{"total":30,"rows":[{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2201.09650","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","created":"2022-01-24","cited_by_count":11,"area":null},{"id":"2203.01439","title":"Enhancing Adversarial Robustness for Deep Metric Learning","created":"2022-03-02","cited_by_count":10,"area":null},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9,"area":null},{"id":"2207.04129","title":"How many perturbations break this model? Evaluating robustness beyond adversarial accuracy","created":"2022-07-08","cited_by_count":9,"area":null},{"id":"2307.05422","title":"Differential Analysis of Triggers and Benign Features for Black-Box DNN Backdoor Detection","created":"2023-07-11","cited_by_count":6,"area":null},{"id":"2105.02803","title":"Dynamic Defense Approach for Adversarial Robustness in Deep Neural Networks via Stochastic Ensemble Smoothed Model","created":"2021-05-06","cited_by_count":4,"area":null},{"id":"2201.08661","title":"The Security of Deep Learning Defences for Medical Imaging","created":"2022-01-21","cited_by_count":4,"area":null},{"id":"2310.00416","title":"Refutation of Shapley Values for XAI -- Additional Evidence","created":"2023-09-30","cited_by_count":4,"area":null},{"id":"2109.02345","title":"Tensor Normalization and Full Distribution Training","created":"2021-09-06","cited_by_count":3,"area":null},{"id":"2110.13935","title":"Frequency Centric Defense Mechanisms against Adversarial Examples","created":"2021-10-26","cited_by_count":3,"area":null},{"id":"2210.13982","title":"Hindering Adversarial Attacks with Implicit Neural Representations","created":"2022-10-22","cited_by_count":3,"area":null},{"id":"2105.00495","title":"BAARD: Blocking Adversarial Examples by Testing for Applicability, Reliability and Decidability","created":"2021-05-02","cited_by_count":2,"area":null},{"id":"2105.14035","title":"DeepMoM: Robust Deep Learning With Median-of-Means","created":"2021-05-28","cited_by_count":2,"area":null},{"id":"2202.08944","title":"Rethinking Machine Learning Robustness via its Link with the Out-of-Distribution Problem","created":"2022-02-18","cited_by_count":2,"area":null},{"id":"2204.08189","title":"Sardino: Ultra-Fast Dynamic Ensemble for Secure Visual Sensing at Mobile Edge","created":"2022-04-18","cited_by_count":2,"area":null},{"id":"2206.07321","title":"Morphence-2.0: Evasion-Resilient Moving Target Defense Powered by Out-of-Distribution Detection","created":"2022-06-15","cited_by_count":2,"area":null},{"id":"2211.01579","title":"Data-free Defense of Black Box Models Against Adversarial Attacks","created":"2022-11-03","cited_by_count":2,"area":null},{"id":"2306.14326","title":"Computational Asymmetries in Robust Classification","created":"2023-06-25","cited_by_count":2,"area":null},{"id":"2512.19472","title":"Multi-Layer Confidence Scoring for Detection of Out-of-Distribution Samples, Adversarial Attacks, and In-Distribution Misclassifications","created":"2025-12-22","cited_by_count":2,"area":null},{"id":"2210.12952","title":"Ares: A System-Oriented Wargame Framework for Adversarial ML","created":"2022-10-24","cited_by_count":1,"area":null},{"id":"2303.02322","title":"Improved Robustness Against Adaptive Attacks With Ensembles and Error-Correcting Output Codes","created":"2023-03-04","cited_by_count":1,"area":null},{"id":"2304.13919","title":"Detection of Adversarial Physical Attacks in Time-Series Image Data","created":"2023-04-27","cited_by_count":1,"area":null},{"id":"2402.02154","title":"Evaluating the Robustness of Off-Road Autonomous Driving Segmentation against Adversarial Attacks: A Dataset-Centric analysis","created":"2024-02-03","cited_by_count":1,"area":null},{"id":"2108.07147","title":"On the Importance of Encrypting Deep Features","created":"2021-08-16","cited_by_count":0,"area":null},{"id":"2208.11839","title":"A Perturbation Resistant Transformation and Classification System for Deep Neural Networks","created":"2022-08-25","cited_by_count":0,"area":null},{"id":"2211.01598","title":"Robust Few-shot Learning Without Using any Adversarial Samples","created":"2022-11-03","cited_by_count":0,"area":null},{"id":"2211.10227","title":"Adversarial Detection by Approximation of Ensemble Boundary","created":"2022-11-18","cited_by_count":0,"area":null},{"id":"2608.10203","title":"A Convolutional Layer Activation Dimensionality Reduction for Out-of-Distribution and Adversarial Attack Detection Methods","created":"2026-08-10","cited_by_count":0,"area":null}],"next_cursor":null}