{"total":306,"rows":[{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486,"area":"safety"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2109.13916","title":"Unsolved Problems in ML Safety","created":"2021-09-28","cited_by_count":292,"area":null},{"id":"2107.04649","title":"Accuracy on the Line: On the Strong Correlation Between Out-of-Distribution and In-Distribution Generalization","created":"2021-07-09","cited_by_count":249,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2406.12814","title":"Dissecting Adversarial Robustness of Multimodal LM Agents","created":"2024-06-18","cited_by_count":120,"area":"agents"},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108,"area":null},{"id":"2104.07167","title":"Orthogonalizing Convolutional Layers with the Cayley Transform","created":"2021-04-14","cited_by_count":105,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65,"area":null},{"id":"2110.12690","title":"A Dynamical System Perspective for Lipschitz Neural Networks","created":"2021-10-25","cited_by_count":60,"area":null},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2301.11526","title":"Direct Parameterization of Lipschitz-Bounded Deep Networks","created":"2023-01-27","cited_by_count":51,"area":null},{"id":"2207.02739","title":"Robust Counterfactual Explanations for Tree-Based Ensembles","created":"2022-07-06","cited_by_count":49,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2104.05942","title":"Recurrent Equilibrium Networks: Flexible Dynamic Models with Guaranteed Stability and Robustness","created":"2021-04-13","cited_by_count":45,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2202.02526","title":"LyaNet: A Lyapunov Framework for Training Neural ODEs","created":"2022-02-05","cited_by_count":44,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42,"area":null},{"id":"2206.12227","title":"Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspective","created":"2022-06-24","cited_by_count":42,"area":null},{"id":"2108.04140","title":"Reachability Analysis of Neural Feedback Loops","created":"2021-08-09","cited_by_count":41,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2112.06011","title":"Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting","created":"2021-12-11","cited_by_count":37,"area":null},{"id":"2106.10189","title":"Adversarial Training Helps Transfer Learning via Better Representations","created":"2021-06-18","cited_by_count":36,"area":null},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2210.06284","title":"Visual Prompting for Adversarial Robustness","created":"2022-10-12","cited_by_count":34,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2104.02466","title":"A Review of Formal Methods applied to Machine Learning","created":"2021-04-06","cited_by_count":33,"area":null},{"id":"2211.00322","title":"DensePure: Understanding Diffusion Models towards Adversarial Robustness","created":"2022-11-01","cited_by_count":33,"area":"diffusion"},{"id":"2108.12099","title":"Learning to Give Checkable Answers with Prover-Verifier Games","created":"2021-08-27","cited_by_count":32,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29,"area":null},{"id":"2302.01404","title":"Provably Bounding Neural Network Preimages","created":"2023-02-02","cited_by_count":29,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2306.12688","title":"Towards quantum enhanced adversarial robustness in machine learning","created":"2023-06-22","cited_by_count":28,"area":null},{"id":"2107.14110","title":"Enhancing Adversarial Robustness via Test-time Transformation Ensembling","created":"2021-07-29","cited_by_count":27,"area":null},{"id":"2302.04025","title":"WAT: Improve the Worst-class Robustness in Adversarial Training","created":"2023-02-08","cited_by_count":27,"area":null},{"id":"2103.15326","title":"Fooling LiDAR Perception via Adversarial Trajectory Perturbation","created":"2021-03-29","cited_by_count":25,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2401.17319","title":"Decentralized Federated Learning: A Survey on Security and Privacy","created":"2024-01-25","cited_by_count":25,"area":null},{"id":"2102.02145","title":"Adversarially Robust Learning with Unknown Perturbation Sets","created":"2021-02-03","cited_by_count":24,"area":null},{"id":"2110.05365","title":"Intriguing Properties of Input-dependent Randomized Smoothing","created":"2021-10-11","cited_by_count":24,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2105.12841","title":"DNNV: A Framework for Deep Neural Network Verification","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22,"area":null},{"id":"2206.07912","title":"Double Sampling Randomized Smoothing","created":"2022-06-16","cited_by_count":22,"area":null},{"id":"2206.09707","title":"The Role of Machine Learning in Cybersecurity","created":"2022-06-20","cited_by_count":22,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2206.12714","title":"Defending Multimodal Fusion Models against Single-Source Adversaries","created":"2022-06-25","cited_by_count":20,"area":null},{"id":"2308.14333","title":"DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing","created":"2023-08-28","cited_by_count":20,"area":"diffusion"},{"id":"2106.06685","title":"Adversarial Robustness via Fisher-Rao Regularization","created":"2021-06-12","cited_by_count":19,"area":null},{"id":"2108.04214","title":"Neural Network Repair with Reachability Analysis","created":"2021-08-09","cited_by_count":19,"area":null},{"id":"2302.04634","title":"Closed-loop Analysis of Vision-based Autonomous Systems: A Case Study","created":"2023-02-06","cited_by_count":18,"area":null},{"id":"2103.01319","title":"Adversarial training in communication constrained federated learning","created":"2021-03-01","cited_by_count":17,"area":null},{"id":"2103.08860","title":"Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patches","created":"2021-03-16","cited_by_count":17,"area":null},{"id":"2112.00659","title":"Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines","created":"2021-12-01","cited_by_count":17,"area":null},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2203.01212","title":"A Quantitative Geometric Approach to Neural-Network Smoothness","created":"2022-03-02","cited_by_count":16,"area":null},{"id":"2104.00447","title":"Towards Evaluating and Training Verifiably Robust Neural Networks","created":"2021-04-01","cited_by_count":15,"area":null},{"id":"2201.01965","title":"Efficient Global Optimization of Two-Layer ReLU Networks: Quadratic-Time Algorithms and Adversarial Training","created":"2022-01-06","cited_by_count":15,"area":null},{"id":"2202.11910","title":"Robust Probabilistic Time Series Forecasting","created":"2022-02-24","cited_by_count":15,"area":null},{"id":"2206.10057","title":"Robust Deep Reinforcement Learning through Bootstrapped Opportunistic Curriculum","created":"2022-06-21","cited_by_count":15,"area":null},{"id":"2404.09586","title":"Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing","created":"2024-04-15","cited_by_count":15,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2110.01388","title":"Neural Network Verification in Control","created":"2021-09-30","cited_by_count":14,"area":null},{"id":"2206.07311","title":"Can pruning improve certified robustness of neural networks?","created":"2022-06-15","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2504.04716","title":"On the Robustness of GUI Grounding Models Against Image Attacks","created":"2025-04-07","cited_by_count":14,"area":null},{"id":"2302.01629","title":"Beyond the Universal Law of Robustness: Sharper Laws for Random Features and Neural Tangent Kernels","created":"2023-02-03","cited_by_count":13,"area":null},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2101.06309","title":"Fundamental Tradeoffs in Distributionally Adversarial Training","created":"2021-01-15","cited_by_count":12,"area":null},{"id":"2102.06700","title":"On the Paradox of Certified Training","created":"2021-02-12","cited_by_count":12,"area":null},{"id":"2105.02942","title":"Understanding Catastrophic Overfitting in Adversarial Training","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2206.09868","title":"Understanding Robust Learning through the Lens of Representation Similarities","created":"2022-06-20","cited_by_count":12,"area":null},{"id":"2105.08619","title":"On the Robustness of Domain Constraints","created":"2021-05-18","cited_by_count":11,"area":null},{"id":"2107.13639","title":"Imbalanced Adversarial Training with Reweighting","created":"2021-07-28","cited_by_count":11,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2304.06430","title":"Certified Zeroth-order Black-Box Defense with Robust UNet Denoiser","created":"2023-04-13","cited_by_count":11,"area":null},{"id":"2305.04574","title":"TAPS: Connecting Certified and Adversarial Training","created":"2023-05-08","cited_by_count":11,"area":null},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11,"area":null},{"id":"2101.01815","title":"Efficient Reachability Analysis of Closed-Loop Systems with Neural Network Controllers","created":"2021-01-05","cited_by_count":10,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null}],"next_cursor":"100"}