A curated list of awesome black-box attacks in adversarial examples papers, inspired by https://github.com/wangjksjtu/awesome-AML
Explaining and harnessing adversarial examples[paper] [code](white-box)(ICLR2015)
Adversarial examples in the physical world [paper] [code](ICLR-workshop2017)
Boosting adversarial attacks with momentum[paper] [code](CVPR2018)
Nesterov accelerated gradient and scale invariance for adversarial attacks[paper] [code](ICLR2020)
Enhancing the Transferability of Adversarial Attacks through Variance Tuning[paper] [code](CVPR2021)
Improving transferability of adversarial examples with input diversity[paper] [code](CVPR2019)
Evading defenses to transferable adversarial examples by translation-invariant attacks.[paper] [code](CVPR2019)
ZOO: Zeroth Order Optimization Based Black-box Attacks to Deep Neural Networks without Training Substitute Models[paper] [code](2017)
Black-box adversarial attacks with limited queries and information[paper][code](ICML2018)
Adversarial risk and the dangers of evaluating against weak attacks[paper](ICLR2018)
Improving black-box adversarial attacks with a transfer-based prior[paper][code](NIPS2019)
NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks[paper] [code](ICML2019)
Decision-based adversarial attacks: Reliable attacks against black-box machine learning models.[paper] [code](ICLR2018)
Query-Efficient Hard-label Black-box Attack: An Optimization-based Approach[paper](ICLR2019)
Efficient decision-based blackbox adversarial attacks on face recognition[paper](CVPR2019)
Over-the-Air Adversarial Flickering Attacks against Video Recognition Networks[paper](White-box)