{"total":129,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2105.07926","title":"Towards Robust Vision Transformer","created":"2021-05-17","cited_by_count":137,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2203.16931","title":"Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyond","created":"2022-03-31","cited_by_count":48,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2202.07105","title":"A Survey on Model Compression and Acceleration for Pretrained Language Models","created":"2022-02-15","cited_by_count":45,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2109.03228","title":"Beyond Preserved Accuracy: Evaluating Loyalty and Robustness of BERT Compression","created":"2021-09-07","cited_by_count":38,"area":null},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38,"area":null},{"id":"2202.01136","title":"Probabilistically Robust Learning: Balancing Average- and Worst-case Performance","created":"2022-02-02","cited_by_count":37,"area":null},{"id":"2210.04213","title":"Towards Understanding and Boosting Adversarial Transferability from a Distribution Perspective","created":"2022-10-09","cited_by_count":37,"area":null},{"id":"2303.17297","title":"Understanding the Robustness of 3D Object Detection with Bird's-Eye-View Representations in Autonomous Driving","created":"2023-03-30","cited_by_count":37,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2110.02180","title":"Noisy Feature Mixup","created":"2021-10-05","cited_by_count":27,"area":null},{"id":"2308.03979","title":"PAIF: Perception-Aware Infrared-Visible Image Fusion for Attack-Tolerant Semantic Segmentation","created":"2023-08-08","cited_by_count":26,"area":null},{"id":"2308.09281","title":"Diverse Cotraining Makes Strong Semi-Supervised Segmentor","created":"2023-08-18","cited_by_count":26,"area":null},{"id":"2101.05507","title":"Evaluating the Robustness of Collaborative Agents","created":"2021-01-14","cited_by_count":25,"area":null},{"id":"2207.02159","title":"Robustness Analysis of Video-Language Models Against Visual and Language Perturbations","created":"2022-07-05","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23,"area":null},{"id":"2103.02200","title":"Formalizing Generalization and Robustness of Neural Networks to Weight Perturbations","created":"2021-03-03","cited_by_count":22,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2205.15465","title":"Analyzing Modality Robustness in Multimodal Sentiment Analysis","created":"2022-05-30","cited_by_count":20,"area":null},{"id":"2103.01895","title":"Adversarial Examples can be Effective Data Augmentation for Unsupervised Machine Learning","created":"2021-03-02","cited_by_count":16,"area":null},{"id":"2306.06712","title":"Neural Architecture Design and Robustness: A Dataset","created":"2023-06-11","cited_by_count":15,"area":null},{"id":"2102.10055","title":"Effective and Efficient Vote Attack on Capsule Networks","created":"2021-02-19","cited_by_count":14,"area":null},{"id":"2110.03135","title":"Label Noise in Adversarial Training: A Novel Perspective to Study Robust Overfitting","created":"2021-10-07","cited_by_count":14,"area":null},{"id":"2105.07985","title":"Gradient Masking and the Underestimated Robustness Threats of Differential Privacy in Deep Learning","created":"2021-05-17","cited_by_count":13,"area":null},{"id":"2302.12366","title":"Less is More: Data Pruning for Faster Adversarial Training","created":"2023-02-23","cited_by_count":13,"area":null},{"id":"2304.05370","title":"Overload: Latency Attacks on Object Detection for Edge Devices","created":"2023-04-11","cited_by_count":13,"area":null},{"id":"2306.01429","title":"A Closer Look at the Adversarial Robustness of Deep Equilibrium Models","created":"2023-06-02","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2205.14230","title":"Semi-supervised Semantics-guided Adversarial Training for Trajectory Prediction","created":"2022-05-27","cited_by_count":12,"area":null},{"id":"2207.06154","title":"On the Robustness of Bayesian Neural Networks to Adversarial Attacks","created":"2022-07-13","cited_by_count":12,"area":null},{"id":"2101.06507","title":"Multi-objective Search of Robust Neural Architectures against Multiple Types of Adversarial Attacks","created":"2021-01-16","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2204.04063","title":"Transfer Attacks Revisited: A Large-Scale Empirical Study in Real Computer Vision Settings","created":"2022-04-07","cited_by_count":11,"area":null},{"id":"2102.09677","title":"Training a Resilient Q-Network against Observational Interference","created":"2021-02-18","cited_by_count":9,"area":null},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9,"area":null},{"id":"2103.10571","title":"Generic Perceptual Loss for Modeling Structured Output Dependencies","created":"2021-03-18","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2211.15762","title":"Understanding the Impact of Adversarial Robustness on Accuracy Disparity","created":"2022-11-28","cited_by_count":9,"area":null},{"id":"2104.15022","title":"Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attacks","created":"2021-04-30","cited_by_count":8,"area":null},{"id":"2105.09109","title":"An Orthogonal Classifier for Improving the Adversarial Robustness of Neural Networks","created":"2021-05-19","cited_by_count":7,"area":null},{"id":"2202.07825","title":"Reducing Overconfidence Predictions for Autonomous Driving Perception","created":"2022-02-16","cited_by_count":7,"area":null},{"id":"2206.01515","title":"Understanding Deep Learning via Decision Boundary","created":"2022-06-03","cited_by_count":7,"area":null},{"id":"2208.05650","title":"Diverse Generative Perturbations on Attention Space for Transferable Adversarial Attacks","created":"2022-08-11","cited_by_count":7,"area":null},{"id":"2211.11312","title":"Understanding the Vulnerability of Skeleton-based Human Activity Recognition via Black-box Attack","created":"2022-11-21","cited_by_count":7,"area":null},{"id":"2106.07141","title":"Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2108.07958","title":"Semantic Perturbations with Normalizing Flows for Improved Generalization","created":"2021-08-18","cited_by_count":6,"area":null},{"id":"2301.03110","title":"RobArch: Designing Robust Architectures against Adversarial Attacks","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2304.08275","title":"Implementing Responsible AI: Tensions and Trade-Offs Between Ethics Aspects","created":"2023-04-17","cited_by_count":6,"area":null},{"id":"2407.20099","title":"RSC-SNN: Exploring the Trade-off Between Adversarial Robustness and Accuracy in Spiking Neural Networks via Randomized Smoothing Coding","created":"2024-07-29","cited_by_count":6,"area":null},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2104.03180","title":"Adversarial Robustness Guarantees for Gaussian Processes","created":"2021-04-07","cited_by_count":5,"area":null},{"id":"2106.09908","title":"Light Lies: Optical Adversarial Attack","created":"2021-06-18","cited_by_count":5,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2211.05656","title":"On Proper Learnability between Average- and Worst-case Robustness","created":"2022-11-10","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2408.08055","title":"DeNOTS: Stable Deep Neural ODEs for Time Series","created":"2024-08-15","cited_by_count":5,"area":null},{"id":"2107.05754","title":"EvoBA: An Evolution Strategy as a Strong Baseline forBlack-Box Adversarial Attacks","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2109.14653","title":"An Empirical Study of Accuracy, Fairness, Explainability, Distributional Robustness, and Adversarial Robustness","created":"2021-09-29","cited_by_count":4,"area":null},{"id":"2203.13277","title":"A Manifold View of Adversarial Risk","created":"2022-03-24","cited_by_count":4,"area":null},{"id":"2205.01493","title":"On the uncertainty principle of neural networks","created":"2022-05-03","cited_by_count":4,"area":null},{"id":"2308.15466","title":"Input margins can predict generalization too","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2402.02738","title":"Improving Robustness of LiDAR-Camera Fusion Model against Weather Corruption from Fusion Strategy Perspective","created":"2024-02-05","cited_by_count":4,"area":null},{"id":"2402.10983","title":"Quantum-Inspired Analysis of Neural Network Vulnerabilities: The Role of Conjugate Variables in System Attacks","created":"2024-02-16","cited_by_count":4,"area":null},{"id":"2404.00540","title":"Embodied Active Defense: Leveraging Recurrent Feedback to Counter Adversarial Patches","created":"2024-03-31","cited_by_count":4,"area":null},{"id":"2103.00363","title":"Tiny Adversarial Mulit-Objective Oneshot Neural Architecture Search","created":"2021-02-28","cited_by_count":3,"area":null},{"id":"2105.15010","title":"Query Attack by Multi-Identity Surrogates","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2111.11056","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2112.01360","title":"Probabilistic Approach for Road-Users Detection","created":"2021-12-02","cited_by_count":3,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2202.05737","title":"Improving Generalization via Uncertainty Driven Perturbations","created":"2022-02-11","cited_by_count":3,"area":null},{"id":"2210.01288","title":"Strength-Adaptive Adversarial Training","created":"2022-10-04","cited_by_count":3,"area":null},{"id":"2301.01218","title":"Tracing the Origin of Adversarial Attack for Forensic Investigation and Deterrence","created":"2022-12-31","cited_by_count":3,"area":null},{"id":"2304.14601","title":"Improve Video Representation with Temporal Adversarial Augmentation","created":"2023-04-28","cited_by_count":3,"area":null},{"id":"2406.04508","title":"OCCAM: Towards Cost-Efficient and Accuracy-Aware Classification Inference","created":"2024-06-06","cited_by_count":3,"area":null},{"id":"2505.14042","title":"Adversarially Pretrained Transformers May Be Universally Robust In-Context Learners","created":"2025-05-20","cited_by_count":3,"area":null},{"id":"2507.23509","title":"I Am Big, You Are Little; I Am Right, You Are Wrong","created":"2025-07-31","cited_by_count":3,"area":null},{"id":"2103.01359","title":"Brain Programming is Immune to Adversarial Attacks: Towards Accurate and Robust Image Classification using Symbolic Learning","created":"2021-03-01","cited_by_count":2,"area":null},{"id":"2103.11372","title":"Natural Perturbed Training for General Robustness of Neural Network Classifiers","created":"2021-03-21","cited_by_count":2,"area":null},{"id":"2105.12427","title":"Deep Repulsive Prototypes for Adversarial Robustness","created":"2021-05-26","cited_by_count":2,"area":null},{"id":"2211.11711","title":"CLAWSAT: Towards Both Robust and Accurate Code Models","created":"2022-11-21","cited_by_count":2,"area":null},{"id":"2303.12363","title":"Distribution-restrained Softmax Loss for the Model Robustness","created":"2023-03-22","cited_by_count":2,"area":null},{"id":"2309.17401","title":"Adversarial Attacks to Latent Representations of Distributed Neural Networks in Split Computing","created":"2023-09-29","cited_by_count":2,"area":null},{"id":"2310.06468","title":"A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks","created":"2023-10-10","cited_by_count":2,"area":null},{"id":"2311.13656","title":"Panda or not Panda? Understanding Adversarial Attacks with Interactive Visualization","created":"2023-11-22","cited_by_count":2,"area":null},{"id":"2402.10470","title":"Theoretical Understanding of Learning from Adversarial Perturbations","created":"2024-02-16","cited_by_count":2,"area":null},{"id":"2505.19397","title":"Are Time-Series Foundation Models Deployment-Ready? A Systematic Study of Adversarial Robustness Across Domains","created":"2025-05-26","cited_by_count":2,"area":null},{"id":"2108.11299","title":"Certifiers Make Neural Networks Vulnerable to Availability Attacks","created":"2021-08-25","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null}],"next_cursor":"100"}