{"total":45,"rows":[{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2201.09650","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","created":"2022-01-24","cited_by_count":11,"area":null},{"id":"2101.12100","title":"Increasing the Confidence of Deep Neural Networks by Coverage Analysis","created":"2021-01-28","cited_by_count":9,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2109.09901","title":"Modeling Adversarial Noise for Adversarial Training","created":"2021-09-21","cited_by_count":8,"area":null},{"id":"2307.12822","title":"Learning Provably Robust Estimators for Inverse Problems via Jittering","created":"2023-07-24","cited_by_count":8,"area":null},{"id":"2105.03689","title":"Self-Supervised Adversarial Example Detection by Disentangled Representation","created":"2021-05-08","cited_by_count":7,"area":null},{"id":"2506.19882","title":"Position: Machine Learning Conferences Should Establish a \"Refutations and Critiques\" Track","created":"2025-06-24","cited_by_count":7,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2205.00807","title":"Deep-Attack over the Deep Reinforcement Learning","created":"2022-05-02","cited_by_count":5,"area":null},{"id":"2212.06776","title":"Unfolding Local Growth Rate Estimates for (Almost) Perfect Adversarial Detection","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2407.07966","title":"A Comprehensive Survey on the Security of Smart Grid: Challenges, Mitigations, and Future Research Opportunities","created":"2024-07-10","cited_by_count":4,"area":null},{"id":"2506.13024","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","created":"2025-06-16","cited_by_count":4,"area":null},{"id":"2103.02014","title":"Online Adversarial Attacks","created":"2021-03-02","cited_by_count":3,"area":null},{"id":"2106.05453","title":"Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training","created":"2021-06-10","cited_by_count":3,"area":null},{"id":"2201.12347","title":"Adversarial Robustness in Deep Learning: Attacks on Fragile Neurons","created":"2022-01-31","cited_by_count":3,"area":null},{"id":"2304.10828","title":"Individual Fairness in Bayesian Neural Networks","created":"2023-04-21","cited_by_count":3,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2306.14326","title":"Computational Asymmetries in Robust Classification","created":"2023-06-25","cited_by_count":2,"area":null},{"id":"2103.04513","title":"Improving Global Adversarial Robustness Generalization With Adversarially Trained GAN","created":"2021-03-08","cited_by_count":1,"area":null},{"id":"2106.10996","title":"Delving into the pixels of adversarial samples","created":"2021-06-21","cited_by_count":1,"area":null},{"id":"2303.02669","title":"Consistent Valid Physically-Realizable Adversarial Attack against Crowd-flow Prediction Models","created":"2023-03-05","cited_by_count":1,"area":null},{"id":"2308.03363","title":"A reading survey on adversarial machine learning: Adversarial attacks and their understanding","created":"2023-08-07","cited_by_count":1,"area":null},{"id":"2311.09790","title":"Breaking Boundaries: Balancing Performance and Robustness in Deep Wireless Traffic Forecasting","created":"2023-11-16","cited_by_count":1,"area":null},{"id":"2410.03505","title":"Classification-Denoising Networks","created":"2024-10-04","cited_by_count":1,"area":null},{"id":"2102.04836","title":"Target Training Does Adversarial Training Without Adversarial Samples","created":"2021-02-09","cited_by_count":0,"area":null},{"id":"2105.05029","title":"Adversarial examples attack based on random warm restart mechanism and improved Nesterov momentum","created":"2021-05-10","cited_by_count":0,"area":null},{"id":"2208.11839","title":"A Perturbation Resistant Transformation and Classification System for Deep Neural Networks","created":"2022-08-25","cited_by_count":0,"area":null},{"id":"2210.04087","title":"Symmetry Defense Against CNN Adversarial Perturbation Attacks","created":"2022-10-08","cited_by_count":0,"area":null},{"id":"2302.02216","title":"A Minimax Approach Against Multi-Armed Adversarial Attacks Detection","created":"2023-02-04","cited_by_count":0,"area":null},{"id":"2308.05575","title":"Symmetry Defense Against XGBoost Adversarial Perturbation Attacks","created":"2023-08-10","cited_by_count":0,"area":null},{"id":"2311.07928","title":"Towards Improving Robustness Against Common Corruptions in Object Detectors Using Adversarial Contrastive Learning","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2402.15808","title":"Optimal Zero-Shot Detector for Multi-Armed Attacks","created":"2024-02-24","cited_by_count":0,"area":null},{"id":"2512.04264","title":"Studying Various Activation Functions and Non-IID Data for Machine Learning Model Robustness","created":"2025-12-03","cited_by_count":0,"area":null},{"id":"2512.12154","title":"Keep the Lights On, Keep the Lengths in Check: Plug-In Adversarial Detection for Time-Series LLMs in Energy Forecasting","created":"2025-12-13","cited_by_count":0,"area":null},{"id":"2609.22240","title":"Statistical Inference for Adversarial Training: Central Limit Theorems via Optimal Transport","created":"2026-09-04","cited_by_count":0,"area":null},{"id":"2609.24260","title":"Adversarially Robust PAC Learning with Optimal VC Rates","created":"2026-09-21","cited_by_count":0,"area":null}],"next_cursor":null}