{"total":18,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2308.06217","title":"Continual Face Forgery Detection via Historical Distribution Preserving","created":"2023-08-11","cited_by_count":23,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2203.08725","title":"Attacking deep networks with surrogate-based adversarial black-box methods is easy","created":"2022-03-16","cited_by_count":18,"area":null},{"id":"2403.10045","title":"Towards Adversarially Robust Dataset Distillation by Curvature Regularization","created":"2024-03-15","cited_by_count":17,"area":null},{"id":"2102.12196","title":"Identifying Untrustworthy Predictions in Neural Networks by Geometric Gradient Analysis","created":"2021-02-24","cited_by_count":13,"area":null},{"id":"2104.03000","title":"Universal Adversarial Training with Class-Wise Perturbations","created":"2021-04-07","cited_by_count":13,"area":null},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9,"area":null},{"id":"2109.06294","title":"On the regularized risk of distributionally robust learning over deep neural networks","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2206.08242","title":"Catastrophic overfitting can be induced with discriminative non-robust features","created":"2022-06-16","cited_by_count":2,"area":null},{"id":"2112.15329","title":"On Distinctive Properties of Universal Perturbations","created":"2021-12-31","cited_by_count":1,"area":null},{"id":"2207.07793","title":"Towards the Desirable Decision Boundary by Moderate-Margin Adversarial Training","created":"2022-07-16","cited_by_count":1,"area":null},{"id":"2311.08265","title":"On The Relationship Between Universal Adversarial Attacks And Sparse Representations","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2403.16405","title":"Ensemble Adversarial Defense via Integration of Multiple Dispersed Low Curvature Models","created":"2024-03-25","cited_by_count":0,"area":null},{"id":"2606.31110","title":"Explaining Machine Learning and Memorization with Statistical Mechanics","created":"2026-06-30","cited_by_count":0,"area":null}],"next_cursor":null}