{"total":257,"rows":[{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324,"area":null},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193,"area":null},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2204.04677","title":"FedCorr: Multi-Stage Federated Learning for Label Noise Correction","created":"2022-04-10","cited_by_count":61,"area":null},{"id":"2302.09491","title":"X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detection","created":"2023-02-19","cited_by_count":59,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2402.18048","title":"Characterizing Truthfulness in Large Language Model Generations with Local Intrinsic Dimension","created":"2024-02-28","cited_by_count":45,"area":null},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2201.02331","title":"iDECODe: In-distribution Equivariance for Conformal Out-of-distribution Detection","created":"2022-01-07","cited_by_count":27,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2209.14475","title":"Intrinsic Dimensionality Estimation within Tight Localities: A Theoretical and Experimental Analysis","created":"2022-09-29","cited_by_count":22,"area":null},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21,"area":null},{"id":"2305.16035","title":"Detecting Adversarial Data by Probing Multiple Perturbations Using Expected Perturbation Score","created":"2023-05-25","cited_by_count":20,"area":null},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18,"area":null},{"id":"2211.14966","title":"Adversarial Rademacher Complexity of Deep Neural Networks","created":"2022-11-27","cited_by_count":18,"area":null},{"id":"2111.03536","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-11-05","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2208.02851","title":"Self-Ensembling Vision Transformer (SEViT) for Robust Medical Image Classification","created":"2022-08-04","cited_by_count":16,"area":null},{"id":"2312.05538","title":"CSL: Class-Agnostic Structure-Constrained Learning for Segmentation Including the Unseen","created":"2023-12-09","cited_by_count":15,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2206.08255","title":"Gradient-Based Adversarial and Out-of-Distribution Detection","created":"2022-06-16","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2207.12203","title":"Improving Adversarial Robustness via Mutual Information Estimation","created":"2022-07-25","cited_by_count":13,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2108.09891","title":"Multi-Expert Adversarial Attack Detection in Person Re-identification Using Context Inconsistency","created":"2021-08-23","cited_by_count":12,"area":null},{"id":"2204.08624","title":"Topology and geometry of data manifold in deep learning","created":"2022-04-19","cited_by_count":12,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2112.12084","title":"Input-Specific Robustness Certification for Randomized Smoothing","created":"2021-12-21","cited_by_count":11,"area":null},{"id":"2210.01742","title":"CADet: Fully Self-Supervised Out-Of-Distribution Detection With Contrastive Learning","created":"2022-10-04","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2305.19730","title":"Data Representations' Study of Latent Image Manifolds","created":"2023-05-31","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2401.10474","title":"LDReg: Local Dimensionality Regularized Self-Supervised Learning","created":"2024-01-19","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2107.04882","title":"Out of Distribution Detection and Adversarial Attacks on Deep Neural Networks for Robust Medical Image Analysis","created":"2021-07-10","cited_by_count":10,"area":null},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10,"area":null},{"id":"2207.05641","title":"Backdoor Attacks on Crowd Counting","created":"2022-07-12","cited_by_count":10,"area":null},{"id":"2511.02101","title":"Measuring the Intrinsic Dimension of Earth Representations","created":"2025-11-03","cited_by_count":10,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2207.04129","title":"How many perturbations break this model? Evaluating robustness beyond adversarial accuracy","created":"2022-07-08","cited_by_count":9,"area":null},{"id":"2304.02834","title":"Probing the Purview of Neural Networks via Gradient Analysis","created":"2023-04-06","cited_by_count":9,"area":null},{"id":"2511.20315","title":"Geometry of Decision Making in Language Models","created":"2025-11-25","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2109.09901","title":"Modeling Adversarial Noise for Adversarial Training","created":"2021-09-21","cited_by_count":8,"area":null},{"id":"2110.15764","title":"{\\epsilon}-weakened Robustness of Deep Neural Networks","created":"2021-10-29","cited_by_count":8,"area":null},{"id":"2202.01832","title":"Adversarially Robust Models may not Transfer Better: Sufficient Conditions for Domain Transferability from the View of Regularization","created":"2022-02-03","cited_by_count":8,"area":null},{"id":"2204.10192","title":"Residue-Based Natural Language Adversarial Attack Detection","created":"2022-04-17","cited_by_count":8,"area":null},{"id":"2105.03689","title":"Self-Supervised Adversarial Example Detection by Disentangled Representation","created":"2021-05-08","cited_by_count":7,"area":null},{"id":"2105.11593","title":"OFEI: A Semi-black-box Android Adversarial Sample Attack Framework Against DLaaS","created":"2021-05-25","cited_by_count":7,"area":null},{"id":"2106.00455","title":"Instance Correction for Learning with Open-set Noisy Labels","created":"2021-06-01","cited_by_count":7,"area":null},{"id":"2106.11486","title":"Unsupervised Embedding Adaptation via Early-Stage Feature Reconstruction for Few-Shot Classification","created":"2021-06-22","cited_by_count":7,"area":null},{"id":"2210.17376","title":"SoK: Modeling Explainability in Security Analytics for Interpretability, Trustworthiness, and Usability","created":"2022-10-31","cited_by_count":7,"area":null},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2401.02718","title":"Calibration Attacks: A Comprehensive Study of Adversarial Attacks on Model Confidence","created":"2024-01-05","cited_by_count":7,"area":null},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6,"area":null},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2210.06704","title":"COLLIDER: A Robust Training Framework for Backdoor Data","created":"2022-10-13","cited_by_count":6,"area":null},{"id":"2305.03173","title":"New Adversarial Image Detection Based on Sentiment Analysis","created":"2023-05-03","cited_by_count":6,"area":null},{"id":"2312.03245","title":"A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System","created":"2023-12-06","cited_by_count":6,"area":null},{"id":"2404.05219","title":"Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Survey","created":"2024-04-08","cited_by_count":6,"area":null},{"id":"2406.00685","title":"Improving Accuracy-robustness Trade-off via Pixel Reweighted Adversarial Training","created":"2024-06-02","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2102.11586","title":"Adversarial Examples Detection beyond Image Space","created":"2021-02-23","cited_by_count":5,"area":null},{"id":"2205.00953","title":"BERTops: Studying BERT Representations under a Topological Lens","created":"2022-05-02","cited_by_count":5,"area":null},{"id":"2209.00005","title":"Be Your Own Neighborhood: Detecting Adversarial Example by the Neighborhood Relations Built on Self-Supervised Learning","created":"2022-08-31","cited_by_count":5,"area":null},{"id":"2210.05546","title":"What does a deep neural network confidently perceive? The effective dimension of high certainty class manifolds and their low confidence boundaries","created":"2022-10-11","cited_by_count":5,"area":null},{"id":"2212.06776","title":"Unfolding Local Growth Rate Estimates for (Almost) Perfect Adversarial Detection","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2402.12187","title":"Adversarial Feature Alignment: Balancing Robustness and Accuracy in Deep Learning via Adversarial Training","created":"2024-02-19","cited_by_count":5,"area":null},{"id":"2103.08086","title":"Multi-Discriminator Sobolev Defense-GAN Against Adversarial Attacks for End-to-End Speech Systems","created":"2021-03-15","cited_by_count":4,"area":null},{"id":"2109.08191","title":"Simple Post-Training Robustness Using Test Time Augmentations and Random Forest","created":"2021-09-16","cited_by_count":4,"area":null},{"id":"2109.12456","title":"Auditing AI models for Verified Deployment under Semantic Specifications","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2110.03092","title":"A Uniform Framework for Anomaly Detection in Deep Neural Networks","created":"2021-10-06","cited_by_count":4,"area":null},{"id":"2112.14232","title":"Constrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks","created":"2021-12-28","cited_by_count":4,"area":null},{"id":"2210.00301","title":"Learning Globally Smooth Functions on Manifolds","created":"2022-10-01","cited_by_count":4,"area":null},{"id":"2210.05118","title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization","created":"2022-10-11","cited_by_count":4,"area":null},{"id":"2210.05301","title":"Intrinsic Dimension for Large-Scale Geometric Learning","created":"2022-10-11","cited_by_count":4,"area":null},{"id":"2212.00727","title":"Adversarial Artifact Detection in EEG-Based Brain-Computer Interfaces","created":"2022-11-28","cited_by_count":4,"area":null},{"id":"2304.11359","title":"Detecting Adversarial Faces Using Only Real Face Self-Perturbations","created":"2023-04-22","cited_by_count":4,"area":null},{"id":"2310.09795","title":"AFLOW: Developing Adversarial Examples under Extremely Noise-limited Settings","created":"2023-10-15","cited_by_count":4,"area":null},{"id":"2405.16918","title":"The Uncanny Valley: Exploring Adversarial Robustness from a Flatness Perspective","created":"2024-05-27","cited_by_count":4,"area":null}],"next_cursor":"100"}