{"total":155,"rows":[{"id":"2104.08894","title":"The Intrinsic Dimension of Images and Its Impact on Learning","created":"2021-04-18","cited_by_count":315,"area":null},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2112.11668","title":"How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?","created":"2021-12-22","cited_by_count":49,"area":null},{"id":"2101.09387","title":"Online Adversarial Purification based on Self-Supervision","created":"2021-01-23","cited_by_count":46,"area":null},{"id":"2207.01164","title":"Aug-NeRF: Training Stronger Neural Radiance Fields with Triple-Level Physically-Grounded Augmentations","created":"2022-07-04","cited_by_count":46,"area":null},{"id":"2102.04877","title":"Noisy Recurrent Neural Networks","created":"2021-02-09","cited_by_count":42,"area":null},{"id":"2103.07531","title":"Uncertainty-guided Model Generalization to Unseen Domains","created":"2021-03-12","cited_by_count":41,"area":null},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41,"area":null},{"id":"2110.10942","title":"Generalization of Neural Combinatorial Solvers Through the Lens of Adversarial Robustness","created":"2021-10-21","cited_by_count":35,"area":null},{"id":"2405.03658","title":"A review on data-driven constitutive laws for solids","created":"2024-05-06","cited_by_count":35,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2103.00397","title":"Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket Perspective","created":"2021-02-28","cited_by_count":25,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2107.07114","title":"Uncertainty-Aware Reliable Text Classification","created":"2021-07-15","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2307.09520","title":"Adversarial Bayesian Augmentation for Single-Source Domain Generalization","created":"2023-07-18","cited_by_count":22,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2404.01509","title":"Can Biases in ImageNet Models Explain Generalization?","created":"2024-04-01","cited_by_count":20,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2107.02970","title":"GAN-based Data Augmentation for Chest X-ray Classification","created":"2021-07-07","cited_by_count":18,"area":null},{"id":"2108.02888","title":"Out-of-Domain Generalization from a Single Source: An Uncertainty Quantification Approach","created":"2021-08-05","cited_by_count":18,"area":null},{"id":"2103.01895","title":"Adversarial Examples can be Effective Data Augmentation for Unsupervised Machine Learning","created":"2021-03-02","cited_by_count":16,"area":null},{"id":"2206.07387","title":"The Manifold Hypothesis for Gradient-Based Explanations","created":"2022-06-15","cited_by_count":16,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2506.00874","title":"Breaking Latent Prior Bias in Detectors for Generalizable AIGC Image Detection","created":"2025-06-01","cited_by_count":16,"area":null},{"id":"2203.02006","title":"Why adversarial training can hurt robust accuracy","created":"2022-03-03","cited_by_count":14,"area":null},{"id":"2306.11035","title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game","created":"2023-06-19","cited_by_count":13,"area":null},{"id":"2306.16170","title":"Mitigating Accuracy-Robustness Trade-off via Balanced Multi-Teacher Adversarial Distillation","created":"2023-06-28","cited_by_count":13,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2212.12641","title":"Out-of-Distribution Detection with Reconstruction Error and Typicality-based Penalty","created":"2022-12-24","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2301.13122","title":"Towards Adversarial Realism and Robust Learning for IoT Intrusion Detection and Classification","created":"2023-01-30","cited_by_count":10,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null},{"id":"2405.20355","title":"Enhancing Adversarial Robustness in SNNs with Sparse Gradients","created":"2024-05-30","cited_by_count":10,"area":null},{"id":"2108.11505","title":"Generalized Real-World Super-Resolution through Adversarial Robustness","created":"2021-08-25","cited_by_count":9,"area":null},{"id":"2203.04713","title":"Defending Black-box Skeleton-based Human Activity Classifiers","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9,"area":null},{"id":"2410.04968","title":"Collaboration! Towards Robust Neural Methods for Routing Problems","created":"2024-10-07","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2110.11950","title":"Adversarial robustness for latent models: Revisiting the robust-standard accuracies tradeoff","created":"2021-10-22","cited_by_count":8,"area":null},{"id":"2110.15764","title":"{\\epsilon}-weakened Robustness of Deep Neural Networks","created":"2021-10-29","cited_by_count":8,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2211.15897","title":"Learning Antidote Data to Individual Unfairness","created":"2022-11-29","cited_by_count":8,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2510.11709","title":"Adversarial Attacks Leverage Interference Between Features in Superposition","created":"2025-10-13","cited_by_count":8,"area":null},{"id":"2102.05110","title":"Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers","created":"2021-02-09","cited_by_count":7,"area":null},{"id":"2104.04886","title":"Adversarial Regularization as Stackelberg Game: An Unrolled Optimization Approach","created":"2021-04-11","cited_by_count":7,"area":null},{"id":"2211.11312","title":"Understanding the Vulnerability of Skeleton-based Human Activity Recognition via Black-box Attack","created":"2022-11-21","cited_by_count":7,"area":null},{"id":"2306.03229","title":"Adversarial alignment: Breaking the trade-off between the strength of an attack and its relevance to human perception","created":"2023-06-05","cited_by_count":7,"area":null},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2501.16971","title":"RODEO: Robust Outlier Detection via Exposing Adaptive Out-of-Distribution Samples","created":"2025-01-28","cited_by_count":7,"area":null},{"id":"2506.14698","title":"Towards Desiderata-Driven Design of Visual Counterfactual Explainers","created":"2025-06-17","cited_by_count":7,"area":null},{"id":"2104.08323","title":"Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Accelerators","created":"2021-04-16","cited_by_count":6,"area":null},{"id":"2108.07958","title":"Semantic Perturbations with Normalizing Flows for Improved Generalization","created":"2021-08-18","cited_by_count":6,"area":null},{"id":"2203.13890","title":"Improving Robustness of Jet Tagging Algorithms with Adversarial Training","created":"2022-03-25","cited_by_count":6,"area":null},{"id":"2211.14669","title":"Game Theoretic Mixed Experts for Combinational Adversarial Machine Learning","created":"2022-11-26","cited_by_count":6,"area":null},{"id":"2301.09069","title":"Provable Unrestricted Adversarial Training without Compromise with Generalizability","created":"2023-01-22","cited_by_count":6,"area":null},{"id":"2311.17434","title":"GSE: Group-wise Sparse and Explainable Adversarial Attacks","created":"2023-11-29","cited_by_count":6,"area":null},{"id":"2302.14302","title":"Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain","created":"2023-02-28","cited_by_count":5,"area":null},{"id":"2303.14173","title":"How many dimensions are required to find an adversarial example?","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2408.15114","title":"Few-Shot Unsupervised Implicit Neural Shape Representation Learning with Spatial Adversaries","created":"2024-08-27","cited_by_count":5,"area":null},{"id":"2107.05712","title":"A Closer Look at the Adversarial Robustness of Information Bottleneck Models","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2109.08191","title":"Simple Post-Training Robustness Using Test Time Augmentations and Random Forest","created":"2021-09-16","cited_by_count":4,"area":null},{"id":"2111.08485","title":"Consistent Semantic Attacks on Optical Flow","created":"2021-11-16","cited_by_count":4,"area":null},{"id":"2203.13277","title":"A Manifold View of Adversarial Risk","created":"2022-03-24","cited_by_count":4,"area":null},{"id":"2204.12393","title":"On Fragile Features and Batch Normalization in Adversarial Training","created":"2022-04-26","cited_by_count":4,"area":null},{"id":"2210.00301","title":"Learning Globally Smooth Functions on Manifolds","created":"2022-10-01","cited_by_count":4,"area":null},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2308.15466","title":"Input margins can predict generalization too","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2312.17431","title":"MVPatch: More Vivid Patch for Adversarial Camouflaged Attacks on Object Detectors in the Physical World","created":"2023-12-29","cited_by_count":4,"area":null},{"id":"2411.17911","title":"Passive Deepfake Detection Across Multi-modalities: A Comprehensive Survey","created":"2024-11-26","cited_by_count":4,"area":null},{"id":"2412.14301","title":"What Has Been Overlooked in Contrastive Source-Free Domain Adaptation: Leveraging Source-Informed Latent Augmentation within Neighborhood Context","created":"2024-12-18","cited_by_count":4,"area":null},{"id":"2606.09859","title":"Mitigating Manifold Departure: Uncertainty-Aware Subspace Rectification for Trustworthy MLLM Decoding","created":"2026-05-31","cited_by_count":4,"area":null},{"id":"2105.15157","title":"Adaptive Feature Alignment for Adversarial Training","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2106.16198","title":"In-distribution adversarial attacks on object recognition models using gradient-free search","created":"2021-06-30","cited_by_count":3,"area":null},{"id":"2107.02658","title":"On Generalization of Graph Autoencoders with Adversarial Training","created":"2021-07-06","cited_by_count":3,"area":null},{"id":"2108.11032","title":"Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE","created":"2021-08-25","cited_by_count":3,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2202.05737","title":"Improving Generalization via Uncertainty Driven Perturbations","created":"2022-02-11","cited_by_count":3,"area":null},{"id":"2210.01288","title":"Strength-Adaptive Adversarial Training","created":"2022-10-04","cited_by_count":3,"area":null},{"id":"2211.02675","title":"An Adversarial Robustness Perspective on the Topology of Neural Networks","created":"2022-11-04","cited_by_count":3,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2510.14231","title":"When Flatness Does (Not) Guarantee Adversarial Robustness","created":"2025-10-16","cited_by_count":3,"area":null},{"id":"2201.03829","title":"Quantifying Robustness to Adversarial Word Substitutions","created":"2022-01-11","cited_by_count":2,"area":null},{"id":"2202.02595","title":"Memory Defense: More Robust Classification via a Memory-Masking Autoencoder","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2202.02626","title":"Layer-wise Regularized Adversarial Training using Layers Sustainability Analysis (LSA) framework","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2204.13232","title":"Adversarial Fine-tune with Dynamically Regulated Adversary","created":"2022-04-28","cited_by_count":2,"area":null}],"next_cursor":"100"}