{"total":175,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108,"area":null},{"id":"2104.07167","title":"Orthogonalizing Convolutional Layers with the Cayley Transform","created":"2021-04-14","cited_by_count":105,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2110.13771","title":"AugMax: Adversarial Composition of Random Augmentations for Robust Training","created":"2021-10-26","cited_by_count":90,"area":null},{"id":"2205.07424","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","created":"2022-05-16","cited_by_count":89,"area":null},{"id":"2205.00403","title":"A Simple Approach to Improve Single-Model Deep Uncertainty via Distance-Awareness","created":"2022-05-01","cited_by_count":49,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2312.14820","title":"How Smooth Is Attention?","created":"2023-12-22","cited_by_count":44,"area":null},{"id":"2111.06236","title":"Discovering and Explaining the Representation Bottleneck of DNNs","created":"2021-11-11","cited_by_count":42,"area":null},{"id":"2109.12909","title":"Compressive Visual Representations","created":"2021-09-27","cited_by_count":41,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2104.05097","title":"Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networks","created":"2021-04-11","cited_by_count":30,"area":null},{"id":"2302.10886","title":"Some Fundamental Aspects about Lipschitz Continuity of Neural Networks","created":"2023-02-21","cited_by_count":26,"area":null},{"id":"2302.13091","title":"Explaining Generalization Power of a DNN Using Interactive Concepts","created":"2023-02-25","cited_by_count":25,"area":null},{"id":"2208.14878","title":"Formalising the Robustness of Counterfactual Explanations for Neural Networks","created":"2022-08-31","cited_by_count":24,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2311.11871","title":"Training robust and generalizable quantum models","created":"2023-11-20","cited_by_count":21,"area":null},{"id":"2206.06553","title":"Safe Output Feedback Motion Planning from Images via Learned Perception Modules and Contraction Theory","created":"2022-06-14","cited_by_count":19,"area":null},{"id":"2411.14708","title":"Understanding LLM Embeddings for Regression","created":"2024-11-22","cited_by_count":19,"area":null},{"id":"2209.07263","title":"Robustness in deep learning: The good (width), the bad (depth), and the ugly (initialization)","created":"2022-09-15","cited_by_count":18,"area":null},{"id":"2111.03536","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-11-05","cited_by_count":17,"area":null},{"id":"2102.03716","title":"SPADE: A Spectral Method for Black-Box Adversarial Robustness Evaluation","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2103.01895","title":"Adversarial Examples can be Effective Data Augmentation for Unsupervised Machine Learning","created":"2021-03-02","cited_by_count":16,"area":null},{"id":"2105.05495","title":"LipBaB: Computing exact Lipschitz constant of ReLU networks","created":"2021-05-12","cited_by_count":16,"area":null},{"id":"2112.00646","title":"Reliability Assessment and Safety Arguments for Machine Learning Components in System Assurance","created":"2021-11-30","cited_by_count":16,"area":null},{"id":"2306.09844","title":"Wasserstein distributional robustness of neural networks","created":"2023-06-16","cited_by_count":16,"area":null},{"id":"2206.11225","title":"RetrievalGuard: Provably Robust 1-Nearest Neighbor Image Retrieval","created":"2022-06-17","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2106.02078","title":"Improving Neural Network Robustness via Persistency of Excitation","created":"2021-06-03","cited_by_count":14,"area":null},{"id":"2305.13599","title":"Decoupled Rationalization with Asymmetric Learning Rates: A Flexible Lipschitz Restraint","created":"2023-05-23","cited_by_count":14,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2104.08695","title":"Model Error Propagation via Learned Contraction Metrics for Safe Feedback Motion Planning of Unknown Systems","created":"2021-04-18","cited_by_count":13,"area":null},{"id":"2108.06885","title":"Neural Architecture Dilation for Adversarial Robustness","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2108.06895","title":"Interpreting Attributions and Interactions of Adversarial Attacks","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2203.04234","title":"Adaptative Perturbation Patterns: Realistic Adversarial Learning for Robust Intrusion Detection","created":"2022-03-08","cited_by_count":13,"area":null},{"id":"2102.01886","title":"Learning Diverse-Structured Networks for Adversarial Robustness","created":"2021-02-03","cited_by_count":12,"area":null},{"id":"2304.01218","title":"POLAR-Express: Efficient and Precise Formal Reachability Analysis of Neural-Network Controlled Systems","created":"2023-03-31","cited_by_count":12,"area":null},{"id":"2411.09973","title":"Establishing and Evaluating Trustworthy AI: Overview and Research Challenges","created":"2024-11-15","cited_by_count":12,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2207.01168","title":"How Robust is Your Fairness? Evaluating and Sustaining Fairness under Unseen Distribution Shifts","created":"2022-07-04","cited_by_count":11,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2101.12100","title":"Increasing the Confidence of Deep Neural Networks by Coverage Analysis","created":"2021-01-28","cited_by_count":9,"area":null},{"id":"2102.09677","title":"Training a Resilient Q-Network against Observational Interference","created":"2021-02-18","cited_by_count":9,"area":null},{"id":"2108.02707","title":"Fairness Properties of Face Recognition and Obfuscation Systems","created":"2021-08-05","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2308.08344","title":"Graph Out-of-Distribution Generalization with Controllable Data Augmentation","created":"2023-08-16","cited_by_count":9,"area":null},{"id":"2404.17947","title":"Bounding the Expected Robustness of Graph Neural Networks Subject to Node Feature Attacks","created":"2024-04-27","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2109.06294","title":"On the regularized risk of distributionally robust learning over deep neural networks","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2110.02628","title":"Characterizing Learning Dynamics of Deep Neural Networks via Complex Networks","created":"2021-10-06","cited_by_count":8,"area":null},{"id":"2110.15764","title":"{\\epsilon}-weakened Robustness of Deep Neural Networks","created":"2021-10-29","cited_by_count":8,"area":null},{"id":"2205.08589","title":"Hierarchical Distribution-Aware Testing of Deep Learning","created":"2022-05-17","cited_by_count":8,"area":null},{"id":"2304.03674","title":"Machine Learning with Requirements: a Manifesto","created":"2023-04-07","cited_by_count":8,"area":null},{"id":"2510.16171","title":"Bridging Symmetry and Robustness: On the Role of Equivariance in Enhancing Adversarial Robustness","created":"2025-10-17","cited_by_count":8,"area":null},{"id":"2103.13598","title":"Recent Advances in Large Margin Learning","created":"2021-03-25","cited_by_count":7,"area":null},{"id":"2107.02732","title":"Provable Lipschitz Certification for Generative Models","created":"2021-07-06","cited_by_count":7,"area":null},{"id":"2111.03505","title":"Visualizing the Emergence of Intermediate Visual Patterns in DNNs","created":"2021-11-05","cited_by_count":7,"area":null},{"id":"2210.00973","title":"NCVX: A General-Purpose Optimization Solver for Constrained Machine and Deep Learning","created":"2022-10-03","cited_by_count":7,"area":null},{"id":"2312.04902","title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","created":"2023-12-08","cited_by_count":7,"area":null},{"id":"2402.16017","title":"Spectrum Extraction and Clipping for Implicitly Linear Layers","created":"2024-02-25","cited_by_count":7,"area":null},{"id":"2404.13736","title":"Interval Abstractions for Robust Counterfactual Explanations","created":"2024-04-21","cited_by_count":7,"area":null},{"id":"2405.11547","title":"Certified Robust Accuracy of Neural Networks Are Bounded due to Bayes Errors","created":"2024-05-19","cited_by_count":7,"area":null},{"id":"2506.07109","title":"Towards Universal Offline Black-Box Optimization via Learning Language Model Embeddings","created":"2025-06-08","cited_by_count":7,"area":null},{"id":"2102.07437","title":"Data Quality Matters For Adversarial Training: An Empirical Study","created":"2021-02-15","cited_by_count":6,"area":null},{"id":"2206.04569","title":"Benefits of Overparameterized Convolutional Residual Networks: Function Approximation under Smoothness Constraint","created":"2022-06-09","cited_by_count":6,"area":null},{"id":"2302.09844","title":"FederatedTrust: A Solution for Trustworthy Federated Learning","created":"2023-02-20","cited_by_count":6,"area":null},{"id":"2303.13401","title":"Optimization and Optimizers for Adversarial Robustness","created":"2023-03-23","cited_by_count":6,"area":null},{"id":"2307.11784","title":"What, Indeed, is an Achievable Provable Guarantee for Learning-Enabled Safety Critical Systems","created":"2023-07-20","cited_by_count":6,"area":null},{"id":"2311.15782","title":"Relationship between Model Compression and Adversarial Robustness: A Review of Current Evidence","created":"2023-11-27","cited_by_count":6,"area":null},{"id":"2403.07956","title":"DeepCDCL: An CDCL-based Neural Network Verification Framework","created":"2024-03-12","cited_by_count":6,"area":null},{"id":"2409.12849","title":"A Margin-Maximizing Fine-Grained Ensemble Method","created":"2024-09-19","cited_by_count":6,"area":null},{"id":"2102.09042","title":"Modeling Extremes with d-max-decreasing Neural Networks","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2303.14961","title":"Diffusion Denoised Smoothing for Certified and Adversarial Robust Out-Of-Distribution Detection","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2304.02693","title":"A Certified Radius-Guided Attack Framework to Image Segmentation Models","created":"2023-04-05","cited_by_count":5,"area":null},{"id":"2401.09191","title":"An Optimal Transport Approach for Computing Adversarial Training Lower Bounds in Multiclass Classification","created":"2024-01-17","cited_by_count":5,"area":null},{"id":"2402.02969","title":"Towards Understanding the Word Sensitivity of Attention Layers: A Study via Random Features","created":"2024-02-05","cited_by_count":5,"area":null},{"id":"2509.22849","title":"Parameterized Hardness of Zonotope Containment and Neural Network Verification","created":"2025-09-26","cited_by_count":5,"area":null},{"id":"2112.00980","title":"Trap of Feature Diversity in the Learning of MLPs","created":"2021-12-02","cited_by_count":4,"area":null},{"id":"2205.07266","title":"Discovering the Representation Bottleneck of Graph Neural Networks","created":"2022-05-15","cited_by_count":4,"area":null},{"id":"2209.04293","title":"Robust-by-Design Classification via Unitary-Gradient Neural Networks","created":"2022-09-09","cited_by_count":4,"area":null},{"id":"2211.17244","title":"Tight Certification of Adversarially Trained Neural Networks via Nonconvex Low-Rank Semidefinite Relaxations","created":"2022-11-30","cited_by_count":4,"area":null},{"id":"2305.05400","title":"Investigating the Corruption Robustness of Image Classifiers with Random Lp-norm Corruptions","created":"2023-05-09","cited_by_count":4,"area":null},{"id":"2307.09375","title":"CertPri: Certifiable Prioritization for Deep Neural Networks via Movement Cost in Feature Space","created":"2023-07-18","cited_by_count":4,"area":null},{"id":"2310.14211","title":"LUNA: A Model-Based Universal Analysis Framework for Large Language Models","created":"2023-10-22","cited_by_count":4,"area":null},{"id":"2402.11168","title":"Trust Regions for Explanations via Black-Box Probabilistic Certification","created":"2024-02-17","cited_by_count":4,"area":null},{"id":"2409.08712","title":"Layerwise Change of Knowledge in Neural Networks","created":"2024-09-13","cited_by_count":4,"area":null},{"id":"2105.00996","title":"Robust Learning of Recurrent Neural Networks in Presence of Exogenous Noise","created":"2021-05-03","cited_by_count":3,"area":null},{"id":"2111.05063","title":"Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search","created":"2021-11-09","cited_by_count":3,"area":null},{"id":"2206.00513","title":"The robust way to stack and bag: the local Lipschitz way","created":"2022-06-01","cited_by_count":3,"area":null},{"id":"2404.08285","title":"A Survey of Neural Network Robustness Assessment in Image Recognition","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2406.04476","title":"Provable Bounds on the Hessian of Neural Networks: Derivative-Preserving Reachability Analysis","created":"2024-06-06","cited_by_count":3,"area":null},{"id":"2411.01644","title":"Achieving Domain-Independent Certified Robustness via Knowledge Continuity","created":"2024-11-03","cited_by_count":3,"area":null},{"id":"2506.05586","title":"CoFrNets: Interpretable Neural Architecture Inspired by Continued Fractions","created":"2025-06-05","cited_by_count":3,"area":null},{"id":"2601.00968","title":"Explainability-Guided Defense: Attribution-Aware Model Refinement Against Adversarial Data Attacks","created":"2026-01-02","cited_by_count":3,"area":null},{"id":"2102.11935","title":"Non-Singular Adversarial Robustness of Neural Networks","created":"2021-02-23","cited_by_count":2,"area":null}],"next_cursor":"100"}