papers and trends"
description: "From 2017 to 2026 (so far), the keyword “adversarial attacks” appeared in 713 papers in the tracked journals, most of them in AI (613), information systems (88) and operations research (8)."
url: https://scholar4ai.com/keywords/adversarial-attacks
markdown_url: https://scholar4ai.com/keywords/adversarial-attacks.md
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
share_text: "From 2017 to 2026 (so far), the keyword “adversarial attacks” appeared in 713 papers in the tracked journals, most of them in AI (613), information systems (88) and operations research (8). (as of 2026-11-05)"
data_url: https://scholar4ai.com/data/rankings.json
updated: 2026-11-05T06:02:37+09:00
window: 2026-10-07 to 2026-11-05
source: OpenAlex (CC0)
---

# Papers on “adversarial attacks”

[Browse research topics](https://scholar4ai.com/keywords/directory.md)

Research on “adversarial attacks” in the 480 tracked journals: papers per year and category, the journals, institutions and countries publishing it, the keywords studied with it and its most-cited papers. It is not among the most frequent keywords of the last 30 days, so this page has no list of its latest papers.

Back to the ranking: https://scholar4ai.com/rankings/keywords.md

## Key findings

- From 2017 to 2026 (so far), the keyword “adversarial attacks” appeared in 713 papers in the tracked journals, most of them in AI (613), information systems (88) and operations research (8).
- 119 of them were published in 2025, against 5 in 2017.
- Since 2023, the institutions with the most of these papers were Chinese Academy of Sciences (20), Tsinghua University (17) and National University of Defense Technology (14).
- The journals publishing most of them were Neural Networks (49), Computers & Security (47) and Expert Systems with Applications (41).
- The most-cited of them is “Adversarial Examples: Attacks and Defenses for Deep Learning” (IEEE Transactions on Neural Networks and Learning Systems, 2019), with 1,731 citations.

## Papers per year

*Papers per publication year and category*

| Category | 2017 | 2018 | 2019 | 2020 | 2021 | 2022 | 2023 | 2024 | 2025 | 2026 (so far) |
|---|---:|---:|---:|---:|---:|---:|---:|---:|---:|---:|
| [AI](https://scholar4ai.com/categories/ai.md) | 4 | 1 | 10 | 33 | 63 | 64 | 89 | 133 | 105 | 111 |
| [Information Systems](https://scholar4ai.com/categories/information-systems.md) | 1 | 2 | 0 | 5 | 6 | 22 | 25 | 15 | 11 | 1 |
| [Operations Research](https://scholar4ai.com/categories/operations-research.md) | 0 | 0 | 0 | 1 | 2 | 1 | 0 | 2 | 2 | 0 |
| [Finance](https://scholar4ai.com/categories/finance.md) | 0 | 0 | 0 | 0 | 0 | 0 | 2 | 0 | 0 | 1 |
| [Statistics](https://scholar4ai.com/categories/statistics.md) | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 0 |
| All categories | 5 | 3 | 10 | 39 | 71 | 87 | 116 | 150 | 119 | 113 |

## Where the papers come from

*Journals with the most papers, since 2023*

| # | Journal | Papers |
|---:|---|---:|
| 1 | [Neural Networks](https://scholar4ai.com/journals/neural-networks.md) | 49 |
| 2 | [Computers & Security](https://scholar4ai.com/journals/computers-security.md) | 47 |
| 3 | [Expert Systems with Applications](https://scholar4ai.com/journals/expert-systems-with-applications.md) | 41 |
| 4 | [Knowledge-Based Systems](https://scholar4ai.com/journals/knowledge-based-systems.md) | 40 |
| 5 | [Pattern Recognition](https://scholar4ai.com/journals/pattern-recognition.md) | 39 |
| 6 | [IEEE Transactions on Pattern Analysis and Machine Intelligence](https://scholar4ai.com/journals/ieee-transactions-on-pattern-analysis-and-machine-intelligence.md) | 30 |
| 7 | [Information Sciences](https://scholar4ai.com/journals/information-sciences.md) | 29 |
| 8 | [IEEE Transactions on Artificial Intelligence](https://scholar4ai.com/journals/ieee-transactions-on-artificial-intelligence.md) | 24 |
| 9 | [IEEE Transactions on Neural Networks and Learning Systems](https://scholar4ai.com/journals/ieee-transactions-on-neural-networks-and-learning-systems.md) | 22 |
| 10 | [Neural Computing and Applications](https://scholar4ai.com/journals/neural-computing-and-applications.md) | 20 |

*Institutions with the most papers, since 2023*

| # | Institution | Papers |
|---:|---|---:|
| 1 | [Chinese Academy of Sciences](https://scholar4ai.com/institutions/chinese-academy-of-sciences.md) | 20 |
| 2 | [Tsinghua University](https://scholar4ai.com/institutions/tsinghua-university.md) | 17 |
| 3 | [National University of Defense Technology](https://scholar4ai.com/institutions/national-university-of-defense-technology.md) | 14 |
| 4 | [Northwestern Polytechnical University](https://scholar4ai.com/institutions/northwestern-polytechnical-university.md) | 14 |
| 5 | [University of Electronic Science and Technology of China](https://scholar4ai.com/institutions/university-of-electronic-science-and-technology-of-china.md) | 14 |
| 6 | [Southeast University](https://scholar4ai.com/institutions/southeast-university.md) | 13 |
| 7 | [Beihang University](https://scholar4ai.com/institutions/beihang-university.md) | 12 |
| 8 | [Nanyang Technological University](https://scholar4ai.com/institutions/nanyang-technological-university.md) | 12 |
| 9 | [Wuhan University](https://scholar4ai.com/institutions/wuhan-university.md) | 12 |
| 10 | [Hong Kong Polytechnic University](https://scholar4ai.com/institutions/hong-kong-polytechnic-university.md) | 11 |

*Countries with the most papers, since 2023*

| # | Country | Papers |
|---:|---|---:|
| 1 | China | 324 |
| 2 | United States | 59 |
| 3 | Australia | 39 |
| 4 | Hong Kong | 33 |
| 5 | United Kingdom | 27 |
| 6 | Singapore | 22 |
| 7 | India | 21 |
| 8 | South Korea | 16 |
| 9 | Germany | 12 |
| 10 | Japan | 12 |

*Keywords with the most papers, since 2023*

| # | Keyword | Papers |
|---:|---|---:|
| 1 | [adversarial robustness](https://scholar4ai.com/keywords/adversarial-robustness.md) | 106 |
| 2 | black-box attacks | 65 |
| 3 | adversarial examples | 53 |
| 4 | adversarial training | 53 |
| 5 | adversarial defense | 51 |
| 6 | robustness | 42 |
| 7 | [graph neural networks](https://scholar4ai.com/keywords/graph-neural-networks.md) | 39 |
| 8 | transferability | 29 |
| 9 | adversarial perturbations | 26 |

## Most-cited papers

*Most-cited papers since 2017*

| # | Citations | Per month | Title | Journal | Published | Authors |
|---:|---:|---:|---|---|---|---|
| 1 | 1,731 | 18.5 | [Adversarial Examples: Attacks and Defenses for Deep Learning](https://doi.org/10.1109/tnnls.2018.2886017) | [IEEE Transactions on Neural Networks and Learning Systems](https://scholar4ai.com/journals/ieee-transactions-on-neural-networks-and-learning-systems.md) | 2019-01-14 | Xiaoyong Yuan, Pan Li He, Qile Zhu et al. |
| 2 | 683 | 13.0 | [Backdoor Learning: A Survey](https://doi.org/10.1109/tnnls.2022.3182979) | [IEEE Transactions on Neural Networks and Learning Systems](https://scholar4ai.com/journals/ieee-transactions-on-neural-networks-and-learning-systems.md) | 2022-06-22 | Yiming Li, Yong Jiang, Zhifeng Li et al. |
| 3 | 548 | 7.0 | [Understanding adversarial attacks on deep learning based medical image analysis systems](https://doi.org/10.1016/j.patcog.2020.107332) | [Pattern Recognition](https://scholar4ai.com/journals/pattern-recognition.md) | 2020-05-01 | Xingjun Ma, Yuhao Niu, Lin Gu et al. |
| 4 | 407 | 11.4 | [Artificial Intelligence Trust, Risk and Security Management (AI TRiSM): Frameworks, applications, challenges and future research directions](https://doi.org/10.1016/j.eswa.2023.122442) | [Expert Systems with Applications](https://scholar4ai.com/journals/expert-systems-with-applications.md) | 2023-11-16 | Adib Habbal, Mohamed Khalif Ali, Mustafa Ali Abuzaraida |
| 5 | 331 | 3.6 | [Hiding Images within Images](https://doi.org/10.1109/tpami.2019.2901877) | [IEEE Transactions on Pattern Analysis and Machine Intelligence](https://scholar4ai.com/journals/ieee-transactions-on-pattern-analysis-and-machine-intelligence.md) | 2019-02-28 | Shumeet Baluja |

## Cite this page

Scholar4AI. (2026). Papers on “adversarial attacks”. Journal and Conference Research Rankings. Retrieved November 5, 2026, from https://scholar4ai.com/keywords/adversarial-attacks

```bibtex
@misc{scholar4ai-keywords-adversarial-attacks,
  author = {{Scholar4AI}},
  title = {Papers on “adversarial attacks”},
  year = {2026},
  howpublished = {\url{https://scholar4ai.com/keywords/adversarial-attacks}},
  urldate = {2026-11-05},
  note = {Journal and Conference Research Rankings; data from OpenAlex (CC0); licensed CC BY-NC 4.0}
}
```

License: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/).