{"total":77,"rows":[{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2102.12781","title":"Do Input Gradients Highlight Discriminative Features?","created":"2021-02-25","cited_by_count":52,"area":null},{"id":"2104.09658","title":"Calibration and Consistency of Adversarial Surrogate Losses","created":"2021-04-19","cited_by_count":47,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2106.12611","title":"Adversarial Examples in Multi-Layer Random ReLU Networks","created":"2021-06-23","cited_by_count":26,"area":null},{"id":"2112.01694","title":"On the Existence of the Adversarial Bayes Classifier (Extended Version)","created":"2021-12-03","cited_by_count":25,"area":null},{"id":"2112.03898","title":"Lattice-Based Methods Surpass Sum-of-Squares in Clustering","created":"2021-12-07","cited_by_count":25,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2212.05680","title":"REAP: A Large-Scale Realistic Adversarial Patch Benchmark","created":"2022-12-12","cited_by_count":18,"area":null},{"id":"2207.14030","title":"Hardness of Agnostically Learning Halfspaces from Worst-Case Lattice Problems","created":"2022-07-28","cited_by_count":16,"area":null},{"id":"2103.00671","title":"Robust learning under clean-label attack","created":"2021-03-01","cited_by_count":15,"area":null},{"id":"2112.09104","title":"Non-Gaussian Component Analysis via Lattice Basis Reduction","created":"2021-12-16","cited_by_count":14,"area":null},{"id":"2108.06895","title":"Interpreting Attributions and Interactions of Adversarial Attacks","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2203.17209","title":"Adversarial Examples in Random Neural Networks with General Activations","created":"2022-03-31","cited_by_count":13,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2103.09947","title":"Understanding Generalization in Adversarial Training via the Bias-Variance Decomposition","created":"2021-03-17","cited_by_count":10,"area":null},{"id":"2110.10602","title":"Transductive Robust Learning Guarantees","created":"2021-10-20","cited_by_count":10,"area":null},{"id":"2106.02630","title":"Fundamental tradeoffs between memorization and robustness in random features and neural tangent regimes","created":"2021-06-04","cited_by_count":9,"area":null},{"id":"2205.16003","title":"Learning (Very) Simple Generative Models Is Hard","created":"2022-05-31","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2206.03362","title":"Building Robust Ensembles via Margin Boosting","created":"2022-06-07","cited_by_count":8,"area":null},{"id":"2206.12977","title":"Adversarially Robust PAC Learnability of Real-Valued Functions","created":"2022-06-26","cited_by_count":8,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2305.04746","title":"Understanding Noise-Augmented Training for Randomized Smoothing","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2402.15995","title":"Improved Hardness Results for Learning Intersections of Halfspaces","created":"2024-02-25","cited_by_count":6,"area":null},{"id":"2406.10161","title":"On the Computability of Robust PAC Learning","created":"2024-06-14","cited_by_count":6,"area":null},{"id":"2406.04981","title":"The Price of Implicit Bias in Adversarially Robust Generalization","created":"2024-06-07","cited_by_count":5,"area":null},{"id":"2410.16449","title":"Robust Feature Learning for Multi-Index Models in High Dimensions","created":"2024-10-21","cited_by_count":5,"area":null},{"id":"2103.12913","title":"Improved Estimation of Concentration Under $\\ell_p$-Norm Distance Metrics Using Half Spaces","created":"2021-03-24","cited_by_count":4,"area":null},{"id":"2109.00936","title":"Impact of Attention on Adversarial Robustness of Image Classification Models","created":"2021-09-02","cited_by_count":4,"area":null},{"id":"2205.06127","title":"Sample Complexity Bounds for Robustly Learning Decision Lists against Evasion Attacks","created":"2022-05-12","cited_by_count":4,"area":null},{"id":"2206.04589","title":"Optimal SQ Lower Bounds for Robustly Learning Discrete Product Distributions and Ising Models","created":"2022-06-09","cited_by_count":4,"area":null},{"id":"2301.13486","title":"Robust Linear Regression: Gradient-descent, Early-stopping, and Beyond","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2107.03250","title":"Understanding Intrinsic Robustness Using Label Uncertainty","created":"2021-07-07","cited_by_count":3,"area":null},{"id":"2206.09099","title":"The Consistency of Adversarial Training for Binary Classification","created":"2022-06-18","cited_by_count":3,"area":null},{"id":"2412.04245","title":"Intriguing Properties of Robust Classification","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2102.08093","title":"A Law of Robustness for Weight-bounded Neural Networks","created":"2021-02-16","cited_by_count":2,"area":null},{"id":"2107.09502","title":"Feature-Filter: Detecting Adversarial Examples through Filtering off Recessive Features","created":"2021-07-19","cited_by_count":2,"area":null},{"id":"2108.04217","title":"ROPUST: Improving Robustness through Fine-tuning with Photonic Processors and Synthetic Gradients","created":"2021-07-06","cited_by_count":2,"area":null},{"id":"2202.02626","title":"Layer-wise Regularized Adversarial Training using Layers Sustainability Analysis (LSA) framework","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2207.07255","title":"Modeling Non-Cooperative Dialogue: Theoretical and Empirical Insights","created":"2022-07-15","cited_by_count":2,"area":null},{"id":"2306.14326","title":"Computational Asymmetries in Robust Classification","created":"2023-06-25","cited_by_count":2,"area":null},{"id":"2308.00556","title":"Robust Linear Regression: Phase-Transitions and Precise Tradeoffs for General Norms","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2409.03077","title":"Backdoor defense, learnability and obfuscation","created":"2024-09-04","cited_by_count":2,"area":null},{"id":"2502.11413","title":"Statistical Query Hardness of Multiclass Linear Classification with Random Classification Noise","created":"2025-02-17","cited_by_count":2,"area":null},{"id":"2505.13708","title":"Robust learning of halfspaces under log-concave marginals","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2102.05475","title":"Adversarial Robustness: What fools you makes you stronger","created":"2021-02-10","cited_by_count":1,"area":null},{"id":"2104.00139","title":"Adversarial Heart Attack: Neural Networks Fooled to Segment Heart Symbols in Chest X-Ray Images","created":"2021-03-31","cited_by_count":1,"area":null},{"id":"2104.08382","title":"Lower Bounds on Cross-Entropy Loss in the Presence of Test-time Adversaries","created":"2021-04-16","cited_by_count":1,"area":null},{"id":"2112.09625","title":"Provable Adversarial Robustness in the Quantum Model","created":"2021-12-17","cited_by_count":1,"area":null},{"id":"2206.04316","title":"Adversarial Noises Are Linearly Separable for (Nearly) Random Neural Networks","created":"2022-06-09","cited_by_count":1,"area":null},{"id":"2208.12926","title":"Overparameterization from Computational Constraints","created":"2022-08-27","cited_by_count":1,"area":null},{"id":"2210.06089","title":"When are Local Queries Useful for Robust Learning?","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2302.03750","title":"Linking convolutional kernel size to generalization bias in face analysis CNNs","created":"2023-02-07","cited_by_count":1,"area":null},{"id":"2307.10788","title":"Adversarial attacks for mixtures of classifiers","created":"2023-07-20","cited_by_count":1,"area":null},{"id":"2402.02154","title":"Evaluating the Robustness of Off-Road Autonomous Driving Segmentation against Adversarial Attacks: A Dataset-Centric analysis","created":"2024-02-03","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2410.03000","title":"Towards Generalized Certified Robustness with Multi-Norm Training","created":"2024-10-03","cited_by_count":1,"area":null},{"id":"2608.13514","title":"Bagging Robustly Learns VC Classes with Linear Sample Complexity","created":"2026-08-13","cited_by_count":1,"area":null},{"id":"2106.13326","title":"On the (Un-)Avoidability of Adversarial Examples","created":"2021-06-24","cited_by_count":0,"area":null},{"id":"2112.02209","title":"Generalized Likelihood Ratio Test for Adversarially Robust Hypothesis Testing","created":"2021-12-04","cited_by_count":0,"area":null},{"id":"2204.01099","title":"Adversarially robust segmentation models learn perceptually-aligned gradients","created":"2022-04-03","cited_by_count":0,"area":null},{"id":"2205.08017","title":"$\\mathscr{H}$-Consistency Estimation Error of Surrogate Loss Minimizers","created":"2022-05-16","cited_by_count":0,"area":null},{"id":"2309.15669","title":"On the Computational Entanglement of Distant Features in Adversarial Machine Learning","created":"2023-09-27","cited_by_count":0,"area":null},{"id":"2311.08265","title":"On The Relationship Between Universal Adversarial Attacks And Sparse Representations","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2506.10888","title":"Lattice Climber Attack: Adversarial attacks for randomized mixtures of classifiers","created":"2025-06-12","cited_by_count":0,"area":null},{"id":"2506.12613","title":"Existence of Adversarial Examples for Random Convolutional Networks via Isoperimetric Inequalities on $\\mathbb{so}(d)$","created":"2025-06-14","cited_by_count":0,"area":null},{"id":"2602.03415","title":"Most Convolutional Networks Suffer from Small Adversarial Perturbations","created":"2026-02-03","cited_by_count":0,"area":null},{"id":"2610.02749","title":"Learning Query Encoders Can Be Hard Even When Vector Retrieval Is Geometrically Easy","created":"2026-10-02","cited_by_count":0,"area":null}],"next_cursor":null}