{"total":208,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2106.15590","title":"The Values Encoded in Machine Learning Research","created":"2021-06-29","cited_by_count":172,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2204.02548","title":"Style-Hallucinated Dual Consistency Learning for Domain Generalized Semantic Segmentation","created":"2022-04-06","cited_by_count":89,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2105.11144","title":"Improved OOD Generalization via Adversarial Training and Pre-training","created":"2021-05-24","cited_by_count":66,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2206.08675","title":"Understanding Robust Overfitting of Adversarial Training and Beyond","created":"2022-06-17","cited_by_count":51,"area":null},{"id":"2104.02703","title":"Adversarial Robustness under Long-Tailed Distribution","created":"2021-04-06","cited_by_count":50,"area":null},{"id":"2101.09387","title":"Online Adversarial Purification based on Self-Supervision","created":"2021-01-23","cited_by_count":46,"area":null},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40,"area":null},{"id":"2110.07858","title":"Understanding and Improving Robustness of Vision Transformers through Patch-based Negative Augmentation","created":"2021-10-15","cited_by_count":40,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39,"area":null},{"id":"2203.09678","title":"Self-Ensemble Adversarial Training for Improved Robustness","created":"2022-03-18","cited_by_count":38,"area":null},{"id":"2202.01136","title":"Probabilistically Robust Learning: Balancing Average- and Worst-case Performance","created":"2022-02-02","cited_by_count":37,"area":null},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2204.04636","title":"\"That Is a Suspicious Reaction!\": Interpreting Logits Variation to Detect NLP Adversarial Attacks","created":"2022-04-10","cited_by_count":24,"area":null},{"id":"2101.06639","title":"Removing Undesirable Feature Contributions Using Out-of-Distribution Data","created":"2021-01-17","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2212.09068","title":"Style-Hallucinated Dual Consistency Learning: A Unified Framework for Visual Domain Generalization","created":"2022-12-18","cited_by_count":22,"area":null},{"id":"2102.05311","title":"CIFS: Improving Adversarial Robustness of CNNs via Channel-wise Importance-based Feature Selection","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2106.10826","title":"Does Robustness Improve Fairness? Approaching Fairness with Word Substitution Robustness Methods for Text Classification","created":"2021-06-21","cited_by_count":20,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2302.09479","title":"Delving into the Adversarial Robustness of Federated Learning","created":"2023-02-19","cited_by_count":19,"area":null},{"id":"2102.07379","title":"On the Inherent Regularization Effects of Noise Injection During Training","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2210.04886","title":"Revisiting adapters with adversarial training","created":"2022-10-10","cited_by_count":18,"area":null},{"id":"2206.03669","title":"Toward Certified Robustness Against Real-World Distribution Shifts","created":"2022-06-08","cited_by_count":16,"area":null},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16,"area":null},{"id":"2111.13236","title":"Joint inference and input optimization in equilibrium networks","created":"2021-11-25","cited_by_count":15,"area":null},{"id":"2206.09098","title":"Existence and Minimax Theorems for Adversarial Surrogate Risks in Binary Classification","created":"2022-06-18","cited_by_count":15,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2108.05075","title":"Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networks","created":"2021-08-11","cited_by_count":13,"area":null},{"id":"2203.13455","title":"A Unified Contrastive Energy-based Model for Understanding the Generative Ability of Adversarial Training","created":"2022-03-25","cited_by_count":13,"area":null},{"id":"2207.08374","title":"Adversarial Contrastive Learning via Asymmetric InfoNCE","created":"2022-07-18","cited_by_count":13,"area":null},{"id":"2210.00094","title":"Improving Robustness with Adaptive Weight Decay","created":"2022-09-30","cited_by_count":13,"area":null},{"id":"2306.11035","title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game","created":"2023-06-19","cited_by_count":13,"area":null},{"id":"2307.15061","title":"The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimation","created":"2023-07-27","cited_by_count":13,"area":null},{"id":"2404.08154","title":"Eliminating Catastrophic Overfitting Via Abnormal Adversarial Examples Regularization","created":"2024-04-11","cited_by_count":12,"area":null},{"id":"2112.04468","title":"Revisiting Contrastive Learning through the Lens of Neighborhood Component Analysis: an Integrated Framework","created":"2021-12-08","cited_by_count":11,"area":null},{"id":"2203.05335","title":"Non-generative Generalized Zero-shot Learning via Task-correlated Disentanglement and Controllable Samples Synthesis","created":"2022-03-10","cited_by_count":11,"area":null},{"id":"2206.01909","title":"Toward Learning Robust and Invariant Representations with Alignment Regularization and Data Augmentation","created":"2022-06-04","cited_by_count":11,"area":null},{"id":"2501.13273","title":"Enhancing Robust Fairness via Confusional Spectral Regularization","created":"2025-01-22","cited_by_count":11,"area":null},{"id":"2103.06828","title":"Wasserstein Robust Classification with Fairness Constraints","created":"2021-03-11","cited_by_count":10,"area":null},{"id":"2108.01721","title":"Improving Counterfactual Generation for Fair Hate Speech Detection","created":"2021-08-03","cited_by_count":10,"area":null},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9,"area":null},{"id":"2107.06501","title":"AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning","created":"2021-07-14","cited_by_count":9,"area":null},{"id":"2206.02976","title":"Recall Distortion in Neural Network Pruning and the Undecayed Pruning Algorithm","created":"2022-06-07","cited_by_count":9,"area":null},{"id":"2206.06257","title":"Distributed Adversarial Training to Robustify Deep Neural Networks at Scale","created":"2022-06-13","cited_by_count":9,"area":null},{"id":"2211.10752","title":"Towards Robust Dataset Learning","created":"2022-11-19","cited_by_count":9,"area":null},{"id":"2106.06667","title":"CARTL: Cooperative Adversarially-Robust Transfer Learning","created":"2021-06-12","cited_by_count":8,"area":null},{"id":"2110.11205","title":"Robustness through Data Augmentation Loss Consistency","created":"2021-10-21","cited_by_count":8,"area":null},{"id":"2202.09300","title":"Exploring Adversarially Robust Training for Unsupervised Domain Adaptation","created":"2022-02-18","cited_by_count":8,"area":null},{"id":"2204.13779","title":"Formulating Robustness Against Unforeseen Attacks","created":"2022-04-28","cited_by_count":8,"area":null},{"id":"2307.12822","title":"Learning Provably Robust Estimators for Inverse Problems via Jittering","created":"2023-07-24","cited_by_count":8,"area":null},{"id":"2403.13322","title":"DD-RobustBench: An Adversarial Robustness Benchmark for Dataset Distillation","created":"2024-03-20","cited_by_count":8,"area":null},{"id":"2103.11023","title":"Individually Fair Ranking","created":"2021-03-19","cited_by_count":7,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2105.09109","title":"An Orthogonal Classifier for Improving the Adversarial Robustness of Neural Networks","created":"2021-05-19","cited_by_count":7,"area":null},{"id":"2204.01560","title":"SecureSense: Defending Adversarial Attack for Secure Device-Free Human Activity Recognition","created":"2022-04-04","cited_by_count":7,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2206.12292","title":"InfoAT: Improving Adversarial Training Using the Information Bottleneck Principle","created":"2022-06-23","cited_by_count":7,"area":null},{"id":"2207.00694","title":"Efficient Adversarial Training With Data Pruning","created":"2022-07-01","cited_by_count":7,"area":null},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2109.05820","title":"Improving the Robustness of Adversarial Attacks Using an Affine-Invariant Gradient Estimator","created":"2021-09-13","cited_by_count":6,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2210.15068","title":"Improving Adversarial Robustness with Self-Paced Hard-Class Pair Reweighting","created":"2022-10-26","cited_by_count":6,"area":null},{"id":"2211.12624","title":"Improving Robust Generalization by Direct PAC-Bayesian Bound Minimization","created":"2022-11-22","cited_by_count":6,"area":null},{"id":"2212.05917","title":"SRoUDA: Meta Self-training for Robust Unsupervised Domain Adaptation","created":"2022-12-12","cited_by_count":6,"area":null},{"id":"2212.10154","title":"Human-Guided Fair Classification for Natural Language Processing","created":"2022-12-20","cited_by_count":5,"area":null},{"id":"2303.08289","title":"Improving Adversarial Robustness with Hypersphere Embedding and Angular-based Regularizations","created":"2023-03-15","cited_by_count":5,"area":null},{"id":"2303.15409","title":"Class-Conditioned Transformation for Enhanced Robust Image Classification","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2401.11902","title":"A Training-Free Defense Framework for Robust Learned Image Compression","created":"2024-01-22","cited_by_count":5,"area":null},{"id":"2404.08980","title":"Stability and Generalization in Free Adversarial Training","created":"2024-04-13","cited_by_count":5,"area":null},{"id":"2404.09259","title":"FedCCL: Federated Dual-Clustered Feature Contrast Under Domain Heterogeneity","created":"2024-04-14","cited_by_count":5,"area":null},{"id":"2102.12192","title":"Multiplicative Reweighting for Robust Neural Network Optimization","created":"2021-02-24","cited_by_count":4,"area":null},{"id":"2109.08191","title":"Simple Post-Training Robustness Using Test Time Augmentations and Random Forest","created":"2021-09-16","cited_by_count":4,"area":null},{"id":"2111.00295","title":"Get Fooled for the Right Reason: Improving Adversarial Robustness through a Teacher-guided Curriculum Learning Approach","created":"2021-10-30","cited_by_count":4,"area":null},{"id":"2203.03541","title":"Fairness for Text Classification Tasks with Identity Information Data Augmentation Methods","created":"2022-02-04","cited_by_count":4,"area":null},{"id":"2205.04686","title":"AdMix: A Mixed Sample Data Augmentation Method for Neural Machine Translation","created":"2022-05-10","cited_by_count":4,"area":null}],"next_cursor":"100"}