{"total":180,"rows":[{"id":"2309.02705","title":"Certifying LLM Safety against Adversarial Prompting","created":"2023-09-06","cited_by_count":266,"area":"safety"},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65,"area":null},{"id":"2110.12690","title":"A Dynamical System Perspective for Lipschitz Neural Networks","created":"2021-10-25","cited_by_count":60,"area":null},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2103.03046","title":"PointGuard: Provably Robust 3D Point Cloud Classification","created":"2021-03-04","cited_by_count":49,"area":null},{"id":"2111.09277","title":"SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness","created":"2021-11-17","cited_by_count":49,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2108.04062","title":"Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100","created":"2021-08-05","cited_by_count":47,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2208.03160","title":"Almost-Orthogonal Layers for Efficient General-Purpose Lipschitz Networks","created":"2022-08-05","cited_by_count":39,"area":null},{"id":"2110.06513","title":"Benchmarking the Robustness of Spatial-Temporal Models Against Corruptions","created":"2021-10-13","cited_by_count":34,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2110.05365","title":"Intriguing Properties of Input-dependent Randomized Smoothing","created":"2021-10-11","cited_by_count":24,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2107.04570","title":"ANCER: Anisotropic Certification via Sample-wise Volume Maximization","created":"2021-07-09","cited_by_count":23,"area":null},{"id":"2206.07912","title":"Double Sampling Randomized Smoothing","created":"2022-06-16","cited_by_count":22,"area":null},{"id":"2212.10230","title":"A Comprehensive Study of the Robustness for LiDAR-based 3D Object Detectors against Adversarial Attacks","created":"2022-12-20","cited_by_count":22,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2306.08257","title":"On the Robustness of Latent Diffusion Models","created":"2023-06-14","cited_by_count":21,"area":"diffusion"},{"id":"2106.06685","title":"Adversarial Robustness via Fisher-Rao Regularization","created":"2021-06-12","cited_by_count":19,"area":null},{"id":"2109.10696","title":"CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networks","created":"2021-09-22","cited_by_count":19,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2405.03316","title":"Provably Unlearnable Data Examples","created":"2024-05-06","cited_by_count":18,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2212.02531","title":"Enhancing Quantum Adversarial Robustness by Randomized Encodings","created":"2022-12-05","cited_by_count":17,"area":null},{"id":"2403.10144","title":"NLP Verification: Towards a General Methodology for Certifying Robustness","created":"2024-03-15","cited_by_count":16,"area":null},{"id":"2202.11910","title":"Robust Probabilistic Time Series Forecasting","created":"2022-02-24","cited_by_count":15,"area":null},{"id":"2206.11225","title":"RetrievalGuard: Provably Robust 1-Nearest Neighbor Image Retrieval","created":"2022-06-17","cited_by_count":15,"area":null},{"id":"2207.11378","title":"Do Perceptually Aligned Gradients Imply Adversarial Robustness?","created":"2022-07-22","cited_by_count":15,"area":null},{"id":"2210.06077","title":"Double Bubble, Toil and Trouble: Enhancing Certified Robustness through Transitivity","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2204.00487","title":"Robust and Accurate -- Compositional Architectures for Randomized Smoothing","created":"2022-04-01","cited_by_count":12,"area":null},{"id":"2311.17983","title":"Improving Interpretation Faithfulness for Vision Transformers","created":"2023-11-29","cited_by_count":12,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2206.11423","title":"Input-agnostic Certified Group Fairness via Gaussian Parameter Smoothing","created":"2022-06-22","cited_by_count":11,"area":null},{"id":"2304.06430","title":"Certified Zeroth-order Black-Box Defense with Robust UNet Denoiser","created":"2023-04-13","cited_by_count":11,"area":null},{"id":"2305.04574","title":"TAPS: Connecting Certified and Adversarial Training","created":"2023-05-08","cited_by_count":11,"area":null},{"id":"2309.13794","title":"Projected Randomized Smoothing for Certified Adversarial Robustness","created":"2023-09-25","cited_by_count":11,"area":null},{"id":"2107.01561","title":"Certifiably Robust Interpretation via Renyi Differential Privacy","created":"2021-07-04","cited_by_count":10,"area":null},{"id":"2210.16140","title":"Localized Randomized Smoothing for Collective Robustness Certification","created":"2022-10-28","cited_by_count":10,"area":null},{"id":"2304.03370","title":"Reliable learning in challenging environments","created":"2023-04-06","cited_by_count":10,"area":null},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9,"area":null},{"id":"2108.13952","title":"Morphence: Moving Target Defense Against Adversarial Examples","created":"2021-08-31","cited_by_count":9,"area":null},{"id":"2202.11592","title":"A Law of Robustness beyond Isoperimetry","created":"2022-02-23","cited_by_count":9,"area":null},{"id":"2203.00849","title":"Adversarially Robust Learning with Tolerance","created":"2022-03-02","cited_by_count":9,"area":null},{"id":"2210.01111","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","created":"2022-10-03","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9,"area":null},{"id":"2211.10752","title":"Towards Robust Dataset Learning","created":"2022-11-19","cited_by_count":9,"area":null},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2301.07912","title":"Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllers","created":"2023-01-19","cited_by_count":9,"area":null},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9,"area":null},{"id":"2112.05310","title":"Robustness Certificates for Implicit Neural Networks: A Mixed Monotone Contractive Approach","created":"2021-12-10","cited_by_count":8,"area":null},{"id":"2206.02435","title":"Tackling covariate shift with node-based Bayesian neural networks","created":"2022-06-06","cited_by_count":8,"area":null},{"id":"2206.07188","title":"Defending Observation Attacks in Deep Reinforcement Learning via Detection and Denoising","created":"2022-06-14","cited_by_count":8,"area":null},{"id":"2207.09572","title":"Robust Multivariate Time-Series Forecasting: Adversarial Attacks and Defense Mechanisms","created":"2022-07-19","cited_by_count":8,"area":null},{"id":"2302.01961","title":"Asymmetric Certified Robustness via Feature-Convex Neural Networks","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2403.12063","title":"Consistency Model is an Effective Posterior Sample Approximation for Diffusion Inverse Solvers","created":"2024-02-09","cited_by_count":8,"area":"diffusion"},{"id":"2501.16497","title":"Smoothed Embeddings for Robust Language Models","created":"2025-01-27","cited_by_count":8,"area":"safety"},{"id":"2108.09413","title":"Integer-arithmetic-only Certified Robustness for Quantized Neural Networks","created":"2021-08-21","cited_by_count":7,"area":null},{"id":"2204.14187","title":"Randomized Smoothing under Attack: How Good is it in Pratice?","created":"2022-04-28","cited_by_count":7,"area":null},{"id":"2207.04307","title":"Adversarial Framework with Certified Robustness for Time-Series Domain via Statistical Features","created":"2022-07-09","cited_by_count":7,"area":null},{"id":"2210.14283","title":"Accelerating Certified Robustness Training via Knowledge Transfer","created":"2022-10-25","cited_by_count":7,"area":null},{"id":"2305.04746","title":"Understanding Noise-Augmented Training for Randomized Smoothing","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2103.01276","title":"A Multiclass Boosting Framework for Achieving Fast and Provable Adversarial Robustness","created":"2021-03-01","cited_by_count":6,"area":null},{"id":"2106.14432","title":"Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations","created":"2021-06-28","cited_by_count":6,"area":null},{"id":"2109.01275","title":"A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples","created":"2021-09-03","cited_by_count":6,"area":null},{"id":"2202.01186","title":"Smoothed Embeddings for Certified Few-Shot Learning","created":"2022-02-02","cited_by_count":6,"area":null},{"id":"2208.03835","title":"On Transfer of Adversarial Robustness from Pretraining to Downstream Tasks","created":"2022-08-07","cited_by_count":6,"area":null},{"id":"2306.08656","title":"Augment then Smooth: Reconciling Differential Privacy with Certified Robustness","created":"2023-06-14","cited_by_count":6,"area":null},{"id":"2501.00418","title":"Generalizing Trust: Weak-to-Strong Trustworthiness in Language Models","created":"2024-12-31","cited_by_count":6,"area":null},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2102.08557","title":"Re-identification of Individuals in Genomic Datasets Using Public Face Images","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2109.05223","title":"2-in-1 Accelerator: Enabling Random Precision Switch for Winning Both Adversarial Robustness and Efficiency","created":"2021-09-11","cited_by_count":5,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2203.08961","title":"On the Convergence of Certified Robust Training with Interval Bound Propagation","created":"2022-03-16","cited_by_count":5,"area":null},{"id":"2205.13909","title":"(De-)Randomized Smoothing for Decision Stump Ensembles","created":"2022-05-27","cited_by_count":5,"area":null},{"id":"2208.12428","title":"Robust Prototypical Few-Shot Organ Segmentation with Regularized Neural-ODEs","created":"2022-08-26","cited_by_count":5,"area":null},{"id":"2304.02693","title":"A Certified Radius-Guided Attack Framework to Image Segmentation Models","created":"2023-04-05","cited_by_count":5,"area":null},{"id":"2308.00854","title":"Training on Foveated Images Improves Robustness to Adversarial Attacks","created":"2023-08-01","cited_by_count":5,"area":null},{"id":"2308.08906","title":"Towards a Practical Defense against Adversarial Attacks on Deep Learning-based Malware Detectors via Randomized Smoothing","created":"2023-08-17","cited_by_count":5,"area":null},{"id":"2411.03279","title":"Oblivious Defense in ML Models: Backdoor Removal without Detection","created":"2024-11-05","cited_by_count":5,"area":null},{"id":"2103.00778","title":"Explaining Adversarial Vulnerability with a Data Sparsity Hypothesis","created":"2021-03-01","cited_by_count":4,"area":null},{"id":"2105.02803","title":"Dynamic Defense Approach for Adversarial Robustness in Deep Neural Networks via Stochastic Ensemble Smoothed Model","created":"2021-05-06","cited_by_count":4,"area":null},{"id":"2206.12364","title":"On Certifying and Improving Generalization to Unseen Domains","created":"2022-06-24","cited_by_count":4,"area":null},{"id":"2302.04379","title":"Et Tu Certifications: Robustness Certificates Yield Better Adversarial Examples","created":"2023-02-09","cited_by_count":4,"area":null},{"id":"2302.07221","title":"On the Role of Randomization in Adversarially Robust Classification","created":"2023-02-14","cited_by_count":4,"area":null},{"id":"2304.10446","title":"Certified Adversarial Robustness Within Multiple Perturbation Bounds","created":"2023-04-20","cited_by_count":4,"area":null}],"next_cursor":"100"}