{"total":75,"rows":[{"id":"2109.13916","title":"Unsolved Problems in ML Safety","created":"2021-09-28","cited_by_count":292,"area":null},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2103.05094","title":"CovidGAN: Data Augmentation Using Auxiliary Classifier GAN for Improved Covid-19 Detection","created":"2021-03-08","cited_by_count":64,"area":null},{"id":"2210.02984","title":"The Lie Derivative for Measuring Learned Equivariance","created":"2022-10-06","cited_by_count":54,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2203.07983","title":"Adversarial Robustness of Neural-Statistical Features in Detection of Generative Transformers","created":"2022-03-02","cited_by_count":25,"area":null},{"id":"2101.03272","title":"Exploring Adversarial Fake Images on Face Manifold","created":"2021-01-09","cited_by_count":24,"area":null},{"id":"2102.01862","title":"Towards Robust Neural Networks via Close-loop Control","created":"2021-02-03","cited_by_count":23,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2109.10696","title":"CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networks","created":"2021-09-22","cited_by_count":19,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2106.06418","title":"Scale-invariant scale-channel networks: Deep networks that generalise to previously unseen scales","created":"2021-06-11","cited_by_count":17,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2110.00899","title":"Anti-aliasing Deep Image Classifiers using Novel Depth Adaptive Blurring and Activation Function","created":"2021-10-03","cited_by_count":11,"area":null},{"id":"2110.04337","title":"Adversarial Token Attacks on Vision Transformers","created":"2021-10-08","cited_by_count":11,"area":null},{"id":"2307.07250","title":"Mitigating Adversarial Vulnerability through Causal Parameter Estimation by Adversarial Double Machine Learning","created":"2023-07-14","cited_by_count":11,"area":null},{"id":"2105.04040","title":"Truly shift-equivariant convolutional neural networks with adaptive polyphase upsampling","created":"2021-05-09","cited_by_count":10,"area":null},{"id":"2402.19322","title":"Verification of Neural Networks' Global Robustness","created":"2024-02-29","cited_by_count":10,"area":null},{"id":"2106.10044","title":"Training or Architecture? How to Incorporate Invariance in Neural Networks","created":"2021-06-18","cited_by_count":9,"area":null},{"id":"2305.05666","title":"Policy Gradient Methods in the Presence of Symmetries and State Abstractions","created":"2023-05-09","cited_by_count":9,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2104.04191","title":"SI-Score: An image dataset for fine-grained analysis of robustness to object location, rotation and size","created":"2021-04-09","cited_by_count":7,"area":null},{"id":"2108.02502","title":"Imperceptible Adversarial Examples by Spatial Chroma-Shift","created":"2021-08-05","cited_by_count":7,"area":null},{"id":"2408.01934","title":"A Survey and Evaluation of Adversarial Attacks for Object Detection","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2105.09685","title":"Simple Transparent Adversarial Examples","created":"2021-05-20","cited_by_count":6,"area":null},{"id":"2106.06624","title":"Relaxing Local Robustness","created":"2021-06-11","cited_by_count":6,"area":null},{"id":"2103.07640","title":"Generating Unrestricted Adversarial Examples via Three Parameters","created":"2021-03-13","cited_by_count":5,"area":null},{"id":"2107.00623","title":"Improving Sound Event Classification by Increasing Shift Invariance in Convolutional Neural Networks","created":"2021-07-01","cited_by_count":5,"area":null},{"id":"2106.12472","title":"Finding simplicity: unsupervised discovery of features, patterns, and order parameters via shift-invariant variational autoencoders","created":"2021-06-23","cited_by_count":4,"area":null},{"id":"2206.02535","title":"Certified Robustness in Federated Learning","created":"2022-06-06","cited_by_count":4,"area":null},{"id":"2103.00363","title":"Tiny Adversarial Mulit-Objective Oneshot Neural Architecture Search","created":"2021-02-28","cited_by_count":3,"area":null},{"id":"2105.12106","title":"Adversarial Attack Driven Data Augmentation for Accurate And Robust Medical Image Segmentation","created":"2021-05-25","cited_by_count":3,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2111.05063","title":"Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search","created":"2021-11-09","cited_by_count":3,"area":null},{"id":"2310.13950","title":"Adversarial Image Generation by Spatial Transformation in Perceptual Colorspaces","created":"2023-10-21","cited_by_count":3,"area":null},{"id":"2408.14875","title":"Adversarial Attacks and Defenses in Multivariate Time-Series Forecasting for Smart and Connected Infrastructures","created":"2024-08-27","cited_by_count":3,"area":null},{"id":"2105.04070","title":"Robust Training Using Natural Transformation","created":"2021-05-10","cited_by_count":2,"area":null},{"id":"2105.09934","title":"Probing the Effect of Selection Bias on Generalization: A Thought Experiment","created":"2021-05-20","cited_by_count":2,"area":null},{"id":"2111.01996","title":"Pareto Adversarial Robustness: Balancing Spatial Robustness and Sensitivity-based Robustness","created":"2021-11-03","cited_by_count":2,"area":null},{"id":"2209.11916","title":"A Simple Strategy to Provable Invariance via Orbit Mapping","created":"2022-09-24","cited_by_count":2,"area":null},{"id":"2210.02577","title":"A Closer Look at Robustness to L-infinity and Spatial Perturbations and their Composition","created":"2022-10-05","cited_by_count":2,"area":null},{"id":"2211.09782","title":"Assessing Neural Network Robustness via Adversarial Pivotal Tuning","created":"2022-11-17","cited_by_count":2,"area":null},{"id":"2310.06468","title":"A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks","created":"2023-10-10","cited_by_count":2,"area":null},{"id":"2102.05475","title":"Adversarial Robustness: What fools you makes you stronger","created":"2021-02-10","cited_by_count":1,"area":null},{"id":"2106.09222","title":"Localized Uncertainty Attacks","created":"2021-06-17","cited_by_count":1,"area":null},{"id":"2109.11839","title":"Frequency Pooling: Shift-Equivalent and Anti-Aliasing Downsampling","created":"2021-09-24","cited_by_count":1,"area":null},{"id":"2112.09625","title":"Provable Adversarial Robustness in the Quantum Model","created":"2021-12-17","cited_by_count":1,"area":null},{"id":"2202.13912","title":"ReCasNet: Improving consistency within the two-stage mitosis detection framework","created":"2022-02-28","cited_by_count":1,"area":null},{"id":"2310.17404","title":"Invariance Measures for Neural Networks","created":"2023-10-26","cited_by_count":1,"area":null},{"id":"2402.06827","title":"RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations for Universal Robustness","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2411.16326","title":"Brain-like emergent properties in deep networks: impact of network architecture, datasets and training","created":"2024-11-25","cited_by_count":1,"area":null},{"id":"2504.20310","title":"A Cryptographic Perspective on Mitigation vs. Detection in Machine Learning","created":"2025-04-28","cited_by_count":1,"area":null},{"id":"2505.23448","title":"Network Inversion for Uncertainty-Aware Out-of-Distribution Detection","created":"2025-05-29","cited_by_count":1,"area":null},{"id":"2506.04823","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","created":"2025-06-05","cited_by_count":1,"area":null},{"id":"2102.00449","title":"Towards Imperceptible Query-limited Adversarial Attacks with Perceptual Feature Fidelity Loss","created":"2021-01-31","cited_by_count":0,"area":null},{"id":"2102.07360","title":"Generating Structured Adversarial Attacks Using Frank-Wolfe Method","created":"2021-02-15","cited_by_count":0,"area":null},{"id":"2104.00526","title":"Fitting Elephants","created":"2021-03-31","cited_by_count":0,"area":null},{"id":"2106.09677","title":"Adaptive Low-Rank Regularization with Damping Sequences to Restrict Lazy Weights in Deep Networks","created":"2021-06-17","cited_by_count":0,"area":null},{"id":"2107.13491","title":"Models of Computational Profiles to Study the Likelihood of DNN Metamorphic Test Cases","created":"2021-07-28","cited_by_count":0,"area":null},{"id":"2109.09213","title":"Capsule networks with non-iterative cluster routing","created":"2021-09-19","cited_by_count":0,"area":null},{"id":"2203.08948","title":"CapsNet for Medical Image Segmentation","created":"2022-03-16","cited_by_count":0,"area":null},{"id":"2203.13612","title":"Repairing Group-Level Errors for DNNs Using Weighted Regularization","created":"2022-03-24","cited_by_count":0,"area":null},{"id":"2211.04675","title":"Combination of multiple neural networks using transfer learning and extensive geometric data augmentation for assessing cellularity scores in histopathology images","created":"2022-11-09","cited_by_count":0,"area":null},{"id":"2305.00136","title":"Optimizing the AI Development Process by Providing the Best Support Environment","created":"2023-04-29","cited_by_count":0,"area":null},{"id":"2306.15482","title":"Cooperation or Competition: Avoiding Player Domination for Multi-Target Robustness via Adaptive Budgets","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2306.16938","title":"Restore Translation Using Equivariant Neural Networks","created":"2023-06-29","cited_by_count":0,"area":null},{"id":"2311.16478","title":"RetouchUAA: Unconstrained Adversarial Attack via Image Retouching","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2406.06127","title":"Comparing Data Augmentation Methods for End-to-End Task-Oriented Dialog Systems","created":"2024-06-10","cited_by_count":0,"area":null},{"id":"2408.11309","title":"Improving Out-of-Distribution Data Handling and Corruption Resistance via Modern Hopfield Networks","created":"2024-08-21","cited_by_count":0,"area":null},{"id":"2506.03665","title":"ROSA: Addressing text understanding challenges in photographs via ROtated SAmpling","created":"2025-06-04","cited_by_count":0,"area":null},{"id":"2512.00229","title":"TIE: A Training-Inversion-Exclusion Framework for Visually Interpretable and Uncertainty-Guided Out-of-Distribution Detection","created":"2025-11-28","cited_by_count":0,"area":null},{"id":"2603.06311","title":"Latent Transfer Attack: Adversarial Examples via Generative Latent Spaces","created":"2026-03-06","cited_by_count":0,"area":null},{"id":"2606.14648","title":"Which Directions Matter? Sparse Design for Affine Robust Optimization","created":"2026-06-12","cited_by_count":0,"area":null}],"next_cursor":null}