{"total":43,"rows":[{"id":"2210.03895","title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints","created":"2022-10-08","cited_by_count":48,"area":null},{"id":"2106.03805","title":"3DB: A Framework for Debugging Computer Vision Models","created":"2021-06-07","cited_by_count":31,"area":null},{"id":"2207.07065","title":"On the Strong Correlation Between Model Invariance and Generalization","created":"2022-07-14","cited_by_count":23,"area":null},{"id":"2108.03429","title":"Enhancing MR Image Segmentation with Realistic Adversarial Data Augmentation","created":"2021-08-07","cited_by_count":20,"area":null},{"id":"2207.10825","title":"Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation","created":"2022-07-22","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2109.10696","title":"CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networks","created":"2021-09-22","cited_by_count":19,"area":null},{"id":"2307.10235","title":"Towards Viewpoint-Invariant Visual Recognition via Adversarial Training","created":"2023-07-16","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17,"area":null},{"id":"2209.15031","title":"Automatic Data Augmentation via Invariance-Constrained Learning","created":"2022-09-29","cited_by_count":17,"area":null},{"id":"2305.16316","title":"Making Vision Transformers Truly Shift-Equivariant","created":"2023-05-25","cited_by_count":16,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2207.11177","title":"Provable Defense Against Geometric Transformations","created":"2022-07-22","cited_by_count":14,"area":null},{"id":"2105.02468","title":"Relative stability toward diffeomorphisms indicates performance in deep nets","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2110.00899","title":"Anti-aliasing Deep Image Classifiers using Novel Depth Adaptive Blurring and Activation Function","created":"2021-10-03","cited_by_count":11,"area":null},{"id":"2201.06070","title":"ALA: Naturalness-aware Adversarial Lightness Attack","created":"2022-01-16","cited_by_count":11,"area":null},{"id":"2101.09849","title":"Deep Learning Generalization and the Convex Hull of Training Sets","created":"2021-01-25","cited_by_count":10,"area":null},{"id":"2201.13351","title":"LinSyn: Synthesizing Tight Linear Bounds for Arbitrary Neural Network Activation Functions","created":"2022-01-31","cited_by_count":10,"area":null},{"id":"2203.00849","title":"Adversarially Robust Learning with Tolerance","created":"2022-03-02","cited_by_count":9,"area":null},{"id":"2306.17431","title":"Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection","created":"2023-06-30","cited_by_count":8,"area":null},{"id":"2307.11528","title":"Improving Viewpoint Robustness for Visual Recognition via Adversarial Training","created":"2023-07-21","cited_by_count":7,"area":null},{"id":"2404.10727","title":"How Deep Networks Learn Sparse and Hierarchical Data: the Sparse Random Hierarchy Model","created":"2024-04-16","cited_by_count":7,"area":null},{"id":"2408.13140","title":"Verification of Geometric Robustness of Neural Networks via Piecewise Linear Approximation and Lipschitz Optimisation","created":"2024-08-23","cited_by_count":7,"area":null},{"id":"2103.07640","title":"Generating Unrestricted Adversarial Examples via Three Parameters","created":"2021-03-13","cited_by_count":5,"area":null},{"id":"2210.01506","title":"How deep convolutional neural networks lose spatial information with training","created":"2022-10-04","cited_by_count":5,"area":null},{"id":"2309.04650","title":"Exploring Robust Features for Improving Adversarial Robustness","created":"2023-09-09","cited_by_count":4,"area":null},{"id":"2207.02349","title":"Generalization to translation shifts: a study in architectures and augmentations","created":"2022-07-05","cited_by_count":3,"area":null},{"id":"2310.04539","title":"Generating Less Certain Adversarial Examples Improves Robust Generalization","created":"2023-10-06","cited_by_count":3,"area":null},{"id":"2103.11372","title":"Natural Perturbed Training for General Robustness of Neural Network Classifiers","created":"2021-03-21","cited_by_count":2,"area":null},{"id":"2105.04070","title":"Robust Training Using Natural Transformation","created":"2021-05-10","cited_by_count":2,"area":null},{"id":"2203.05006","title":"Resource-Efficient Invariant Networks: Exponential Gains by Unrolled Optimization","created":"2022-03-09","cited_by_count":2,"area":null},{"id":"2210.02577","title":"A Closer Look at Robustness to L-infinity and Spatial Perturbations and their Composition","created":"2022-10-05","cited_by_count":2,"area":null},{"id":"2309.13150","title":"Pixel-wise Smoothing for Certified Robustness against Camera Motion Perturbations","created":"2023-09-22","cited_by_count":2,"area":null},{"id":"2207.05902","title":"Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbations","created":"2022-07-13","cited_by_count":1,"area":null},{"id":"2305.19889","title":"Evaluating Machine Learning Models with NERO: Non-Equivariance Revealed on Orbits","created":"2023-05-31","cited_by_count":1,"area":null},{"id":"2111.09779","title":"Wiggling Weights to Improve the Robustness of Classifiers","created":"2021-11-18","cited_by_count":0,"area":null},{"id":"2311.16478","title":"RetouchUAA: Unconstrained Adversarial Attack via Image Retouching","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2501.18098","title":"Disentangling Safe and Unsafe Corruptions via Anisotropy and Locality","created":"2025-01-30","cited_by_count":0,"area":null},{"id":"2508.03213","title":"The Power of Many: Synergistic Unification of Diverse Augmentations for Efficient Adversarial Robustness","created":"2025-08-05","cited_by_count":0,"area":null},{"id":"2510.14025","title":"NAPPure: Adversarial Purification for Robust Image Classification under Non-Additive Perturbations","created":"2025-10-15","cited_by_count":0,"area":null},{"id":"2605.23203","title":"Lipschitz Optimization for Formal Verification of Homographies","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2608.20748","title":"Generating Multi-view Adversarial Examples for Visual Geometry Grounded Transformer","created":"2026-08-21","cited_by_count":0,"area":null}],"next_cursor":null}