{"total":148,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2110.12690","title":"A Dynamical System Perspective for Lipschitz Neural Networks","created":"2021-10-25","cited_by_count":60,"area":null},{"id":"2204.02685","title":"SecureBERT: A Domain-Specific Language Model for Cybersecurity","created":"2022-04-06","cited_by_count":60,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2103.03046","title":"PointGuard: Provably Robust 3D Point Cloud Classification","created":"2021-03-04","cited_by_count":49,"area":null},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47,"area":null},{"id":"2108.04062","title":"Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100","created":"2021-08-05","cited_by_count":47,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2107.02425","title":"GradDiv: Adversarial Robustness of Randomized Neural Networks via Gradient Diversity Regularization","created":"2021-07-06","cited_by_count":34,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2107.14110","title":"Enhancing Adversarial Robustness via Test-time Transformation Ensembling","created":"2021-07-29","cited_by_count":27,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2102.01862","title":"Towards Robust Neural Networks via Close-loop Control","created":"2021-02-03","cited_by_count":23,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2203.15230","title":"Zero-Query Transfer Attacks on Context-Aware Object Detectors","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2212.02531","title":"Enhancing Quantum Adversarial Robustness by Randomized Encodings","created":"2022-12-05","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2110.07804","title":"Alternative Input Signals Ease Transfer in Multilingual Machine Translation","created":"2021-10-15","cited_by_count":14,"area":null},{"id":"2207.03574","title":"Demystifying the Adversarial Robustness of Random Transformation Defenses","created":"2022-06-18","cited_by_count":14,"area":null},{"id":"2308.16316","title":"Ten Years of Generative Adversarial Nets (GANs): A survey of the state-of-the-art","created":"2023-08-30","cited_by_count":14,"area":null},{"id":"2112.03000","title":"Sequential Randomized Smoothing for Adversarially Robust Speech Recognition","created":"2021-11-05","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2302.12480","title":"Robust Weight Signatures: Gaining Robustness as Easy as Patching Weights?","created":"2023-02-24","cited_by_count":13,"area":null},{"id":"2102.01886","title":"Learning Diverse-Structured Networks for Adversarial Robustness","created":"2021-02-03","cited_by_count":12,"area":null},{"id":"2111.06979","title":"Neural Population Geometry Reveals the Role of Stochasticity in Robust Perception","created":"2021-11-12","cited_by_count":12,"area":null},{"id":"2402.13987","title":"A Simple and Yet Fairly Effective Defense for Graph Neural Networks","created":"2024-02-21","cited_by_count":12,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2305.06522","title":"Randomized Smoothing with Masked Inference for Adversarially Robust Text Classifications","created":"2023-05-11","cited_by_count":11,"area":null},{"id":"2203.01439","title":"Enhancing Adversarial Robustness for Deep Metric Learning","created":"2022-03-02","cited_by_count":10,"area":null},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2203.00849","title":"Adversarially Robust Learning with Tolerance","created":"2022-03-02","cited_by_count":9,"area":null},{"id":"2210.01111","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","created":"2022-10-03","cited_by_count":9,"area":null},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9,"area":null},{"id":"2303.05382","title":"ChatGPT is on the Horizon: Could a Large Language Model be Suitable for Intelligent Traffic Safety Research and Applications?","created":"2023-03-06","cited_by_count":9,"area":null},{"id":"2310.03967","title":"Sub-token ViT Embedding via Stochastic Resonance Transformers","created":"2023-10-06","cited_by_count":9,"area":null},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2102.04450","title":"Noise Optimization for Artificial Neural Networks","created":"2021-02-06","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2112.07921","title":"Temporal Shuffling for Defending Deep Action Recognition Models against Adversarial Attacks","created":"2021-12-15","cited_by_count":7,"area":null},{"id":"2211.14207","title":"Invariance-Aware Randomized Smoothing Certificates","created":"2022-11-25","cited_by_count":7,"area":null},{"id":"2305.04746","title":"Understanding Noise-Augmented Training for Randomized Smoothing","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2311.01500","title":"E(2) Equivariant Neural Networks for Robust Galaxy Morphology Classification","created":"2023-11-02","cited_by_count":7,"area":null},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6,"area":null},{"id":"2106.14432","title":"Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations","created":"2021-06-28","cited_by_count":6,"area":null},{"id":"2202.01186","title":"Smoothed Embeddings for Certified Few-Shot Learning","created":"2022-02-02","cited_by_count":6,"area":null},{"id":"2303.01959","title":"PointCert: Point Cloud Classification with Deterministic Certified Robustness Guarantees","created":"2023-03-03","cited_by_count":6,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2403.13778","title":"Certified Human Trajectory Prediction","created":"2024-03-20","cited_by_count":6,"area":null},{"id":"2109.05223","title":"2-in-1 Accelerator: Enabling Random Precision Switch for Winning Both Adversarial Robustness and Efficiency","created":"2021-09-11","cited_by_count":5,"area":null},{"id":"2206.04762","title":"Data-Efficient Double-Win Lottery Tickets from Robust Pre-training","created":"2022-06-09","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2411.03279","title":"Oblivious Defense in ML Models: Backdoor Removal without Detection","created":"2024-11-05","cited_by_count":5,"area":null},{"id":"2101.04631","title":"Deep Gaussian Denoiser Epistemic Uncertainty and Decoupled Dual-Attention Fusion","created":"2021-01-12","cited_by_count":4,"area":null},{"id":"2109.00936","title":"Impact of Attention on Adversarial Robustness of Image Classification Models","created":"2021-09-02","cited_by_count":4,"area":null},{"id":"2110.00959","title":"Boost Neural Networks by Checkpoints","created":"2021-10-03","cited_by_count":4,"area":null},{"id":"2209.09996","title":"Audit and Improve Robustness of Private Neural Networks on Encrypted Data","created":"2022-09-20","cited_by_count":4,"area":null},{"id":"2210.15392","title":"LeNo: Adversarial Robust Salient Object Detection Networks with Learnable Noise","created":"2022-10-27","cited_by_count":4,"area":null},{"id":"2212.02003","title":"Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial Defense","created":"2022-12-05","cited_by_count":4,"area":null},{"id":"2212.13967","title":"Extreme Image Transformations Affect Humans and Machines Differently","created":"2022-11-30","cited_by_count":4,"area":null},{"id":"2302.07221","title":"On the Role of Randomization in Adversarially Robust Classification","created":"2023-02-14","cited_by_count":4,"area":null},{"id":"2104.01231","title":"Diverse Gaussian Noise Consistency Regularization for Robustness and Uncertainty Calibration","created":"2021-04-02","cited_by_count":3,"area":null},{"id":"2107.05780","title":"Detect and Defense Against Adversarial Examples in Deep Learning using Natural Scene Statistics and Adaptive Denoising","created":"2021-07-12","cited_by_count":3,"area":null},{"id":"2109.15160","title":"Mitigating Black-Box Adversarial Attacks via Output Noise Perturbation","created":"2021-09-30","cited_by_count":3,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2210.13463","title":"Adversarial Pretraining of Self-Supervised Deep Networks: Past, Present and Future","created":"2022-10-23","cited_by_count":3,"area":null},{"id":"2305.15835","title":"PDE+: Enhancing Generalization via PDE with Adaptive Distributional Diffusion","created":"2023-05-25","cited_by_count":3,"area":null},{"id":"2307.11672","title":"Robust Feature Inference: A Test-time Defense Strategy using Spectral Projections","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2312.01679","title":"Adversarial Medical Image with Hierarchical Feature Hiding","created":"2023-12-04","cited_by_count":3,"area":null},{"id":"2412.11390","title":"PAT: Privacy-Preserving Adversarial Transfer for Accurate, Robust and Privacy-Preserving EEG Decoding","created":"2024-12-16","cited_by_count":3,"area":null},{"id":"2101.08675","title":"Adversarial Machine Learning in Text Analysis and Generation","created":"2021-01-14","cited_by_count":2,"area":null},{"id":"2103.03076","title":"Dynamic Efficient Adversarial Training Guided by Gradient Magnitude","created":"2021-03-04","cited_by_count":2,"area":null},{"id":"2103.09289","title":"Colorectal Cancer Segmentation using Atrous Convolution and Residual Enhanced UNet","created":"2021-03-16","cited_by_count":2,"area":null},{"id":"2104.11761","title":"Towards Trustworthy Deception Detection: Benchmarking Model Robustness across Domains, Modalities, and Languages","created":"2021-04-23","cited_by_count":2,"area":null},{"id":"2105.08269","title":"Sparta: Spatially Attentive and Adversarially Robust Activation","created":"2021-05-18","cited_by_count":2,"area":null},{"id":"2105.08620","title":"Adversarial Examples Detection with Bayesian Neural Network","created":"2021-05-18","cited_by_count":2,"area":null},{"id":"2106.02867","title":"Ensemble Defense with Data Diversity: Weak Correlation Implies Strong Robustness","created":"2021-06-05","cited_by_count":2,"area":null},{"id":"2201.00148","title":"Rethinking Feature Uncertainty in Stochastic Neural Networks for Adversarial Robustness","created":"2022-01-01","cited_by_count":2,"area":null},{"id":"2202.01117","title":"An Eye for an Eye: Defending against Gradient-based Attacks with Gradients","created":"2022-02-02","cited_by_count":2,"area":null},{"id":"2202.02595","title":"Memory Defense: More Robust Classification via a Memory-Masking Autoencoder","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2207.13036","title":"Jacobian Norm with Selective Input Gradient Regularization for Improved and Interpretable Adversarial Defense","created":"2022-07-09","cited_by_count":2,"area":null},{"id":"2208.00862","title":"Attacking Adversarial Defences by Smoothing the Loss Landscape","created":"2022-08-01","cited_by_count":2,"area":null},{"id":"2211.05453","title":"A noise based novel strategy for faster SNN training","created":"2022-11-10","cited_by_count":2,"area":null},{"id":"2212.10430","title":"Walking Noise: On Layer-Specific Robustness of Neural Architectures against Noisy Computations and Associated Characteristic Learning Dynamics","created":"2022-12-20","cited_by_count":2,"area":null},{"id":"2310.06468","title":"A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks","created":"2023-10-10","cited_by_count":2,"area":null},{"id":"2311.15165","title":"Mixing Classifiers to Alleviate the Accuracy-Robustness Trade-Off","created":"2023-11-26","cited_by_count":2,"area":null},{"id":"2409.13828","title":"ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer","created":"2024-09-20","cited_by_count":2,"area":null},{"id":"2503.16183","title":"Variance-Aware Noisy Training: Hardening DNNs against Unstable Analog Computations","created":"2025-03-20","cited_by_count":2,"area":null},{"id":"2102.05096","title":"Towards Bridging the gap between Empirical and Certified Robustness against Adversarial Examples","created":"2021-02-09","cited_by_count":1,"area":null},{"id":"2102.09230","title":"Random Projections for Improved Adversarial Robustness","created":"2021-02-18","cited_by_count":1,"area":null}],"next_cursor":"100"}