{"total":582,"rows":[{"id":"2202.02466","title":"Handling Distribution Shifts on Graphs: An Invariance Perspective","created":"2022-02-05","cited_by_count":164,"area":null},{"id":"2104.07876","title":"Deep Stable Learning for Out-Of-Distribution Generalization","created":"2021-04-16","cited_by_count":153,"area":null},{"id":"2105.14368","title":"Fit without fear: remarkable mathematical phenomena of deep learning through the prism of interpolation","created":"2021-05-29","cited_by_count":132,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2303.13703","title":"End-to-End Diffusion Latent Optimization Improves Classifier Guidance","created":"2023-03-23","cited_by_count":108,"area":"diffusion"},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93,"area":null},{"id":"2312.03777","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","created":"2023-12-06","cited_by_count":92,"area":"mllm"},{"id":"2411.13587","title":"Exploring the Adversarial Vulnerabilities of Vision-Language-Action Models in Robotics","created":"2024-11-18","cited_by_count":73,"area":"vla"},{"id":"2111.10657","title":"Generalizing Graph Neural Networks on Out-Of-Distribution Graphs","created":"2021-11-20","cited_by_count":71,"area":null},{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2207.09944","title":"Probable Domain Generalization via Quantile Risk Minimization","created":"2022-07-20","cited_by_count":66,"area":null},{"id":"2112.01148","title":"FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis","created":"2021-12-02","cited_by_count":61,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2302.09309","title":"StyleAdv: Meta Style Adversarial Training for Cross-Domain Few-Shot Learning","created":"2023-02-18","cited_by_count":53,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2106.06804","title":"Entropy-based Logic Explanations of Neural Networks","created":"2021-06-12","cited_by_count":51,"area":null},{"id":"2306.06123","title":"Adversarial attacks and defenses in explainable artificial intelligence: A survey","created":"2023-06-06","cited_by_count":48,"area":null},{"id":"2108.13049","title":"Single Node Injection Attack against Graph Neural Networks","created":"2021-08-30","cited_by_count":45,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2210.13915","title":"Towards Formal XAI: Formally Approximate Minimal Explanations of Neural Networks","created":"2022-10-25","cited_by_count":42,"area":null},{"id":"2107.06219","title":"Towards Unsupervised Domain Generalization","created":"2021-07-13","cited_by_count":40,"area":null},{"id":"2107.10137","title":"Improved Text Classification via Contrastive Adversarial Training","created":"2021-07-21","cited_by_count":38,"area":null},{"id":"2306.07651","title":"Variational Positive-incentive Noise: How Noise Benefits Models","created":"2023-06-13","cited_by_count":38,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2301.12832","title":"Deep networks for system identification: a Survey","created":"2023-01-30","cited_by_count":37,"area":null},{"id":"2111.10990","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","created":"2021-11-22","cited_by_count":36,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2302.10908","title":"Human-Centric Multimodal Machine Learning: Recent Advances and Testbed on AI-based Recruitment","created":"2023-02-13","cited_by_count":33,"area":null},{"id":"2504.11195","title":"R-TPT: Improving Adversarial Robustness of Vision-Language Models through Test-Time Prompt Tuning","created":"2025-04-15","cited_by_count":33,"area":"mllm"},{"id":"2108.10879","title":"Are socially-aware trajectory prediction models really socially-aware?","created":"2021-08-24","cited_by_count":32,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2306.12688","title":"Towards quantum enhanced adversarial robustness in machine learning","created":"2023-06-22","cited_by_count":28,"area":null},{"id":"2103.13701","title":"ECINN: Efficient Counterfactuals from Invertible Neural Networks","created":"2021-03-25","cited_by_count":26,"area":null},{"id":"2104.12146","title":"3D Adversarial Attacks Beyond Point Cloud","created":"2021-04-25","cited_by_count":26,"area":null},{"id":"2111.12485","title":"Understanding the Dynamics of DNNs Using Graph Modularity","created":"2021-11-24","cited_by_count":26,"area":null},{"id":"2104.05895","title":"IMAGINE: Image Synthesis by Image-Guided Model Inversion","created":"2021-04-13","cited_by_count":25,"area":null},{"id":"2111.06628","title":"Learning to Break Deep Perceptual Hashing: The Use Case NeuralHash","created":"2021-11-12","cited_by_count":25,"area":null},{"id":"2201.07708","title":"Debiased Graph Neural Networks with Agnostic Label Selection Bias","created":"2022-01-19","cited_by_count":25,"area":null},{"id":"2204.12347","title":"Restricted Black-box Adversarial Attack Against DeepFake Face Swapping","created":"2022-04-26","cited_by_count":25,"area":null},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24,"area":null},{"id":"2112.12982","title":"Parameter identifiability of a deep feedforward ReLU neural network","created":"2021-12-24","cited_by_count":24,"area":null},{"id":"2308.00143","title":"Formally Explaining Neural Networks within Reactive Systems","created":"2023-07-31","cited_by_count":24,"area":null},{"id":"2509.18953","title":"Eva-VLA: Evaluating Vision-Language-Action Models' Robustness Under Real-World Physical Variations","created":"2025-09-23","cited_by_count":24,"area":"vla"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2307.15092","title":"A Survey on Reservoir Computing and its Interdisciplinary Applications Beyond Traditional Machine Learning","created":"2023-07-27","cited_by_count":22,"area":null},{"id":"2106.02261","title":"Out-of-Distribution Generalization in Kernel Regression","created":"2021-06-04","cited_by_count":21,"area":null},{"id":"2303.11917","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","created":"2023-03-21","cited_by_count":21,"area":null},{"id":"2105.10843","title":"Exploring Robustness of Unsupervised Domain Adaptation in Semantic Segmentation","created":"2021-05-23","cited_by_count":20,"area":null},{"id":"2108.09454","title":"\"Adversarial Examples\" for Proof-of-Learning","created":"2021-08-21","cited_by_count":20,"area":null},{"id":"2201.12686","title":"Rank List Sensitivity of Recommender Systems to Interaction Perturbations","created":"2022-01-29","cited_by_count":20,"area":null},{"id":"2202.02236","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","created":"2022-02-04","cited_by_count":20,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2207.06202","title":"Adversarially-Aware Robust Object Detector","created":"2022-07-13","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20,"area":null},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18,"area":null},{"id":"2108.13576","title":"Dead Pixel Test Using Effective Receptive Field","created":"2021-08-31","cited_by_count":18,"area":null},{"id":"2106.06418","title":"Scale-invariant scale-channel networks: Deep networks that generalise to previously unseen scales","created":"2021-06-11","cited_by_count":17,"area":null},{"id":"2203.14196","title":"HINT: Hierarchical Neuron Concept Explainer","created":"2022-03-27","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2212.12070","title":"RouteNet-Fermi: Network Modeling with Graph Neural Networks","created":"2022-12-22","cited_by_count":17,"area":null},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2311.11258","title":"Tensor networks for interpretable and efficient quantum-inspired machine learning","created":"2023-11-19","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2107.09539","title":"Parametric Scattering Networks","created":"2021-07-20","cited_by_count":16,"area":null},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16,"area":null},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2404.06492","title":"Graph Reinforcement Learning for Combinatorial Optimization: A Survey and Unifying Perspective","created":"2024-04-09","cited_by_count":16,"area":"deeprl"},{"id":"2504.13690","title":"Analysing the Robustness of Vision-Language-Models to Common Corruptions","created":"2025-04-18","cited_by_count":16,"area":"mllm"},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2102.06529","title":"Improving Object Detection in Art Images Using Only Style Transfer","created":"2021-02-12","cited_by_count":15,"area":null},{"id":"2103.16255","title":"Towards Understanding Adversarial Robustness of Optical Flow Networks","created":"2021-03-30","cited_by_count":15,"area":null},{"id":"2106.06027","title":"Sparse and Imperceptible Adversarial Attack via a Homotopy Algorithm","created":"2021-06-10","cited_by_count":15,"area":null},{"id":"2202.13956","title":"RouteNet-Erlang: A Graph Neural Network for Network Performance Evaluation","created":"2022-02-28","cited_by_count":15,"area":null},{"id":"2204.00846","title":"Chordal Sparsity for Lipschitz Constant Estimation of Deep Neural Networks","created":"2022-04-02","cited_by_count":15,"area":null},{"id":"2206.11433","title":"Shilling Black-box Recommender Systems by Learning to Generate Fake User Profiles","created":"2022-06-23","cited_by_count":15,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15,"area":null},{"id":"2310.06958","title":"Comparing the Robustness of Modern No-Reference Image- and Video-Quality Metrics to Adversarial Attacks","created":"2023-10-10","cited_by_count":14,"area":null},{"id":"2404.14942","title":"Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures","created":"2024-04-23","cited_by_count":14,"area":null},{"id":"2105.07985","title":"Gradient Masking and the Underestimated Robustness Threats of Differential Privacy in Deep Learning","created":"2021-05-17","cited_by_count":13,"area":null},{"id":"2108.06895","title":"Interpreting Attributions and Interactions of Adversarial Attacks","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2109.07723","title":"Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns","created":"2021-09-16","cited_by_count":13,"area":"driving"},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2203.04234","title":"Adaptative Perturbation Patterns: Realistic Adversarial Learning for Robust Intrusion Detection","created":"2022-03-08","cited_by_count":13,"area":null},{"id":"2207.08374","title":"Adversarial Contrastive Learning via Asymmetric InfoNCE","created":"2022-07-18","cited_by_count":13,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2305.00550","title":"SoK: Pragmatic Assessment of Machine Learning for Network Intrusion Detection","created":"2023-04-30","cited_by_count":13,"area":null},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13,"area":null},{"id":"2106.13997","title":"The Feasibility and Inevitability of Stealth Attacks","created":"2021-06-26","cited_by_count":12,"area":null},{"id":"2108.06907","title":"Select Wisely and Explain: Active Learning and Probabilistic Local Post-hoc Explainability","created":"2021-08-16","cited_by_count":12,"area":null}],"next_cursor":"100"}