{"total":276,"rows":[{"id":"2106.12931","title":"Spatial-Temporal Graph ODE Networks for Traffic Flow Forecasting","created":"2021-06-24","cited_by_count":210,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2502.07529","title":"Training Deep Learning Models with Norm-Constrained LMOs","created":"2025-02-11","cited_by_count":192,"area":null},{"id":"2105.12806","title":"A Universal Law of Robustness via Isoperimetry","created":"2021-05-26","cited_by_count":151,"area":null},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130,"area":null},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108,"area":null},{"id":"2104.07167","title":"Orthogonalizing Convolutional Layers with the Cayley Transform","created":"2021-04-14","cited_by_count":105,"area":null},{"id":"2206.04041","title":"Neural Collapse: A Review on Modelling Principles and Generalization","created":"2022-06-08","cited_by_count":95,"area":null},{"id":"2103.12803","title":"JFB: Jacobian-Free Backpropagation for Implicit Networks","created":"2021-03-23","cited_by_count":86,"area":null},{"id":"2202.08345","title":"Learning Smooth Neural Functions via Lipschitz Regularization","created":"2022-02-16","cited_by_count":86,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2211.12562","title":"PermutoSDF: Fast Multi-View Reconstruction with Implicit Surfaces using Permutohedral Lattices","created":"2022-11-22","cited_by_count":73,"area":null},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2105.05246","title":"Spectral Normalisation for Deep Reinforcement Learning: an Optimisation Perspective","created":"2021-05-11","cited_by_count":65,"area":null},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65,"area":null},{"id":"2110.12690","title":"A Dynamical System Perspective for Lipschitz Neural Networks","created":"2021-10-25","cited_by_count":60,"area":null},{"id":"2106.02280","title":"Human-Adversarial Visual Question Answering","created":"2021-06-04","cited_by_count":57,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2108.04062","title":"Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100","created":"2021-08-05","cited_by_count":47,"area":null},{"id":"2106.04493","title":"A Deep Value-network Based Approach for Multi-Driver Order Dispatching","created":"2021-06-08","cited_by_count":45,"area":null},{"id":"2312.14820","title":"How Smooth Is Attention?","created":"2023-12-22","cited_by_count":44,"area":null},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2202.00628","title":"Regret Minimization with Performative Feedback","created":"2022-02-01","cited_by_count":40,"area":null},{"id":"2208.03160","title":"Almost-Orthogonal Layers for Efficient General-Purpose Lipschitz Networks","created":"2022-08-05","cited_by_count":39,"area":null},{"id":"2210.06443","title":"On the Effectiveness of Lipschitz-Driven Rehearsal in Continual Learning","created":"2022-10-12","cited_by_count":39,"area":null},{"id":"2107.08562","title":"Rethinking Graph Auto-Encoder Models for Attributed Graph Clustering","created":"2021-07-19","cited_by_count":37,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2210.11620","title":"LOT: Layer-wise Orthogonal Training on Improving $\\ell_2$ Certified Robustness","created":"2022-10-20","cited_by_count":33,"area":null},{"id":"2310.02579","title":"On the Stability of Expressive Positional Encodings for Graphs","created":"2023-10-04","cited_by_count":33,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2104.05097","title":"Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networks","created":"2021-04-11","cited_by_count":30,"area":null},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2302.10886","title":"Some Fundamental Aspects about Lipschitz Continuity of Neural Networks","created":"2023-02-21","cited_by_count":26,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2210.16222","title":"Improving Lipschitz-Constrained Neural Networks by Learning Activation Functions","created":"2022-10-28","cited_by_count":24,"area":null},{"id":"2206.13497","title":"Robustness Implies Generalization via Data-Dependent Generalization Bounds","created":"2022-06-27","cited_by_count":23,"area":null},{"id":"2201.09418","title":"Approximation bounds for norm constrained neural networks with applications to regression and GANs","created":"2022-01-24","cited_by_count":22,"area":null},{"id":"2510.23012","title":"Softmax is $1/2$-Lipschitz: A tight bound across all $\\ell_p$ norms","created":"2025-10-27","cited_by_count":22,"area":null},{"id":"2102.05311","title":"CIFS: Improving Adversarial Robustness of CNNs via Channel-wise Importance-based Feature Selection","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2507.13338","title":"Training Transformers with Enforced Lipschitz Constants","created":"2025-07-17","cited_by_count":20,"area":null},{"id":"2106.06685","title":"Adversarial Robustness via Fisher-Rao Regularization","created":"2021-06-12","cited_by_count":19,"area":null},{"id":"2206.07144","title":"Efficiently Training Low-Curvature Neural Networks","created":"2022-06-14","cited_by_count":19,"area":null},{"id":"2305.16173","title":"Efficient Bound of Lipschitz Constant for Convolutional Layers by Gram Iteration","created":"2023-05-25","cited_by_count":19,"area":null},{"id":"2202.03898","title":"Verification-Aided Deep Ensemble Selection","created":"2022-02-08","cited_by_count":18,"area":null},{"id":"2303.16510","title":"Infeasible Deterministic, Stochastic, and Variance-Reduction Algorithms for Optimization under Orthogonality Constraints","created":"2023-03-29","cited_by_count":18,"area":null},{"id":"2305.16427","title":"Neural (Tangent Kernel) Collapse","created":"2023-05-25","cited_by_count":18,"area":null},{"id":"2206.14990","title":"Bridging Mean-Field Games and Normalizing Flows with Trajectory Regularization","created":"2022-06-30","cited_by_count":17,"area":null},{"id":"2403.10045","title":"Towards Adversarially Robust Dataset Distillation by Curvature Regularization","created":"2024-03-15","cited_by_count":17,"area":null},{"id":"2102.03716","title":"SPADE: A Spectral Method for Black-Box Adversarial Robustness Evaluation","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2102.13625","title":"Learning Prediction Intervals for Regression: Generalization and Calibration","created":"2021-02-26","cited_by_count":16,"area":null},{"id":"2108.05623","title":"Existence, Stability and Scalability of Orthogonal Convolutional Neural Networks","created":"2021-08-12","cited_by_count":16,"area":null},{"id":"2311.16833","title":"1-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness","created":"2023-11-28","cited_by_count":16,"area":null},{"id":"2103.00673","title":"Convolutional Normalization: Improving Deep Convolutional Network Robustness and Training","created":"2021-03-01","cited_by_count":15,"area":null},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15,"area":null},{"id":"2112.02625","title":"Explainable Deep Learning in Healthcare: A Methodological Survey from an Attribution View","created":"2021-12-05","cited_by_count":15,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2108.06885","title":"Neural Architecture Dilation for Adversarial Robustness","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2203.10939","title":"Deep Learning Serves Traffic Safety Analysis: A Forward-looking Review","created":"2022-03-07","cited_by_count":13,"area":null},{"id":"2206.03178","title":"Fooling Explanations in Text Classifiers","created":"2022-06-07","cited_by_count":13,"area":null},{"id":"2211.01258","title":"Instance-Dependent Generalization Bounds via Optimal Transport","created":"2022-11-02","cited_by_count":13,"area":null},{"id":"2212.09006","title":"A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairness","created":"2022-12-18","cited_by_count":13,"area":null},{"id":"2306.01485","title":"Robust low-rank training via approximate orthonormal constraints","created":"2023-06-02","cited_by_count":13,"area":null},{"id":"2101.06309","title":"Fundamental Tradeoffs in Distributionally Adversarial Training","created":"2021-01-15","cited_by_count":12,"area":null},{"id":"2102.01886","title":"Learning Diverse-Structured Networks for Adversarial Robustness","created":"2021-02-03","cited_by_count":12,"area":null},{"id":"2305.19059","title":"Geometry-aware training of factorized layers in tensor Tucker format","created":"2023-05-30","cited_by_count":12,"area":null},{"id":"2112.12084","title":"Input-Specific Robustness Certification for Randomized Smoothing","created":"2021-12-21","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2205.14173","title":"Momentum Stiefel Optimizer, with Applications to Suitably-Orthogonal Attention, and Optimal Transport","created":"2022-05-27","cited_by_count":11,"area":null},{"id":"2305.16202","title":"DP-SGD Without Clipping: The Lipschitz Neural Network Way","created":"2023-05-25","cited_by_count":11,"area":null},{"id":"2408.13809","title":"On the Robustness of Kolmogorov-Arnold Networks: An Adversarial Perspective","created":"2024-08-25","cited_by_count":11,"area":null},{"id":"2112.07575","title":"Robust Graph Neural Networks via Probabilistic Lipschitz Constraints","created":"2021-12-14","cited_by_count":10,"area":null},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9,"area":null},{"id":"2210.01111","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","created":"2022-10-03","cited_by_count":9,"area":null},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9,"area":null},{"id":"2211.13771","title":"Towards Practical Control of Singular Values of Convolutional Layers","created":"2022-11-24","cited_by_count":9,"area":null},{"id":"2211.14917","title":"CorrectNet: Robustness Enhancement of Analog In-Memory Computing for Neural Networks by Error Suppression and Compensation","created":"2022-11-27","cited_by_count":9,"area":null},{"id":"2212.06079","title":"Robust Perception through Equivariance","created":"2022-12-12","cited_by_count":9,"area":null},{"id":"2404.17947","title":"Bounding the Expected Robustness of Graph Neural Networks Subject to Node Feature Attacks","created":"2024-04-27","cited_by_count":9,"area":null},{"id":"2407.09505","title":"1-Lipschitz Neural Distance Fields","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2504.13112","title":"Hadamard product in deep learning: Introduction, Advances and Challenges","created":"2025-04-17","cited_by_count":9,"area":null},{"id":"2506.08001","title":"Reparameterized LLM Training via Orthogonal Equivalence Transformation","created":"2025-06-09","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2106.06667","title":"CARTL: Cooperative Adversarially-Robust Transfer Learning","created":"2021-06-12","cited_by_count":8,"area":null},{"id":"2109.01123","title":"Benchmarking the Robustness of Instance Segmentation Models","created":"2021-09-02","cited_by_count":8,"area":null},{"id":"2207.03933","title":"A law of adversarial risk, interpolation, and label noise","created":"2022-07-08","cited_by_count":8,"area":null},{"id":"2309.16883","title":"The Lipschitz-Variance-Margin Tradeoff for Enhanced Randomized Smoothing","created":"2023-09-28","cited_by_count":8,"area":null},{"id":"2501.07930","title":"An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architectures","created":"2025-01-14","cited_by_count":8,"area":null},{"id":"2102.04450","title":"Noise Optimization for Artificial Neural Networks","created":"2021-02-06","cited_by_count":7,"area":null},{"id":"2106.09121","title":"Scaling-up Diverse Orthogonal Convolutional Networks with a Paraunitary Framework","created":"2021-06-16","cited_by_count":7,"area":null},{"id":"2202.01679","title":"Certifying Out-of-Domain Generalization for Blackbox Functions","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2207.10283","title":"One-vs-the-Rest Loss to Focus on Important Samples in Adversarial Training","created":"2022-07-21","cited_by_count":7,"area":null}],"next_cursor":"100"}