{"total":110,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59,"area":null},{"id":"2203.08124","title":"Can Neural Nets Learn the Same Model Twice? Investigating Reproducibility and Double Descent from the Decision Boundary Perspective","created":"2022-03-15","cited_by_count":57,"area":null},{"id":"2102.12781","title":"Do Input Gradients Highlight Discriminative Features?","created":"2021-02-25","cited_by_count":52,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2204.02735","title":"Distilling Robust and Non-Robust Features in Adversarial Examples by Information Bottleneck","created":"2022-04-06","cited_by_count":30,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2205.13863","title":"Why Robust Generalization in Deep Learning is Difficult: Perspective of Expressive Power","created":"2022-05-27","cited_by_count":23,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2303.01052","title":"Demystifying Causal Features on Adversarial Examples and Causal Inoculation for Robust Network by Adversarial Instrumental Variable Regression","created":"2023-03-02","cited_by_count":18,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2206.05511","title":"Improving the Adversarial Robustness of NLP Models by Information Bottleneck","created":"2022-06-11","cited_by_count":17,"area":null},{"id":"2103.02695","title":"Shift Invariance Can Reduce Adversarial Robustness","created":"2021-03-03","cited_by_count":16,"area":null},{"id":"2109.06098","title":"The mathematics of adversarial attacks in AI -- Why deep learning is unstable despite the existence of stable neural networks","created":"2021-09-13","cited_by_count":16,"area":null},{"id":"2310.18936","title":"Adversarial Examples Are Not Real Features","created":"2023-10-29","cited_by_count":16,"area":null},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15,"area":null},{"id":"2305.01074","title":"Physical Adversarial Attacks for Surveillance: A Survey","created":"2023-05-01","cited_by_count":15,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2210.12030","title":"Evolution of Neural Tangent Kernels under Benign and Adversarial Training","created":"2022-10-21","cited_by_count":14,"area":null},{"id":"2203.17209","title":"Adversarial Examples in Random Neural Networks with General Activations","created":"2022-03-31","cited_by_count":13,"area":null},{"id":"2508.17456","title":"Adversarial Examples Are Not Bugs, They Are Superposition","created":"2025-08-24","cited_by_count":13,"area":null},{"id":"2106.13997","title":"The Feasibility and Inevitability of Stealth Attacks","created":"2021-06-26","cited_by_count":12,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2203.11864","title":"On the (Non-)Robustness of Two-Layer Neural Networks in Different Learning Regimes","created":"2022-03-22","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2101.09849","title":"Deep Learning Generalization and the Convex Hull of Training Sets","created":"2021-01-25","cited_by_count":10,"area":null},{"id":"2103.09947","title":"Understanding Generalization in Adversarial Training via the Bias-Variance Decomposition","created":"2021-03-17","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2101.12100","title":"Increasing the Confidence of Deep Neural Networks by Coverage Analysis","created":"2021-01-28","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2401.12236","title":"The Surprising Harmfulness of Benign Overfitting for Adversarial Robustness","created":"2024-01-19","cited_by_count":9,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2307.12822","title":"Learning Provably Robust Estimators for Inverse Problems via Jittering","created":"2023-07-24","cited_by_count":8,"area":null},{"id":"2102.05110","title":"Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers","created":"2021-02-09","cited_by_count":7,"area":null},{"id":"2305.04746","title":"Understanding Noise-Augmented Training for Randomized Smoothing","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2306.02918","title":"Adversarial Ink: Componentwise Backward Error Attacks on Deep Learning","created":"2023-06-05","cited_by_count":7,"area":null},{"id":"2310.07745","title":"Deep Reinforcement Learning for Autonomous Cyber Defence: A Survey","created":"2023-10-11","cited_by_count":7,"area":null},{"id":"2105.00433","title":"Who's Afraid of Adversarial Transferability?","created":"2021-05-02","cited_by_count":6,"area":null},{"id":"2203.10502","title":"Adversarial Parameter Attack on Deep Neural Networks","created":"2022-03-20","cited_by_count":6,"area":null},{"id":"2406.10161","title":"On the Computability of Robust PAC Learning","created":"2024-06-14","cited_by_count":6,"area":null},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2202.04052","title":"Decision boundaries and convex hulls in the feature space that deep learning functions learn from images","created":"2022-02-05","cited_by_count":5,"area":null},{"id":"2210.03297","title":"Preprocessors Matter! Realistic Decision-Based Attacks on Machine Learning Systems","created":"2022-10-07","cited_by_count":5,"area":null},{"id":"2303.14173","title":"How many dimensions are required to find an adversarial example?","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2309.07072","title":"The Boundaries of Verifiable Accuracy, Robustness, and Generalisation in Deep Learning","created":"2023-09-13","cited_by_count":5,"area":null},{"id":"2405.15942","title":"Can Implicit Bias Imply Adversarial Robustness?","created":"2024-05-24","cited_by_count":5,"area":null},{"id":"2406.04981","title":"The Price of Implicit Bias in Adversarially Robust Generalization","created":"2024-06-07","cited_by_count":5,"area":null},{"id":"2103.12913","title":"Improved Estimation of Concentration Under $\\ell_p$-Norm Distance Metrics Using Half Spaces","created":"2021-03-24","cited_by_count":4,"area":null},{"id":"2203.13779","title":"Origins of Low-dimensional Adversarial Perturbations","created":"2022-03-25","cited_by_count":4,"area":null},{"id":"2205.06127","title":"Sample Complexity Bounds for Robustly Learning Decision Lists against Evasion Attacks","created":"2022-05-12","cited_by_count":4,"area":null},{"id":"2209.07235","title":"Sound and Complete Verification of Polynomial Networks","created":"2022-09-15","cited_by_count":4,"area":null},{"id":"2301.13486","title":"Robust Linear Regression: Gradient-descent, Early-stopping, and Beyond","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2301.13869","title":"Reverse engineering adversarial attacks with fingerprints from adversarial examples","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2309.03665","title":"How adversarial attacks can disrupt seemingly stable accurate classifiers","created":"2023-09-07","cited_by_count":4,"area":null},{"id":"2107.03250","title":"Understanding Intrinsic Robustness Using Label Uncertainty","created":"2021-07-07","cited_by_count":3,"area":null},{"id":"2306.15457","title":"Robust Proxy: Improving Adversarial Robustness by Robust Proxy Learning","created":"2023-06-27","cited_by_count":3,"area":null},{"id":"2307.11672","title":"Robust Feature Inference: A Test-time Defense Strategy using Spectral Projections","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2404.08069","title":"Persistent Classification: A New Approach to Stability of Data and Adversarial Examples","created":"2024-04-11","cited_by_count":3,"area":null},{"id":"2411.01644","title":"Achieving Domain-Independent Certified Robustness via Knowledge Continuity","created":"2024-11-03","cited_by_count":3,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2107.09502","title":"Feature-Filter: Detecting Adversarial Examples through Filtering off Recessive Features","created":"2021-07-19","cited_by_count":2,"area":null},{"id":"2201.05071","title":"Evaluation of Neural Networks Defenses and Attacks using NDCG and Reciprocal Rank Metrics","created":"2022-01-10","cited_by_count":2,"area":null},{"id":"2302.10896","title":"IB-RAR: Information Bottleneck as Regularizer for Adversarial Robustness","created":"2023-02-09","cited_by_count":2,"area":null},{"id":"2308.00556","title":"Robust Linear Regression: Phase-Transitions and Precise Tradeoffs for General Norms","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2404.13631","title":"Fermi-Bose Machine achieves both generalization and adversarial robustness","created":"2024-04-21","cited_by_count":2,"area":null},{"id":"2604.17140","title":"Local Inconsistency Resolution: The Interplay between Attention and Control in Probabilistic Models","created":"2026-04-18","cited_by_count":2,"area":null},{"id":"2103.13612","title":"THAT: Two Head Adversarial Training for Improving Robustness at Scale","created":"2021-03-25","cited_by_count":1,"area":null},{"id":"2109.13215","title":"Classification and Adversarial examples in an Overparameterized Linear Model: A Signal Processing Perspective","created":"2021-09-27","cited_by_count":1,"area":null},{"id":"2203.10366","title":"Deep Learning Generalization, Extrapolation, and Over-parameterization","created":"2022-03-19","cited_by_count":1,"area":null},{"id":"2205.15357","title":"Searching for the Essence of Adversarial Perturbations","created":"2022-05-30","cited_by_count":1,"area":null},{"id":"2208.09285","title":"Shadows Aren't So Dangerous After All: A Fast and Robust Defense Against Shadow-Based Adversarial Attacks","created":"2022-08-18","cited_by_count":1,"area":null},{"id":"2210.06089","title":"When are Local Queries Useful for Robust Learning?","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2304.06575","title":"Adversarial Examples from Dimensional Invariance","created":"2023-04-13","cited_by_count":1,"area":null},{"id":"2306.10963","title":"Eigenpatches -- Adversarial Patches from Principal Components","created":"2023-06-19","cited_by_count":1,"area":null},{"id":"2401.13624","title":"Can overfitted deep neural networks in adversarial training generalize? -- An approximation viewpoint","created":"2024-01-24","cited_by_count":1,"area":null},{"id":"2405.14176","title":"Certified Robustness against Sparse Adversarial Perturbations via Data Localization","created":"2024-05-23","cited_by_count":1,"area":null},{"id":"2412.01527","title":"Traversing the Subspace of Adversarial Patches","created":"2024-12-02","cited_by_count":1,"area":null},{"id":"2503.06361","title":"Adversarial Robustness of Discriminative Self-Supervised Learning in Vision","created":"2025-03-08","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2103.00695","title":"Federated Learning without Revealing the Decision Boundaries","created":"2021-03-01","cited_by_count":0,"area":null},{"id":"2106.05825","title":"HASI: Hardware-Accelerated Stochastic Inference, A Defense Against Adversarial Machine Learning Attacks","created":"2021-06-09","cited_by_count":0,"area":null},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2107.02894","title":"Adversarial Machine Learning for Cybersecurity and Computer Vision: Current Developments and Challenges","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2108.04409","title":"On Procedural Adversarial Noise Attack And Defense","created":"2021-08-10","cited_by_count":0,"area":null},{"id":"2111.10075","title":"Enhanced countering adversarial attacks via input denoising and feature restoring","created":"2021-11-19","cited_by_count":0,"area":null},{"id":"2204.01099","title":"Adversarially robust segmentation models learn perceptually-aligned gradients","created":"2022-04-03","cited_by_count":0,"area":null},{"id":"2207.08137","title":"Achieve Optimal Adversarial Accuracy for Adversarial Deep Learning using Stackelberg Game","created":"2022-07-17","cited_by_count":0,"area":null},{"id":"2211.10227","title":"Adversarial Detection by Approximation of Ensemble Boundary","created":"2022-11-18","cited_by_count":0,"area":null},{"id":"2305.08439","title":"Exploiting Frequency Spectrum of Adversarial Images for General Robustness","created":"2023-05-15","cited_by_count":0,"area":null},{"id":"2305.15203","title":"Frequency maps reveal the correlation between Adversarial Attacks and Implicit Bias","created":"2023-05-24","cited_by_count":0,"area":null},{"id":"2306.15482","title":"Cooperation or Competition: Avoiding Player Domination for Multi-Target Robustness via Adaptive Budgets","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2308.15092","title":"Can We Rely on AI?","created":"2023-08-29","cited_by_count":0,"area":null},{"id":"2309.15669","title":"On the Computational Entanglement of Distant Features in Adversarial Machine Learning","created":"2023-09-27","cited_by_count":0,"area":null},{"id":"2309.16878","title":"Investigating Human-Identifiable Features Hidden in Adversarial Perturbations","created":"2023-09-28","cited_by_count":0,"area":null},{"id":"2311.08265","title":"On The Relationship Between Universal Adversarial Attacks And Sparse Representations","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2402.04660","title":"Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks","created":"2024-02-07","cited_by_count":0,"area":null},{"id":"2403.01896","title":"Robustness bounds on the successful adversarial examples in probabilistic models: Implications from Gaussian processes","created":"2024-03-04","cited_by_count":0,"area":null}],"next_cursor":"100"}