{"total":302,"rows":[{"id":"2103.06624","title":"Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verification","created":"2021-03-11","cited_by_count":228,"area":null},{"id":"2101.08452","title":"Robust Reinforcement Learning on State Observations with Learned Optimal Adversary","created":"2021-01-21","cited_by_count":135,"area":null},{"id":"2208.05740","title":"General Cutting Planes for Bound-Propagation-Based Neural Network Verification","created":"2022-08-11","cited_by_count":103,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2205.00263","title":"Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Bound","created":"2022-04-30","cited_by_count":92,"area":null},{"id":"2401.14461","title":"Marabou 2.0: A Versatile Formal Analyzer of Neural Networks","created":"2024-01-25","cited_by_count":81,"area":null},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65,"area":null},{"id":"2301.05815","title":"First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)","created":"2023-01-14","cited_by_count":58,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2301.11526","title":"Direct Parameterization of Lipschitz-Bounded Deep Networks","created":"2023-01-27","cited_by_count":51,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2210.07394","title":"Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation","created":"2022-10-13","cited_by_count":45,"area":null},{"id":"2104.06718","title":"Improved Branch and Bound for Neural Network Verification via Lagrangian Decomposition","created":"2021-04-14","cited_by_count":44,"area":null},{"id":"2210.05927","title":"Efficient Adversarial Training without Attacking: Worst-Case-Aware Robust Reinforcement Learning","created":"2022-10-12","cited_by_count":43,"area":null},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42,"area":null},{"id":"2108.04140","title":"Reachability Analysis of Neural Feedback Loops","created":"2021-08-09","cited_by_count":41,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2305.00241","title":"When Deep Learning Meets Polyhedral Theory: A Survey","created":"2023-04-29","cited_by_count":39,"area":null},{"id":"2205.14691","title":"On the Robustness of Safe Reinforcement Learning under Observational Perturbations","created":"2022-05-29","cited_by_count":38,"area":null},{"id":"2209.08025","title":"Trustworthy Reinforcement Learning Against Intrinsic Vulnerabilities: Robustness, Safety, and Generalizability","created":"2022-09-16","cited_by_count":36,"area":null},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2104.08782","title":"On the Sensitivity and Stability of Model Interpretations in NLP","created":"2021-04-18","cited_by_count":30,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2302.01404","title":"Provably Bounding Neural Network Preimages","created":"2023-02-02","cited_by_count":29,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2102.05289","title":"Bayesian Inference with Certifiable Adversarial Robustness","created":"2021-02-10","cited_by_count":26,"area":null},{"id":"2112.09495","title":"Stability Verification in Stochastic Control Systems via Neural Network Supermartingales","created":"2021-12-17","cited_by_count":26,"area":null},{"id":"2306.10426","title":"Understanding Certified Training with Interval Bound Propagation","created":"2023-06-17","cited_by_count":26,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2206.07840","title":"Architectural Backdoors in Neural Networks","created":"2022-06-15","cited_by_count":25,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2212.08507","title":"Robust Explanation Constraints for Neural Networks","created":"2022-12-16","cited_by_count":24,"area":null},{"id":"2104.05062","title":"Achieving Model Robustness through Discrete Adversarial Training","created":"2021-04-11","cited_by_count":23,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2205.05763","title":"Individual Fairness Guarantees for Neural Networks","created":"2022-05-11","cited_by_count":23,"area":null},{"id":"2206.04310","title":"GSmooth: Certified Robustness against Semantic Transformations via Generalized Randomized Smoothing","created":"2022-06-09","cited_by_count":23,"area":null},{"id":"2210.05308","title":"Learning Control Policies for Stochastic Systems with Reach-avoid Guarantees","created":"2022-10-11","cited_by_count":23,"area":null},{"id":"2302.10164","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","created":"2023-02-20","cited_by_count":23,"area":null},{"id":"2305.06547","title":"Neural Lyapunov Control for Discrete-Time Systems","created":"2023-05-11","cited_by_count":23,"area":null},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2206.14772","title":"IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound","created":"2022-06-29","cited_by_count":21,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2109.10696","title":"CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networks","created":"2021-09-22","cited_by_count":19,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2106.04260","title":"Provably Robust Detection of Out-of-distribution Data (almost) for free","created":"2021-06-08","cited_by_count":18,"area":null},{"id":"2302.04634","title":"Closed-loop Analysis of Vision-based Autonomous Systems: A Case Study","created":"2023-02-06","cited_by_count":18,"area":null},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17,"area":null},{"id":"2109.06795","title":"ROMAX: Certifiably Robust Deep Multiagent Reinforcement Learning via Convex Relaxation","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2111.06063","title":"On the Equivalence between Neural Network and Support Vector Machine","created":"2021-11-11","cited_by_count":17,"area":null},{"id":"2112.00659","title":"Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines","created":"2021-12-01","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2112.07605","title":"The King is Naked: on the Notion of Robustness for Natural Language Processing","created":"2021-12-13","cited_by_count":16,"area":null},{"id":"2205.07229","title":"RoMFAC: A robust mean-field actor-critic reinforcement learning against adversarial perturbations on states","created":"2022-05-15","cited_by_count":16,"area":null},{"id":"2209.15246","title":"Your Out-of-Distribution Detection Method is Not Robust!","created":"2022-09-30","cited_by_count":16,"area":null},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15,"area":null},{"id":"2107.08176","title":"Automatic Fairness Testing of Neural Classifiers through Adversarial Sampling","created":"2021-07-17","cited_by_count":14,"area":null},{"id":"2110.01388","title":"Neural Network Verification in Control","created":"2021-09-30","cited_by_count":14,"area":null},{"id":"2210.12030","title":"Evolution of Neural Tangent Kernels under Benign and Adversarial Training","created":"2022-10-21","cited_by_count":14,"area":null},{"id":"2311.05650","title":"Learning to Configure Separators in Branch-and-Cut","created":"2023-11-08","cited_by_count":14,"area":null},{"id":"2312.01456","title":"Compositional Policy Learning in Stochastic Control Systems with Formal Guarantees","created":"2023-12-03","cited_by_count":14,"area":null},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14,"area":null},{"id":"2112.03000","title":"Sequential Randomized Smoothing for Adversarially Robust Speech Recognition","created":"2021-11-05","cited_by_count":13,"area":null},{"id":"2508.17456","title":"Adversarial Examples Are Not Bugs, They Are Superposition","created":"2025-08-24","cited_by_count":13,"area":null},{"id":"2102.06700","title":"On the Paradox of Certified Training","created":"2021-02-12","cited_by_count":12,"area":null},{"id":"2105.02942","title":"Understanding Catastrophic Overfitting in Adversarial Training","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2105.14644","title":"Generating Adversarial Examples with Graph Neural Networks","created":"2021-05-30","cited_by_count":12,"area":null},{"id":"2107.08467","title":"GoTube: Scalable Stochastic Verification of Continuous-Depth Models","created":"2021-07-18","cited_by_count":12,"area":null},{"id":"2203.03034","title":"A Unified View of SDP-based Neural Network Verification through Completely Positive Programming","created":"2022-03-06","cited_by_count":12,"area":null},{"id":"2205.01625","title":"Toward Robust Spiking Neural Network Against Adversarial Perturbation","created":"2022-04-12","cited_by_count":12,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2202.02444","title":"Spelunking the Deep: Guaranteed Queries on General Neural Implicit Surfaces via Range Analysis","created":"2022-02-05","cited_by_count":11,"area":null},{"id":"2206.07996","title":"Continual Learning with Guarantees via Weight Interval Constraints","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2207.11237","title":"Defending Substitution-Based Profile Pollution Attacks on Sequential Recommenders","created":"2022-07-19","cited_by_count":11,"area":null},{"id":"2305.04574","title":"TAPS: Connecting Certified and Adversarial Training","created":"2023-05-08","cited_by_count":11,"area":null},{"id":"2402.02629","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","created":"2024-02-04","cited_by_count":11,"area":null},{"id":"2101.01815","title":"Efficient Reachability Analysis of Closed-Loop Systems with Neural Network Controllers","created":"2021-01-05","cited_by_count":10,"area":null},{"id":"2101.05844","title":"Scaling the Convex Barrier with Sparse Dual Algorithms","created":"2021-01-14","cited_by_count":10,"area":null},{"id":"2109.00542","title":"Shared Certificates for Neural Network Verification","created":"2021-09-01","cited_by_count":10,"area":null},{"id":"2204.05687","title":"3DeformRS: Certifying Spatial Deformations on Point Clouds","created":"2022-04-12","cited_by_count":10,"area":null},{"id":"2206.07839","title":"Linearity Grafting: Relaxed Neuron Pruning Helps Certifiable Robustness","created":"2022-06-15","cited_by_count":10,"area":null},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2305.10157","title":"Efficient Error Certification for Physics-Informed Neural Networks","created":"2023-05-17","cited_by_count":10,"area":null},{"id":"2405.18942","title":"Verifiably Robust Conformal Prediction","created":"2024-05-29","cited_by_count":10,"area":null},{"id":"2210.01111","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","created":"2022-10-03","cited_by_count":9,"area":null},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9,"area":null},{"id":"2211.10752","title":"Towards Robust Dataset Learning","created":"2022-11-19","cited_by_count":9,"area":null}],"next_cursor":"100"}