{"total":314,"rows":[{"id":"2101.11605","title":"Bottleneck Transformers for Visual Recognition","created":"2021-01-27","cited_by_count":364,"area":null},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2205.14969","title":"Guided Diffusion Model for Adversarial Purification","created":"2022-05-30","cited_by_count":92,"area":"diffusion"},{"id":"2112.15275","title":"Learned Coarse Models for Efficient Turbulence Simulation","created":"2021-12-31","cited_by_count":91,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84,"area":null},{"id":"2108.07969","title":"Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better","created":"2021-08-18","cited_by_count":79,"area":"distill"},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2111.09571","title":"Person Re-identification Method Based on Color Attack and Joint Defence","created":"2021-11-18","cited_by_count":56,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2303.14460","title":"CFA: Class-wise Calibrated Fair Adversarial Training","created":"2023-03-25","cited_by_count":53,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47,"area":null},{"id":"2111.14341","title":"OOD-CV: A Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Images","created":"2021-11-29","cited_by_count":46,"area":null},{"id":"2304.14298","title":"Instance Segmentation in the Dark","created":"2023-04-27","cited_by_count":46,"area":null},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2210.02041","title":"Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks","created":"2022-10-05","cited_by_count":38,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2204.07756","title":"Visual Attention Methods in Deep Learning: An In-Depth Survey","created":"2022-04-16","cited_by_count":37,"area":null},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37,"area":null},{"id":"2111.10990","title":"Imperceptible Transfer Attack and Defense on 3D Point Cloud Classification","created":"2021-11-22","cited_by_count":36,"area":null},{"id":"2101.03064","title":"One-Class Classification: A Survey","created":"2021-01-08","cited_by_count":35,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2103.16241","title":"Improving robustness against common corruptions with frequency biased models","created":"2021-03-30","cited_by_count":34,"area":null},{"id":"2210.06284","title":"Visual Prompting for Adversarial Robustness","created":"2022-10-12","cited_by_count":34,"area":null},{"id":"2304.10136","title":"Diversifying the High-level Features for better Adversarial Transferability","created":"2023-04-20","cited_by_count":34,"area":null},{"id":"2208.08664","title":"Enhancing Diffusion-Based Image Synthesis with Robust Classifier Guidance","created":"2022-08-18","cited_by_count":33,"area":"diffusion"},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2203.01677","title":"Detection of Word Adversarial Examples in Text Classification: Benchmark and Baseline via Robust Density Estimation","created":"2022-03-03","cited_by_count":32,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29,"area":null},{"id":"2107.13335","title":"WaveCNet: Wavelet Integrated CNNs to Suppress Aliasing Effect for Noise-Robust Image Classification","created":"2021-07-28","cited_by_count":29,"area":null},{"id":"2212.07339","title":"Mitigating Artifacts in Real-World Video Super-Resolution Models","created":"2022-12-14","cited_by_count":29,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2107.14110","title":"Enhancing Adversarial Robustness via Test-time Transformation Ensembling","created":"2021-07-29","cited_by_count":27,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2302.02213","title":"CosPGD: an efficient white-box adversarial attack for pixel-wise prediction tasks","created":"2023-02-04","cited_by_count":27,"area":null},{"id":"2308.03979","title":"PAIF: Perception-Aware Infrared-Visible Image Fusion for Attack-Tolerant Semantic Segmentation","created":"2023-08-08","cited_by_count":26,"area":null},{"id":"2103.14938","title":"IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Tracking","created":"2021-03-27","cited_by_count":25,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2108.11168","title":"Adversarially Robust One-class Novelty Detection","created":"2021-08-25","cited_by_count":24,"area":null},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23,"area":null},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2102.05311","title":"CIFS: Improving Adversarial Robustness of CNNs via Channel-wise Importance-based Feature Selection","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2202.05953","title":"Open-set Adversarial Defense with Clean-Adversarial Mutual Learning","created":"2022-02-12","cited_by_count":21,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2106.02749","title":"Predify: Augmenting deep neural networks with brain-inspired predictive coding dynamics","created":"2021-06-04","cited_by_count":19,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2210.04886","title":"Revisiting adapters with adversarial training","created":"2022-10-10","cited_by_count":18,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2106.10606","title":"Attack to Fool and Explain Deep Networks","created":"2021-06-20","cited_by_count":17,"area":null},{"id":"2111.03536","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-11-05","cited_by_count":17,"area":null},{"id":"2203.15230","title":"Zero-Query Transfer Attacks on Context-Aware Object Detectors","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2209.07534","title":"Improving Robust Fairness via Balance Adversarial Training","created":"2022-09-15","cited_by_count":17,"area":null},{"id":"2207.02796","title":"Cross-receptive Focused Inference Network for Lightweight Image Super-Resolution","created":"2022-07-06","cited_by_count":16,"area":null},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15,"area":null},{"id":"2206.09098","title":"Existence and Minimax Theorems for Adversarial Surrogate Risks in Binary Classification","created":"2022-06-18","cited_by_count":15,"area":null},{"id":"2207.11378","title":"Do Perceptually Aligned Gradients Imply Adversarial Robustness?","created":"2022-07-22","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2302.14309","title":"Temporal Coherent Test-Time Optimization for Robust Video Classification","created":"2023-02-28","cited_by_count":15,"area":null},{"id":"2306.06712","title":"Neural Architecture Design and Robustness: A Dataset","created":"2023-06-11","cited_by_count":15,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2305.05392","title":"Sharpness-Aware Minimization Alone can Improve Adversarial Robustness","created":"2023-05-09","cited_by_count":14,"area":null},{"id":"2310.04780","title":"IPMix: Label-Preserving Data Augmentation Method for Training Robust Classifiers","created":"2023-10-07","cited_by_count":14,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2508.12531","title":"Rethinking Safety in LLM Fine-tuning: An Optimization Perspective","created":"2025-08-17","cited_by_count":14,"area":"lr"},{"id":"2103.06473","title":"Multi-Task Federated Reinforcement Learning with Adversaries","created":"2021-03-11","cited_by_count":13,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2208.03610","title":"Blackbox Attacks via Surrogate Ensemble Search","created":"2022-08-07","cited_by_count":13,"area":null},{"id":"2101.03924","title":"The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensing","created":"2021-01-11","cited_by_count":12,"area":null},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12,"area":null},{"id":"2105.02942","title":"Understanding Catastrophic Overfitting in Adversarial Training","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2210.04311","title":"Pruning Adversarially Robust Neural Networks without Adversarial Examples","created":"2022-10-09","cited_by_count":12,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2303.09977","title":"Semantic Scene Completion with Cleaner Self","created":"2023-03-17","cited_by_count":12,"area":null},{"id":"2304.10266","title":"OOD-CV-v2: An extended Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Images","created":"2023-04-17","cited_by_count":12,"area":null},{"id":"2103.02152","title":"Group-wise Inhibition based Feature Regularization for Robust Classification","created":"2021-03-03","cited_by_count":11,"area":null},{"id":"2201.06070","title":"ALA: Naturalness-aware Adversarial Lightness Attack","created":"2022-01-16","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2207.00887","title":"Towards Robust Video Object Segmentation with Adaptive Object Calibration","created":"2022-07-02","cited_by_count":11,"area":null}],"next_cursor":"100"}