{"total":75,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2109.06098","title":"The mathematics of adversarial attacks in AI -- Why deep learning is unstable despite the existence of stable neural networks","created":"2021-09-13","cited_by_count":16,"area":null},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15,"area":null},{"id":"2203.17209","title":"Adversarial Examples in Random Neural Networks with General Activations","created":"2022-03-31","cited_by_count":13,"area":null},{"id":"2103.14332","title":"Building Reliable Explanations of Unreliable Neural Networks: Locally Smoothing Perspective of Model Interpretation","created":"2021-03-26","cited_by_count":12,"area":null},{"id":"2207.06154","title":"On the Robustness of Bayesian Neural Networks to Adversarial Attacks","created":"2022-07-13","cited_by_count":12,"area":null},{"id":"2112.15250","title":"Benign Overfitting in Adversarially Robust Linear Classification","created":"2021-12-31","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2109.06294","title":"On the regularized risk of distributionally robust learning over deep neural networks","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2411.16782","title":"Scaling Laws for Black box Adversarial Attacks","created":"2024-11-25","cited_by_count":8,"area":null},{"id":"2202.12154","title":"Towards Effective and Robust Neural Trojan Defenses via Input Filtering","created":"2022-02-24","cited_by_count":7,"area":null},{"id":"2406.10161","title":"On the Computability of Robust PAC Learning","created":"2024-06-14","cited_by_count":6,"area":null},{"id":"2102.08868","title":"Bridging the Gap Between Adversarial Robustness and Optimization Bias","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2203.00922","title":"Adversarial attacks on neural networks through canonical Riemannian foliations","created":"2022-03-02","cited_by_count":5,"area":null},{"id":"2405.15942","title":"Can Implicit Bias Imply Adversarial Robustness?","created":"2024-05-24","cited_by_count":5,"area":null},{"id":"2406.04981","title":"The Price of Implicit Bias in Adversarially Robust Generalization","created":"2024-06-07","cited_by_count":5,"area":null},{"id":"2408.06079","title":"Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment","created":"2024-08-12","cited_by_count":5,"area":null},{"id":"2502.19921","title":"Shifting the Paradigm: A Diffeomorphism Between Time Series Data Manifolds for Achieving Shift-Invariancy in Deep Learning","created":"2025-02-27","cited_by_count":5,"area":null},{"id":"2103.12913","title":"Improved Estimation of Concentration Under $\\ell_p$-Norm Distance Metrics Using Half Spaces","created":"2021-03-24","cited_by_count":4,"area":null},{"id":"2111.08591","title":"Robustness of Bayesian Neural Networks to White-Box Adversarial Attacks","created":"2021-11-16","cited_by_count":4,"area":null},{"id":"2203.13277","title":"A Manifold View of Adversarial Risk","created":"2022-03-24","cited_by_count":4,"area":null},{"id":"2203.13779","title":"Origins of Low-dimensional Adversarial Perturbations","created":"2022-03-25","cited_by_count":4,"area":null},{"id":"2205.06127","title":"Sample Complexity Bounds for Robustly Learning Decision Lists against Evasion Attacks","created":"2022-05-12","cited_by_count":4,"area":null},{"id":"2305.05400","title":"Investigating the Corruption Robustness of Image Classifiers with Random Lp-norm Corruptions","created":"2023-05-09","cited_by_count":4,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2107.03250","title":"Understanding Intrinsic Robustness Using Label Uncertainty","created":"2021-07-07","cited_by_count":3,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2110.10915","title":"On some theoretical limitations of Generative Adversarial Networks","created":"2021-10-21","cited_by_count":2,"area":null},{"id":"2202.02626","title":"Layer-wise Regularized Adversarial Training using Layers Sustainability Analysis (LSA) framework","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2204.13232","title":"Adversarial Fine-tune with Dynamically Regulated Adversary","created":"2022-04-28","cited_by_count":2,"area":null},{"id":"2205.02604","title":"Holistic Approach to Measure Sample-level Adversarial Vulnerability and its Utility in Building Trustworthy Systems","created":"2022-05-05","cited_by_count":2,"area":null},{"id":"2404.13631","title":"Fermi-Bose Machine achieves both generalization and adversarial robustness","created":"2024-04-21","cited_by_count":2,"area":null},{"id":"2502.11672","title":"Exact Upper and Lower Bounds for the Output Distribution of Neural Networks with Random Inputs","created":"2025-02-17","cited_by_count":2,"area":null},{"id":"2506.08188","title":"GradEscape: A Gradient-Based Evader Against AI-Generated Text Detectors","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2109.13215","title":"Classification and Adversarial examples in an Overparameterized Linear Model: A Signal Processing Perspective","created":"2021-09-27","cited_by_count":1,"area":null},{"id":"2112.04033","title":"Image classifiers can not be made robust to small perturbations","created":"2021-12-07","cited_by_count":1,"area":null},{"id":"2206.04316","title":"Adversarial Noises Are Linearly Separable for (Nearly) Random Neural Networks","created":"2022-06-09","cited_by_count":1,"area":null},{"id":"2207.03895","title":"Defense Against Multi-target Trojan Attacks","created":"2022-07-08","cited_by_count":1,"area":null},{"id":"2210.06089","title":"When are Local Queries Useful for Robust Learning?","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2302.03750","title":"Linking convolutional kernel size to generalization bias in face analysis CNNs","created":"2023-02-07","cited_by_count":1,"area":null},{"id":"2308.03363","title":"A reading survey on adversarial machine learning: Adversarial attacks and their understanding","created":"2023-08-07","cited_by_count":1,"area":null},{"id":"2402.02154","title":"Evaluating the Robustness of Off-Road Autonomous Driving Segmentation against Adversarial Attacks: A Dataset-Centric analysis","created":"2024-02-03","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2407.02268","title":"Footprints of Data in a Classifier: Understanding the Privacy Risks and Solution Strategies","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2103.04565","title":"Improving Transformation-based Defenses against Adversarial Examples with First-order Perturbations","created":"2021-03-08","cited_by_count":0,"area":null},{"id":"2108.04409","title":"On Procedural Adversarial Noise Attack And Defense","created":"2021-08-10","cited_by_count":0,"area":null},{"id":"2203.07027","title":"Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification","created":"2022-03-11","cited_by_count":0,"area":null},{"id":"2204.00103","title":"Scalable Whitebox Attacks on Tree-based Models","created":"2022-03-31","cited_by_count":0,"area":null},{"id":"2204.11985","title":"When adversarial examples are excusable","created":"2022-04-25","cited_by_count":0,"area":null},{"id":"2206.13083","title":"Adversarial Example Detection in Deployed Tree Ensembles","created":"2022-06-27","cited_by_count":0,"area":null},{"id":"2305.08439","title":"Exploiting Frequency Spectrum of Adversarial Images for General Robustness","created":"2023-05-15","cited_by_count":0,"area":null},{"id":"2311.08265","title":"On The Relationship Between Universal Adversarial Attacks And Sparse Representations","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2403.01896","title":"Robustness bounds on the successful adversarial examples in probabilistic models: Implications from Gaussian processes","created":"2024-03-04","cited_by_count":0,"area":null},{"id":"2410.13193","title":"Golyadkin's Torment: Doppelg\\\"angers and Adversarial Vulnerability","created":"2024-10-17","cited_by_count":0,"area":null},{"id":"2411.06666","title":"Adversarial Detection with a Dynamically Stable System","created":"2024-11-11","cited_by_count":0,"area":null},{"id":"2411.06863","title":"Computable Model-Independent Bounds for Adversarial Quantum Machine Learning","created":"2024-11-11","cited_by_count":0,"area":null},{"id":"2412.05943","title":"Adversarial Transferability in Deep Denoising Models: Theoretical Insights and Robustness Enhancement via Out-of-Distribution Typical Set Sampling","created":"2024-12-08","cited_by_count":0,"area":null},{"id":"2506.12613","title":"Existence of Adversarial Examples for Random Convolutional Networks via Isoperimetric Inequalities on $\\mathbb{so}(d)$","created":"2025-06-14","cited_by_count":0,"area":null},{"id":"2509.07673","title":"Nearest Neighbor Projection Removal Adversarial Training","created":"2025-09-09","cited_by_count":0,"area":null},{"id":"2512.15780","title":"Adversarial Robustness in Financial Machine Learning: Defenses, Economic Impact, and Governance Evidence","created":"2025-12-14","cited_by_count":0,"area":null},{"id":"2602.03415","title":"Most Convolutional Networks Suffer from Small Adversarial Perturbations","created":"2026-02-03","cited_by_count":0,"area":null},{"id":"2605.01632","title":"Perturb and Correct: Post-Hoc Ensembles using Affine Redundancy","created":"2026-05-02","cited_by_count":0,"area":null},{"id":"2605.06519","title":"Efficient Techniques for Data Reconstruction, with Finite-Width Recovery Guarantees","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2606.03925","title":"Adaptive Causal Alignment for High-Confidence Adversarial Training","created":"2026-06-02","cited_by_count":0,"area":null},{"id":"2606.26207","title":"The Role of Input Dimensionality in the Emergence and Targeted Control of Adversarial Examples","created":"2026-06-24","cited_by_count":0,"area":null},{"id":"2607.08370","title":"Tubular Neighbourhoods of Pfaffian Sets and Applications to Neural Networks","created":"2026-07-09","cited_by_count":0,"area":null}],"next_cursor":null}