{"total":76,"rows":[{"id":"2204.03632","title":"The Effects of Regularization and Data Augmentation are Class Dependent","created":"2022-04-07","cited_by_count":67,"area":null},{"id":"2112.13547","title":"PRIME: A few primitives can boost robustness to common corruptions","created":"2021-12-27","cited_by_count":40,"area":null},{"id":"2204.06274","title":"Overparameterized Linear Regression under Adversarial Attacks","created":"2022-04-13","cited_by_count":21,"area":null},{"id":"2310.10807","title":"Regularization properties of adversarially-trained linear regression","created":"2023-10-16","cited_by_count":18,"area":null},{"id":"2111.03536","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-11-05","cited_by_count":17,"area":null},{"id":"2102.03716","title":"SPADE: A Spectral Method for Black-Box Adversarial Robustness Evaluation","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2112.00646","title":"Reliability Assessment and Safety Arguments for Machine Learning Components in System Assurance","created":"2021-11-30","cited_by_count":16,"area":null},{"id":"2102.02671","title":"Directive Explanations for Actionable Explainability in Machine Learning Applications","created":"2021-02-03","cited_by_count":14,"area":null},{"id":"2209.09502","title":"GAMA: Generative Adversarial Multi-Object Scene Attacks","created":"2022-09-20","cited_by_count":13,"area":null},{"id":"2103.09947","title":"Understanding Generalization in Adversarial Training via the Bias-Variance Decomposition","created":"2021-03-17","cited_by_count":10,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2407.13700","title":"Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shift","created":"2024-07-18","cited_by_count":9,"area":null},{"id":"2206.03362","title":"Building Robust Ensembles via Margin Boosting","created":"2022-06-07","cited_by_count":8,"area":null},{"id":"2307.12822","title":"Learning Provably Robust Estimators for Inverse Problems via Jittering","created":"2023-07-24","cited_by_count":8,"area":null},{"id":"2306.02918","title":"Adversarial Ink: Componentwise Backward Error Attacks on Deep Learning","created":"2023-06-05","cited_by_count":7,"area":null},{"id":"2201.01235","title":"On the Minimal Adversarial Perturbation for Deep Neural Networks with Provable Estimation Error","created":"2022-01-04","cited_by_count":6,"area":null},{"id":"2406.10161","title":"On the Computability of Robust PAC Learning","created":"2024-06-14","cited_by_count":6,"area":null},{"id":"2102.08868","title":"Bridging the Gap Between Adversarial Robustness and Optimization Bias","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2203.00922","title":"Adversarial attacks on neural networks through canonical Riemannian foliations","created":"2022-03-02","cited_by_count":5,"area":null},{"id":"2205.00210","title":"Software Testing for Machine Learning","created":"2022-04-30","cited_by_count":5,"area":null},{"id":"2209.09883","title":"Leveraging Local Patch Differences in Multi-Object Scenes for Generative Adversarial Attacks","created":"2022-09-20","cited_by_count":5,"area":null},{"id":"2303.14173","title":"How many dimensions are required to find an adversarial example?","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2111.12305","title":"Thundernna: a white box adversarial attack","created":"2021-11-24","cited_by_count":4,"area":null},{"id":"2205.06127","title":"Sample Complexity Bounds for Robustly Learning Decision Lists against Evasion Attacks","created":"2022-05-12","cited_by_count":4,"area":null},{"id":"2305.05400","title":"Investigating the Corruption Robustness of Image Classifiers with Random Lp-norm Corruptions","created":"2023-05-09","cited_by_count":4,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2111.05063","title":"Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search","created":"2021-11-09","cited_by_count":3,"area":null},{"id":"2404.08285","title":"A Survey of Neural Network Robustness Assessment in Image Recognition","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2412.04245","title":"Intriguing Properties of Robust Classification","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2106.15360","title":"Attack Transferability Characterization for Adversarially Robust Multi-label Classification","created":"2021-06-29","cited_by_count":2,"area":null},{"id":"2201.05451","title":"A causal model of safety assurance for machine learning","created":"2022-01-14","cited_by_count":2,"area":null},{"id":"2204.03154","title":"Optimization Models and Interpretations for Three Types of Adversarial Perturbations against Support Vector Machines","created":"2022-04-07","cited_by_count":2,"area":null},{"id":"2205.12695","title":"Surprises in adversarially-trained linear regression","created":"2022-05-25","cited_by_count":2,"area":null},{"id":"2206.13405","title":"Utilizing Class Separation Distance for the Evaluation of Corruption Robustness of Machine Learning Classifiers","created":"2022-06-27","cited_by_count":2,"area":null},{"id":"2311.10803","title":"Robustness Enhancement in Neural Networks with Alpha-Stable Training Noise","created":"2023-11-17","cited_by_count":2,"area":null},{"id":"2406.19807","title":"Deceptive Diffusion: Generating Synthetic Adversarial Examples","created":"2024-06-28","cited_by_count":2,"area":"diffusion"},{"id":"2102.09230","title":"Random Projections for Improved Adversarial Robustness","created":"2021-02-18","cited_by_count":1,"area":null},{"id":"2107.06158","title":"Correlation Analysis between the Robustness of Sparse Neural Networks and their Random Hidden Structural Priors","created":"2021-07-13","cited_by_count":1,"area":null},{"id":"2108.03090","title":"Path classification by stochastic linear recurrent neural networks","created":"2021-08-06","cited_by_count":1,"area":null},{"id":"2206.05664","title":"An Efficient Method for Sample Adversarial Perturbations against Nonlinear Support Vector Machines","created":"2022-06-12","cited_by_count":1,"area":null},{"id":"2210.06089","title":"When are Local Queries Useful for Robust Learning?","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2307.10788","title":"Adversarial attacks for mixtures of classifiers","created":"2023-07-20","cited_by_count":1,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2412.18218","title":"On the Effectiveness of Adversarial Training on Malware Classifiers","created":"2024-12-24","cited_by_count":1,"area":null},{"id":"2510.12249","title":"Optimal Regularization for Performative Learning","created":"2025-10-14","cited_by_count":1,"area":null},{"id":"2601.08043","title":"The Role of Noisy Data in Improving CNN Robustness for Image Classification","created":"2026-01-12","cited_by_count":1,"area":null},{"id":"2602.06395","title":"Empirical Analysis of Adversarial Robustness and Explainability Drift in Cybersecurity Classifiers","created":"2026-02-06","cited_by_count":1,"area":null},{"id":"2101.06061","title":"Heating up decision boundaries: isocapacitory saturation, adversarial scenarios and generalization bounds","created":"2021-01-15","cited_by_count":0,"area":null},{"id":"2103.04565","title":"Improving Transformation-based Defenses against Adversarial Examples with First-order Perturbations","created":"2021-03-08","cited_by_count":0,"area":null},{"id":"2103.07364","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-03-12","cited_by_count":0,"area":null},{"id":"2103.08265","title":"Constant Random Perturbations Provide Adversarial Robustness with Minimal Effect on Accuracy","created":"2021-03-15","cited_by_count":0,"area":null},{"id":"2104.11729","title":"Evaluating Deception Detection Model Robustness To Linguistic Variation","created":"2021-04-23","cited_by_count":0,"area":null},{"id":"2205.07626","title":"Attacking and Defending Deep Reinforcement Learning Policies","created":"2022-05-16","cited_by_count":0,"area":null},{"id":"2305.08076","title":"Improving Defensive Distillation using Teacher Assistant","created":"2023-05-14","cited_by_count":0,"area":"distill"},{"id":"2401.15615","title":"Mitigating the Impact of Noisy Edges on Graph-Based Algorithms via Adversarial Robustness Evaluation","created":"2024-01-28","cited_by_count":0,"area":null},{"id":"2409.03598","title":"A practical approach to evaluating the adversarial distance for machine learning classifiers","created":"2024-09-05","cited_by_count":0,"area":null},{"id":"2409.11754","title":"NPAT Null-Space Projected Adversarial Training Towards Zero Deterioration","created":"2024-09-18","cited_by_count":0,"area":null},{"id":"2411.05853","title":"A Fundamental Accuracy--Robustness Trade-off in Regression and Classification","created":"2024-11-06","cited_by_count":0,"area":null},{"id":"2503.11627","title":"Are Deep Speech Denoising Models Robust to Adversarial Noise?","created":"2025-03-14","cited_by_count":0,"area":null},{"id":"2509.07673","title":"Nearest Neighbor Projection Removal Adversarial Training","created":"2025-09-09","cited_by_count":0,"area":null},{"id":"2512.07818","title":"Provable Long-Range Benefits of Next-Token Prediction","created":"2025-12-08","cited_by_count":0,"area":null},{"id":"2512.22128","title":"Pruning Graphs by Adversarial Robustness Evaluation to Strengthen GNN Defenses","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2601.14519","title":"How Worst-Case Are Adversarial Attacks? Linking Adversarial and Perturbation Robustness","created":"2026-01-20","cited_by_count":0,"area":null},{"id":"2603.02806","title":"The Price of Robustness: Stable Classifiers Need Overparameterization","created":"2026-03-03","cited_by_count":0,"area":null},{"id":"2603.06311","title":"Latent Transfer Attack: Adversarial Examples via Generative Latent Spaces","created":"2026-03-06","cited_by_count":0,"area":null},{"id":"2604.06954","title":"Compression as an Adversarial Amplifier Through Decision Space Reduction","created":"2026-04-08","cited_by_count":0,"area":null},{"id":"2605.07590","title":"Beyond Defenses: Manifold-Aligned Regularization for Intrinsic 3D Point Cloud Robustness","created":"2026-05-08","cited_by_count":0,"area":null},{"id":"2605.30601","title":"TASER: Task-Aware Stein Regularisation for Geometry-Driven Robustness","created":"2026-05-28","cited_by_count":0,"area":null},{"id":"2606.02876","title":"RRISE: Robust Radius Inference via a Surrogate Estimator","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.04209","title":"A Geometric View of Counterfactual Behavior: Interaction of Boundary Proximity and Local Support","created":"2026-06-02","cited_by_count":0,"area":null},{"id":"2606.09746","title":"Hybrid Robustness Verification for Spatio-Temporal Neural Networks","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.26207","title":"The Role of Input Dimensionality in the Emergence and Targeted Control of Adversarial Examples","created":"2026-06-24","cited_by_count":0,"area":null},{"id":"2607.01679","title":"Beyond Gradient-Based Attacks: Adversarial Robustness and Explainability Stability in Cybersecurity Classifiers","created":"2026-07-02","cited_by_count":0,"area":null},{"id":"2607.07375","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2608.15617","title":"Benchmarking Quantum Machine Learning for Power-System Attack Detection: Evaluation Choices Decide the Outcome Before the Models Do","created":"2026-08-16","cited_by_count":0,"area":null},{"id":"2609.13518","title":"GeoTTER: Leveraging Local Geometry of Optimal Transport for Zero-Shot Classification","created":"2026-09-11","cited_by_count":0,"area":null}],"next_cursor":null}