{"total":246,"rows":[{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108,"area":null},{"id":"2110.14038","title":"Robustness of Graph Neural Networks at Scale","created":"2021-10-26","cited_by_count":100,"area":null},{"id":"2110.13771","title":"AugMax: Adversarial Composition of Random Augmentations for Robust Training","created":"2021-10-26","cited_by_count":90,"area":null},{"id":"2202.08345","title":"Learning Smooth Neural Functions via Lipschitz Regularization","created":"2022-02-16","cited_by_count":86,"area":null},{"id":"2103.03638","title":"PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximations","created":"2021-03-05","cited_by_count":77,"area":null},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2108.04062","title":"Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100","created":"2021-08-05","cited_by_count":47,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2210.07394","title":"Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation","created":"2022-10-13","cited_by_count":45,"area":null},{"id":"2104.06718","title":"Improved Branch and Bound for Neural Network Verification via Lagrangian Decomposition","created":"2021-04-14","cited_by_count":44,"area":null},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43,"area":null},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42,"area":null},{"id":"2206.12227","title":"Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspective","created":"2022-06-24","cited_by_count":42,"area":null},{"id":"2108.04140","title":"Reachability Analysis of Neural Feedback Loops","created":"2021-08-09","cited_by_count":41,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2102.04373","title":"Partition-based formulations for mixed-integer optimization of trained ReLU neural networks","created":"2021-02-08","cited_by_count":39,"area":null},{"id":"2106.13867","title":"POLAR: A Polynomial Arithmetic Framework for Verifying Neural-Network Controlled Systems","created":"2021-06-25","cited_by_count":39,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2210.06443","title":"On the Effectiveness of Lipschitz-Driven Rehearsal in Continual Learning","created":"2022-10-12","cited_by_count":39,"area":null},{"id":"2305.00241","title":"When Deep Learning Meets Polyhedral Theory: A Survey","created":"2023-04-29","cited_by_count":39,"area":null},{"id":"2209.08025","title":"Trustworthy Reinforcement Learning Against Intrinsic Vulnerabilities: Robustness, Safety, and Generalizability","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2104.02466","title":"A Review of Formal Methods applied to Machine Learning","created":"2021-04-06","cited_by_count":33,"area":null},{"id":"2105.11931","title":"Towards Scalable Verification of Deep Reinforcement Learning","created":"2021-05-25","cited_by_count":33,"area":null},{"id":"2104.05097","title":"Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networks","created":"2021-04-11","cited_by_count":30,"area":null},{"id":"2112.01694","title":"On the Existence of the Adversarial Bayes Classifier (Extended Version)","created":"2021-12-03","cited_by_count":25,"area":null},{"id":"2110.05365","title":"Intriguing Properties of Input-dependent Randomized Smoothing","created":"2021-10-11","cited_by_count":24,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2201.01978","title":"An Abstraction-Refinement Approach to Verifying Convolutional Neural Networks","created":"2022-01-06","cited_by_count":24,"area":null},{"id":"2203.11201","title":"Efficient Neural Network Analysis with Sum-of-Infeasibilities","created":"2022-03-19","cited_by_count":24,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2207.02715","title":"Open- and Closed-Loop Neural Network Verification using Polynomial Zonotopes","created":"2022-07-06","cited_by_count":24,"area":null},{"id":"2212.08507","title":"Robust Explanation Constraints for Neural Networks","created":"2022-12-16","cited_by_count":24,"area":null},{"id":"2105.12841","title":"DNNV: A Framework for Deep Neural Network Verification","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2107.04570","title":"ANCER: Anisotropic Certification via Sample-wise Volume Maximization","created":"2021-07-09","cited_by_count":23,"area":null},{"id":"2103.11257","title":"Robust Models Are More Interpretable Because Attributions Look Normal","created":"2021-03-20","cited_by_count":21,"area":null},{"id":"2210.06983","title":"Denoising Masked AutoEncoders Help Robust Classification","created":"2022-10-10","cited_by_count":21,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2105.13649","title":"Pruning and Slicing Neural Networks using Formal Verification","created":"2021-05-28","cited_by_count":20,"area":null},{"id":"2507.13338","title":"Training Transformers with Enforced Lipschitz Constants","created":"2025-07-17","cited_by_count":20,"area":null},{"id":"2108.04214","title":"Neural Network Repair with Reachability Analysis","created":"2021-08-09","cited_by_count":19,"area":null},{"id":"2203.03153","title":"Scalable Verification of GNN-based Job Schedulers","created":"2022-03-07","cited_by_count":19,"area":null},{"id":"2207.02036","title":"PRoA: A Probabilistic Robustness Assessment against Functional Perturbations","created":"2022-07-05","cited_by_count":19,"area":null},{"id":"2303.01713","title":"Convex Bounds on the Softmax Function with Applications to Robustness Verification","created":"2023-03-03","cited_by_count":19,"area":null},{"id":"2209.14076","title":"Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systems","created":"2022-09-28","cited_by_count":18,"area":null},{"id":"2103.07224","title":"BDD4BNN: A BDD-based Quantitative Analysis Framework for Binarized Neural Networks","created":"2021-03-12","cited_by_count":17,"area":null},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17,"area":null},{"id":"2109.06795","title":"ROMAX: Certifiably Robust Deep Multiagent Reinforcement Learning via Convex Relaxation","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2111.06063","title":"On the Equivalence between Neural Network and Support Vector Machine","created":"2021-11-11","cited_by_count":17,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2103.16652","title":"Robustness Certification for Point Cloud Models","created":"2021-03-30","cited_by_count":16,"area":null},{"id":"2105.05495","title":"LipBaB: Computing exact Lipschitz constant of ReLU networks","created":"2021-05-12","cited_by_count":16,"area":null},{"id":"2206.03669","title":"Toward Certified Robustness Against Real-World Distribution Shifts","created":"2022-06-08","cited_by_count":16,"area":null},{"id":"2306.09844","title":"Wasserstein distributional robustness of neural networks","created":"2023-06-16","cited_by_count":16,"area":null},{"id":"2311.16833","title":"1-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness","created":"2023-11-28","cited_by_count":16,"area":null},{"id":"2402.06244","title":"Quantifying and Enhancing Multi-modal Robustness with Modality Preference","created":"2024-02-09","cited_by_count":16,"area":null},{"id":"2104.00447","title":"Towards Evaluating and Training Verifiably Robust Neural Networks","created":"2021-04-01","cited_by_count":15,"area":null},{"id":"2206.10057","title":"Robust Deep Reinforcement Learning through Bootstrapped Opportunistic Curriculum","created":"2022-06-21","cited_by_count":15,"area":null},{"id":"2210.06077","title":"Double Bubble, Toil and Trouble: Enhancing Certified Robustness through Transitivity","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2103.07633","title":"Attack as Defense: Characterizing Adversarial Examples using Robustness","created":"2021-03-13","cited_by_count":14,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2110.01388","title":"Neural Network Verification in Control","created":"2021-09-30","cited_by_count":14,"area":null},{"id":"2206.07311","title":"Can pruning improve certified robustness of neural networks?","created":"2022-06-15","cited_by_count":14,"area":null},{"id":"2207.11177","title":"Provable Defense Against Geometric Transformations","created":"2022-07-22","cited_by_count":14,"area":null},{"id":"2111.08922","title":"Traversing the Local Polytopes of ReLU Neural Networks: A Unified Approach for Network Verification","created":"2021-11-17","cited_by_count":13,"area":null},{"id":"2101.10102","title":"Towards Practical Robustness Analysis for DNNs based on PAC-Model Learning","created":"2021-01-25","cited_by_count":12,"area":null},{"id":"2102.06700","title":"On the Paradox of Certified Training","created":"2021-02-12","cited_by_count":12,"area":null},{"id":"2104.14672","title":"Analytical bounds on the local Lipschitz constants of ReLU networks","created":"2021-04-29","cited_by_count":12,"area":null},{"id":"2212.03287","title":"veriFIRE: Verifying an Industrial, Learning-Based Wildfire Detection System","created":"2022-12-06","cited_by_count":12,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2205.14189","title":"Optimizing Objective Functions from Trained ReLU Neural Networks via Sampling","created":"2022-05-27","cited_by_count":11,"area":null},{"id":"2301.12456","title":"Towards Verifying the Geometric Robustness of Large-scale Neural Networks","created":"2023-01-29","cited_by_count":11,"area":null},{"id":"2309.13794","title":"Projected Randomized Smoothing for Certified Adversarial Robustness","created":"2023-09-25","cited_by_count":11,"area":null},{"id":"2312.12679","title":"Towards Efficient Verification of Quantized Neural Networks","created":"2023-12-20","cited_by_count":11,"area":null},{"id":"2101.01815","title":"Efficient Reachability Analysis of Closed-Loop Systems with Neural Network Controllers","created":"2021-01-05","cited_by_count":10,"area":null},{"id":"2101.03263","title":"SyReNN: A Tool for Analyzing Deep Neural Networks","created":"2021-01-09","cited_by_count":10,"area":null},{"id":"2101.05844","title":"Scaling the Convex Barrier with Sparse Dual Algorithms","created":"2021-01-14","cited_by_count":10,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2109.00542","title":"Shared Certificates for Neural Network Verification","created":"2021-09-01","cited_by_count":10,"area":null},{"id":"2201.12733","title":"TPC: Transformation-Specific Smoothing for Point Cloud Models","created":"2022-01-30","cited_by_count":10,"area":null},{"id":"2201.13351","title":"LinSyn: Synthesizing Tight Linear Bounds for Arbitrary Neural Network Activation Functions","created":"2022-01-31","cited_by_count":10,"area":null},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10,"area":null},{"id":"2402.13937","title":"Verifying message-passing neural networks via topology-based bounds tightening","created":"2024-02-21","cited_by_count":10,"area":null},{"id":"2108.02707","title":"Fairness Properties of Face Recognition and Obfuscation Systems","created":"2021-08-05","cited_by_count":9,"area":null},{"id":"2203.07505","title":"Closing the Loop: A Framework for Trustworthy Machine Learning in Power Systems","created":"2022-03-14","cited_by_count":9,"area":null},{"id":"2204.08319","title":"Backward Reachability Analysis for Neural Feedback Loops","created":"2022-04-14","cited_by_count":9,"area":null},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9,"area":null},{"id":"2512.11087","title":"Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification","created":"2025-12-11","cited_by_count":9,"area":null},{"id":"2106.09117","title":"DeepSplit: Scalable Verification of Deep Neural Networks via Operator Splitting","created":"2021-06-16","cited_by_count":8,"area":null},{"id":"2110.15764","title":"{\\epsilon}-weakened Robustness of Deep Neural Networks","created":"2021-10-29","cited_by_count":8,"area":null},{"id":"2207.09572","title":"Robust Multivariate Time-Series Forecasting: Adversarial Attacks and Defense Mechanisms","created":"2022-07-19","cited_by_count":8,"area":null}],"next_cursor":"100"}