{"total":203,"rows":[{"id":"2210.02025","title":"GMMSeg: Gaussian Mixture based Generative Semantic Segmentation Models","created":"2022-10-05","cited_by_count":87,"area":null},{"id":"2301.01767","title":"Self-Supervised Video Forensics by Audio-Visual Anomaly Detection","created":"2023-01-04","cited_by_count":85,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2101.09387","title":"Online Adversarial Purification based on Self-Supervision","created":"2021-01-23","cited_by_count":46,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2206.02417","title":"Fast Adversarial Training with Adaptive Step Size","created":"2022-06-06","cited_by_count":25,"area":null},{"id":"2102.01862","title":"Towards Robust Neural Networks via Close-loop Control","created":"2021-02-03","cited_by_count":23,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2204.06213","title":"Defensive Patches for Robust Recognition in the Physical World","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2106.02749","title":"Predify: Augmenting deep neural networks with brain-inspired predictive coding dynamics","created":"2021-06-04","cited_by_count":19,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2211.14966","title":"Adversarial Rademacher Complexity of Deep Neural Networks","created":"2022-11-27","cited_by_count":18,"area":null},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2101.08783","title":"A Person Re-identification Data Augmentation Method with Adversarial Defense Effect","created":"2021-01-21","cited_by_count":13,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2101.01121","title":"Local Competition and Stochasticity for Adversarial Robustness in Deep Learning","created":"2021-01-04","cited_by_count":12,"area":null},{"id":"2105.02942","title":"Understanding Catastrophic Overfitting in Adversarial Training","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11,"area":null},{"id":"2112.12084","title":"Input-Specific Robustness Certification for Randomized Smoothing","created":"2021-12-21","cited_by_count":11,"area":null},{"id":"2206.07953","title":"Analysis and Extensions of Adversarial Training for Video Classification","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2212.12641","title":"Out-of-Distribution Detection with Reconstruction Error and Typicality-based Penalty","created":"2022-12-24","cited_by_count":11,"area":null},{"id":"2107.06456","title":"AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense","created":"2021-07-14","cited_by_count":10,"area":null},{"id":"2201.02354","title":"GenLabel: Mixup Relabeling using Generative Models","created":"2022-01-07","cited_by_count":10,"area":null},{"id":"2504.14541","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","created":"2025-04-20","cited_by_count":10,"area":null},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9,"area":null},{"id":"2108.13952","title":"Morphence: Moving Target Defense Against Adversarial Examples","created":"2021-08-31","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2310.03967","title":"Sub-token ViT Embedding via Stochastic Resonance Transformers","created":"2023-10-06","cited_by_count":9,"area":null},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2106.06667","title":"CARTL: Cooperative Adversarially-Robust Transfer Learning","created":"2021-06-12","cited_by_count":8,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2306.17431","title":"Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection","created":"2023-06-30","cited_by_count":8,"area":null},{"id":"2402.08225","title":"Improving Black-box Robustness with In-Context Rewriting","created":"2024-02-13","cited_by_count":8,"area":null},{"id":"2505.01267","title":"Diffusion-based Adversarial Purification from the Perspective of the Frequency Domain","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2102.05241","title":"Detecting Localized Adversarial Examples: A Generic Approach using Critical Region Analysis","created":"2021-02-10","cited_by_count":7,"area":null},{"id":"2111.04204","title":"Natural Adversarial Objects","created":"2021-11-07","cited_by_count":7,"area":null},{"id":"2206.13607","title":"Improved Text Classification via Test-Time Augmentation","created":"2022-06-27","cited_by_count":7,"area":null},{"id":"2401.06031","title":"GE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model","created":"2024-01-11","cited_by_count":7,"area":null},{"id":"2102.01979","title":"Key Technology Considerations in Developing and Deploying Machine Learning Models in Clinical Radiology Practice","created":"2021-02-03","cited_by_count":6,"area":null},{"id":"2102.03156","title":"Optimal Transport as a Defense Against Adversarial Attacks","created":"2021-02-05","cited_by_count":6,"area":null},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6,"area":null},{"id":"2301.03110","title":"RobArch: Designing Robust Architectures against Adversarial Attacks","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2304.06919","title":"Interpretability is a Kind of Safety: An Interpreter-based Ensemble for Adversary Defense","created":"2023-04-14","cited_by_count":6,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2108.00422","title":"An Effective and Robust Detector for Logo Detection","created":"2021-08-01","cited_by_count":5,"area":null},{"id":"2109.05223","title":"2-in-1 Accelerator: Enabling Random Precision Switch for Winning Both Adversarial Robustness and Efficiency","created":"2021-09-11","cited_by_count":5,"area":null},{"id":"2203.08961","title":"On the Convergence of Certified Robust Training with Interval Bound Propagation","created":"2022-03-16","cited_by_count":5,"area":null},{"id":"2206.12963","title":"Self-Healing Robust Neural Networks via Closed-Loop Control","created":"2022-06-26","cited_by_count":5,"area":null},{"id":"2207.06035","title":"Perturbation Inactivation Based Adversarial Defense for Face Recognition","created":"2022-07-13","cited_by_count":5,"area":null},{"id":"2210.03297","title":"Preprocessors Matter! Realistic Decision-Based Attacks on Machine Learning Systems","created":"2022-10-07","cited_by_count":5,"area":null},{"id":"2211.08686","title":"Improving Interpretability via Regularization of Neural Activation Sensitivity","created":"2022-11-16","cited_by_count":5,"area":null},{"id":"2301.12896","title":"Identifying Adversarially Attackable and Robust Samples","created":"2023-01-30","cited_by_count":5,"area":null},{"id":"2302.13464","title":"Randomness in ML Defenses Helps Persistent Attackers and Hinders Evaluators","created":"2023-02-27","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2303.15409","title":"Class-Conditioned Transformation for Enhanced Robust Image Classification","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2406.17640","title":"BayTTA: Uncertainty-aware medical image classification with optimized test-time augmentation using Bayesian model averaging","created":"2024-06-25","cited_by_count":5,"area":null},{"id":"2503.16616","title":"Progressive Test Time Energy Adaptation for Medical Image Segmentation","created":"2025-03-20","cited_by_count":5,"area":null},{"id":"2106.15357","title":"Multi-stage Optimization based Adversarial Training","created":"2021-06-26","cited_by_count":4,"area":null},{"id":"2109.12456","title":"Auditing AI models for Verified Deployment under Semantic Specifications","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2112.14232","title":"Constrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks","created":"2021-12-28","cited_by_count":4,"area":null},{"id":"2210.05118","title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization","created":"2022-10-11","cited_by_count":4,"area":null},{"id":"2212.02003","title":"Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial Defense","created":"2022-12-05","cited_by_count":4,"area":null},{"id":"2212.05387","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","created":"2022-12-11","cited_by_count":4,"area":null},{"id":"2304.10446","title":"Certified Adversarial Robustness Within Multiple Perturbation Bounds","created":"2023-04-20","cited_by_count":4,"area":null},{"id":"2107.05780","title":"Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising","created":"2021-07-12","cited_by_count":3,"area":null},{"id":"2202.10377","title":"A Tutorial on Adversarial Learning Attacks and Countermeasures","created":"2022-02-21","cited_by_count":3,"area":null},{"id":"2205.04368","title":"Towards Measuring Domain Shift in Histopathological Stain Translation in an Unsupervised Manner","created":"2022-05-09","cited_by_count":3,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2210.13982","title":"Hindering Adversarial Attacks with Implicit Neural Representations","created":"2022-10-22","cited_by_count":3,"area":null},{"id":"2303.13326","title":"Decentralized Adversarial Training over Graphs","created":"2023-03-23","cited_by_count":3,"area":null},{"id":"2305.15709","title":"PEARL: Preprocessing Enhanced Adversarial Robust Learning of Image Deraining for Semantic Segmentation","created":"2023-05-25","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2411.07114","title":"TinyML Security: Exploring Vulnerabilities in Resource-Constrained Machine Learning Systems","created":"2024-11-11","cited_by_count":3,"area":null},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2510.14231","title":"When Flatness Does (Not) Guarantee Adversarial Robustness","created":"2025-10-16","cited_by_count":3,"area":null}],"next_cursor":"100"}