{"total":445,"rows":[{"id":"2103.06624","title":"Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verification","created":"2021-03-11","cited_by_count":228,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2405.15556","title":"Certifiably Robust RAG against Retrieval Corruption","created":"2024-05-24","cited_by_count":151,"area":"rag"},{"id":"2101.08452","title":"Robust Reinforcement Learning on State Observations with Learned Optimal Adversary","created":"2021-01-21","cited_by_count":135,"area":null},{"id":"2306.07304","title":"A Holistic Approach to Unifying Automatic Concept Extraction and Concept Importance Estimation","created":"2023-06-11","cited_by_count":109,"area":null},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108,"area":null},{"id":"2208.05740","title":"General Cutting Planes for Bound-Propagation-Based Neural Network Verification","created":"2022-08-11","cited_by_count":103,"area":null},{"id":"2110.14038","title":"Robustness of Graph Neural Networks at Scale","created":"2021-10-26","cited_by_count":100,"area":null},{"id":"2309.05837","title":"The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systems","created":"2023-09-11","cited_by_count":88,"area":null},{"id":"2401.14461","title":"Marabou 2.0: A Versatile Formal Analyzer of Neural Networks","created":"2024-01-25","cited_by_count":81,"area":null},{"id":"2103.03638","title":"PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximations","created":"2021-03-05","cited_by_count":77,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2109.00498","title":"The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Results","created":"2021-08-31","cited_by_count":71,"area":null},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65,"area":null},{"id":"2301.05815","title":"First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)","created":"2023-01-14","cited_by_count":58,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2108.04062","title":"Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100","created":"2021-08-05","cited_by_count":47,"area":null},{"id":"2405.21063","title":"Neural Network Verification with Branch-and-Bound for General Nonlinearities","created":"2024-05-31","cited_by_count":47,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2210.07394","title":"Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation","created":"2022-10-13","cited_by_count":45,"area":null},{"id":"2104.06718","title":"Improved Branch and Bound for Neural Network Verification via Lagrangian Decomposition","created":"2021-04-14","cited_by_count":44,"area":null},{"id":"2210.05927","title":"Efficient Adversarial Training without Attacking: Worst-Case-Aware Robust Reinforcement Learning","created":"2022-10-12","cited_by_count":43,"area":null},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42,"area":null},{"id":"2206.12227","title":"Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspective","created":"2022-06-24","cited_by_count":42,"area":null},{"id":"2108.04140","title":"Reachability Analysis of Neural Feedback Loops","created":"2021-08-09","cited_by_count":41,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2106.13867","title":"POLAR: A Polynomial Arithmetic Framework for Verifying Neural-Network Controlled Systems","created":"2021-06-25","cited_by_count":39,"area":null},{"id":"2305.00241","title":"When Deep Learning Meets Polyhedral Theory: A Survey","created":"2023-04-29","cited_by_count":39,"area":null},{"id":"2202.07728","title":"Don't Lie to Me! Robust and Efficient Explainability with Verified Perturbation Analysis","created":"2022-02-15","cited_by_count":38,"area":null},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2104.02466","title":"A Review of Formal Methods applied to Machine Learning","created":"2021-04-06","cited_by_count":33,"area":null},{"id":"2105.11931","title":"Towards Scalable Verification of Deep Reinforcement Learning","created":"2021-05-25","cited_by_count":33,"area":null},{"id":"2211.00322","title":"DensePure: Understanding Diffusion Models towards Adversarial Robustness","created":"2022-11-01","cited_by_count":33,"area":"diffusion"},{"id":"2501.00200","title":"Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planes","created":"2024-12-31","cited_by_count":33,"area":null},{"id":"2212.01051","title":"VeriX: Towards Verified Explainability of Deep Neural Networks","created":"2022-12-02","cited_by_count":30,"area":null},{"id":"2302.01404","title":"Provably Bounding Neural Network Preimages","created":"2023-02-02","cited_by_count":29,"area":null},{"id":"2102.05289","title":"Bayesian Inference with Certifiable Adversarial Robustness","created":"2021-02-10","cited_by_count":26,"area":null},{"id":"2112.01694","title":"On the Existence of the Adversarial Bayes Classifier (Extended Version)","created":"2021-12-03","cited_by_count":25,"area":null},{"id":"2404.07956","title":"Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulation","created":"2024-04-11","cited_by_count":25,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2201.01978","title":"An Abstraction-Refinement Approach to Verifying Convolutional Neural Networks","created":"2022-01-06","cited_by_count":24,"area":null},{"id":"2203.11201","title":"Efficient Neural Network Analysis with Sum-of-Infeasibilities","created":"2022-03-19","cited_by_count":24,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2207.02715","title":"Open- and Closed-Loop Neural Network Verification using Polynomial Zonotopes","created":"2022-07-06","cited_by_count":24,"area":null},{"id":"2307.10266","title":"A DPLL(T) Framework for Verifying Deep Neural Networks","created":"2023-07-17","cited_by_count":24,"area":null},{"id":"2105.12841","title":"DNNV: A Framework for Deep Neural Network Verification","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2206.01463","title":"Safety Certification for Stochastic Systems via Neural Barrier Functions","created":"2022-06-03","cited_by_count":22,"area":null},{"id":"2206.14772","title":"IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound","created":"2022-06-29","cited_by_count":21,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2308.14333","title":"DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing","created":"2023-08-28","cited_by_count":20,"area":"diffusion"},{"id":"2108.04214","title":"Neural Network Repair with Reachability Analysis","created":"2021-08-09","cited_by_count":19,"area":null},{"id":"2203.03153","title":"Scalable Verification of GNN-based Job Schedulers","created":"2022-03-07","cited_by_count":19,"area":null},{"id":"2207.02036","title":"PRoA: A Probabilistic Robustness Assessment against Functional Perturbations","created":"2022-07-05","cited_by_count":19,"area":null},{"id":"2303.01713","title":"Convex Bounds on the Softmax Function with Applications to Robustness Verification","created":"2023-03-03","cited_by_count":19,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2102.09479","title":"Make Sure You're Unsure: A Framework for Verifying Probabilistic Specifications","created":"2021-02-18","cited_by_count":18,"area":null},{"id":"2209.14076","title":"Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systems","created":"2022-09-28","cited_by_count":18,"area":null},{"id":"2211.00887","title":"Certified Robustness of Quantum Classifiers against Adversarial Examples through Quantum Noise","created":"2022-11-02","cited_by_count":18,"area":null},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18,"area":"safety"},{"id":"2102.12002","title":"Adversarial Robustness with Non-uniform Perturbations","created":"2021-02-24","cited_by_count":17,"area":null},{"id":"2109.06795","title":"ROMAX: Certifiably Robust Deep Multiagent Reinforcement Learning via Convex Relaxation","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2111.06063","title":"On the Equivalence between Neural Network and Support Vector Machine","created":"2021-11-11","cited_by_count":17,"area":null},{"id":"2112.00659","title":"Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines","created":"2021-12-01","cited_by_count":17,"area":null},{"id":"2102.03824","title":"Neural Termination Analysis","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2103.16652","title":"Robustness Certification for Point Cloud Models","created":"2021-03-30","cited_by_count":16,"area":null},{"id":"2206.03669","title":"Toward Certified Robustness Against Real-World Distribution Shifts","created":"2022-06-08","cited_by_count":16,"area":null},{"id":"2402.06244","title":"Quantifying and Enhancing Multi-modal Robustness with Modality Preference","created":"2024-02-09","cited_by_count":16,"area":null},{"id":"2403.10144","title":"NLP Verification: Towards a General Methodology for Certifying Robustness","created":"2024-03-15","cited_by_count":16,"area":null},{"id":"2104.00447","title":"Towards Evaluating and Training Verifiably Robust Neural Networks","created":"2021-04-01","cited_by_count":15,"area":null},{"id":"2203.14141","title":"Efficient Global Robustness Certification of Neural Networks via Interleaving Twin-Network Encoding","created":"2022-03-26","cited_by_count":15,"area":null},{"id":"2210.06077","title":"Double Bubble, Toil and Trouble: Enhancing Certified Robustness through Transitivity","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2110.01388","title":"Neural Network Verification in Control","created":"2021-09-30","cited_by_count":14,"area":null},{"id":"2206.07311","title":"Can pruning improve certified robustness of neural networks?","created":"2022-06-15","cited_by_count":14,"area":null},{"id":"2207.11177","title":"Provable Defense Against Geometric Transformations","created":"2022-07-22","cited_by_count":14,"area":null},{"id":"2304.01874","title":"Incremental Verification of Neural Networks","created":"2023-04-04","cited_by_count":14,"area":null},{"id":"2305.03686","title":"Provable Preimage Under-Approximation for Neural Networks (Full Version)","created":"2023-05-05","cited_by_count":14,"area":null},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14,"area":null},{"id":"2106.15860","title":"Understanding Adversarial Attacks on Observations in Deep Reinforcement Learning","created":"2021-06-30","cited_by_count":13,"area":null},{"id":"2401.14412","title":"Harnessing Neuron Stability to Improve DNN Verification","created":"2024-01-19","cited_by_count":13,"area":null},{"id":"2406.06507","title":"Verification-Guided Shielding for Deep Reinforcement Learning","created":"2024-06-10","cited_by_count":13,"area":"deeprl"},{"id":"2512.01295","title":"Systems Security Foundations for Agentic Computing","created":"2025-12-01","cited_by_count":13,"area":"agents"},{"id":"2102.06700","title":"On the Paradox of Certified Training","created":"2021-02-12","cited_by_count":12,"area":null},{"id":"2107.08467","title":"GoTube: Scalable Stochastic Verification of Continuous-Depth Models","created":"2021-07-18","cited_by_count":12,"area":null},{"id":"2204.00487","title":"Robust and Accurate -- Compositional Architectures for Randomized Smoothing","created":"2022-04-01","cited_by_count":12,"area":null},{"id":"2205.01625","title":"Toward Robust Spiking Neural Network Against Adversarial Perturbation","created":"2022-04-12","cited_by_count":12,"area":null},{"id":"2304.01218","title":"POLAR-Express: Efficient and Precise Formal Reachability Analysis of Neural-Network Controlled Systems","created":"2023-03-31","cited_by_count":12,"area":null},{"id":"2406.04184","title":"Shield Synthesis for LTL Modulo Theories","created":"2024-06-06","cited_by_count":12,"area":null},{"id":"2410.16281","title":"Verification of Neural Control Barrier Functions with Symbolic Derivative Bounds Propagation","created":"2024-10-04","cited_by_count":12,"area":null},{"id":"2506.06665","title":"SDP-CROWN: Efficient Bound Propagation for Neural Network Verification with Tightness of Semidefinite Programming","created":"2025-06-07","cited_by_count":12,"area":null}],"next_cursor":"100"}