{"total":43,"rows":[{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41,"area":null},{"id":"2201.08956","title":"The Many Faces of Adversarial Risk","created":"2022-01-22","cited_by_count":28,"area":null},{"id":"2102.07788","title":"Universal Adversarial Examples and Perturbations for Quantum Classifiers","created":"2021-02-15","cited_by_count":23,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2212.02531","title":"Enhancing Quantum Adversarial Robustness by Randomized Encodings","created":"2022-12-05","cited_by_count":17,"area":null},{"id":"2103.00671","title":"Robust learning under clean-label attack","created":"2021-03-01","cited_by_count":15,"area":null},{"id":"2103.16910","title":"Trusted Artificial Intelligence: Towards Certification of Machine Learning Applications","created":"2021-03-31","cited_by_count":13,"area":null},{"id":"2105.08709","title":"Learning and Certification under Instance-targeted Poisoning","created":"2021-05-18","cited_by_count":13,"area":null},{"id":"2508.17456","title":"Adversarial Examples Are Not Bugs, They Are Superposition","created":"2025-08-24","cited_by_count":13,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2203.11864","title":"On the (Non-)Robustness of Two-Layer Neural Networks in Different Learning Regimes","created":"2022-03-22","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2302.10722","title":"Characterizing the Optimal 0-1 Loss for Multi-class Classification with a Test-time Attacker","created":"2023-02-21","cited_by_count":6,"area":null},{"id":"2406.10161","title":"On the Computability of Robust PAC Learning","created":"2024-06-14","cited_by_count":6,"area":null},{"id":"2103.12913","title":"Improved Estimation of Concentration Under $\\ell_p$-Norm Distance Metrics Using Half Spaces","created":"2021-03-24","cited_by_count":4,"area":null},{"id":"2203.13779","title":"Origins of Low-dimensional Adversarial Perturbations","created":"2022-03-25","cited_by_count":4,"area":null},{"id":"2205.06127","title":"Sample Complexity Bounds for Robustly Learning Decision Lists against Evasion Attacks","created":"2022-05-12","cited_by_count":4,"area":null},{"id":"2301.13486","title":"Robust Linear Regression: Gradient-descent, Early-stopping, and Beyond","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2305.01808","title":"Hamming Similarity and Graph Laplacians for Class Partitioning and Adversarial Image Detection","created":"2023-05-02","cited_by_count":4,"area":null},{"id":"2107.03250","title":"Understanding Intrinsic Robustness Using Label Uncertainty","created":"2021-07-07","cited_by_count":3,"area":null},{"id":"2107.09502","title":"Feature-Filter: Detecting Adversarial Examples through Filtering off Recessive Features","created":"2021-07-19","cited_by_count":2,"area":null},{"id":"2308.00556","title":"Robust Linear Regression: Phase-Transitions and Precise Tradeoffs for General Norms","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2104.08382","title":"Lower Bounds on Cross-Entropy Loss in the Presence of Test-time Adversaries","created":"2021-04-16","cited_by_count":1,"area":null},{"id":"2109.13215","title":"Classification and Adversarial examples in an Overparameterized Linear Model: A Signal Processing Perspective","created":"2021-09-27","cited_by_count":1,"area":null},{"id":"2112.04033","title":"Image classifiers can not be made robust to small perturbations","created":"2021-12-07","cited_by_count":1,"area":null},{"id":"2210.06089","title":"When are Local Queries Useful for Robust Learning?","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2302.03750","title":"Linking convolutional kernel size to generalization bias in face analysis CNNs","created":"2023-02-07","cited_by_count":1,"area":null},{"id":"2308.10201","title":"Hiding Backdoors within Event Sequence Data via Poisoning Attacks","created":"2023-08-20","cited_by_count":1,"area":null},{"id":"2402.02154","title":"Evaluating the Robustness of Off-Road Autonomous Driving Segmentation against Adversarial Attacks: A Dataset-Centric analysis","created":"2024-02-03","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2607.11095","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","created":"2026-07-13","cited_by_count":1,"area":null},{"id":"2403.01896","title":"Robustness bounds on the successful adversarial examples in probabilistic models: Implications from Gaussian processes","created":"2024-03-04","cited_by_count":0,"area":null},{"id":"2410.13193","title":"Golyadkin's Torment: Doppelg\\\"angers and Adversarial Vulnerability","created":"2024-10-17","cited_by_count":0,"area":null},{"id":"2411.06863","title":"Computable Model-Independent Bounds for Adversarial Quantum Machine Learning","created":"2024-11-11","cited_by_count":0,"area":null},{"id":"2412.05943","title":"Adversarial Transferability in Deep Denoising Models: Theoretical Insights and Robustness Enhancement via Out-of-Distribution Typical Set Sampling","created":"2024-12-08","cited_by_count":0,"area":null},{"id":"2506.06613","title":"Robust Learnability of Sample-Compressible Distributions under Noisy or Adversarial Perturbations","created":"2025-06-07","cited_by_count":0,"area":null},{"id":"2506.12613","title":"Existence of Adversarial Examples for Random Convolutional Networks via Isoperimetric Inequalities on $\\mathbb{so}(d)$","created":"2025-06-14","cited_by_count":0,"area":null},{"id":"2512.19155","title":"Can We Test Consciousness Theories on AI? Ablations, Markers, and Robustness","created":"2025-12-22","cited_by_count":0,"area":null},{"id":"2606.26207","title":"The Role of Input Dimensionality in the Emergence and Targeted Control of Adversarial Examples","created":"2026-06-24","cited_by_count":0,"area":null},{"id":"2607.08370","title":"Tubular Neighbourhoods of Pfaffian Sets and Applications to Neural Networks","created":"2026-07-09","cited_by_count":0,"area":null}],"next_cursor":null}