{"total":85,"rows":[{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193,"area":null},{"id":"2105.14368","title":"Fit without fear: remarkable mathematical phenomena of deep learning through the prism of interpolation","created":"2021-05-29","cited_by_count":132,"area":null},{"id":"2108.12237","title":"Evaluating the Robustness of Neural Language Models to Input Perturbations","created":"2021-08-27","cited_by_count":87,"area":null},{"id":"2112.01008","title":"Editing a classifier by rewriting its prediction rules","created":"2021-12-02","cited_by_count":65,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2112.11313","title":"On the Adversarial Robustness of Causal Algorithmic Recourse","created":"2021-12-21","cited_by_count":56,"area":null},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2110.02180","title":"Noisy Feature Mixup","created":"2021-10-05","cited_by_count":27,"area":null},{"id":"2309.16314","title":"A Primer on Bayesian Neural Networks: Review and Debates","created":"2023-09-28","cited_by_count":27,"area":null},{"id":"2107.11610","title":"Context-aware Adversarial Training for Name Regularity Bias in Named Entity Recognition","created":"2021-07-24","cited_by_count":19,"area":null},{"id":"2207.13378","title":"Identifying Hard Noise in Long-Tailed Sample Distribution","created":"2022-07-27","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2109.15031","title":"Back in Black: A Comparative Evaluation of Recent State-Of-The-Art Black-Box Attacks","created":"2021-09-29","cited_by_count":16,"area":null},{"id":"2310.18936","title":"Adversarial Examples Are Not Real Features","created":"2023-10-29","cited_by_count":16,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2210.17316","title":"There is more than one kind of robustness: Fooling Whisper with adversarial examples","created":"2022-10-26","cited_by_count":11,"area":null},{"id":"2312.06701","title":"Dynamic Adversarial Attacks on Autonomous Driving Systems","created":"2023-12-10","cited_by_count":11,"area":null},{"id":"2107.04882","title":"Out of Distribution Detection and Adversarial Attacks on Deep Neural Networks for Robust Medical Image Analysis","created":"2021-07-10","cited_by_count":10,"area":null},{"id":"2407.13700","title":"Cross-Task Attack: A Self-Supervision Generative Framework Based on Attention Shift","created":"2024-07-18","cited_by_count":9,"area":null},{"id":"2307.12822","title":"Learning Provably Robust Estimators for Inverse Problems via Jittering","created":"2023-07-24","cited_by_count":8,"area":null},{"id":"2510.11709","title":"Adversarial Attacks Leverage Interference Between Features in Superposition","created":"2025-10-13","cited_by_count":8,"area":null},{"id":"2208.06064","title":"Mixed-Precision Neural Networks: A Survey","created":"2022-08-11","cited_by_count":7,"area":null},{"id":"2209.01782","title":"\"Is your explanation stable?\": A Robustness Evaluation Framework for Feature Attribution","created":"2022-09-05","cited_by_count":7,"area":null},{"id":"2203.13890","title":"Improving Robustness of Jet Tagging Algorithms with Adversarial Training","created":"2022-03-25","cited_by_count":6,"area":null},{"id":"2406.10161","title":"On the Computability of Robust PAC Learning","created":"2024-06-14","cited_by_count":6,"area":null},{"id":"2302.12304","title":"Uncertainty Injection: A Deep Learning Method for Robust Optimization","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2303.14173","title":"How many dimensions are required to find an adversarial example?","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2111.12305","title":"Thundernna: a white box adversarial attack","created":"2021-11-24","cited_by_count":4,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2205.06127","title":"Sample Complexity Bounds for Robustly Learning Decision Lists against Evasion Attacks","created":"2022-05-12","cited_by_count":4,"area":null},{"id":"2207.09408","title":"Bounding generalization error with input compression: An empirical study with infinite-width networks","created":"2022-07-19","cited_by_count":4,"area":null},{"id":"2210.14957","title":"Disentangled Text Representation Learning with Information-Theoretic Perspective for Adversarial Robustness","created":"2022-10-26","cited_by_count":4,"area":null},{"id":"2309.03665","title":"How adversarial attacks can disrupt seemingly stable accurate classifiers","created":"2023-09-07","cited_by_count":4,"area":null},{"id":"2506.04650","title":"Neural Network Reprogrammability: A Unified Theme on Model Reprogramming, Prompt Tuning, and Prompt Instruction","created":"2025-06-05","cited_by_count":4,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2308.10373","title":"HoSNN: Adversarially-Robust Homeostatic Spiking Neural Networks with Adaptive Firing Thresholds","created":"2023-08-20","cited_by_count":3,"area":null},{"id":"2311.12764","title":"Investigating Weight-Perturbed Deep Neural Networks With Application in Iris Presentation Attack Detection","created":"2023-11-21","cited_by_count":3,"area":null},{"id":"2101.09306","title":"Towards Optimal Branching of Linear and Semidefinite Relaxations for Neural Network Robustness Certification","created":"2021-01-22","cited_by_count":2,"area":null},{"id":"2106.15360","title":"Attack Transferability Characterization for Adversarially Robust Multi-label Classification","created":"2021-06-29","cited_by_count":2,"area":null},{"id":"2207.04581","title":"How Robust is your Fair Model? Exploring the Robustness of Diverse Fairness Strategies","created":"2022-07-11","cited_by_count":2,"area":null},{"id":"2212.13989","title":"AdvCat: Domain-Agnostic Robustness Assessment for Cybersecurity-Critical Applications with Categorical Inputs","created":"2022-12-13","cited_by_count":2,"area":null},{"id":"2311.10803","title":"Robustness Enhancement in Neural Networks with Alpha-Stable Training Noise","created":"2023-11-17","cited_by_count":2,"area":null},{"id":"2502.06885","title":"Topological derivative approach for deep neural network architecture adaptation","created":"2025-02-08","cited_by_count":2,"area":null},{"id":"2103.09265","title":"Bio-inspired Robustness: A Review","created":"2021-03-16","cited_by_count":1,"area":null},{"id":"2109.09869","title":"Robustness Analysis of Deep Learning Frameworks on Mobile Platforms","created":"2021-09-20","cited_by_count":1,"area":null},{"id":"2109.13215","title":"Classification and Adversarial examples in an Overparameterized Linear Model: A Signal Processing Perspective","created":"2021-09-27","cited_by_count":1,"area":null},{"id":"2112.15329","title":"On Distinctive Properties of Universal Perturbations","created":"2021-12-31","cited_by_count":1,"area":null},{"id":"2202.09248","title":"Stochastic Perturbations of Tabular Features for Non-Deterministic Inference with Automunge","created":"2022-02-18","cited_by_count":1,"area":null},{"id":"2210.06089","title":"When are Local Queries Useful for Robust Learning?","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2303.05719","title":"Boosting Adversarial Attacks by Leveraging Decision Boundary Information","created":"2023-03-10","cited_by_count":1,"area":null},{"id":"2404.18825","title":"Harmonic Machine Learning Models are Robust","created":"2024-04-29","cited_by_count":1,"area":null},{"id":"2406.16200","title":"Feature compression is the root cause of adversarial fragility in neural network classifiers","created":"2024-06-23","cited_by_count":1,"area":null},{"id":"2409.01813","title":"Comparative Study on Noise-Augmented Training and its Effect on Adversarial Robustness in ASR Systems","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2503.06361","title":"Adversarial Robustness of Discriminative Self-Supervised Learning in Vision","created":"2025-03-08","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2505.02360","title":"Catastrophic Overfitting, Entropy Gap and Participation Ratio: A Noiseless $l^p$ Norm Solution for Fast Adversarial Training","created":"2025-05-05","cited_by_count":1,"area":null},{"id":"2602.03586","title":"APEX: Probing Neural Networks via Activation Perturbation","created":"2026-02-03","cited_by_count":1,"area":null},{"id":"2101.06061","title":"Heating up decision boundaries: isocapacitory saturation, adversarial scenarios and generalization bounds","created":"2021-01-15","cited_by_count":0,"area":null},{"id":"2103.04565","title":"Improving Transformation-based Defenses against Adversarial Examples with First-order Perturbations","created":"2021-03-08","cited_by_count":0,"area":null},{"id":"2106.09872","title":"Analyzing Adversarial Robustness of Deep Neural Networks in Pixel Space: a Semantic Perspective","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2107.03806","title":"Output Randomization: A Novel Defense for both White-box and Black-box Adversarial Models","created":"2021-07-08","cited_by_count":0,"area":null},{"id":"2204.01210","title":"Co-Teaching for Unsupervised Domain Adaptation and Expansion","created":"2022-04-04","cited_by_count":0,"area":null},{"id":"2210.00292","title":"DeltaBound Attack: Efficient decision-based attack in low queries regime","created":"2022-10-01","cited_by_count":0,"area":null},{"id":"2211.10227","title":"Adversarial Detection by Approximation of Ensemble Boundary","created":"2022-11-18","cited_by_count":0,"area":null},{"id":"2307.03803","title":"A Theoretical Perspective on Subnetwork Contributions to Adversarial Robustness","created":"2023-07-07","cited_by_count":0,"area":null},{"id":"2401.13212","title":"AdCorDA: Classifier Refinement via Adversarial Correction and Domain Adaptation","created":"2024-01-24","cited_by_count":0,"area":null},{"id":"2410.14667","title":"SGD Jittering: A Training Strategy for Robust and Accurate Model-Based Architectures","created":"2024-10-18","cited_by_count":0,"area":null},{"id":"2503.22205","title":"Data-Free Universal Attack by Exploiting the Intrinsic Vulnerability of Deep Models","created":"2025-03-28","cited_by_count":0,"area":null},{"id":"2505.01012","title":"Quantum Support Vector Regression for Robust Anomaly Detection","created":"2025-05-02","cited_by_count":0,"area":null},{"id":"2505.19194","title":"Curvature Dynamic Black-box Attack: revisiting adversarial robustness via dynamic curvature estimation","created":"2025-05-25","cited_by_count":0,"area":null},{"id":"2506.06933","title":"Rewriting the Budget: A General Framework for Black-Box Attacks Under Cost Asymmetry","created":"2025-06-07","cited_by_count":0,"area":null},{"id":"2510.20428","title":"An Empirical Study of Sample Selection Strategies for Large Language Model Repair","created":"2025-10-23","cited_by_count":0,"area":null},{"id":"2601.14519","title":"How Worst-Case Are Adversarial Attacks? Linking Adversarial and Perturbation Robustness","created":"2026-01-20","cited_by_count":0,"area":null},{"id":"2602.18800","title":"Operational Robustness of LLMs on Code Generation","created":"2026-02-21","cited_by_count":0,"area":null},{"id":"2602.22470","title":"Beyond performance-wise Contribution Evaluation in Federated Learning","created":"2026-02-25","cited_by_count":0,"area":null},{"id":"2604.16861","title":"CCAR: Intrinsic Robustness as an Emergent Geometric Property","created":"2026-04-18","cited_by_count":0,"area":null},{"id":"2605.20302","title":"Neural Collapse by Design: Learning Class Prototypes on the Hypersphere","created":"2026-05-19","cited_by_count":0,"area":null},{"id":"2606.00738","title":"SORA: Free Second-Order Attacks in Fast Adversarial Training","created":"2026-05-30","cited_by_count":0,"area":null},{"id":"2606.27832","title":"USAD: Uncertainty-aware Statistical Adversarial Detection","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2607.08370","title":"Tubular Neighbourhoods of Pfaffian Sets and Applications to Neural Networks","created":"2026-07-09","cited_by_count":0,"area":null},{"id":"2608.23874","title":"Differential Learning for Robust Prediction of Thermal Stability with Application to Energetic Materials","created":"2026-08-24","cited_by_count":0,"area":null},{"id":"2609.34501","title":"Can Attack Difficulty Be Characterized Before Optimization? A Study of Pre-optimization Difficulty in Person-Vanishing Attacks","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2609.39190","title":"Dynamics to decision: A mathematical theory of Lyapunov spectra and decision boundaries in deep classifiers","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}