{"total":64,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65,"area":null},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2111.09277","title":"SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness","created":"2021-11-17","cited_by_count":49,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2305.00241","title":"When Deep Learning Meets Polyhedral Theory: A Survey","created":"2023-04-29","cited_by_count":39,"area":null},{"id":"2104.02466","title":"A Review of Formal Methods applied to Machine Learning","created":"2021-04-06","cited_by_count":33,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2307.10266","title":"A DPLL(T) Framework for Verifying Deep Neural Networks","created":"2023-07-17","cited_by_count":24,"area":null},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2206.14772","title":"IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound","created":"2022-06-29","cited_by_count":21,"area":null},{"id":"2102.07804","title":"Scaling Up Exact Neural Network Compression by ReLU Stability","created":"2021-02-15","cited_by_count":19,"area":null},{"id":"2312.12791","title":"Model-Based Control with Sparse Neural Dynamics","created":"2023-12-20","cited_by_count":16,"area":null},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15,"area":null},{"id":"2206.07311","title":"Can pruning improve certified robustness of neural networks?","created":"2022-06-15","cited_by_count":14,"area":null},{"id":"2401.14412","title":"Harnessing Neuron Stability to Improve DNN Verification","created":"2024-01-19","cited_by_count":13,"area":null},{"id":"2210.04311","title":"Pruning Adversarially Robust Neural Networks without Adversarial Examples","created":"2022-10-09","cited_by_count":12,"area":null},{"id":"2206.07839","title":"Linearity Grafting: Relaxed Neuron Pruning Helps Certifiable Robustness","created":"2022-06-15","cited_by_count":10,"area":null},{"id":"2401.03451","title":"Optimization Over Trained Neural Networks: Taking a Relaxing Walk","created":"2024-01-07","cited_by_count":10,"area":null},{"id":"2203.07505","title":"Closing the Loop: A Framework for Trustworthy Machine Learning in Power Systems","created":"2022-03-14","cited_by_count":9,"area":null},{"id":"2210.01111","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","created":"2022-10-03","cited_by_count":9,"area":null},{"id":"2211.10752","title":"Towards Robust Dataset Learning","created":"2022-11-19","cited_by_count":9,"area":null},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2512.11087","title":"Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification","created":"2025-12-11","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2301.07966","title":"Getting Away with More Network Pruning: From Sparsity to Geometry and Linear Regions","created":"2023-01-19","cited_by_count":8,"area":null},{"id":"2106.06624","title":"Relaxing Local Robustness","created":"2021-06-11","cited_by_count":6,"area":null},{"id":"2102.01208","title":"Fast Training of Provably Robust Neural Networks by SingleProp","created":"2021-02-01","cited_by_count":5,"area":null},{"id":"2203.08961","title":"On the Convergence of Certified Robust Training with Interval Bound Propagation","created":"2022-03-16","cited_by_count":5,"area":null},{"id":"2109.00936","title":"Impact of Attention on Adversarial Robustness of Image Classification Models","created":"2021-09-02","cited_by_count":4,"area":null},{"id":"2112.05235","title":"The Fundamental Limits of Interval Arithmetic for Neural Networks","created":"2021-12-09","cited_by_count":4,"area":null},{"id":"2208.08609","title":"A Scalable, Interpretable, Verifiable & Differentiable Logic Gate Convolutional Neural Network Architecture From Truth Tables","created":"2022-08-18","cited_by_count":4,"area":null},{"id":"2210.14410","title":"Improving Adversarial Robustness via Joint Classification and Multiple Explicit Detection Classes","created":"2022-10-26","cited_by_count":4,"area":null},{"id":"2211.17244","title":"Tight Certification of Adversarially Trained Neural Networks via Nonconvex Low-Rank Semidefinite Relaxations","created":"2022-11-30","cited_by_count":4,"area":null},{"id":"2301.08842","title":"Limitations of Piecewise Linearity for Efficient Robustness Certification","created":"2023-01-21","cited_by_count":4,"area":null},{"id":"2302.01375","title":"On the Robustness of Randomized Ensembles to Adversarial Perturbations","created":"2023-02-02","cited_by_count":3,"area":null},{"id":"2305.03626","title":"Verifiable Learning for Robust Tree Ensembles","created":"2023-05-05","cited_by_count":3,"area":null},{"id":"2207.07208","title":"Provably Adversarially Robust Nearest Prototype Classifiers","created":"2022-07-14","cited_by_count":2,"area":null},{"id":"2306.14326","title":"Computational Asymmetries in Robust Classification","created":"2023-06-25","cited_by_count":2,"area":null},{"id":"2311.17128","title":"Vulnerability Analysis of Transformer-based Optical Character Recognition to Adversarial Attacks","created":"2023-11-28","cited_by_count":2,"area":null},{"id":"2312.10587","title":"E2E-AT: A Unified Framework for Tackling Uncertainty in Task-aware End-to-end Learning","created":"2023-12-17","cited_by_count":2,"area":null},{"id":"2502.03016","title":"An analysis of optimization problems involving ReLU neural networks","created":"2025-02-05","cited_by_count":2,"area":null},{"id":"2604.22746","title":"Relaxation-Informed Training of Neural Network Surrogate Models","created":"2026-04-24","cited_by_count":2,"area":null},{"id":"2102.05475","title":"Adversarial Robustness: What fools you makes you stronger","created":"2021-02-10","cited_by_count":1,"area":null},{"id":"2111.10272","title":"Resilience from Diversity: Population-based approach to harden models against adversarial attacks","created":"2021-11-19","cited_by_count":1,"area":null},{"id":"2112.07007","title":"Optimizing over an ensemble of neural networks","created":"2021-12-13","cited_by_count":1,"area":null},{"id":"2308.06612","title":"On the Interplay of Convolutional Padding and Adversarial Robustness","created":"2023-08-12","cited_by_count":1,"area":null},{"id":"2312.10911","title":"The Pros and Cons of Adversarial Robustness","created":"2023-12-18","cited_by_count":1,"area":null},{"id":"2503.20454","title":"Lipschitz Constant Meets Condition Number: Learning Robust and Compact Deep Neural Networks","created":"2025-03-26","cited_by_count":1,"area":null},{"id":"2203.09243","title":"On the Properties of Adversarially-Trained CNNs","created":"2022-03-17","cited_by_count":0,"area":null},{"id":"2209.08645","title":"Emission-Aware Optimization of Gas Networks: Input-Convex Neural Network Approach","created":"2022-09-18","cited_by_count":0,"area":null},{"id":"2307.03803","title":"A Theoretical Perspective on Subnetwork Contributions to Adversarial Robustness","created":"2023-07-07","cited_by_count":0,"area":null},{"id":"2402.14988","title":"Verifiable Boosted Tree Ensembles","created":"2024-02-22","cited_by_count":0,"area":null},{"id":"2411.08933","title":"Confidence-aware Denoised Fine-tuning of Off-the-shelf Models for Certified Robustness","created":"2024-11-13","cited_by_count":0,"area":null},{"id":"2504.11831","title":"Support is All You Need for Certified VAE Training","created":"2025-04-16","cited_by_count":0,"area":null},{"id":"2505.01985","title":"Optimization over Trained (and Sparse) Neural Networks: A Surrogate within a Surrogate","created":"2025-05-04","cited_by_count":0,"area":null},{"id":"2506.11992","title":"Compression Aware Certified Training","created":"2025-06-13","cited_by_count":0,"area":null},{"id":"2510.25130","title":"Lipschitz-aware Linearity Grafting for Certified Robustness","created":"2025-10-29","cited_by_count":0,"area":null},{"id":"2607.18195","title":"Certified Training for Convolutional Perturbations","created":"2026-07-20","cited_by_count":0,"area":null}],"next_cursor":null}