{"total":351,"rows":[{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651,"area":"alignment"},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2308.07308","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","created":"2023-08-14","cited_by_count":244,"area":"safety"},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2110.14051","title":"A Unified Survey on Anomaly, Novelty, Open-Set, and Out-of-Distribution Detection: Solutions and Future Challenges","created":"2021-10-26","cited_by_count":154,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2110.06674","title":"Truthful AI: Developing and governing AI that does not lie","created":"2021-10-13","cited_by_count":113,"area":null},{"id":"2201.05320","title":"CommonsenseQA 2.0: Exposing the Limits of AI through Gamification","created":"2022-01-14","cited_by_count":109,"area":null},{"id":"2208.12268","title":"FedPrompt: Communication-Efficient and Privacy Preserving Prompt Tuning in Federated Learning","created":"2022-08-25","cited_by_count":91,"area":"safety"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2106.07873","title":"Reverse Engineering of Generative Models: Inferring Model Hyperparameters from Generated Images","created":"2021-06-15","cited_by_count":58,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2101.02032","title":"Socially Responsible AI Algorithms: Issues, Purposes, and Challenges","created":"2021-01-01","cited_by_count":56,"area":null},{"id":"2402.10086","title":"Explainable AI for Safe and Trustworthy Autonomous Driving: A Systematic Review","created":"2024-02-08","cited_by_count":53,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2112.04764","title":"3D-VField: Adversarial Augmentation of Point Clouds for Domain Generalization in 3D Object Detection","created":"2021-12-09","cited_by_count":43,"area":null},{"id":"2107.10137","title":"Improved Text Classification via Contrastive Adversarial Training","created":"2021-07-21","cited_by_count":38,"area":null},{"id":"2311.00913","title":"Self-Influence Guided Data Reweighting for Language Model Pre-training","created":"2023-11-02","cited_by_count":37,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2405.07406","title":"Machine Unlearning: A Comprehensive Survey","created":"2024-05-13","cited_by_count":35,"area":"safety"},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2104.05097","title":"Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networks","created":"2021-04-11","cited_by_count":30,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2506.23844","title":"A Survey on Autonomy-Induced Security Risks in Large Model-Based Agents","created":"2025-06-30","cited_by_count":29,"area":"agents"},{"id":"2102.03483","title":"Corner Case Generation and Analysis for Safety Assessment of Autonomous Vehicles","created":"2021-02-06","cited_by_count":27,"area":"driving"},{"id":"2101.01901","title":"IPLS : A Framework for Decentralized Federated Learning","created":"2021-01-06","cited_by_count":26,"area":null},{"id":"2104.12146","title":"3D Adversarial Attacks Beyond Point Cloud","created":"2021-04-25","cited_by_count":26,"area":null},{"id":"2109.00893","title":"A Survey on Open Set Recognition","created":"2021-08-18","cited_by_count":25,"area":null},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25,"area":null},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2107.01830","title":"ARM-Net: Adaptive Relation Modeling Network for Structured Data","created":"2021-07-05","cited_by_count":24,"area":null},{"id":"2108.02940","title":"Evaluating Adversarial Attacks on Driving Safety in Vision-Based Autonomous Vehicles","created":"2021-08-06","cited_by_count":24,"area":"driving"},{"id":"2105.12841","title":"DNNV: A Framework for Deep Neural Network Verification","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2106.09947","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples","created":"2021-06-18","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2204.06274","title":"Overparameterized Linear Regression under Adversarial Attacks","created":"2022-04-13","cited_by_count":21,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2202.02236","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","created":"2022-02-04","cited_by_count":20,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2301.00896","title":"Efficient Robustness Assessment via Adversarial Spatial-Temporal Focus on Videos","created":"2023-01-03","cited_by_count":20,"area":null},{"id":"2110.08932","title":"Poisoning Attacks on Fair Machine Learning","created":"2021-10-17","cited_by_count":19,"area":null},{"id":"2211.01340","title":"POLICE: Provably Optimal Linear Constraint Enforcement for Deep Neural Networks","created":"2022-11-02","cited_by_count":19,"area":null},{"id":"2405.09879","title":"Generative Unlearning for Any Identity","created":"2024-05-16","cited_by_count":19,"area":"safety"},{"id":"2103.05292","title":"Deep Learning for Android Malware Defenses: a Systematic Literature Review","created":"2021-03-09","cited_by_count":18,"area":null},{"id":"2203.14155","title":"How Do We Fail? Stress Testing Perception in Autonomous Vehicles","created":"2022-03-26","cited_by_count":18,"area":"driving"},{"id":"2209.14076","title":"Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systems","created":"2022-09-28","cited_by_count":18,"area":null},{"id":"2310.10807","title":"Regularization properties of adversarially-trained linear regression","created":"2023-10-16","cited_by_count":18,"area":null},{"id":"2103.14211","title":"MagDR: Mask-guided Detection and Reconstruction for Defending Deepfakes","created":"2021-03-26","cited_by_count":17,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2303.16292","title":"XAIR: A Framework of Explainable AI in Augmented Reality","created":"2023-03-28","cited_by_count":17,"area":null},{"id":"2101.11466","title":"Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Voting","created":"2021-01-27","cited_by_count":16,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2105.11521","title":"Deep neural network enabled corrective source term approach to hybrid analysis and modeling","created":"2021-05-24","cited_by_count":16,"area":null},{"id":"2106.07804","title":"Controlling Neural Networks with Rule Representations","created":"2021-06-14","cited_by_count":16,"area":null},{"id":"2206.07736","title":"Improving Diversity with Adversarially Learned Transformations for Domain Generalization","created":"2022-06-15","cited_by_count":16,"area":null},{"id":"2303.05699","title":"Feature Unlearning for Pre-trained GANs and VAEs","created":"2023-03-10","cited_by_count":16,"area":"safety"},{"id":"2304.00010","title":"Towards Reasonable Budget Allocation in Untargeted Graph Structure Attacks via Gradient Debias","created":"2023-03-29","cited_by_count":16,"area":null},{"id":"2407.09165","title":"Robust Yet Efficient Conformal Prediction Sets","created":"2024-07-12","cited_by_count":16,"area":null},{"id":"2106.15587","title":"Generalization of Reinforcement Learning with Policy-Aware Adversarial Data Augmentation","created":"2021-06-29","cited_by_count":15,"area":null},{"id":"2112.02625","title":"Explainable Deep Learning in Healthcare: A Methodological Survey from an Attribution View","created":"2021-12-05","cited_by_count":15,"area":null},{"id":"2206.11433","title":"Shilling Black-box Recommender Systems by Learning to Generate Fake User Profiles","created":"2022-06-23","cited_by_count":15,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2408.03200","title":"Adversarial Safety-Critical Scenario Generation using Naturalistic Human Driving Priors","created":"2024-08-06","cited_by_count":15,"area":"driving"},{"id":"2103.14629","title":"Hybrid analysis and modeling, eclecticism, and multifidelity computing toward digital twin revolution","created":"2021-03-26","cited_by_count":14,"area":null},{"id":"2202.10226","title":"Approximate Nearest Neighbor Search under Neural Similarity Metric for Large-Scale Recommendation","created":"2022-02-14","cited_by_count":14,"area":null},{"id":"2212.11408","title":"Adaptive and Dynamic Multi-Resolution Hashing for Pairwise Summations","created":"2022-12-21","cited_by_count":14,"area":null},{"id":"2103.15753","title":"Privacy and Trust Redefined in Federated Machine Learning","created":"2021-03-29","cited_by_count":13,"area":null},{"id":"2104.05674","title":"GPflux: A Library for Deep Gaussian Processes","created":"2021-04-12","cited_by_count":13,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2203.04234","title":"Adaptative Perturbation Patterns: Realistic Adversarial Learning for Robust Intrusion Detection","created":"2022-03-08","cited_by_count":13,"area":null},{"id":"2203.17209","title":"Adversarial Examples in Random Neural Networks with General Activations","created":"2022-03-31","cited_by_count":13,"area":null},{"id":"2212.03868","title":"Deep Learning for Brain Age Estimation: A Systematic Review","created":"2022-12-07","cited_by_count":13,"area":null},{"id":"2303.15845","title":"Conditional Generative Models are Provably Robust: Pointwise Guarantees for Bayesian Inverse Problems","created":"2023-03-28","cited_by_count":13,"area":null},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2404.01775","title":"A noisy elephant in the room: Is your out-of-distribution detector robust to label noise?","created":"2024-04-02","cited_by_count":13,"area":null},{"id":"2207.06154","title":"On the Robustness of Bayesian Neural Networks to Adversarial Attacks","created":"2022-07-13","cited_by_count":12,"area":null},{"id":"2403.20254","title":"Benchmarking the Robustness of Temporal Action Detection Models Against Temporal Corruptions","created":"2024-03-29","cited_by_count":12,"area":null},{"id":"2101.12090","title":"Adversarial Attacks on Deep Learning Based Power Allocation in a Massive MIMO Network","created":"2021-01-28","cited_by_count":11,"area":null},{"id":"2102.08431","title":"Complex Momentum for Optimization in Games","created":"2021-02-16","cited_by_count":11,"area":null},{"id":"2103.01629","title":"DeepCert: Verification of Contextually Relevant Robustness for Neural Network Image Classifiers","created":"2021-03-02","cited_by_count":11,"area":null},{"id":"2111.05468","title":"Sparse Adversarial Video Attacks with Spatial Transformations","created":"2021-11-10","cited_by_count":11,"area":null},{"id":"2112.01723","title":"Adversarial Attacks against a Satellite-borne Multispectral Cloud Detector","created":"2021-12-03","cited_by_count":11,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2104.02107","title":"Jekyll: Attacking Medical Image Diagnostics using Deep Generative Models","created":"2021-04-05","cited_by_count":10,"area":null},{"id":"2106.06410","title":"What Can Knowledge Bring to Machine Learning? -- A Survey of Low-shot Learning for Structured Data","created":"2021-06-11","cited_by_count":10,"area":null},{"id":"2107.01943","title":"When and How to Fool Explainable Models (and Humans) with Adversarial Examples","created":"2021-07-05","cited_by_count":10,"area":null},{"id":"2107.10457","title":"Ready for Emerging Threats to Recommender Systems? A Graph Convolution-based Generative Shilling Attack","created":"2021-07-22","cited_by_count":10,"area":null},{"id":"2112.14299","title":"DeepAdversaries: Examining the Robustness of Deep Learning Models for Galaxy Morphology Classification","created":"2021-12-28","cited_by_count":10,"area":null},{"id":"2201.02354","title":"GenLabel: Mixup Relabeling using Generative Models","created":"2022-01-07","cited_by_count":10,"area":null},{"id":"2202.07022","title":"Recurrent Neural Networks for Dynamical Systems: Applications to Ordinary Differential Equations, Collective Motion, and Hydrological Modeling","created":"2022-02-14","cited_by_count":10,"area":null},{"id":"2208.05514","title":"Are Gradients on Graph Structure Reliable in Gray-box Attacks?","created":"2022-08-07","cited_by_count":10,"area":null},{"id":"2301.13122","title":"Towards Adversarial Realism and Robust Learning for IoT Intrusion Detection and Classification","created":"2023-01-30","cited_by_count":10,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null}],"next_cursor":"100"}