{"total":308,"rows":[{"id":"2101.05278","title":"GAN Inversion: A Survey","created":"2021-01-14","cited_by_count":367,"area":null},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113,"area":null},{"id":"2110.12976","title":"Stable Neural ODE with Lyapunov-Stable Equilibrium Points for Defending Against Adversarial Attacks","created":"2021-10-25","cited_by_count":91,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2104.14551","title":"Ensembling with Deep Generative Views","created":"2021-04-29","cited_by_count":53,"area":null},{"id":"2103.14222","title":"Adversarial Attacks are Reversible with Natural Supervision","created":"2021-03-26","cited_by_count":47,"area":null},{"id":"2101.09387","title":"Online Adversarial Purification based on Self-Supervision","created":"2021-01-23","cited_by_count":46,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39,"area":null},{"id":"2204.01738","title":"Experimental quantum adversarial learning with programmable superconducting qubits","created":"2022-04-04","cited_by_count":39,"area":null},{"id":"2112.06011","title":"Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting","created":"2021-12-11","cited_by_count":37,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2104.01789","title":"Deep Learning-Based Autonomous Driving Systems: A Survey of Attacks and Defenses","created":"2021-04-05","cited_by_count":30,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2306.12688","title":"Towards quantum enhanced adversarial robustness in machine learning","created":"2023-06-22","cited_by_count":28,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2102.01862","title":"Towards Robust Neural Networks via Close-loop Control","created":"2021-02-03","cited_by_count":23,"area":null},{"id":"2206.03393","title":"Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition","created":"2022-06-07","cited_by_count":23,"area":null},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23,"area":null},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2202.04781","title":"Adversarial Attack and Defense of YOLO Detectors in Autonomous Driving Scenarios","created":"2022-02-10","cited_by_count":20,"area":null},{"id":"2204.06213","title":"Defensive Patches for Robust Recognition in the Physical World","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2103.14577","title":"Unsupervised Robust Domain Adaptation without Source Data","created":"2021-03-26","cited_by_count":19,"area":null},{"id":"2106.02749","title":"Predify: Augmenting deep neural networks with brain-inspired predictive coding dynamics","created":"2021-06-04","cited_by_count":19,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2103.14211","title":"MagDR: Mask-guided Detection and Reconstruction for Defending Deepfakes","created":"2021-03-26","cited_by_count":17,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2203.15230","title":"Zero-Query Transfer Attacks on Context-Aware Object Detectors","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2208.03635","title":"Federated Adversarial Learning: A Framework with Convergence Analysis","created":"2022-08-07","cited_by_count":17,"area":null},{"id":"2212.02531","title":"Enhancing Quantum Adversarial Robustness by Randomized Encodings","created":"2022-12-05","cited_by_count":17,"area":null},{"id":"2101.11466","title":"Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Voting","created":"2021-01-27","cited_by_count":16,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2203.14207","title":"Text Adversarial Purification as Defense against Adversarial Attacks","created":"2022-03-27","cited_by_count":16,"area":null},{"id":"2205.09619","title":"Improving Robustness against Real-World and Worst-Case Distribution Shifts through Decision Region Quantification","created":"2022-05-19","cited_by_count":16,"area":null},{"id":"2208.02851","title":"Self-Ensembling Vision Transformer (SEViT) for Robust Medical Image Classification","created":"2022-08-04","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2107.09543","title":"Data synthesis and adversarial networks: A review and meta-analysis in cancer imaging","created":"2021-07-20","cited_by_count":15,"area":null},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2107.07449","title":"Adversarial Attacks on Multi-task Visual Perception for Autonomous Driving","created":"2021-07-15","cited_by_count":14,"area":null},{"id":"2111.08685","title":"A Latent Encoder Coupled Generative Adversarial Network (LE-GAN) for Efficient Hyperspectral Image Super-resolution","created":"2021-11-16","cited_by_count":14,"area":null},{"id":"2308.16316","title":"Ten Years of Generative Adversarial Nets (GANs): A survey of the state-of-the-art","created":"2023-08-30","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2112.03000","title":"Sequential Randomized Smoothing for Adversarially Robust Speech Recognition","created":"2021-11-05","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2102.03726","title":"Adversarial example generation with AdaBelief Optimizer and Crop Invariance","created":"2021-02-07","cited_by_count":12,"area":null},{"id":"2105.02942","title":"Understanding Catastrophic Overfitting in Adversarial Training","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2105.11886","title":"Conformal Anomaly Detection on Spatio-Temporal Observations with Missing Data","created":"2021-05-25","cited_by_count":12,"area":null},{"id":"2111.10481","title":"PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing","created":"2021-11-19","cited_by_count":12,"area":null},{"id":"2207.10170","title":"Illusory Attacks: Information-Theoretic Detectability Matters in Adversarial Attacks","created":"2022-07-20","cited_by_count":12,"area":null},{"id":"2101.06507","title":"Multi-objective Search of Robust Neural Architectures against Multiple Types of Adversarial Attacks","created":"2021-01-16","cited_by_count":11,"area":null},{"id":"2110.04337","title":"Adversarial Token Attacks on Vision Transformers","created":"2021-10-08","cited_by_count":11,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2201.09650","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","created":"2022-01-24","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2206.07953","title":"Analysis and Extensions of Adversarial Training for Video Classification","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2212.12641","title":"Out-of-Distribution Detection with Reconstruction Error and Typicality-based Penalty","created":"2022-12-24","cited_by_count":11,"area":null},{"id":"2307.07250","title":"Mitigating Adversarial Vulnerability through Causal Parameter Estimation by Adversarial Double Machine Learning","created":"2023-07-14","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2107.06456","title":"AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense","created":"2021-07-14","cited_by_count":10,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2201.02354","title":"GenLabel: Mixup Relabeling using Generative Models","created":"2022-01-07","cited_by_count":10,"area":null},{"id":"2202.08393","title":"Robust Reinforcement Learning via Genetic Curriculum","created":"2022-02-17","cited_by_count":10,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2101.12100","title":"Increasing the Confidence of Deep Neural Networks by Coverage Analysis","created":"2021-01-28","cited_by_count":9,"area":null},{"id":"2207.04129","title":"How many perturbations break this model? Evaluating robustness beyond adversarial accuracy","created":"2022-07-08","cited_by_count":9,"area":null},{"id":"2305.12804","title":"The defender's perspective on automatic speaker verification: An overview","created":"2023-05-22","cited_by_count":9,"area":null},{"id":"2508.21072","title":"First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge","created":"2025-08-28","cited_by_count":9,"area":null},{"id":"2101.10027","title":"Understanding and Achieving Efficient Robustness with Adversarial Supervised Contrastive Learning","created":"2021-01-25","cited_by_count":8,"area":null},{"id":"2102.02729","title":"Adversarial Attacks and Defenses in Physiological Computing: A Systematic Review","created":"2021-02-04","cited_by_count":8,"area":null},{"id":"2107.02840","title":"RAILS: A Robust Adversarial Immune-inspired Learning System","created":"2021-06-27","cited_by_count":8,"area":null},{"id":"2107.05166","title":"Stateful Detection of Model Extraction Attacks","created":"2021-07-12","cited_by_count":8,"area":null},{"id":"2107.07677","title":"ECG-Adv-GAN: Detecting ECG Adversarial Examples with Conditional Generative Adversarial Networks","created":"2021-07-16","cited_by_count":8,"area":null},{"id":"2203.04453","title":"Machine Learning in NextG Networks via Generative Adversarial Networks","created":"2022-03-09","cited_by_count":8,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2402.06655","title":"Adversarial Text Purification: A Large Language Model Approach for Defense","created":"2024-02-05","cited_by_count":8,"area":null}],"next_cursor":"100"}