{"total":236,"rows":[{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2302.09491","title":"X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detection","created":"2023-02-19","cited_by_count":59,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2311.00288","title":"Active Instruction Tuning: Improving Cross-Task Generalization by Training on Prompt Sensitive Tasks","created":"2023-11-01","cited_by_count":55,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2107.00096","title":"Improving black-box optimization in VAE latent space using decoder uncertainty","created":"2021-06-30","cited_by_count":51,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2106.01494","title":"Knowing More About Questions Can Help: Improving Calibration in Question Answering","created":"2021-06-02","cited_by_count":47,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2211.12681","title":"Benchmarking Adversarially Robust Quantum Machine Learning at Scale","created":"2022-11-23","cited_by_count":29,"area":null},{"id":"2306.12688","title":"Towards quantum enhanced adversarial robustness in machine learning","created":"2023-06-22","cited_by_count":28,"area":null},{"id":"2201.02331","title":"iDECODe: In-distribution Equivariance for Conformal Out-of-distribution Detection","created":"2022-01-07","cited_by_count":27,"area":null},{"id":"2207.02269","title":"Towards Realistic Semi-Supervised Learning","created":"2022-07-05","cited_by_count":27,"area":null},{"id":"2106.12611","title":"Adversarial Examples in Multi-Layer Random ReLU Networks","created":"2021-06-23","cited_by_count":26,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2109.00893","title":"A Survey on Open Set Recognition","created":"2021-08-18","cited_by_count":25,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2305.16035","title":"Detecting Adversarial Data by Probing Multiple Perturbations Using Expected Perturbation Score","created":"2023-05-25","cited_by_count":20,"area":null},{"id":"2106.06685","title":"Adversarial Robustness via Fisher-Rao Regularization","created":"2021-06-12","cited_by_count":19,"area":null},{"id":"2408.03573","title":"AcTracer: Active Testing of Large Language Model via Multi-Stage Sampling","created":"2024-08-07","cited_by_count":17,"area":null},{"id":"2102.03716","title":"SPADE: A Spectral Method for Black-Box Adversarial Robustness Evaluation","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2208.02851","title":"Self-Ensembling Vision Transformer (SEViT) for Robust Medical Image Classification","created":"2022-08-04","cited_by_count":16,"area":null},{"id":"2210.03696","title":"LLMEffiChecker: Understanding and Testing Efficiency Degradation of Large Language Models","created":"2022-10-07","cited_by_count":16,"area":null},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15,"area":null},{"id":"2112.02625","title":"Explainable Deep Learning in Healthcare: A Methodological Survey from an Attribution View","created":"2021-12-05","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2108.06895","title":"Interpreting Attributions and Interactions of Adversarial Attacks","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2203.10939","title":"Deep Learning Serves Traffic Safety Analysis: A Forward-looking Review","created":"2022-03-07","cited_by_count":13,"area":null},{"id":"2108.08421","title":"Exploiting Multi-Object Relationships for Detecting Adversarial Attacks in Complex Scenes","created":"2021-08-19","cited_by_count":12,"area":null},{"id":"2207.06154","title":"On the Robustness of Bayesian Neural Networks to Adversarial Attacks","created":"2022-07-13","cited_by_count":12,"area":null},{"id":"2105.08619","title":"On the Robustness of Domain Constraints","created":"2021-05-18","cited_by_count":11,"area":null},{"id":"2210.01742","title":"CADet: Fully Self-Supervised Out-Of-Distribution Detection With Contrastive Learning","created":"2022-10-04","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2212.12641","title":"Out-of-Distribution Detection with Reconstruction Error and Typicality-based Penalty","created":"2022-12-24","cited_by_count":11,"area":null},{"id":"2102.05431","title":"Dompteur: Taming Audio Adversarial Examples","created":"2021-02-10","cited_by_count":10,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10,"area":null},{"id":"2112.14299","title":"DeepAdversaries: Examining the Robustness of Deep Learning Models for Galaxy Morphology Classification","created":"2021-12-28","cited_by_count":10,"area":null},{"id":"2306.06359","title":"NeRFool: Uncovering the Vulnerability of Generalizable Neural Radiance Fields against Adversarial Perturbations","created":"2023-06-10","cited_by_count":10,"area":null},{"id":"2308.05681","title":"Hard No-Box Adversarial Attack on Skeleton-Based Human Action Recognition with Skeleton-Motion-Informed Gradient","created":"2023-08-10","cited_by_count":10,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2209.02902","title":"Defending Against Backdoor Attack on Graph Nerual Network by Explainability","created":"2022-09-07","cited_by_count":9,"area":null},{"id":"2107.02840","title":"RAILS: A Robust Adversarial Immune-inspired Learning System","created":"2021-06-27","cited_by_count":8,"area":null},{"id":"2204.10192","title":"Residue-Based Natural Language Adversarial Attack Detection","created":"2022-04-17","cited_by_count":8,"area":null},{"id":"2506.09237","title":"PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomalies","created":"2025-06-10","cited_by_count":8,"area":null},{"id":"2102.05110","title":"Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers","created":"2021-02-09","cited_by_count":7,"area":null},{"id":"2105.01959","title":"Attack-agnostic Adversarial Detection on Medical Data Using Explainable Machine Learning","created":"2021-05-05","cited_by_count":7,"area":null},{"id":"2105.03689","title":"Self-Supervised Adversarial Example Detection by Disentangled Representation","created":"2021-05-08","cited_by_count":7,"area":null},{"id":"2105.11593","title":"OFEI: A Semi-black-box Android Adversarial Sample Attack Framework Against DLaaS","created":"2021-05-25","cited_by_count":7,"area":null},{"id":"2207.00694","title":"Efficient Adversarial Training With Data Pruning","created":"2022-07-01","cited_by_count":7,"area":null},{"id":"2210.17376","title":"SoK: Modeling Explainability in Security Analytics for Interpretability, Trustworthiness, and Usability","created":"2022-10-31","cited_by_count":7,"area":null},{"id":"2208.13838","title":"Towards Adversarial Purification using Denoising AutoEncoders","created":"2022-08-29","cited_by_count":6,"area":null},{"id":"2210.15068","title":"Improving Adversarial Robustness with Self-Paced Hard-Class Pair Reweighting","created":"2022-10-26","cited_by_count":6,"area":null},{"id":"2312.03245","title":"A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System","created":"2023-12-06","cited_by_count":6,"area":null},{"id":"2102.11586","title":"Adversarial Examples Detection beyond Image Space","created":"2021-02-23","cited_by_count":5,"area":null},{"id":"2105.06512","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","created":"2021-05-13","cited_by_count":5,"area":null},{"id":"2109.05223","title":"2-in-1 Accelerator: Enabling Random Precision Switch for Winning Both Adversarial Robustness and Efficiency","created":"2021-09-11","cited_by_count":5,"area":null},{"id":"2208.06222","title":"Scale-free and Task-agnostic Attack: Generating Photo-realistic Adversarial Patterns with Patch Quilting Generator","created":"2022-08-12","cited_by_count":5,"area":null},{"id":"2211.08686","title":"Improving Interpretability via Regularization of Neural Activation Sensitivity","created":"2022-11-16","cited_by_count":5,"area":null},{"id":"2212.06776","title":"Unfolding Local Growth Rate Estimates for (Almost) Perfect Adversarial Detection","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2305.12825","title":"Uncertainty-based Detection of Adversarial Attacks in Semantic Segmentation","created":"2023-05-22","cited_by_count":5,"area":null},{"id":"2402.03317","title":"SpecFormer: Guarding Vision Transformer Robustness via Maximum Singular Value Penalization","created":"2024-01-02","cited_by_count":5,"area":null},{"id":"2404.13785","title":"How to Inverting the Leverage Score Distribution?","created":"2024-04-21","cited_by_count":5,"area":null},{"id":"2103.00778","title":"Explaining Adversarial Vulnerability with a Data Sparsity Hypothesis","created":"2021-03-01","cited_by_count":4,"area":null},{"id":"2103.11002","title":"Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptions","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2110.03092","title":"A Uniform Framework for Anomaly Detection in Deep Neural Networks","created":"2021-10-06","cited_by_count":4,"area":null},{"id":"2110.06802","title":"Identification of Attack-Specific Signatures in Adversarial Examples","created":"2021-10-13","cited_by_count":4,"area":null},{"id":"2112.14232","title":"Constrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks","created":"2021-12-28","cited_by_count":4,"area":null},{"id":"2206.06761","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","created":"2022-06-14","cited_by_count":4,"area":null},{"id":"2208.08697","title":"Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundaries","created":"2022-08-18","cited_by_count":4,"area":null},{"id":"2212.00727","title":"Adversarial Artifact Detection in EEG-Based Brain-Computer Interfaces","created":"2022-11-28","cited_by_count":4,"area":null},{"id":"2212.02003","title":"Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial Defense","created":"2022-12-05","cited_by_count":4,"area":null},{"id":"2304.11359","title":"Detecting Adversarial Faces Using Only Real Face Self-Perturbations","created":"2023-04-22","cited_by_count":4,"area":null},{"id":"2309.10586","title":"Adversarial Attacks Against Uncertainty Quantification","created":"2023-09-19","cited_by_count":4,"area":null},{"id":"2310.03661","title":"Robustness-Guided Image Synthesis for Data-Free Quantization","created":"2023-10-05","cited_by_count":4,"area":null},{"id":"2410.04577","title":"Robustness Reprogramming for Representation Learning","created":"2024-10-06","cited_by_count":4,"area":null},{"id":"2101.02689","title":"The Effect of Prior Lipschitz Continuity on the Adversarial Robustness of Bayesian Neural Networks","created":"2021-01-07","cited_by_count":3,"area":null},{"id":"2105.10101","title":"Anomaly Detection of Adversarial Examples using Class-conditional Generative Adversarial Networks","created":"2021-05-21","cited_by_count":3,"area":null},{"id":"2106.05453","title":"Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training","created":"2021-06-10","cited_by_count":3,"area":null},{"id":"2107.05780","title":"Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising","created":"2021-07-12","cited_by_count":3,"area":null},{"id":"2109.06176","title":"TREATED:Towards Universal Defense against Textual Adversarial Attacks","created":"2021-09-13","cited_by_count":3,"area":null},{"id":"2111.12631","title":"Unity is strength: Improving the Detection of Adversarial Examples with Ensemble Approaches","created":"2021-11-24","cited_by_count":3,"area":null}],"next_cursor":"100"}