{"total":132,"rows":[{"id":"2102.11107","title":"Towards Causal Representation Learning","created":"2021-02-22","cited_by_count":209,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2206.04011","title":"Robust Semantic Communications with Masked VQ-VAE Enabled Codebook","created":"2022-06-08","cited_by_count":56,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2203.04041","title":"Shape-invariant 3D Adversarial Point Clouds","created":"2022-03-08","cited_by_count":50,"area":null},{"id":"2306.06123","title":"Adversarial attacks and defenses in explainable artificial intelligence: A survey","created":"2023-06-06","cited_by_count":48,"area":null},{"id":"2101.09387","title":"Online Adversarial Purification based on Self-Supervision","created":"2021-01-23","cited_by_count":46,"area":null},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43,"area":null},{"id":"2209.08025","title":"Trustworthy Reinforcement Learning Against Intrinsic Vulnerabilities: Robustness, Safety, and Generalizability","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2402.16382","title":"Immunization against harmful fine-tuning attacks","created":"2024-02-26","cited_by_count":35,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2305.08466","title":"Nearly Optimal VC-Dimension and Pseudo-Dimension Bounds for Deep Neural Network Derivatives","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2407.13646","title":"Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Masking","created":"2024-07-18","cited_by_count":19,"area":null},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2403.10045","title":"Towards Adversarially Robust Dataset Distillation by Curvature Regularization","created":"2024-03-15","cited_by_count":17,"area":null},{"id":"2101.11466","title":"Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Voting","created":"2021-01-27","cited_by_count":16,"area":null},{"id":"2102.03716","title":"SPADE: A Spectral Method for Black-Box Adversarial Robustness Evaluation","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15,"area":null},{"id":"2112.02625","title":"Explainable Deep Learning in Healthcare: A Methodological Survey from an Attribution View","created":"2021-12-05","cited_by_count":15,"area":null},{"id":"2402.00152","title":"Deeper or Wider: A Perspective from Optimal Generalization Error with Sobolev Loss","created":"2024-01-31","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2112.14299","title":"DeepAdversaries: Examining the Robustness of Deep Learning Models for Galaxy Morphology Classification","created":"2021-12-28","cited_by_count":10,"area":null},{"id":"2209.07788","title":"PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition","created":"2022-09-16","cited_by_count":10,"area":null},{"id":"2307.06855","title":"Data Augmentation in Training CNNs: Injecting Noise to Images","created":"2023-07-12","cited_by_count":10,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2108.13952","title":"Morphence: Moving Target Defense Against Adversarial Examples","created":"2021-08-31","cited_by_count":9,"area":null},{"id":"2110.12734","title":"Fast Gradient Non-sign Methods","created":"2021-10-25","cited_by_count":9,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9,"area":null},{"id":"2102.02729","title":"Adversarial Attacks and Defenses in Physiological Computing: A Systematic Review","created":"2021-02-04","cited_by_count":8,"area":null},{"id":"2305.04746","title":"Understanding Noise-Augmented Training for Randomized Smoothing","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2102.01979","title":"Key Technology Considerations in Developing and Deploying Machine Learning Models in Clinical Radiology Practice","created":"2021-02-03","cited_by_count":6,"area":null},{"id":"2104.10868","title":"Towards Adversarial Patch Analysis and Certified Defense against Crowd Counting","created":"2021-04-22","cited_by_count":6,"area":null},{"id":"2204.10933","title":"A Tale of Two Models: Constructing Evasive Attacks on Edge Models","created":"2022-04-22","cited_by_count":6,"area":null},{"id":"2206.04569","title":"Benefits of Overparameterized Convolutional Residual Networks: Function Approximation under Smoothness Constraint","created":"2022-06-09","cited_by_count":6,"area":null},{"id":"2209.15042","title":"Generalizability of Adversarial Robustness Under Distribution Shifts","created":"2022-09-29","cited_by_count":6,"area":null},{"id":"2307.02055","title":"Adversarial Attacks on Image Classification Models: FGSM and Patch Attacks and their Impact","created":"2023-07-05","cited_by_count":6,"area":null},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2103.00381","title":"Adversarial Information Bottleneck","created":"2021-02-28","cited_by_count":5,"area":null},{"id":"2204.09183","title":"Robustness Testing of Data and Knowledge Driven Anomaly Detection in Cyber-Physical Systems","created":"2022-04-20","cited_by_count":5,"area":null},{"id":"2206.13581","title":"Exact Spectral Norm Regularization for Neural Networks","created":"2022-06-27","cited_by_count":5,"area":null},{"id":"2301.12896","title":"Identifying Adversarially Attackable and Robust Samples","created":"2023-01-30","cited_by_count":5,"area":null},{"id":"2302.12304","title":"Uncertainty Injection: A Deep Learning Method for Robust Optimization","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2406.10285","title":"I Don't Know You, But I Can Catch You: Real-Time Defense against Diverse Adversarial Patches for Object Detectors","created":"2024-06-12","cited_by_count":5,"area":null},{"id":"2102.00662","title":"Towards Speeding up Adversarial Training in Latent Spaces","created":"2021-02-01","cited_by_count":4,"area":null},{"id":"2103.11002","title":"Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptions","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2111.15414","title":"Neuron with Steady Response Leads to Better Generalization","created":"2021-11-30","cited_by_count":4,"area":null},{"id":"2205.11744","title":"Alleviating Robust Overfitting of Adversarial Training With Consistency Regularization","created":"2022-05-24","cited_by_count":4,"area":null},{"id":"2206.07282","title":"Human Eyes Inspired Recurrent Neural Networks are More Robust Against Adversarial Noises","created":"2022-06-15","cited_by_count":4,"area":null},{"id":"2208.08697","title":"Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundaries","created":"2022-08-18","cited_by_count":4,"area":null},{"id":"2303.06032","title":"Exploring Adversarial Attacks on Neural Networks: An Explainable Approach","created":"2023-03-08","cited_by_count":4,"area":null},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2103.11526","title":"ExAD: An Ensemble Approach for Explanation-based Adversarial Detection","created":"2021-03-22","cited_by_count":3,"area":null},{"id":"2107.05780","title":"Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising","created":"2021-07-12","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2301.01218","title":"Tracing the Origin of Adversarial Attack for Forensic Investigation and Deterrence","created":"2022-12-31","cited_by_count":3,"area":null},{"id":"2303.13326","title":"Decentralized Adversarial Training over Graphs","created":"2023-03-23","cited_by_count":3,"area":null},{"id":"2305.15709","title":"PEARL: Preprocessing Enhanced Adversarial Robust Learning of Image Deraining for Semantic Segmentation","created":"2023-05-25","cited_by_count":3,"area":null},{"id":"2306.00687","title":"Adversarial Robustness in Unsupervised Machine Learning: A Systematic Review","created":"2023-06-01","cited_by_count":3,"area":null},{"id":"2312.12608","title":"Rethinking Randomized Smoothing from the Perspective of Scalability","created":"2023-12-19","cited_by_count":3,"area":null},{"id":"2102.09057","title":"Towards Adversarial-Resilient Deep Neural Networks for False Data Injection Attack Detection in Power Grids","created":"2021-02-17","cited_by_count":2,"area":null},{"id":"2103.01359","title":"Brain Programming is Immune to Adversarial Attacks: Towards Accurate and Robust Image Classification using Symbolic Learning","created":"2021-03-01","cited_by_count":2,"area":null},{"id":"2111.14726","title":"Do Invariances in Deep Neural Networks Align with Human Perception?","created":"2021-11-29","cited_by_count":2,"area":null},{"id":"2202.02626","title":"Layer-wise Regularized Adversarial Training using Layers Sustainability Analysis (LSA) framework","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2202.08944","title":"Rethinking Machine Learning Robustness via its Link with the Out-of-Distribution Problem","created":"2022-02-18","cited_by_count":2,"area":null},{"id":"2204.11837","title":"A Mask-Based Adversarial Defense Scheme","created":"2022-04-21","cited_by_count":2,"area":null},{"id":"2206.07321","title":"Morphence-2.0: Evasion-Resilient Moving Target Defense Powered by Out-of-Distribution Detection","created":"2022-06-15","cited_by_count":2,"area":null},{"id":"2212.00311","title":"Generalizing and Improving Jacobian and Hessian Regularization","created":"2022-12-01","cited_by_count":2,"area":null},{"id":"2303.06151","title":"NoiseCAM: Explainable AI for the Boundary Between Noise and Adversarial Attacks","created":"2023-03-09","cited_by_count":2,"area":null},{"id":"2303.12363","title":"Distribution-restrained Softmax Loss for the Model Robustness","created":"2023-03-22","cited_by_count":2,"area":null},{"id":"2304.11056","title":"PowerGAN: A Machine Learning Approach for Power Side-Channel Attack on Compute-in-Memory Accelerators","created":"2023-04-13","cited_by_count":2,"area":null},{"id":"2312.16880","title":"Adversarial Attacks on Image Classification Models: Analysis and Defense","created":"2023-12-28","cited_by_count":2,"area":null},{"id":"2406.14568","title":"Policy Gradient-Driven Noise Mask","created":"2024-04-29","cited_by_count":2,"area":null},{"id":"2411.00839","title":"CausAdv: A Causal-based Framework for Detecting Adversarial Examples","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2506.12284","title":"GrokAlign: Geometric Characterisation and Acceleration of Grokking","created":"2025-06-14","cited_by_count":2,"area":null},{"id":"2101.09108","title":"Adaptive Neighbourhoods for the Discovery of Adversarial Examples","created":"2021-01-22","cited_by_count":1,"area":null},{"id":"2103.04513","title":"Improving Global Adversarial Robustness Generalization With Adversarially Trained GAN","created":"2021-03-08","cited_by_count":1,"area":null},{"id":"2106.02732","title":"BO-DBA: Query-Efficient Decision-Based Adversarial Attacks via Bayesian Optimization","created":"2021-06-04","cited_by_count":1,"area":null},{"id":"2110.10391","title":"Robust lEarned Shrinkage-Thresholding (REST): Robust unrolling for sparse recover","created":"2021-10-20","cited_by_count":1,"area":null},{"id":"2112.06276","title":"Quantifying and Understanding Adversarial Examples in Discrete Input Spaces","created":"2021-12-12","cited_by_count":1,"area":null},{"id":"2202.02892","title":"Lossy Compression of Noisy Data for Private and Data-Efficient Learning","created":"2022-02-07","cited_by_count":1,"area":null},{"id":"2206.00489","title":"Attack-Agnostic Adversarial Detection","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2206.01705","title":"Gradient Obfuscation Checklist Test Gives a False Sense of Security","created":"2022-06-03","cited_by_count":1,"area":null},{"id":"2207.03400","title":"On the Relationship Between Adversarial Robustness and Decision Region in Deep Neural Networks","created":"2022-07-07","cited_by_count":1,"area":null},{"id":"2209.02408","title":"Robustness and invariance properties of image classifiers","created":"2022-08-30","cited_by_count":1,"area":null},{"id":"2210.12952","title":"Ares: A System-Oriented Wargame Framework for Adversarial ML","created":"2022-10-24","cited_by_count":1,"area":null},{"id":"2307.06513","title":"Leveraging Contextual Counterfactuals Toward Belief Calibration","created":"2023-07-13","cited_by_count":1,"area":null},{"id":"2310.10610","title":"Quantifying Assistive Robustness Via the Natural-Adversarial Frontier","created":"2023-10-16","cited_by_count":1,"area":null},{"id":"2401.13624","title":"Can overfitted deep neural networks in adversarial training generalize? -- An approximation viewpoint","created":"2024-01-24","cited_by_count":1,"area":null},{"id":"2405.19956","title":"HOLMES: to Detect Adversarial Examples with Multiple Detectors","created":"2024-05-30","cited_by_count":1,"area":null}],"next_cursor":"100"}