{"total":784,"rows":[{"id":"2109.01903","title":"Robust fine-tuning of zero-shot models","created":"2021-09-04","cited_by_count":797,"area":null},{"id":"2109.13916","title":"Unsolved Problems in ML Safety","created":"2021-09-28","cited_by_count":292,"area":null},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2305.00944","title":"Poisoning Language Models During Instruction Tuning","created":"2023-05-01","cited_by_count":269,"area":null},{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244,"area":null},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156,"area":null},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130,"area":null},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2107.06882","title":"Conservative Objective Models for Effective Offline Model-Based Optimization","created":"2021-07-14","cited_by_count":88,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84,"area":null},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79,"area":null},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74,"area":null},{"id":"2305.10665","title":"Content-based Unrestricted Adversarial Attack","created":"2023-05-18","cited_by_count":73,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2203.06145","title":"Neuromorphic Data Augmentation for Training Spiking Neural Networks","created":"2022-03-11","cited_by_count":52,"area":null},{"id":"2203.09831","title":"DTA: Physical Camouflage Attacks using Differentiable Transformation Network","created":"2022-03-18","cited_by_count":51,"area":null},{"id":"2302.09923","title":"Prompt Stealing Attacks Against Text-to-Image Generation Models","created":"2023-02-20","cited_by_count":51,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50,"area":null},{"id":"2412.19806","title":"Vitron: A Unified Pixel-level Vision LLM for Understanding, Generating, Segmenting, Editing","created":"2024-10-08","cited_by_count":49,"area":null},{"id":"2306.05225","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","created":"2023-06-08","cited_by_count":48,"area":null},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47,"area":null},{"id":"2101.09387","title":"Online Adversarial Purification based on Self-Supervision","created":"2021-01-23","cited_by_count":46,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2104.04413","title":"Provable Repair of Deep Neural Networks","created":"2021-04-09","cited_by_count":42,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2308.02897","title":"An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability","created":"2023-08-05","cited_by_count":42,"area":null},{"id":"2101.02559","title":"Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead","created":"2021-01-04","cited_by_count":41,"area":null},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39,"area":null},{"id":"2207.13129","title":"LGV: Boosting Adversarial Example Transferability from Large Geometric Vicinity","created":"2022-07-26","cited_by_count":39,"area":null},{"id":"2109.11926","title":"Sinkhorn Distributionally Robust Optimization","created":"2021-09-24","cited_by_count":38,"area":null},{"id":"2203.09678","title":"Self-Ensemble Adversarial Training for Improved Robustness","created":"2022-03-18","cited_by_count":38,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2112.06011","title":"Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting","created":"2021-12-11","cited_by_count":37,"area":null},{"id":"2206.07438","title":"Multi-Objective Hyperparameter Optimization in Machine Learning -- An Overview","created":"2022-06-15","cited_by_count":37,"area":null},{"id":"2111.10990","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","created":"2021-11-22","cited_by_count":36,"area":null},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36,"area":null},{"id":"2404.17399","title":"Evaluations of Machine Learning Privacy Defenses are Misleading","created":"2024-04-26","cited_by_count":36,"area":null},{"id":"2302.11874","title":"What Can We Learn From The Selective Prediction And Uncertainty Estimation Performance Of 523 Imagenet Classifiers","created":"2023-02-23","cited_by_count":35,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2101.02839","title":"Unsupervised Domain Adaptation of Black-Box Source Models","created":"2021-01-08","cited_by_count":32,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2107.01809","title":"Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks","created":"2021-07-05","cited_by_count":32,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29,"area":null},{"id":"2107.13335","title":"WaveCNet: Wavelet Integrated CNNs to Suppress Aliasing Effect for Noise-Robust Image Classification","created":"2021-07-28","cited_by_count":29,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2211.11236","title":"Boosting the Transferability of Adversarial Attacks with Global Momentum Initialization","created":"2022-11-21","cited_by_count":29,"area":null},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2103.16148","title":"Class-Aware Robust Adversarial Training for Object Detection","created":"2021-03-30","cited_by_count":27,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2306.12685","title":"Rethinking the Backward Propagation for Adversarial Transferability","created":"2023-06-22","cited_by_count":27,"area":null},{"id":"2403.15365","title":"A Transfer Attack to Image Watermarks","created":"2024-03-22","cited_by_count":27,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2112.08691","title":"Towards Robust Neural Image Compression: Adversarial Attack and Model Finetuning","created":"2021-12-16","cited_by_count":25,"area":null},{"id":"2108.11168","title":"Adversarially Robust One-class Novelty Detection","created":"2021-08-25","cited_by_count":24,"area":null},{"id":"2109.00946","title":"Adversarial Robustness for Unsupervised Domain Adaptation","created":"2021-09-02","cited_by_count":24,"area":null},{"id":"2405.08363","title":"UnMarker: A Universal Attack on Defensive Image Watermarking","created":"2024-05-14","cited_by_count":24,"area":null},{"id":"2104.02000","title":"Can audio-visual integration strengthen robustness under multimodal attacks?","created":"2021-04-05","cited_by_count":23,"area":null},{"id":"2107.04570","title":"ANCER: Anisotropic Certification via Sample-wise Volume Maximization","created":"2021-07-09","cited_by_count":23,"area":null},{"id":"2205.13863","title":"Why Robust Generalization in Deep Learning is Difficult: Perspective of Expressive Power","created":"2022-05-27","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2307.07653","title":"RFLA: A Stealthy Reflected Light Adversarial Attack in the Physical World","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2212.04985","title":"Understanding and Combating Robust Overfitting via Input Loss Landscape Analysis and Regularization","created":"2022-12-09","cited_by_count":22,"area":null},{"id":"2212.10230","title":"A Comprehensive Study of the Robustness for LiDAR-based 3D Object Detectors against Adversarial Attacks","created":"2022-12-20","cited_by_count":22,"area":null},{"id":"2109.04367","title":"Multi-granularity Textual Adversarial Attack with Behavior Cloning","created":"2021-09-09","cited_by_count":21,"area":null},{"id":"2110.14019","title":"Reliable and Trustworthy Machine Learning for Health Using Dataset Shift Detection","created":"2021-10-26","cited_by_count":21,"area":null}],"next_cursor":"100"}