{"total":69,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2107.02425","title":"GradDiv: Adversarial Robustness of Randomized Neural Networks via Gradient Diversity Regularization","created":"2021-07-06","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2302.05086","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","created":"2023-02-10","cited_by_count":32,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2102.05289","title":"Bayesian Inference with Certifiable Adversarial Robustness","created":"2021-02-10","cited_by_count":26,"area":null},{"id":"2307.09520","title":"Adversarial Bayesian Augmentation for Single-Source Domain Generalization","created":"2023-07-18","cited_by_count":22,"area":null},{"id":"2102.03716","title":"SPADE: A Spectral Method for Black-Box Adversarial Robustness Evaluation","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2203.03762","title":"Defending Graph Convolutional Networks against Dynamic Graph Perturbations via Bayesian Self-supervision","created":"2022-03-07","cited_by_count":16,"area":null},{"id":"2106.10065","title":"Being a Bit Frequentist Improves Bayesian Neural Networks","created":"2021-06-18","cited_by_count":15,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2207.03574","title":"Demystifying the Adversarial Robustness of Random Transformation Defenses","created":"2022-06-18","cited_by_count":14,"area":null},{"id":"2306.01485","title":"Robust low-rank training via approximate orthonormal constraints","created":"2023-06-02","cited_by_count":13,"area":null},{"id":"2207.06154","title":"On the Robustness of Bayesian Neural Networks to Adversarial Attacks","created":"2022-07-13","cited_by_count":12,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2501.03562","title":"Rethinking Adversarial Attacks in Reinforcement Learning from Policy Distribution Perspective","created":"2025-01-07","cited_by_count":10,"area":"deeprl"},{"id":"2110.12734","title":"Fast Gradient Non-sign Methods","created":"2021-10-25","cited_by_count":9,"area":null},{"id":"2105.10134","title":"Certification of Iterative Predictions in Bayesian Neural Networks","created":"2021-05-21","cited_by_count":8,"area":null},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2503.20613","title":"State-Aware Perturbation Optimization for Robust Deep Reinforcement Learning","created":"2025-03-26","cited_by_count":8,"area":"deeprl"},{"id":"2101.06417","title":"Bayesian Inference Forgetting","created":"2021-01-16","cited_by_count":7,"area":null},{"id":"2306.13614","title":"Adversarial Robustness Certification for Bayesian Neural Networks","created":"2023-06-23","cited_by_count":7,"area":null},{"id":"2503.20844","title":"Robust Deep Reinforcement Learning in Robotics via Adaptive Gradient-Masked Adversarial Attacks","created":"2025-03-26","cited_by_count":7,"area":"deeprl"},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6,"area":null},{"id":"2106.06927","title":"Inverting Adversarially Robust Networks for Image Synthesis","created":"2021-06-13","cited_by_count":6,"area":null},{"id":"2505.08022","title":"Dynamical Low-Rank Compression of Neural Networks with Robustness under Adversarial Attacks","created":"2025-05-12","cited_by_count":6,"area":null},{"id":"2206.04762","title":"Data-Efficient Double-Win Lottery Tickets from Robust Pre-training","created":"2022-06-09","cited_by_count":5,"area":null},{"id":"2307.16865","title":"Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Models","created":"2023-07-31","cited_by_count":5,"area":"diffusion"},{"id":"2310.01951","title":"Probabilistic Reach-Avoid for Bayesian Neural Networks","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2111.08591","title":"Robustness of Bayesian Neural Networks to White-Box Adversarial Attacks","created":"2021-11-16","cited_by_count":4,"area":null},{"id":"2212.02003","title":"Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial Defense","created":"2022-12-05","cited_by_count":4,"area":null},{"id":"2402.01338","title":"Inferring the Langevin Equation with Uncertainty via Bayesian Neural Networks","created":"2024-02-02","cited_by_count":4,"area":null},{"id":"2101.02689","title":"The Effect of Prior Lipschitz Continuity on the Adversarial Robustness of Bayesian Neural Networks","created":"2021-01-07","cited_by_count":3,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2304.10828","title":"Individual Fairness in Bayesian Neural Networks","created":"2023-04-21","cited_by_count":3,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2603.09453","title":"Variational Routing: A Scalable Bayesian Framework for Calibrated Mixture-of-Experts Transformers","created":"2026-03-10","cited_by_count":3,"area":"moe"},{"id":"2105.08620","title":"Adversarial Examples Detection with Bayesian Neural Network","created":"2021-05-18","cited_by_count":2,"area":null},{"id":"2201.00148","title":"Rethinking Feature Uncertainty in Stochastic Neural Networks for Adversarial Robustness","created":"2022-01-01","cited_by_count":2,"area":null},{"id":"2202.01117","title":"An Eye for an Eye: Defending against Gradient-based Attacks with Gradients","created":"2022-02-02","cited_by_count":2,"area":null},{"id":"2202.08532","title":"Mitigating Closed-model Adversarial Examples with Bayesian Neural Modeling for Enhanced End-to-End Speech Recognition","created":"2022-02-17","cited_by_count":2,"area":null},{"id":"2207.13036","title":"Jacobian Norm with Selective Input Gradient Regularization for Improved and Interpretable Adversarial Defense","created":"2022-07-09","cited_by_count":2,"area":null},{"id":"2208.00862","title":"Attacking Adversarial Defences by Smoothing the Loss Landscape","created":"2022-08-01","cited_by_count":2,"area":null},{"id":"2303.10291","title":"Detection of Uncertainty in Exceedance of Threshold (DUET): An Adversarial Patch Localizer","created":"2023-03-18","cited_by_count":2,"area":null},{"id":"2309.00879","title":"Towards Certified Probabilistic Robustness with High Accuracy","created":"2023-09-02","cited_by_count":2,"area":null},{"id":"2310.06468","title":"A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks","created":"2023-10-10","cited_by_count":2,"area":null},{"id":"2404.19640","title":"Attacking Bayes: On the Adversarial Robustness of Bayesian Neural Networks","created":"2024-04-27","cited_by_count":2,"area":null},{"id":"2405.17181","title":"Spectral regularization for adversarially-robust representation learning","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2110.13859","title":"Defensive Tensorization","created":"2021-10-26","cited_by_count":1,"area":null},{"id":"2111.10272","title":"Resilience from Diversity: Population-based approach to harden models against adversarial attacks","created":"2021-11-19","cited_by_count":1,"area":null},{"id":"2112.06281","title":"Spatial-Temporal-Fusion BNN: Variational Bayesian Feature Layer","created":"2021-12-12","cited_by_count":1,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2306.16979","title":"Post-train Black-box Defense via Bayesian Boundary Correction","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2307.02454","title":"Transgressing the boundaries: towards a rigorous understanding of deep learning and its (non-)robustness","created":"2023-07-05","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2401.00334","title":"Explainability-Driven Leaf Disease Classification Using Adversarial Training and Knowledge Distillation","created":"2023-12-30","cited_by_count":1,"area":"distill"},{"id":"2406.08829","title":"Improving Adversarial Robustness via Feature Pattern Consistency Constraint","created":"2024-06-13","cited_by_count":1,"area":null},{"id":"2411.06367","title":"BayesNAM: Leveraging Inconsistency for Reliable Explanations","created":"2024-11-10","cited_by_count":1,"area":null},{"id":"2206.13083","title":"Adversarial Example Detection in Deployed Tree Ensembles","created":"2022-06-27","cited_by_count":0,"area":null},{"id":"2306.12161","title":"Adversarial Attacks Neutralization via Data Set Randomization","created":"2023-06-21","cited_by_count":0,"area":null},{"id":"2401.15615","title":"Mitigating the Impact of Noisy Edges on Graph-Based Algorithms via Adversarial Robustness Evaluation","created":"2024-01-28","cited_by_count":0,"area":null},{"id":"2407.20891","title":"Bayesian Low-Rank LeArning (Bella): A Practical Approach to Bayesian Neural Networks","created":"2024-07-30","cited_by_count":0,"area":null},{"id":"2503.20583","title":"Feature Statistics with Uncertainty Help Adversarial Robustness","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2506.05402","title":"Lorica: A Synergistic Fine-Tuning Framework for Advancing Personalized Adversarial Robustness","created":"2025-06-04","cited_by_count":0,"area":null},{"id":"2511.13749","title":"DeepDefense: Robust Learning via Layer-Wise Gradient-Feature Alignment","created":"2025-11-13","cited_by_count":0,"area":null},{"id":"2512.22128","title":"Pruning Graphs by Adversarial Robustness Evaluation to Strengthen GNN Defenses","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2606.20666","title":"Robust Auto-associative Memory via Convolutional Restricted Hopfield Networks","created":"2026-06-11","cited_by_count":0,"area":null},{"id":"2607.09480","title":"Foveation-Guided Dynamic Token Selection for Robust and Efficient Vision Transformers","created":"2026-07-10","cited_by_count":0,"area":null}],"next_cursor":null}