{"total":67,"rows":[{"id":"2206.02618","title":"Generalized Federated Learning via Sharpness Aware Minimization","created":"2022-06-06","cited_by_count":144,"area":null},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2310.17813","title":"A Spectral Condition for Feature Learning","created":"2023-10-26","cited_by_count":109,"area":null},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108,"area":null},{"id":"2105.05246","title":"Spectral Normalisation for Deep Reinforcement Learning: an Optimisation Perspective","created":"2021-05-11","cited_by_count":65,"area":null},{"id":"2110.12690","title":"A Dynamical System Perspective for Lipschitz Neural Networks","created":"2021-10-25","cited_by_count":60,"area":null},{"id":"2303.03169","title":"A Unified Algebraic Perspective on Lipschitz Neural Networks","created":"2023-03-06","cited_by_count":60,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2301.11526","title":"Direct Parameterization of Lipschitz-Bounded Deep Networks","created":"2023-01-27","cited_by_count":51,"area":null},{"id":"2207.01164","title":"Aug-NeRF: Training Stronger Neural Radiance Fields with Triple-Level Physically-Grounded Augmentations","created":"2022-07-04","cited_by_count":46,"area":null},{"id":"2305.11584","title":"Dynamic Regularized Sharpness Aware Minimization in Federated Learning: Approaching Global Consistency and Smooth Landscape","created":"2023-05-19","cited_by_count":46,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2306.05706","title":"Understanding How Consistency Works in Federated Learning via Stage-wise Relaxed Initialization","created":"2023-06-09","cited_by_count":21,"area":null},{"id":"2106.01151","title":"Towards Deeper Deep Reinforcement Learning with Spectral Normalization","created":"2021-06-02","cited_by_count":19,"area":null},{"id":"2305.16173","title":"Efficient Bound of Lipschitz Constant for Convolutional Layers by Gram Iteration","created":"2023-05-25","cited_by_count":19,"area":null},{"id":"2211.14966","title":"Adversarial Rademacher Complexity of Deep Neural Networks","created":"2022-11-27","cited_by_count":18,"area":null},{"id":"2107.07232","title":"On the expressivity of bi-Lipschitz normalizing flows","created":"2021-07-15","cited_by_count":16,"area":null},{"id":"2108.05623","title":"Existence, Stability and Scalability of Orthogonal Convolutional Neural Networks","created":"2021-08-12","cited_by_count":16,"area":null},{"id":"2206.04502","title":"What is a Good Metric to Study Generalization of Minimax Learners?","created":"2022-06-09","cited_by_count":16,"area":null},{"id":"2311.16833","title":"1-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness","created":"2023-11-28","cited_by_count":16,"area":null},{"id":"2310.18274","title":"LipSim: A Provably Robust Perceptual Similarity Metric","created":"2023-10-27","cited_by_count":15,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2102.11069","title":"A PAC-Bayes Analysis of Adversarial Robustness","created":"2021-02-19","cited_by_count":13,"area":null},{"id":"2108.06885","title":"Neural Architecture Dilation for Adversarial Robustness","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2301.12549","title":"Unlocking Deterministic Robustness Certification on ImageNet","created":"2023-01-29","cited_by_count":13,"area":null},{"id":"2501.13273","title":"Enhancing Robust Fairness via Confusional Spectral Regularization","created":"2025-01-22","cited_by_count":11,"area":null},{"id":"2506.06280","title":"Eigenspectrum Analysis of Neural Networks without Aspect Ratio Bias","created":"2025-06-06","cited_by_count":10,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2310.06182","title":"PAC-Bayesian Spectrally-Normalized Bounds for Adversarially Robust Generalization","created":"2023-10-09","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2106.03614","title":"Adversarial Attack and Defense in Deep Ranking","created":"2021-06-07","cited_by_count":8,"area":null},{"id":"2401.14033","title":"Novel Quadratic Constraints for Extending LipSDP beyond Slope-Restricted Activations","created":"2024-01-25","cited_by_count":7,"area":null},{"id":"2402.16017","title":"Spectrum Extraction and Clipping for Implicitly Linear Layers","created":"2024-02-25","cited_by_count":7,"area":null},{"id":"2409.11859","title":"Tight and Efficient Upper Bound on Spectral Norm of Convolutional Layers","created":"2024-09-18","cited_by_count":7,"area":null},{"id":"2201.09209","title":"Weight Expansion: A New Perspective on Dropout and Generalization","created":"2022-01-23","cited_by_count":6,"area":null},{"id":"2307.04042","title":"Sup-Norm Convergence of Deep Neural Network Estimator for Nonparametric Regression by Adversarial Training","created":"2023-07-08","cited_by_count":6,"area":null},{"id":"2404.08980","title":"Stability and Generalization in Free Adversarial Training","created":"2024-04-13","cited_by_count":5,"area":null},{"id":"2505.15174","title":"Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss","created":"2025-05-21","cited_by_count":5,"area":null},{"id":"2105.08037","title":"Adversarial Training for Gradient Descent: Analysis Through its Continuous-time Approximation","created":"2021-05-17","cited_by_count":4,"area":null},{"id":"2211.00269","title":"Adversarial Training with Complementary Labels: On the Benefit of Gradually Informative Attacks","created":"2022-11-01","cited_by_count":4,"area":null},{"id":"2402.00240","title":"Spectral Norm of Convolutional Layers with Circular and Zero Paddings","created":"2024-01-31","cited_by_count":4,"area":null},{"id":"2402.04038","title":"PAC-Bayesian Adversarially Robust Generalization Bounds for Graph Neural Network","created":"2024-02-06","cited_by_count":4,"area":null},{"id":"2105.15157","title":"Adaptive Feature Alignment for Adversarial Training","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2403.00720","title":"Subhomogeneous Deep Equilibrium Models","created":"2024-03-01","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2503.14751","title":"LipShiFT: A Certifiably Robust Shift-based Vision Transformer","created":"2025-03-18","cited_by_count":3,"area":null},{"id":"2104.04757","title":"Adversarially-Trained Nonnegative Matrix Factorization","created":"2021-04-10","cited_by_count":2,"area":null},{"id":"2105.08269","title":"Sparta: Spatially Attentive and Adversarially Robust Activation","created":"2021-05-18","cited_by_count":2,"area":null},{"id":"2405.01817","title":"Uniformly Stable Algorithms for Adversarial Training and Beyond","created":"2024-05-03","cited_by_count":2,"area":null},{"id":"2405.17181","title":"Spectral regularization for adversarially-robust representation learning","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2509.25979","title":"Reconcile Certified Robustness and Accuracy for DNN-based Smoothed Majority Vote Classifier","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2102.06496","title":"Depthwise Separable Convolutions Allow for Fast and Memory-Efficient Spectral Normalization","created":"2021-02-12","cited_by_count":1,"area":null},{"id":"2410.05136","title":"LOTOS: Layer-wise Orthogonalization for Training Robust Ensembles","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2211.16791","title":"Adaptive adversarial training method for improving multi-scale GAN based on generalization bound theory","created":"2022-11-30","cited_by_count":0,"area":null},{"id":"2404.13381","title":"DNA: Differentially private Neural Augmentation for contact tracing","created":"2024-04-20","cited_by_count":0,"area":null},{"id":"2503.17172","title":"Principal Eigenvalue Regularization for Improved Worst-Class Certified Robustness of Smoothed Classifiers","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2504.05158","title":"Leveraging Label Potential for Enhanced Multimodal Emotion Recognition","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2509.15370","title":"Adversarial generalization of unfolding (model-based) networks","created":"2025-09-18","cited_by_count":0,"area":null},{"id":"2602.01582","title":"On the Fragility of AI-Based Channel Decoders under Small Channel Perturbations","created":"2026-02-02","cited_by_count":0,"area":null},{"id":"2603.01264","title":"S2O: Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2026-03-01","cited_by_count":0,"area":null},{"id":"2604.12768","title":"Rethinking the Personalized Relaxed Initialization in the Federated Learning: Consistency and Generalization","created":"2026-04-14","cited_by_count":0,"area":null},{"id":"2605.02109","title":"Detecting Adversarial Data via Provable Adversarial Noise Amplification","created":"2026-05-04","cited_by_count":0,"area":null}],"next_cursor":null}