{"total":44,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84,"area":null},{"id":"2111.09571","title":"Person Re-identification Method Based on Color Attack and Joint Defence","created":"2021-11-18","cited_by_count":56,"area":null},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2110.14188","title":"RoMA: Robust Model Adaptation for Offline Model-based Optimization","created":"2021-10-27","cited_by_count":39,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2407.13646","title":"Beyond Dropout: Robust Convolutional Neural Networks Based on Local Feature Masking","created":"2024-07-18","cited_by_count":19,"area":null},{"id":"2308.12857","title":"Fast Adversarial Training with Smooth Convergence","created":"2023-08-24","cited_by_count":14,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2106.10196","title":"Federated Robustness Propagation: Sharing Robustness in Heterogeneous Federated Learning","created":"2021-06-18","cited_by_count":9,"area":null},{"id":"2107.05911","title":"Model Transferability With Responsive Decision Subjects","created":"2021-07-13","cited_by_count":9,"area":null},{"id":"2203.04713","title":"Defending Black-box Skeleton-based Human Activity Classifiers","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2204.07373","title":"Revisiting the Adversarial Robustness-Accuracy Tradeoff in Robot Learning","created":"2022-04-15","cited_by_count":7,"area":null},{"id":"2102.03156","title":"Optimal Transport as a Defense Against Adversarial Attacks","created":"2021-02-05","cited_by_count":6,"area":null},{"id":"2109.01275","title":"A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples","created":"2021-09-03","cited_by_count":6,"area":null},{"id":"2210.03150","title":"Towards Out-of-Distribution Adversarial Robustness","created":"2022-10-06","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2106.15357","title":"Multi-stage Optimization based Adversarial Training","created":"2021-06-26","cited_by_count":4,"area":null},{"id":"2109.00678","title":"Regional Adversarial Training for Better Robust Generalization","created":"2021-09-02","cited_by_count":4,"area":null},{"id":"2212.05387","title":"General Adversarial Defense Against Black-box Attacks via Pixel Level and Feature Level Distribution Alignments","created":"2022-12-11","cited_by_count":4,"area":null},{"id":"2206.08661","title":"Boosting Factorization Machines via Saliency-Guided Mixup","created":"2022-06-17","cited_by_count":3,"area":null},{"id":"2211.16806","title":"Toward Robust Diagnosis: A Contour Attention Preserving Adversarial Defense for COVID-19 Detection","created":"2022-11-30","cited_by_count":3,"area":null},{"id":"2305.15709","title":"PEARL: Preprocessing Enhanced Adversarial Robust Learning of Image Deraining for Semantic Segmentation","created":"2023-05-25","cited_by_count":3,"area":null},{"id":"2402.08768","title":"Adversarially Robust Feature Learning for Breast Cancer Diagnosis","created":"2024-02-13","cited_by_count":3,"area":null},{"id":"2403.18423","title":"SemRoDe: Macro Adversarial Training to Learn Representations That are Robust to Word-Level Attacks","created":"2024-03-27","cited_by_count":3,"area":null},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2405.13324","title":"Adversarial Training via Adaptive Knowledge Amalgamation of an Ensemble of Teachers","created":"2024-05-22","cited_by_count":2,"area":null},{"id":"2401.11126","title":"CARE: Ensemble Adversarial Robustness Evaluation Against Adaptive Attackers for Security Applications","created":"2024-01-20","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2505.19940","title":"Task-Oriented Low-Label Semantic Communication With Self-Supervised Learning","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2101.05624","title":"Adversarially Robust and Explainable Model Compression with On-Device Personalization for Text Classification","created":"2021-01-10","cited_by_count":0,"area":null},{"id":"2101.06171","title":"Probabilistic Inference for Learning from Untrusted Sources","created":"2021-01-15","cited_by_count":0,"area":null},{"id":"2112.00428","title":"Adv-4-Adv: Thwarting Changing Adversarial Perturbations via Adversarial Domain Adaptation","created":"2021-12-01","cited_by_count":0,"area":null},{"id":"2407.13625","title":"Distributionally and Adversarially Robust Logistic Regression via Intersecting Wasserstein Balls","created":"2024-07-18","cited_by_count":0,"area":null},{"id":"2412.19947","title":"Standard-Deviation-Inspired Regularization for Improving Adversarial Robustness","created":"2024-12-27","cited_by_count":0,"area":null},{"id":"2509.08225","title":"Ensemble Distribution Distillation for Self-Supervised Human Activity Recognition","created":"2025-09-10","cited_by_count":0,"area":null},{"id":"2511.12491","title":"Uncover and Unlearn Nuisances: Agnostic Fully Test-Time Adaptation","created":"2025-11-16","cited_by_count":0,"area":null}],"next_cursor":null}