{"total":104,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2102.11107","title":"Towards Causal Representation Learning","created":"2021-02-22","cited_by_count":209,"area":null},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134,"area":"diffusion"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111,"area":"alignment"},{"id":"2205.14969","title":"Guided Diffusion Model for Adversarial Purification","created":"2022-05-30","cited_by_count":92,"area":"diffusion"},{"id":"2210.02025","title":"GMMSeg: Gaussian Mixture based Generative Semantic Segmentation Models","created":"2022-10-05","cited_by_count":87,"area":null},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2110.00473","title":"Score-Based Generative Classifiers","created":"2021-10-01","cited_by_count":53,"area":"diffusion"},{"id":"2309.16779","title":"Intriguing properties of generative classifiers","created":"2023-09-28","cited_by_count":52,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2102.12353","title":"Nonlinear Invariant Risk Minimization: A Causal Approach","created":"2021-02-24","cited_by_count":42,"area":null},{"id":"2104.10093","title":"Class-Incremental Learning with Generative Classifiers","created":"2021-04-20","cited_by_count":39,"area":null},{"id":"2208.08345","title":"Discovering Agents","created":"2022-08-17","cited_by_count":28,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2103.14577","title":"Unsupervised Robust Domain Adaptation without Source Data","created":"2021-03-26","cited_by_count":19,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17,"area":null},{"id":"2211.15231","title":"Chroma-VAE: Mitigating Shortcut Learning with Generative Classifiers","created":"2022-11-28","cited_by_count":17,"area":null},{"id":"2106.06027","title":"Sparse and Imperceptible Adversarial Attack via a Homotopy Algorithm","created":"2021-06-10","cited_by_count":15,"area":null},{"id":"2202.06043","title":"RoPGen: Towards Robust Code Authorship Attribution via Automatic Coding Style Transformation","created":"2022-02-12","cited_by_count":15,"area":null},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15,"area":null},{"id":"2102.07559","title":"Certifiably Robust Variational Autoencoders","created":"2021-02-15","cited_by_count":14,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2202.00091","title":"Query Efficient Decision Based Sparse Attacks Against Black-Box Deep Learning Models","created":"2022-01-31","cited_by_count":13,"area":null},{"id":"2203.11805","title":"Robust Classification using Contractive Hamiltonian Neural ODEs","created":"2022-03-22","cited_by_count":13,"area":null},{"id":"2203.03888","title":"ART-Point: Improving Rotation Robustness of Point Cloud Classifiers via Adversarial Rotation","created":"2022-03-08","cited_by_count":12,"area":null},{"id":"2205.14230","title":"Semi-supervised Semantics-guided Adversarial Training for Trajectory Prediction","created":"2022-05-27","cited_by_count":12,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2206.07953","title":"Analysis and Extensions of Adversarial Training for Video Classification","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2201.02354","title":"GenLabel: Mixup Relabeling using Generative Models","created":"2022-01-07","cited_by_count":10,"area":null},{"id":"2105.14727","title":"Transferable Sparse Adversarial Attack","created":"2021-05-31","cited_by_count":9,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2105.03689","title":"Self-Supervised Adversarial Example Detection by Disentangled Representation","created":"2021-05-08","cited_by_count":7,"area":null},{"id":"2102.04266","title":"Overhead MNIST: A Benchmark Satellite Dataset","created":"2021-02-08","cited_by_count":6,"area":null},{"id":"2103.01276","title":"A Multiclass Boosting Framework for Achieving Fast and Provable Adversarial Robustness","created":"2021-03-01","cited_by_count":6,"area":null},{"id":"2109.03784","title":"A Survey on Machine Learning Techniques for Auto Labeling of Video, Audio, and Text Data","created":"2021-09-08","cited_by_count":6,"area":null},{"id":"2311.15782","title":"Relationship between Model Compression and Adversarial Robustness: A Review of Current Evidence","created":"2023-11-27","cited_by_count":6,"area":null},{"id":"2102.09076","title":"Grid Cell Path Integration For Movement-Based Visual Object Recognition","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2205.13909","title":"(De-)Randomized Smoothing for Decision Stump Ensembles","created":"2022-05-27","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2307.00309","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","created":"2023-07-01","cited_by_count":5,"area":null},{"id":"2308.00854","title":"Training on Foveated Images Improves Robustness to Adversarial Attacks","created":"2023-08-01","cited_by_count":5,"area":null},{"id":"2310.07084","title":"Investigating the Adversarial Robustness of Density Estimation Using the Probability Flow ODE","created":"2023-10-10","cited_by_count":4,"area":"diffusion"},{"id":"2406.05532","title":"Exploring Adversarial Robustness of Deep State Space Models","created":"2024-06-08","cited_by_count":4,"area":null},{"id":"2106.05453","title":"Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training","created":"2021-06-10","cited_by_count":3,"area":null},{"id":"2110.14871","title":"Generalized Depthwise-Separable Convolutions for Adversarially Robust and Efficient Neural Networks","created":"2021-10-28","cited_by_count":3,"area":null},{"id":"2210.03155","title":"Understanding Neural Coding on Latent Manifolds by Sharing Features and Dividing Ensembles","created":"2022-10-06","cited_by_count":3,"area":null},{"id":"2210.13982","title":"Hindering Adversarial Attacks with Implicit Neural Representations","created":"2022-10-22","cited_by_count":3,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2407.12200","title":"This Probably Looks Exactly Like That: An Invertible Prototypical Network","created":"2024-07-16","cited_by_count":3,"area":null},{"id":"2111.03003","title":"Scanflow: A multi-graph framework for Machine Learning workflow management, supervision, and debugging","created":"2021-11-04","cited_by_count":2,"area":null},{"id":"2311.01356","title":"Upper and lower bounds for the Lipschitz constant of random neural networks","created":"2023-11-02","cited_by_count":2,"area":null},{"id":"2311.05143","title":"SCAAT: Improving Neural Network Interpretability via Saliency Constrained Adaptive Adversarial Training","created":"2023-11-09","cited_by_count":2,"area":null},{"id":"2404.11055","title":"Do LLMs Think Fast and Slow? A Causal Study on Sentiment Analysis","created":"2024-04-17","cited_by_count":2,"area":null},{"id":"2405.13324","title":"Adversarial Training via Adaptive Knowledge Amalgamation of an Ensemble of Teachers","created":"2024-05-22","cited_by_count":2,"area":null},{"id":"2405.17130","title":"Explaining the role of Intrinsic Dimensionality in Adversarial Training","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2510.12060","title":"Your VAR Model is Secretly an Efficient and Explainable Generative Classifier","created":"2025-10-14","cited_by_count":2,"area":null},{"id":"2102.05096","title":"Towards Bridging the gap between Empirical and Certified Robustness against Adversarial Examples","created":"2021-02-09","cited_by_count":1,"area":null},{"id":"2104.12102","title":"Unsupervised Learning of Multi-level Structures for Anomaly Detection","created":"2021-04-25","cited_by_count":1,"area":null},{"id":"2111.10844","title":"Denoised Internal Models: a Brain-Inspired Autoencoder against Adversarial Attacks","created":"2021-11-21","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2202.06488","title":"Finding Dynamics Preserving Adversarial Winning Tickets","created":"2022-02-14","cited_by_count":1,"area":null},{"id":"2311.17607","title":"Topology-preserving Adversarial Training for Alleviating Natural Accuracy Degradation","created":"2023-11-29","cited_by_count":1,"area":null},{"id":"2402.06827","title":"RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations for Universal Robustness","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2505.22839","title":"Demystifying Adversarial Robustness in Diffusion Models: Compression, Randomness, and Geometry","created":"2025-05-28","cited_by_count":1,"area":"diffusion"},{"id":"2508.00552","title":"DBLP: Noise Bridge Consistency Distillation For Efficient And Reliable Adversarial Purification","created":"2025-08-01","cited_by_count":1,"area":null},{"id":"2105.06807","title":"Salient Feature Extractor for Adversarial Defense on Deep Neural Networks","created":"2021-05-14","cited_by_count":0,"area":null},{"id":"2106.05996","title":"An Ensemble Approach Towards Adversarial Robustness","created":"2021-06-10","cited_by_count":0,"area":null},{"id":"2110.02364","title":"Adversarial defenses via a mixture of generators","created":"2021-10-05","cited_by_count":0,"area":null},{"id":"2112.13060","title":"Fight Perturbations with Perturbations: Defending Adversarial Attacks via Neuron Influence","created":"2021-12-24","cited_by_count":0,"area":null},{"id":"2203.02121","title":"Adversarial Patterns: Building Robust Android Malware Classifiers","created":"2022-03-04","cited_by_count":0,"area":null},{"id":"2203.04855","title":"Binary Classification Under $\\ell_0$ Attacks for General Noise Distribution","created":"2022-03-09","cited_by_count":0,"area":null},{"id":"2205.15424","title":"Connecting adversarial attacks and optimal transport for domain adaptation","created":"2022-05-30","cited_by_count":0,"area":null},{"id":"2207.08940","title":"Easy Batch Normalization","created":"2022-07-18","cited_by_count":0,"area":null},{"id":"2209.13620","title":"Reconstruction-guided attention improves the robustness and shape processing of neural networks","created":"2022-09-27","cited_by_count":0,"area":null},{"id":"2303.14096","title":"Enhancing Multiple Reliability Measures via Nuisance-extended Information Bottleneck","created":"2023-03-24","cited_by_count":0,"area":null},{"id":"2303.18131","title":"AdvCheck: Characterizing Adversarial Examples via Local Gradient Checking","created":"2023-03-25","cited_by_count":0,"area":null},{"id":"2306.15482","title":"Cooperation or Competition: Avoiding Player Domination for Multi-Target Robustness via Adaptive Budgets","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2306.16738","title":"Towards Optimal Randomized Strategies in Adversarial Example Game","created":"2023-06-29","cited_by_count":0,"area":null},{"id":"2307.02202","title":"On the Adversarial Robustness of Generative Autoencoders in the Latent Space","created":"2023-07-05","cited_by_count":0,"area":null},{"id":"2307.12517","title":"Entropy Transformer Networks: A Learning Approach via Tangent Bundle Data Manifold","created":"2023-07-24","cited_by_count":0,"area":null},{"id":"2307.16099","title":"On Neural Network approximation of ideal adversarial attack and convergence of adversarial training","created":"2023-07-30","cited_by_count":0,"area":null},{"id":"2308.03956","title":"Fixed Inter-Neuron Covariability Induces Adversarial Robustness","created":"2023-08-07","cited_by_count":0,"area":null},{"id":"2309.16207","title":"Parameter-Saving Adversarial Training: Reinforcing Multi-Perturbation Robustness via Hypernetworks","created":"2023-09-28","cited_by_count":0,"area":null},{"id":"2310.05947","title":"Robust and Efficient Interference Neural Networks for Defending Against Adversarial Attacks in ImageNet","created":"2023-09-03","cited_by_count":0,"area":null},{"id":"2310.14045","title":"Training Image Derivatives: Increased Accuracy and Universal Robustness","created":"2023-10-21","cited_by_count":0,"area":null},{"id":"2402.03576","title":"Generalization Properties of Adversarial Training for $\\ell_0$-Bounded Adversarial Attacks","created":"2024-02-05","cited_by_count":0,"area":null},{"id":"2402.13629","title":"Adversarial Purification and Fine-tuning for Robust UDC Image Restoration","created":"2024-02-21","cited_by_count":0,"area":null},{"id":"2403.09863","title":"Towards White Box Deep Learning","created":"2024-03-14","cited_by_count":0,"area":null},{"id":"2505.12647","title":"Spiking Neural Network: a low power solution for physical layer authentication","created":"2025-05-19","cited_by_count":0,"area":null},{"id":"2508.11432","title":"Robust Convolution Neural ODEs via Contractivity-promoting regularization","created":"2025-08-15","cited_by_count":0,"area":null}],"next_cursor":"100"}