{"total":460,"rows":[{"id":"2110.11334","title":"Generalized Out-of-Distribution Detection: A Survey","created":"2021-10-21","cited_by_count":802,"area":null},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2309.15025","title":"Large Language Model Alignment: A Survey","created":"2023-09-26","cited_by_count":243,"area":"alignment"},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2302.06588","title":"Raising the Cost of Malicious AI-Powered Image Editing","created":"2023-02-13","cited_by_count":163,"area":"diffusion"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2101.01461","title":"PointCutMix: Regularization Strategy for Point Cloud Classification","created":"2021-01-05","cited_by_count":69,"area":null},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2105.02968","title":"This Looks Like That... Does it? Shortcomings of Latent Space Prototype Interpretability in Deep Networks","created":"2021-05-05","cited_by_count":65,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2102.09546","title":"Deep Gait Recognition: A Survey","created":"2021-02-18","cited_by_count":54,"area":null},{"id":"2101.08286","title":"Can stable and accurate neural networks be computed? -- On the barriers of deep learning and Smale's 18th problem","created":"2021-01-20","cited_by_count":53,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2106.09992","title":"Exploring Counterfactual Explanations Through the Lens of Adversarial Examples: A Theoretical and Empirical Analysis","created":"2021-06-18","cited_by_count":52,"area":null},{"id":"2207.11094","title":"Visual Speech-Aware Perceptual 3D Facial Expression Reconstruction from Videos","created":"2022-07-22","cited_by_count":50,"area":null},{"id":"2102.10496","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","created":"2021-02-21","cited_by_count":49,"area":"safety"},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2112.00639","title":"A Systematic Review of Robustness in Deep Learning for Computer Vision: Mind the gap?","created":"2021-12-01","cited_by_count":48,"area":null},{"id":"2303.02552","title":"An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry","created":"2023-03-05","cited_by_count":47,"area":null},{"id":"2108.13049","title":"Single Node Injection Attack against Graph Neural Networks","created":"2021-08-30","cited_by_count":45,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2210.05927","title":"Efficient Adversarial Training without Attacking: Worst-Case-Aware Robust Reinforcement Learning","created":"2022-10-12","cited_by_count":43,"area":null},{"id":"2205.14691","title":"On the Robustness of Safe Reinforcement Learning under Observational Perturbations","created":"2022-05-29","cited_by_count":38,"area":null},{"id":"2206.07438","title":"Multi-Objective Hyperparameter Optimization in Machine Learning -- An Overview","created":"2022-06-15","cited_by_count":37,"area":null},{"id":"2301.06937","title":"Improving Human-AI Collaboration With Descriptions of AI Behavior","created":"2023-01-06","cited_by_count":36,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2407.15861","title":"Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey","created":"2024-07-10","cited_by_count":35,"area":"diffusion"},{"id":"2312.04730","title":"DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions","created":"2023-12-07","cited_by_count":33,"area":null},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2308.07009","title":"ACTIVE: Towards Highly Transferable 3D Physical Camouflage for Universal and Robust Vehicle Evasion","created":"2023-08-14","cited_by_count":31,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2210.00965","title":"Green Learning: Introduction, Examples and Outlook","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2207.01398","title":"Large-scale Robustness Analysis of Video Action Recognition Models","created":"2022-07-04","cited_by_count":29,"area":null},{"id":"2306.03438","title":"Large Language Models of Code Fail at Completing Code with Potential Bugs","created":"2023-06-06","cited_by_count":29,"area":null},{"id":"2106.10649","title":"CAMERAS: Enhanced Resolution And Sanity preserving Class Activation Mapping for image saliency","created":"2021-06-20","cited_by_count":28,"area":null},{"id":"2205.13618","title":"Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors","created":"2022-05-26","cited_by_count":28,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2104.12146","title":"3D Adversarial Attacks Beyond Point Cloud","created":"2021-04-25","cited_by_count":26,"area":null},{"id":"2108.00146","title":"T$_k$ML-AP: Adversarial Attacks to Top-$k$ Multi-Label Learning","created":"2021-07-31","cited_by_count":26,"area":null},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2206.03393","title":"Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition","created":"2022-06-07","cited_by_count":23,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2312.01886","title":"InstructTA: Instruction-Tuned Targeted Attack for Large Vision-Language Models","created":"2023-12-04","cited_by_count":21,"area":"mllm"},{"id":"2403.01874","title":"A Survey on Evaluation of Out-of-Distribution Generalization","created":"2024-03-04","cited_by_count":21,"area":null},{"id":"2105.04404","title":"Topological Uncertainty: Monitoring trained neural networks through persistence of activation graphs","created":"2021-05-07","cited_by_count":20,"area":null},{"id":"2203.15331","title":"CNN Filter DB: An Empirical Investigation of Trained Convolutional Filters","created":"2022-03-29","cited_by_count":20,"area":null},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2203.09566","title":"Leveraging Adversarial Examples to Quantify Membership Information Leakage","created":"2022-03-17","cited_by_count":19,"area":null},{"id":"2407.10179","title":"CLIP-Guided Generative Networks for Transferable Targeted Adversarial Attacks","created":"2024-07-14","cited_by_count":19,"area":null},{"id":"2101.10808","title":"Fast Facial Landmark Detection and Applications: A Survey","created":"2021-01-12","cited_by_count":18,"area":null},{"id":"2103.05292","title":"Deep Learning for Android Malware Defenses: a Systematic Literature Review","created":"2021-03-09","cited_by_count":18,"area":null},{"id":"2112.12310","title":"Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art","created":"2021-12-23","cited_by_count":18,"area":null},{"id":"2203.14155","title":"How Do We Fail? Stress Testing Perception in Autonomous Vehicles","created":"2022-03-26","cited_by_count":18,"area":"driving"},{"id":"2307.02599","title":"Evade ChatGPT Detectors via A Single Space","created":"2023-07-05","cited_by_count":18,"area":null},{"id":"2405.14169","title":"Towards Transferable Attacks Against Vision-LLMs in Autonomous Driving with Typography","created":"2024-05-23","cited_by_count":18,"area":"lr"},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2109.06467","title":"Dodging Attack Using Carefully Crafted Natural Makeup","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2309.10058","title":"Dual Student Networks for Data-Free Model Stealing","created":"2023-09-18","cited_by_count":17,"area":null},{"id":"2505.21277","title":"Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space","created":"2025-05-27","cited_by_count":17,"area":"safety"},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2105.11521","title":"Deep neural network enabled corrective source term approach to hybrid analysis and modeling","created":"2021-05-24","cited_by_count":16,"area":null},{"id":"2109.06098","title":"The mathematics of adversarial attacks in AI -- Why deep learning is unstable despite the existence of stable neural networks","created":"2021-09-13","cited_by_count":16,"area":null},{"id":"2112.07605","title":"The King is Naked: on the Notion of Robustness for Natural Language Processing","created":"2021-12-13","cited_by_count":16,"area":null},{"id":"2209.15246","title":"Your Out-of-Distribution Detection Method is Not Robust!","created":"2022-09-30","cited_by_count":16,"area":null},{"id":"2302.02829","title":"Collective Robustness Certificates: Exploiting Interdependence in Graph Neural Networks","created":"2023-02-06","cited_by_count":16,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2502.01027","title":"Adversarial Robustness in Two-Stage Learning-to-Defer: Algorithms and Guarantees","created":"2025-02-03","cited_by_count":16,"area":null},{"id":"2502.13141","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","created":"2025-02-18","cited_by_count":16,"area":"safety"},{"id":"2106.15587","title":"Generalization of Reinforcement Learning with Policy-Aware Adversarial Data Augmentation","created":"2021-06-29","cited_by_count":15,"area":null},{"id":"2111.06978","title":"RLOps: Development Life-cycle of Reinforcement Learning Aided Open RAN","created":"2021-11-12","cited_by_count":15,"area":null},{"id":"2112.02625","title":"Explainable Deep Learning in Healthcare: A Methodological Survey from an Attribution View","created":"2021-12-05","cited_by_count":15,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2308.08925","title":"A White-Box False Positive Adversarial Attack Method on Contrastive Loss Based Offline Handwritten Signature Verification Models","created":"2023-08-17","cited_by_count":15,"area":null},{"id":"2311.12267","title":"Learning Causal Representations from General Environments: Identifiability and Intrinsic Ambiguity","created":"2023-11-21","cited_by_count":15,"area":null},{"id":"2103.14629","title":"Hybrid analysis and modeling, eclecticism, and multifidelity computing toward digital twin revolution","created":"2021-03-26","cited_by_count":14,"area":null},{"id":"2110.02929","title":"Adversarial Attacks on Spiking Convolutional Neural Networks for Event-based Vision","created":"2021-10-06","cited_by_count":14,"area":null},{"id":"2209.04779","title":"Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense","created":"2022-09-11","cited_by_count":14,"area":null},{"id":"2306.01710","title":"A Data-Driven Measure of Relative Uncertainty for Misclassification Detection","created":"2023-06-02","cited_by_count":14,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2104.03000","title":"Universal Adversarial Training with Class-Wise Perturbations","created":"2021-04-07","cited_by_count":13,"area":null},{"id":"2109.07723","title":"Targeted Attack on Deep RL-based Autonomous Driving with Learned Visual Patterns","created":"2021-09-16","cited_by_count":13,"area":"driving"},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"}],"next_cursor":"100"}