{"total":169,"rows":[{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43,"area":null},{"id":"2104.11408","title":"Neural Mean Discrepancy for Efficient Out-of-Distribution Detection","created":"2021-04-23","cited_by_count":42,"area":null},{"id":"2202.07857","title":"Graph-Augmented Normalizing Flows for Anomaly Detection of Multiple Time Series","created":"2022-02-16","cited_by_count":42,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2210.06284","title":"Visual Prompting for Adversarial Robustness","created":"2022-10-12","cited_by_count":34,"area":null},{"id":"2203.01677","title":"Detection of Word Adversarial Examples in Text Classification: Benchmark and Baseline via Robust Density Estimation","created":"2022-03-03","cited_by_count":32,"area":null},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2102.12967","title":"A statistical framework for efficient out of distribution detection in deep neural networks","created":"2021-02-25","cited_by_count":28,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2109.00893","title":"A Survey on Open Set Recognition","created":"2021-08-18","cited_by_count":25,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2204.06213","title":"Defensive Patches for Robust Recognition in the Physical World","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2305.16035","title":"Detecting Adversarial Data by Probing Multiple Perturbations Using Expected Perturbation Score","created":"2023-05-25","cited_by_count":20,"area":null},{"id":"2402.16041","title":"Detecting Machine-Generated Texts by Multi-Population Aware Optimization for Maximum Mean Discrepancy","created":"2024-02-25","cited_by_count":20,"area":null},{"id":"2106.06685","title":"Adversarial Robustness via Fisher-Rao Regularization","created":"2021-06-12","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2112.02625","title":"Explainable Deep Learning in Healthcare: A Methodological Survey from an Attribution View","created":"2021-12-05","cited_by_count":15,"area":null},{"id":"2208.13058","title":"Adversarial Robustness for Tabular Data through Cost and Utility Awareness","created":"2022-08-27","cited_by_count":15,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2303.06664","title":"Adv-Bot: Realistic Adversarial Botnet Attacks against Network Intrusion Detection Systems","created":"2023-03-12","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2102.12196","title":"Identifying Untrustworthy Predictions in Neural Networks by Geometric Gradient Analysis","created":"2021-02-24","cited_by_count":13,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2103.01629","title":"DeepCert: Verification of Contextually Relevant Robustness for Neural Network Image Classifiers","created":"2021-03-02","cited_by_count":11,"area":null},{"id":"2105.08619","title":"On the Robustness of Domain Constraints","created":"2021-05-18","cited_by_count":11,"area":null},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9,"area":null},{"id":"2204.05427","title":"Generalizing Adversarial Explanations with Grad-CAM","created":"2022-04-11","cited_by_count":9,"area":null},{"id":"2406.01943","title":"Enhancing Trust in LLMs: Algorithms for Comparing and Interpreting LLMs","created":"2024-06-04","cited_by_count":9,"area":null},{"id":"2107.02840","title":"RAILS: A Robust Adversarial Immune-inspired Learning System","created":"2021-06-27","cited_by_count":8,"area":null},{"id":"2302.10739","title":"MalProtect: Stateful Defense Against Adversarial Query Attacks in ML-based Malware Detection","created":"2023-02-21","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2105.03689","title":"Self-Supervised Adversarial Example Detection by Disentangled Representation","created":"2021-05-08","cited_by_count":7,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2204.12050","title":"Self-recoverable Adversarial Examples: A New Effective Protection Mechanism in Social Networks","created":"2022-04-26","cited_by_count":6,"area":null},{"id":"2210.15068","title":"Improving Adversarial Robustness with Self-Paced Hard-Class Pair Reweighting","created":"2022-10-26","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2212.00322","title":"Hijack Vertical Federated Learning Models As One Party","created":"2022-12-01","cited_by_count":5,"area":null},{"id":"2302.11328","title":"PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks","created":"2023-02-22","cited_by_count":5,"area":null},{"id":"2402.12187","title":"Adversarial Feature Alignment: Balancing Robustness and Accuracy in Deep Learning via Adversarial Training","created":"2024-02-19","cited_by_count":5,"area":null},{"id":"2404.13785","title":"How to Inverting the Leverage Score Distribution?","created":"2024-04-21","cited_by_count":5,"area":null},{"id":"2411.02444","title":"MADOD: Generalizing OOD Detection to Unseen Domains via G-Invariance Meta-Learning","created":"2024-11-02","cited_by_count":5,"area":null},{"id":"2103.00778","title":"Explaining Adversarial Vulnerability with a Data Sparsity Hypothesis","created":"2021-03-01","cited_by_count":4,"area":null},{"id":"2103.11002","title":"Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptions","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2106.12900","title":"Long-term Cross Adversarial Training: A Robust Meta-learning Method for Few-shot Classification Tasks","created":"2021-06-22","cited_by_count":4,"area":null},{"id":"2110.06802","title":"Identification of Attack-Specific Signatures in Adversarial Examples","created":"2021-10-13","cited_by_count":4,"area":null},{"id":"2111.08485","title":"Consistent Semantic Attacks on Optical Flow","created":"2021-11-16","cited_by_count":4,"area":null},{"id":"2203.04886","title":"Reverse Engineering $\\ell_p$ attacks: A block-sparse optimization approach with recovery guarantees","created":"2022-03-09","cited_by_count":4,"area":null},{"id":"2208.08697","title":"Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundaries","created":"2022-08-18","cited_by_count":4,"area":null},{"id":"2404.12120","title":"Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectors","created":"2024-04-18","cited_by_count":4,"area":null},{"id":"2410.04577","title":"Robustness Reprogramming for Representation Learning","created":"2024-10-06","cited_by_count":4,"area":null},{"id":"2103.11526","title":"ExAD: An Ensemble Approach for Explanation-based Adversarial Detection","created":"2021-03-22","cited_by_count":3,"area":null},{"id":"2105.10101","title":"Anomaly Detection of Adversarial Examples using Class-conditional Generative Adversarial Networks","created":"2021-05-21","cited_by_count":3,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2107.05780","title":"Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising","created":"2021-07-12","cited_by_count":3,"area":null},{"id":"2109.06176","title":"TREATED:Towards Universal Defense against Textual Adversarial Attacks","created":"2021-09-13","cited_by_count":3,"area":null},{"id":"2111.12631","title":"Unity is strength: Improving the Detection of Adversarial Examples with Ensemble Approaches","created":"2021-11-24","cited_by_count":3,"area":null},{"id":"2112.12095","title":"Detect & Reject for Transferability of Black-box Adversarial Attacks Against Network Intrusion Detection Systems","created":"2021-12-22","cited_by_count":3,"area":null},{"id":"2201.12347","title":"Adversarial Robustness in Deep Learning: Attacks on Fragile Neurons","created":"2022-01-31","cited_by_count":3,"area":null},{"id":"2202.07568","title":"StratDef: Strategic Defense Against Adversarial Attacks in ML-based Malware Detection","created":"2022-02-15","cited_by_count":3,"area":null},{"id":"2211.02675","title":"An Adversarial Robustness Perspective on the Topology of Neural Networks","created":"2022-11-04","cited_by_count":3,"area":null},{"id":"2309.10209","title":"Towards Effective Semantic OOD Detection in Unseen Domains: A Domain Generalization Perspective","created":"2023-09-18","cited_by_count":3,"area":null},{"id":"2312.06423","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","created":"2023-12-11","cited_by_count":3,"area":null},{"id":"2408.08205","title":"A Multi-task Adversarial Attack Against Face Authentication","created":"2024-08-15","cited_by_count":3,"area":null},{"id":"2101.01543","title":"Noise Sensitivity-Based Energy Efficient and Robust Adversary Detection in Neural Networks","created":"2021-01-05","cited_by_count":2,"area":null},{"id":"2101.02899","title":"Adversarial Attack Attribution: Discovering Attributable Signals in Adversarial ML Attacks","created":"2021-01-08","cited_by_count":2,"area":null},{"id":"2102.11502","title":"Oriole: Thwarting Privacy against Trustworthy Deep Learning Models","created":"2021-02-23","cited_by_count":2,"area":null},{"id":"2106.03099","title":"A Primer on Multi-Neuron Relaxation-based Adversarial Robustness Certification","created":"2021-06-06","cited_by_count":2,"area":null},{"id":"2109.12459","title":"Two Souls in an Adversarial Image: Towards Universal Adversarial Example Detection using Multi-view Inconsistency","created":"2021-09-25","cited_by_count":2,"area":null},{"id":"2110.03118","title":"A fast and effective kernel two-sample test for large-scale data","created":"2021-10-07","cited_by_count":2,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2202.04271","title":"Adversarial Detection without Model Information","created":"2022-02-09","cited_by_count":2,"area":null},{"id":"2205.15128","title":"Level Up with ML Vulnerability Identification: Leveraging Domain Constraints in Feature Space for Robust Android Malware Detection","created":"2022-05-30","cited_by_count":2,"area":null},{"id":"2206.08738","title":"Detecting Adversarial Examples in Batches -- a geometrical approach","created":"2022-06-17","cited_by_count":2,"area":null},{"id":"2206.15415","title":"MEAD: A Multi-Armed Approach for Evaluation of Adversarial Examples Detectors","created":"2022-06-30","cited_by_count":2,"area":null},{"id":"2302.14059","title":"Scalable Attribution of Adversarial Attacks via Multi-Task Learning","created":"2023-02-25","cited_by_count":2,"area":null},{"id":"2306.14326","title":"Computational Asymmetries in Robust Classification","created":"2023-06-25","cited_by_count":2,"area":null},{"id":"2312.09078","title":"Coevolutionary Algorithm for Building Robust Decision Trees under Minimax Regret","created":"2023-12-14","cited_by_count":2,"area":null},{"id":"2402.18402","title":"A Modular System for Enhanced Robustness of Multimedia Understanding Networks via Deep Parametric Estimation","created":"2024-02-28","cited_by_count":2,"area":null},{"id":"2411.00839","title":"CausAdv: A Causal-based Framework for Detecting Adversarial Examples","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null}],"next_cursor":"100"}