{"total":221,"rows":[{"id":"1811.07871","title":"Scalable agent alignment via reward modeling: a research direction","created":"2018-11-19","cited_by_count":447,"area":"alignment"},{"id":"2309.02705","title":"Certifying LLM Safety against Adversarial Prompting","created":"2023-09-06","cited_by_count":266,"area":"safety"},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134,"area":"diffusion"},{"id":"2206.10550","title":"(Certified!!) Adversarial Robustness for Free!","created":"2022-06-21","cited_by_count":132,"area":"diffusion"},{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127,"area":null},{"id":"2303.15433","title":"Anti-DreamBooth: Protecting users from personalized text-to-image synthesis","created":"2023-03-27","cited_by_count":120,"area":"diffusion"},{"id":"2306.10125","title":"Self-Supervised Learning for Time Series Analysis: Taxonomy, Progress, and Prospects","created":"2023-06-16","cited_by_count":99,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2205.14969","title":"Guided Diffusion Model for Adversarial Purification","created":"2022-05-30","cited_by_count":92,"area":"diffusion"},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2205.01663","title":"Adversarial Training for High-Stakes Reliability","created":"2022-05-03","cited_by_count":60,"area":null},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2102.12827","title":"Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints","created":"2021-02-25","cited_by_count":50,"area":null},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2104.06718","title":"Improved Branch and Bound for Neural Network Verification via Lagrangian Decomposition","created":"2021-04-14","cited_by_count":44,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2109.07986","title":"Harnessing Perceptual Adversarial Patches for Crowd Counting","created":"2021-09-16","cited_by_count":39,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2105.10304","title":"Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks","created":"2021-05-21","cited_by_count":33,"area":null},{"id":"2201.08956","title":"The Many Faces of Adversarial Risk","created":"2022-01-22","cited_by_count":28,"area":null},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2207.08178","title":"Watermark Vaccine: Adversarial Attacks to Prevent Watermark Removal","created":"2022-07-17","cited_by_count":20,"area":null},{"id":"2210.09852","title":"Scaling Adversarial Training to Large Perturbation Bounds","created":"2022-10-18","cited_by_count":20,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2503.02574","title":"LLM-Safety Evaluations Lack Robustness","created":"2025-03-04","cited_by_count":18,"area":"alignment"},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2102.03909","title":"Meta-Learning with Neural Tangent Kernels","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2102.07559","title":"Certifiably Robust Variational Autoencoders","created":"2021-02-15","cited_by_count":14,"area":null},{"id":"2110.03135","title":"Label Noise in Adversarial Training: A Novel Perspective to Study Robust Overfitting","created":"2021-10-07","cited_by_count":14,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2107.08467","title":"GoTube: Scalable Stochastic Verification of Continuous-Depth Models","created":"2021-07-18","cited_by_count":12,"area":null},{"id":"2210.05794","title":"Designing Robust Transformers using Robust Kernel Density Estimation","created":"2022-10-11","cited_by_count":11,"area":null},{"id":"2304.06430","title":"Certified Zeroth-order Black-Box Defense with Robust UNet Denoiser","created":"2023-04-13","cited_by_count":11,"area":null},{"id":"2309.13794","title":"Projected Randomized Smoothing for Certified Adversarial Robustness","created":"2023-09-25","cited_by_count":11,"area":null},{"id":"2402.15989","title":"PIDformer: Transformer Meets Control Theory","created":"2024-02-25","cited_by_count":11,"area":null},{"id":"2108.06017","title":"AGKD-BML: Defense Against Adversarial Attack by Attention Guided Knowledge Distillation and Bi-directional Metric Learning","created":"2021-08-13","cited_by_count":10,"area":"distill"},{"id":"2203.01439","title":"Enhancing Adversarial Robustness for Deep Metric Learning","created":"2022-03-02","cited_by_count":10,"area":null},{"id":"2209.07788","title":"PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition","created":"2022-09-16","cited_by_count":10,"area":null},{"id":"2411.04376","title":"Game-Theoretic Defenses for Robust Conformal Prediction Against Adversarial Attacks in Medical Imaging","created":"2024-11-07","cited_by_count":10,"area":null},{"id":"2103.05248","title":"Practical Relative Order Attack in Deep Ranking","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2103.14824","title":"Improving Model Robustness by Adaptively Correcting Perturbation Levels with Active Queries","created":"2021-03-27","cited_by_count":9,"area":null},{"id":"2108.13952","title":"Morphence: Moving Target Defense Against Adversarial Examples","created":"2021-08-31","cited_by_count":9,"area":null},{"id":"2111.14564","title":"MedRDF: A Robust and Retrain-Less Diagnostic Framework for Medical Pretrained Models Against Adversarial Attack","created":"2021-11-29","cited_by_count":9,"area":null},{"id":"2203.04713","title":"Defending Black-box Skeleton-based Human Activity Classifiers","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2305.03980","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","created":"2023-05-06","cited_by_count":9,"area":"diffusion"},{"id":"2302.01961","title":"Asymmetric Certified Robustness via Feature-Convex Neural Networks","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2502.11910","title":"Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives","created":"2025-02-17","cited_by_count":8,"area":null},{"id":"2502.15315","title":"Tight Clusters Make Specialized Experts","created":"2025-02-21","cited_by_count":8,"area":"moe"},{"id":"2510.11709","title":"Adversarial Attacks Leverage Interference Between Features in Superposition","created":"2025-10-13","cited_by_count":8,"area":null},{"id":"2102.05110","title":"Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers","created":"2021-02-09","cited_by_count":7,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2204.07373","title":"Revisiting the Adversarial Robustness-Accuracy Tradeoff in Robot Learning","created":"2022-04-15","cited_by_count":7,"area":null},{"id":"2206.12292","title":"InfoAT: Improving Adversarial Training Using the Information Bottleneck Principle","created":"2022-06-23","cited_by_count":7,"area":null},{"id":"2207.10283","title":"One-vs-the-Rest Loss to Focus on Important Samples in Adversarial Training","created":"2022-07-21","cited_by_count":7,"area":null},{"id":"2208.05650","title":"Diverse Generative Perturbations on Attention Space for Transferable Adversarial Attacks","created":"2022-08-11","cited_by_count":7,"area":null},{"id":"2302.14267","title":"Adversarial Attack with Raindrops","created":"2023-02-28","cited_by_count":7,"area":null},{"id":"2305.12118","title":"Annealing Self-Distillation Rectification Improves Adversarial Training","created":"2023-05-20","cited_by_count":7,"area":"distill"},{"id":"2306.15164","title":"DSRM: Boost Textual Adversarial Training with Distribution Shift Risk Minimization","created":"2023-06-27","cited_by_count":7,"area":null},{"id":"2406.13762","title":"Unveiling the Hidden Structure of Self-Attention via Kernel Principal Component Analysis","created":"2024-06-19","cited_by_count":7,"area":null},{"id":"2406.13770","title":"Elliptical Attention","created":"2024-06-19","cited_by_count":7,"area":null},{"id":"2406.16342","title":"Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialness","created":"2024-06-24","cited_by_count":7,"area":null},{"id":"2102.07437","title":"Data Quality Matters For Adversarial Training: An Empirical Study","created":"2021-02-15","cited_by_count":6,"area":null},{"id":"2106.09223","title":"Evaluating the Robustness of Bayesian Neural Networks Against Different Types of Attacks","created":"2021-06-17","cited_by_count":6,"area":null},{"id":"2106.14432","title":"Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations","created":"2021-06-28","cited_by_count":6,"area":null},{"id":"2109.05820","title":"Improving the Robustness of Adversarial Attacks Using an Affine-Invariant Gradient Estimator","created":"2021-09-13","cited_by_count":6,"area":null},{"id":"2206.04569","title":"Benefits of Overparameterized Convolutional Residual Networks: Function Approximation under Smoothness Constraint","created":"2022-06-09","cited_by_count":6,"area":null},{"id":"2306.05031","title":"Generalizable Lightweight Proxy for Robust NAS against Diverse Perturbations","created":"2023-06-08","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2403.13778","title":"Certified Human Trajectory Prediction","created":"2024-03-20","cited_by_count":6,"area":null},{"id":"2104.09369","title":"Adversarial Diffusion Attacks on Graph-based Traffic Prediction Models","created":"2021-04-19","cited_by_count":5,"area":null},{"id":"2110.09759","title":"A Regularization Method to Improve Adversarial Robustness of Neural Networks for ECG Signal Classification","created":"2021-10-19","cited_by_count":5,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2209.01199","title":"Revisiting Outer Optimization in Adversarial Training","created":"2022-09-02","cited_by_count":5,"area":null},{"id":"2302.13570","title":"Physical Adversarial Attacks on Deep Neural Networks for Traffic Sign Recognition: A Feasibility Study","created":"2023-02-27","cited_by_count":5,"area":null},{"id":"2303.08289","title":"Improving Adversarial Robustness with Hypersphere Embedding and Angular-based Regularizations","created":"2023-03-15","cited_by_count":5,"area":null},{"id":"2310.16955","title":"Break it, Imitate it, Fix it: Robustness by Generating Human-Like Attacks","created":"2023-10-25","cited_by_count":5,"area":null},{"id":"2403.10499","title":"Benchmarking Zero-Shot Robustness of Multimodal Foundation Models: A Pilot Study","created":"2024-03-15","cited_by_count":5,"area":null},{"id":"2404.10790","title":"Multimodal Attack Detection for Action Recognition Models","created":"2024-04-13","cited_by_count":5,"area":null}],"next_cursor":"100"}