{"total":40,"rows":[{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2209.08025","title":"Trustworthy Reinforcement Learning Against Intrinsic Vulnerabilities: Robustness, Safety, and Generalizability","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2106.02734","title":"Revisiting Hilbert-Schmidt Information Bottleneck for Adversarial Robustness","created":"2021-06-04","cited_by_count":20,"area":null},{"id":"2210.04311","title":"Pruning Adversarially Robust Neural Networks without Adversarial Examples","created":"2022-10-09","cited_by_count":12,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2107.06501","title":"AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning","created":"2021-07-14","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2102.07140","title":"Perceptually Constrained Adversarial Attacks","created":"2021-02-14","cited_by_count":7,"area":null},{"id":"2103.13598","title":"Recent Advances in Large Margin Learning","created":"2021-03-25","cited_by_count":7,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2103.00778","title":"Explaining Adversarial Vulnerability with a Data Sparsity Hypothesis","created":"2021-03-01","cited_by_count":4,"area":null},{"id":"2105.08037","title":"Adversarial Training for Gradient Descent: Analysis Through its Continuous-time Approximation","created":"2021-05-17","cited_by_count":4,"area":null},{"id":"2411.16712","title":"SafeLight: Enhancing Security in Optical Convolutional Neural Network Accelerators","created":"2024-11-22","cited_by_count":4,"area":null},{"id":"2105.15157","title":"Adaptive Feature Alignment for Adversarial Training","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2111.12922","title":"Clustering Effect of (Linearized) Adversarial Robust Models","created":"2021-11-25","cited_by_count":3,"area":null},{"id":"2202.01117","title":"An Eye for an Eye: Defending against Gradient-based Attacks with Gradients","created":"2022-02-02","cited_by_count":2,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2202.05226","title":"Deadwooding: Robust Global Pruning for Deep Neural Networks","created":"2022-02-10","cited_by_count":2,"area":null},{"id":"2204.00734","title":"SkeleVision: Towards Adversarial Resiliency of Person Tracking with Multi-Task Learning","created":"2022-04-02","cited_by_count":2,"area":null},{"id":"2112.09279","title":"Robust Upper Bounds for Adversarial Training","created":"2021-12-17","cited_by_count":1,"area":null},{"id":"2208.08083","title":"Two Heads are Better than One: Robust Learning Meets Multi-branch Models","created":"2022-08-17","cited_by_count":1,"area":null},{"id":"2501.10202","title":"Provably Safeguarding a Classifier from OOD and Adversarial Samples: an Extreme Value Theory Approach","created":"2025-01-17","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2511.02602","title":"Trustworthy Quantum Machine Learning: A Roadmap for Reliability, Robustness, and Security in the NISQ Era","created":"2025-11-04","cited_by_count":1,"area":null},{"id":"2103.04565","title":"Improving Transformation-based Defenses against Adversarial Examples with First-order Perturbations","created":"2021-03-08","cited_by_count":0,"area":null},{"id":"2104.10076","title":"MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis","created":"2021-04-20","cited_by_count":0,"area":null},{"id":"2108.04409","title":"On Procedural Adversarial Noise Attack And Defense","created":"2021-08-10","cited_by_count":0,"area":null},{"id":"2110.15829","title":"Holistic Deep Learning","created":"2021-10-29","cited_by_count":0,"area":null},{"id":"2205.15582","title":"An Effective Fusion Method to Enhance the Robustness of CNN","created":"2022-05-31","cited_by_count":0,"area":null},{"id":"2210.05373","title":"Stable and Efficient Adversarial Training through Local Linearization","created":"2022-10-11","cited_by_count":0,"area":null},{"id":"2307.13609","title":"Dendritic Integration Based Quadratic Neural Networks Outperform Traditional Aritificial Ones","created":"2023-05-25","cited_by_count":0,"area":null},{"id":"2502.12418","title":"Boosting Illuminant Estimation in Deep Color Constancy through Enhancing Brightness Robustness","created":"2025-02-18","cited_by_count":0,"area":null},{"id":"2601.00367","title":"PatchBlock: A Lightweight Defense Against Adversarial Patches for Embedded EdgeAI Devices","created":"2026-01-01","cited_by_count":0,"area":null},{"id":"2602.07320","title":"Incorruptible Neural Networks: Training Models that can Generalize to Large Internal Perturbations","created":"2026-02-07","cited_by_count":0,"area":null},{"id":"2610.16012","title":"Adversarial Robustness of Camera-Radar Sensor Fusion for Autonomous Driving","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}