{"total":172,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2110.03141","title":"Efficient Sharpness-aware Minimization for Improved Training of Neural Networks","created":"2021-10-07","cited_by_count":137,"area":null},{"id":"2103.08896","title":"Anti-Adversarially Manipulated Attributions for Weakly and Semi-Supervised Semantic Segmentation","created":"2021-03-16","cited_by_count":134,"area":null},{"id":"2205.14083","title":"Sharpness-Aware Training for Free","created":"2022-05-27","cited_by_count":95,"area":null},{"id":"2202.08345","title":"Learning Smooth Neural Functions via Lipschitz Regularization","created":"2022-02-16","cited_by_count":86,"area":null},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2110.04869","title":"Global Vision Transformer Pruning with Hessian-Aware Saliency","created":"2021-10-10","cited_by_count":70,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2110.12690","title":"A Dynamical System Perspective for Lipschitz Neural Networks","created":"2021-10-25","cited_by_count":60,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2111.15121","title":"Pyramid Adversarial Training Improves ViT Performance","created":"2021-11-30","cited_by_count":39,"area":null},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2303.05506","title":"TANGOS: Regularizing Tabular Neural Networks through Gradient Orthogonalization and Specialization","created":"2023-03-09","cited_by_count":32,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2208.09418","title":"SAFARI: Versatile and Efficient Evaluations for Robustness of Interpretability","created":"2022-08-19","cited_by_count":28,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2110.02180","title":"Noisy Feature Mixup","created":"2021-10-05","cited_by_count":27,"area":null},{"id":"2208.09913","title":"A Unified Analysis of Mixed Sample Data Augmentation: A Loss Function Perspective","created":"2022-08-21","cited_by_count":27,"area":null},{"id":"2307.05831","title":"Memorization Through the Lens of Curvature of Loss Function Around Samples","created":"2023-07-11","cited_by_count":27,"area":null},{"id":"2104.03863","title":"A single gradient step finds adversarial examples on random two-layers neural networks","created":"2021-04-08","cited_by_count":26,"area":null},{"id":"2111.12273","title":"Sharpness-aware Quantization for Deep Neural Networks","created":"2021-11-24","cited_by_count":25,"area":null},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24,"area":null},{"id":"2107.04570","title":"ANCER: Anisotropic Certification via Sample-wise Volume Maximization","created":"2021-07-09","cited_by_count":23,"area":null},{"id":"2102.06905","title":"Mixed Nash Equilibria in the Adversarial Examples Game","created":"2021-02-13","cited_by_count":22,"area":null},{"id":"2110.05626","title":"Parameterizing Activation Functions for Adversarial Robustness","created":"2021-10-11","cited_by_count":22,"area":null},{"id":"2212.04985","title":"Understanding and Combating Robust Overfitting via Input Loss Landscape Analysis and Regularization","created":"2022-12-09","cited_by_count":22,"area":null},{"id":"2308.03163","title":"CGBA: Curvature-aware Geometric Black-box Attack","created":"2023-08-06","cited_by_count":21,"area":null},{"id":"2111.13613","title":"The Geometry of Adversarial Training in Binary Classification","created":"2021-11-26","cited_by_count":20,"area":null},{"id":"2206.07144","title":"Efficiently Training Low-Curvature Neural Networks","created":"2022-06-14","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2403.10045","title":"Towards Adversarially Robust Dataset Distillation by Curvature Regularization","created":"2024-03-15","cited_by_count":17,"area":null},{"id":"2208.13219","title":"Visualizing high-dimensional loss landscapes with Hessian directions","created":"2022-08-28","cited_by_count":16,"area":null},{"id":"2206.09098","title":"Existence and Minimax Theorems for Adversarial Surrogate Risks in Binary Classification","created":"2022-06-18","cited_by_count":15,"area":null},{"id":"2110.03135","title":"Label Noise in Adversarial Training: A Novel Perspective to Study Robust Overfitting","created":"2021-10-07","cited_by_count":14,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2108.11673","title":"Why Adversarial Reprogramming Works, When It Fails, and How to Tell the Difference","created":"2021-08-26","cited_by_count":13,"area":null},{"id":"2206.03178","title":"Fooling Explanations in Text Classifiers","created":"2022-06-07","cited_by_count":13,"area":null},{"id":"2407.12443","title":"Preventing Catastrophic Overfitting in Fast Adversarial Training: A Bi-level Optimization Perspective","created":"2024-07-17","cited_by_count":13,"area":null},{"id":"2103.14332","title":"Building Reliable Explanations of Unreliable Neural Networks: Locally Smoothing Perspective of Model Interpretation","created":"2021-03-26","cited_by_count":12,"area":null},{"id":"2105.02942","title":"Understanding Catastrophic Overfitting in Adversarial Training","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2204.04890","title":"Anti-Adversarially Manipulated Attributions for Weakly Supervised Semantic Segmentation and Object Localization","created":"2022-04-11","cited_by_count":12,"area":null},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2106.00221","title":"Concurrent Adversarial Learning for Large-Batch Training","created":"2021-06-01","cited_by_count":11,"area":null},{"id":"2207.01168","title":"How Robust is Your Fairness? Evaluating and Sustaining Fairness under Unseen Distribution Shifts","created":"2022-07-04","cited_by_count":11,"area":null},{"id":"2301.12309","title":"On the Lipschitz Constant of Deep Networks and Double Descent","created":"2023-01-28","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2404.06106","title":"Unifying Low Dimensional Spectra in Deep Learning","created":"2024-04-09","cited_by_count":11,"area":null},{"id":"2103.10230","title":"Collective Decision of One-vs-Rest Networks for Open Set Recognition","created":"2021-03-18","cited_by_count":10,"area":null},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10,"area":null},{"id":"2312.13555","title":"CR-SAM: Curvature Regularized Sharpness-Aware Minimization","created":"2023-12-21","cited_by_count":10,"area":null},{"id":"2402.18726","title":"Unveiling Privacy, Memorization, and Input Curvature Links","created":"2024-02-28","cited_by_count":10,"area":null},{"id":"2407.04370","title":"Regulating Model Reliance on Non-Robust Features by Smoothing Input Marginal Density","created":"2024-07-05","cited_by_count":10,"area":null},{"id":"2111.14564","title":"MedRDF: A Robust and Retrain-Less Diagnostic Framework for Medical Pretrained Models Against Adversarial Attack","created":"2021-11-29","cited_by_count":9,"area":null},{"id":"2206.06257","title":"Distributed Adversarial Training to Robustify Deep Neural Networks at Scale","created":"2022-06-13","cited_by_count":9,"area":null},{"id":"2304.03147","title":"Improving Visual Question Answering Models through Robustness Analysis and In-Context Learning with a Chain of Basic Questions","created":"2023-04-06","cited_by_count":9,"area":null},{"id":"2404.08255","title":"Practical Region-level Attack against Segment Anything Models","created":"2024-04-12","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2109.06294","title":"On the regularized risk of distributionally robust learning over deep neural networks","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2111.11986","title":"HERO: Hessian-Enhanced Robust Optimization for Unifying and Improving Generalization and Quantization Performance","created":"2021-11-23","cited_by_count":8,"area":null},{"id":"2209.10080","title":"Deep Double Descent via Smooth Interpolation","created":"2022-09-21","cited_by_count":8,"area":null},{"id":"2404.00897","title":"Machine Learning Robustness: A Primer","created":"2024-04-01","cited_by_count":8,"area":null},{"id":"2103.13598","title":"Recent Advances in Large Margin Learning","created":"2021-03-25","cited_by_count":7,"area":null},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2310.09744","title":"Explore the Effect of Data Selection on Poison Efficiency in Backdoor Attacks","created":"2023-10-15","cited_by_count":7,"area":null},{"id":"2403.17520","title":"Boosting Adversarial Training via Fisher-Rao Norm-based Regularization","created":"2024-03-26","cited_by_count":7,"area":null},{"id":"2210.02419","title":"Boundary-Aware Uncertainty for Feature Attribution Explainers","created":"2022-10-05","cited_by_count":6,"area":null},{"id":"2306.07197","title":"AROID: Improving Adversarial Robustness Through Online Instance-Wise Data Augmentation","created":"2023-06-12","cited_by_count":6,"area":null},{"id":"2306.08656","title":"Augment then Smooth: Reconciling Differential Privacy with Certified Robustness","created":"2023-06-14","cited_by_count":6,"area":null},{"id":"2306.16050","title":"Evaluating Similitude and Robustness of Deep Image Denoising Models via Adversarial Attack","created":"2023-06-28","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2409.20139","title":"Characterizing Model Robustness via Natural Input Gradients","created":"2024-09-30","cited_by_count":6,"area":null},{"id":"2102.08868","title":"Bridging the Gap Between Adversarial Robustness and Optimization Bias","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2106.05009","title":"Network insensitivity to parameter noise via adversarial regularization","created":"2021-06-09","cited_by_count":5,"area":null},{"id":"2209.01199","title":"Revisiting Outer Optimization in Adversarial Training","created":"2022-09-02","cited_by_count":5,"area":null},{"id":"2211.04780","title":"On the Robustness of Explanations of Deep Neural Network Models: A Survey","created":"2022-11-09","cited_by_count":5,"area":null},{"id":"2302.11328","title":"PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks","created":"2023-02-22","cited_by_count":5,"area":null},{"id":"2303.14077","title":"Improved Adversarial Training Through Adaptive Instance-wise Loss Smoothing","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2306.07104","title":"Unveiling the Hessian's Connection to the Decision Boundary","created":"2023-06-12","cited_by_count":5,"area":null},{"id":"2312.13027","title":"Doubly Perturbed Task Free Continual Learning","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2409.03807","title":"Accelerate Neural Subspace-Based Reduced-Order Solver of Deformable Simulation by Lipschitz Optimization","created":"2024-09-05","cited_by_count":5,"area":null},{"id":"2504.07388","title":"Min-Max Optimisation for Nonconvex-Nonconcave Functions Using a Random Zeroth-Order Extragradient Algorithm","created":"2025-04-10","cited_by_count":5,"area":null},{"id":"2103.00778","title":"Explaining Adversarial Vulnerability with a Data Sparsity Hypothesis","created":"2021-03-01","cited_by_count":4,"area":null},{"id":"2107.05712","title":"A Closer Look at the Adversarial Robustness of Information Bottleneck Models","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2109.05105","title":"Towards Zero-shot Commonsense Reasoning with Self-supervised Refinement of Language Models","created":"2021-09-10","cited_by_count":4,"area":null},{"id":"2210.00301","title":"Learning Globally Smooth Functions on Manifolds","created":"2022-10-01","cited_by_count":4,"area":null},{"id":"2211.15900","title":"Towards More Robust Interpretation via Local Gradient Alignment","created":"2022-11-29","cited_by_count":4,"area":null},{"id":"2301.03662","title":"On adversarial robustness and the use of Wasserstein ascent-descent dynamics to enforce it","created":"2023-01-09","cited_by_count":4,"area":null},{"id":"2302.02907","title":"GAT: Guided Adversarial Training with Pareto-optimal Auxiliary Tasks","created":"2023-02-06","cited_by_count":4,"area":null},{"id":"2302.07221","title":"On the Role of Randomization in Adversarially Robust Classification","created":"2023-02-14","cited_by_count":4,"area":null}],"next_cursor":"100"}