{"total":23,"rows":[{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2208.00094","title":"Robust Trajectory Prediction against Adversarial Attacks","created":"2022-07-29","cited_by_count":17,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2308.10315","title":"Improving Adversarial Robustness of Masked Autoencoders via Test-time Frequency-domain Prompting","created":"2023-08-20","cited_by_count":12,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2106.06667","title":"CARTL: Cooperative Adversarially-Robust Transfer Learning","created":"2021-06-12","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2102.11382","title":"Sandwich Batch Normalization: A Drop-In Replacement for Feature Distribution Heterogeneity","created":"2021-02-22","cited_by_count":7,"area":null},{"id":"2503.01924","title":"TAET: Two-Stage Adversarial Equalization Training on Long-Tailed Distributions","created":"2025-03-02","cited_by_count":6,"area":null},{"id":"2202.10377","title":"A Tutorial on Adversarial Learning Attacks and Countermeasures","created":"2022-02-21","cited_by_count":3,"area":null},{"id":"2502.20562","title":"LISArD: Learning Image Similarity to Defend Against Gray-box Adversarial Attacks","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2101.02899","title":"Adversarial Attack Attribution: Discovering Attributable Signals in Adversarial ML Attacks","created":"2021-01-08","cited_by_count":2,"area":null},{"id":"2205.02652","title":"Can collaborative learning be private, robust and scalable?","created":"2022-05-05","cited_by_count":2,"area":null},{"id":"2206.03717","title":"LADDER: Latent Boundary-guided Adversarial Training","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2310.06468","title":"A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks","created":"2023-10-10","cited_by_count":2,"area":null},{"id":"2104.02226","title":"Beyond Categorical Label Representations for Image Classification","created":"2021-04-06","cited_by_count":1,"area":null},{"id":"2305.10766","title":"Adversarial Amendment is the Only Force Capable of Transforming an Enemy into a Friend","created":"2023-05-18","cited_by_count":1,"area":null},{"id":"2103.08031","title":"BreakingBED -- Breaking Binary and Efficient Deep Neural Networks by Adversarial Attacks","created":"2021-03-14","cited_by_count":0,"area":null},{"id":"2109.05635","title":"Mixing between the Cross Entropy and the Expectation Loss Terms","created":"2021-09-12","cited_by_count":0,"area":null},{"id":"2203.02121","title":"Adversarial Patterns: Building Robust Android Malware Classifiers","created":"2022-03-04","cited_by_count":0,"area":null},{"id":"2303.15901","title":"Denoising Autoencoder-based Defensive Distillation as an Adversarial Robustness Algorithm","created":"2023-03-28","cited_by_count":0,"area":null},{"id":"2511.18656","title":"Robust Physical Adversarial Patches Using Dynamically Optimized Clusters","created":"2025-11-23","cited_by_count":0,"area":null}],"next_cursor":null}