{"total":41,"rows":[{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41,"area":null},{"id":"2202.01136","title":"Probabilistically Robust Learning: Balancing Average- and Worst-case Performance","created":"2022-02-02","cited_by_count":37,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2102.01862","title":"Towards Robust Neural Networks via Close-loop Control","created":"2021-02-03","cited_by_count":23,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2211.14966","title":"Adversarial Rademacher Complexity of Deep Neural Networks","created":"2022-11-27","cited_by_count":18,"area":null},{"id":"2103.02695","title":"Shift Invariance Can Reduce Adversarial Robustness","created":"2021-03-03","cited_by_count":16,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2210.12030","title":"Evolution of Neural Tangent Kernels under Benign and Adversarial Training","created":"2022-10-21","cited_by_count":14,"area":null},{"id":"2508.17456","title":"Adversarial Examples Are Not Bugs, They Are Superposition","created":"2025-08-24","cited_by_count":13,"area":null},{"id":"2207.06154","title":"On the Robustness of Bayesian Neural Networks to Adversarial Attacks","created":"2022-07-13","cited_by_count":12,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2207.04129","title":"How many perturbations break this model? Evaluating robustness beyond adversarial accuracy","created":"2022-07-08","cited_by_count":9,"area":null},{"id":"2207.03933","title":"A law of adversarial risk, interpolation, and label noise","created":"2022-07-08","cited_by_count":8,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2310.07745","title":"Deep Reinforcement Learning for Autonomous Cyber Defence: A Survey","created":"2023-10-11","cited_by_count":7,"area":null},{"id":"2210.03150","title":"Towards Out-of-Distribution Adversarial Robustness","created":"2022-10-06","cited_by_count":5,"area":null},{"id":"2303.14173","title":"How many dimensions are required to find an adversarial example?","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2210.00301","title":"Learning Globally Smooth Functions on Manifolds","created":"2022-10-01","cited_by_count":4,"area":null},{"id":"2309.03665","title":"How adversarial attacks can disrupt seemingly stable accurate classifiers","created":"2023-09-07","cited_by_count":4,"area":null},{"id":"2606.09859","title":"Mitigating Manifold Departure: Uncertainty-Aware Subspace Rectification for Trustworthy MLLM Decoding","created":"2026-05-31","cited_by_count":4,"area":null},{"id":"2402.17465","title":"Model X-ray:Detecting Backdoored Models via Decision Boundary","created":"2024-02-27","cited_by_count":3,"area":null},{"id":"2404.08069","title":"Persistent Classification: A New Approach to Stability of Data and Adversarial Examples","created":"2024-04-11","cited_by_count":3,"area":null},{"id":"2102.04615","title":"Benford's law: what does it say on adversarial images?","created":"2021-02-09","cited_by_count":1,"area":null},{"id":"2102.09230","title":"Random Projections for Improved Adversarial Robustness","created":"2021-02-18","cited_by_count":1,"area":null},{"id":"2106.09222","title":"Localized Uncertainty Attacks","created":"2021-06-17","cited_by_count":1,"area":null},{"id":"2303.05719","title":"Boosting Adversarial Attacks by Leveraging Decision Boundary Information","created":"2023-03-10","cited_by_count":1,"area":null},{"id":"2306.04252","title":"Adversarial Sample Detection Through Neural Network Transport Dynamics","created":"2023-06-07","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2307.02693","title":"Kernels, Data & Physics","created":"2023-07-05","cited_by_count":0,"area":null},{"id":"2310.14561","title":"F$^2$AT: Feature-Focusing Adversarial Training via Disentanglement of Natural and Perturbed Patterns","created":"2023-10-23","cited_by_count":0,"area":null},{"id":"2311.08265","title":"On The Relationship Between Universal Adversarial Attacks And Sparse Representations","created":"2023-11-14","cited_by_count":0,"area":null},{"id":"2311.16526","title":"On robust overfitting: adversarial training induced distribution matters","created":"2023-11-28","cited_by_count":0,"area":null},{"id":"2509.08225","title":"Ensemble Distribution Distillation for Self-Supervised Human Activity Recognition","created":"2025-09-10","cited_by_count":0,"area":null},{"id":"2601.14505","title":"Uncovering and Understanding FPR Manipulation Attack in Industrial IoT Networks","created":"2026-01-20","cited_by_count":0,"area":null}],"next_cursor":null}