{"total":163,"rows":[{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2106.07499","title":"An Empirical Survey of Data Augmentation for Limited Data Learning in NLP","created":"2021-06-14","cited_by_count":101,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2202.02643","title":"The Unreasonable Effectiveness of Random Pruning: Return of the Most Naive Baseline for Sparse Training","created":"2022-02-05","cited_by_count":85,"area":null},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80,"area":null},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56,"area":null},{"id":"2106.09992","title":"Exploring Counterfactual Explanations Through the Lens of Adversarial Examples: A Theoretical and Empirical Analysis","created":"2021-06-18","cited_by_count":52,"area":null},{"id":"2112.11668","title":"How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?","created":"2021-12-22","cited_by_count":49,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2108.04990","title":"Perturbing Inputs for Fragile Interpretations in Deep Natural Language Processing","created":"2021-08-11","cited_by_count":30,"area":null},{"id":"2305.10235","title":"Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2105.11136","title":"Using Adversarial Attacks to Reveal the Statistical Bias in Machine Reading Comprehension Models","created":"2021-05-24","cited_by_count":29,"area":null},{"id":"2206.05075","title":"Diffeomorphic Counterfactuals with Generative Models","created":"2022-06-10","cited_by_count":29,"area":null},{"id":"2402.10882","title":"Universal Prompt Optimizer for Safe Text-to-Image Generation","created":"2024-02-16","cited_by_count":28,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2301.02830","title":"Image Data Augmentation Approaches: A Comprehensive Survey and Future directions","created":"2023-01-07","cited_by_count":23,"area":null},{"id":"2106.04016","title":"Disfl-QA: A Benchmark Dataset for Understanding Disfluencies in Question Answering","created":"2021-06-08","cited_by_count":20,"area":null},{"id":"2306.15261","title":"A Survey on Out-of-Distribution Evaluation of Neural NLP Models","created":"2023-06-27","cited_by_count":20,"area":null},{"id":"2210.14353","title":"RoMQA: A Benchmark for Robust, Multi-evidence, Multi-answer Question Answering","created":"2022-10-25","cited_by_count":19,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2303.11126","title":"Robustifying Token Attention for Vision Transformers","created":"2023-03-20","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2203.08725","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","created":"2022-03-16","cited_by_count":18,"area":null},{"id":"2105.14813","title":"Exploration and Exploitation: Two Ways to Improve Chinese Spelling Correction Models","created":"2021-05-31","cited_by_count":17,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2206.11433","title":"Shilling Black-box Recommender Systems by Learning to Generate Fake User Profiles","created":"2022-06-23","cited_by_count":15,"area":null},{"id":"2210.15221","title":"TASA: Deceiving Question Answering Models by Twin Answer Sentences Attack","created":"2022-10-27","cited_by_count":15,"area":null},{"id":"2410.12591","title":"Rethinking Visual Counterfactual Explanations Through Region Constraint","created":"2024-10-16","cited_by_count":14,"area":null},{"id":"2501.16750","title":"HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns","created":"2025-01-28","cited_by_count":14,"area":null},{"id":"2207.07347","title":"Feasibility of Inconspicuous GAN-generated Adversarial Patches against Object Detection","created":"2022-07-15","cited_by_count":13,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2105.14644","title":"Generating Adversarial Examples with Graph Neural Networks","created":"2021-05-30","cited_by_count":12,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2210.09404","title":"Measures of Information Reflect Memorization Patterns","created":"2022-10-17","cited_by_count":12,"area":null},{"id":"2311.11861","title":"Generating Valid and Natural Adversarial Examples with Large Language Models","created":"2023-11-20","cited_by_count":12,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2107.01943","title":"When and How to Fool Explainable Models (and Humans) with Adversarial Examples","created":"2021-07-05","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2104.05232","title":"Double Perturbation: On the Robustness of Robustness and Counterfactual Bias Evaluation","created":"2021-04-12","cited_by_count":9,"area":null},{"id":"2108.00578","title":"Is My Model Using The Right Evidence? Systematic Probes for Examining Evidence-Based Tabular Reasoning","created":"2021-08-02","cited_by_count":9,"area":null},{"id":"2108.13048","title":"ASR-GLUE: A New Multi-task Benchmark for ASR-Robust Natural Language Understanding","created":"2021-08-30","cited_by_count":9,"area":null},{"id":"2112.13534","title":"Adversarial Attack for Asynchronous Event-based Data","created":"2021-12-27","cited_by_count":9,"area":null},{"id":"2208.06612","title":"Interpreting BERT-based Text Similarity via Activation and Saliency Maps","created":"2022-08-13","cited_by_count":9,"area":null},{"id":"2302.02568","title":"Less is More: Understanding Word-level Textual Adversarial Attack via n-gram Frequency Descend","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2303.15421","title":"ACAT: Adversarial Counterfactual Attention for Classification and Detection in Medical Imaging","created":"2023-03-27","cited_by_count":9,"area":null},{"id":"2401.12097","title":"An Empirical Study of In-context Learning in LLMs for Machine Translation","created":"2024-01-22","cited_by_count":9,"area":null},{"id":"2104.06015","title":"Detecting Operational Adversarial Examples for Reliable Deep Learning","created":"2021-04-13","cited_by_count":8,"area":null},{"id":"2203.11331","title":"On The Robustness of Offensive Language Classifiers","created":"2022-03-21","cited_by_count":8,"area":null},{"id":"2204.10192","title":"Residue-Based Natural Language Adversarial Attack Detection","created":"2022-04-17","cited_by_count":8,"area":null},{"id":"2205.08589","title":"Hierarchical Distribution-Aware Testing of Deep Learning","created":"2022-05-17","cited_by_count":8,"area":null},{"id":"2211.15897","title":"Learning Antidote Data to Individual Unfairness","created":"2022-11-29","cited_by_count":8,"area":null},{"id":"2304.01899","title":"Cross-Class Feature Augmentation for Class Incremental Learning","created":"2023-04-04","cited_by_count":8,"area":null},{"id":"2111.04204","title":"Natural Adversarial Objects","created":"2021-11-07","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2306.16722","title":"Evaluating Paraphrastic Robustness in Textual Entailment Models","created":"2023-06-29","cited_by_count":7,"area":null},{"id":"2403.11397","title":"Defense Against Adversarial Attacks on No-Reference Image Quality Models with Gradient Norm Regularization","created":"2024-03-18","cited_by_count":7,"area":null},{"id":"2101.12372","title":"Adversarial Learning with Cost-Sensitive Classes","created":"2021-01-29","cited_by_count":6,"area":null},{"id":"2108.07958","title":"Semantic Perturbations with Normalizing Flows for Improved Generalization","created":"2021-08-18","cited_by_count":6,"area":null},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2104.08139","title":"Towards Variable-Length Textual Adversarial Attacks","created":"2021-04-16","cited_by_count":5,"area":null},{"id":"2111.01528","title":"Effective and Imperceptible Adversarial Textual Attack via Multi-objectivization","created":"2021-11-02","cited_by_count":5,"area":null},{"id":"2112.12792","title":"Understanding and Measuring Robustness of Multimodal Learning","created":"2021-12-22","cited_by_count":5,"area":null},{"id":"2207.14428","title":"Paired Cross-Modal Data Augmentation for Fine-Grained Image-to-Text Retrieval","created":"2022-07-29","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2211.04205","title":"Preserving Semantics in Textual Adversarial Attacks","created":"2022-11-08","cited_by_count":5,"area":null},{"id":"2304.08767","title":"Masked Language Model Based Textual Adversarial Example Detection","created":"2023-04-18","cited_by_count":5,"area":null},{"id":"2310.16955","title":"Break it, Imitate it, Fix it: Robustness by Generating Human-Like Attacks","created":"2023-10-25","cited_by_count":5,"area":null},{"id":"2402.11892","title":"Towards Reliable Evaluation of Neural Program Repair with Natural Robustness Testing","created":"2024-02-19","cited_by_count":5,"area":null},{"id":"2403.20056","title":"Cross-Lingual Transfer Robustness to Lower-Resource Languages on Adversarial Datasets","created":"2024-03-29","cited_by_count":5,"area":null},{"id":"2109.12456","title":"Auditing AI models for Verified Deployment under Semantic Specifications","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2210.15392","title":"LeNo: Adversarial Robust Salient Object Detection Networks with Learnable Noise","created":"2022-10-27","cited_by_count":4,"area":null},{"id":"2302.00094","title":"The Impacts of Unanswerable Questions on the Robustness of Machine Reading Comprehension Models","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2402.03095","title":"Transcending Adversarial Perturbations: Manifold-Aided Adversarial Examples with Legitimate Semantics","created":"2024-02-05","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2507.04100","title":"Hierarchical Testing with Rabbit Optimization for Industrial Cyber-Physical Systems","created":"2025-07-05","cited_by_count":4,"area":null},{"id":"2107.07113","title":"Robust Learning for Text Classification with Multi-source Noise Simulation and Hard Example Mining","created":"2021-07-15","cited_by_count":3,"area":null},{"id":"2109.06176","title":"TREATED:Towards Universal Defense against Textual Adversarial Attacks","created":"2021-09-13","cited_by_count":3,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2202.10377","title":"A Tutorial on Adversarial Learning Attacks and Countermeasures","created":"2022-02-21","cited_by_count":3,"area":null},{"id":"2203.11199","title":"Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model","created":"2022-03-19","cited_by_count":3,"area":null},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2304.01959","title":"Randomized Adversarial Style Perturbations for Domain Generalization","created":"2023-04-04","cited_by_count":3,"area":null},{"id":"2305.04067","title":"The Best Defense is Attack: Repairing Semantics in Textual Adversarial Examples","created":"2023-05-06","cited_by_count":3,"area":null},{"id":"2307.02849","title":"NatLogAttack: A Framework for Attacking Natural Language Inference Models with Natural Logic","created":"2023-07-06","cited_by_count":3,"area":null},{"id":"2312.13628","title":"Where and How to Attack? A Causality-Inspired Recipe for Generating Counterfactual Adversarial Examples","created":"2023-12-21","cited_by_count":3,"area":null},{"id":"2401.11373","title":"Finding a Needle in the Adversarial Haystack: A Targeted Paraphrasing Approach For Uncovering Edge Cases with Minimal Distribution Distortion","created":"2024-01-21","cited_by_count":3,"area":null},{"id":"2104.08231","title":"An Adversarially-Learned Turing Test for Dialog Generation Models","created":"2021-04-16","cited_by_count":2,"area":null},{"id":"2108.12137","title":"Secoco: Self-Correcting Encoding for Neural Machine Translation","created":"2021-08-27","cited_by_count":2,"area":null}],"next_cursor":"100"}