{"total":39,"rows":[{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2207.01164","title":"Aug-NeRF: Training Stronger Neural Radiance Fields with Triple-Level Physically-Grounded Augmentations","created":"2022-07-04","cited_by_count":46,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2103.00397","title":"Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket Perspective","created":"2021-02-28","cited_by_count":25,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2112.01694","title":"On the Existence of the Adversarial Bayes Classifier (Extended Version)","created":"2021-12-03","cited_by_count":25,"area":null},{"id":"2205.13863","title":"Why Robust Generalization in Deep Learning is Difficult: Perspective of Expressive Power","created":"2022-05-27","cited_by_count":23,"area":null},{"id":"2202.07552","title":"A Theory of PAC Learnability under Transformation Invariances","created":"2022-02-15","cited_by_count":21,"area":null},{"id":"2204.12676","title":"The Multimarginal Optimal Transport Formulation of Adversarial Multiclass Classification","created":"2022-04-27","cited_by_count":21,"area":null},{"id":"2210.05577","title":"What Can the Neural Tangent Kernel Tell Us About Adversarial Robustness?","created":"2022-10-11","cited_by_count":21,"area":null},{"id":"2205.15465","title":"Analyzing Modality Robustness in Multimodal Sentiment Analysis","created":"2022-05-30","cited_by_count":20,"area":null},{"id":"2103.02695","title":"Shift Invariance Can Reduce Adversarial Robustness","created":"2021-03-03","cited_by_count":16,"area":null},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15,"area":null},{"id":"2206.09868","title":"Understanding Robust Learning through the Lens of Representation Similarities","created":"2022-06-20","cited_by_count":12,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2103.09947","title":"Understanding Generalization in Adversarial Training via the Bias-Variance Decomposition","created":"2021-03-17","cited_by_count":10,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2102.05110","title":"Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers","created":"2021-02-09","cited_by_count":7,"area":null},{"id":"2403.17520","title":"Boosting Adversarial Training via Fisher-Rao Norm-based Regularization","created":"2024-03-26","cited_by_count":7,"area":null},{"id":"2401.14948","title":"Conserve-Update-Revise to Cure Generalization and Robustness Trade-off in Adversarial Training","created":"2024-01-26","cited_by_count":6,"area":null},{"id":"2410.10744","title":"Adversarially Robust Out-of-Distribution Detection Using Lyapunov-Stabilized Embeddings","created":"2024-10-14","cited_by_count":6,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2406.04981","title":"The Price of Implicit Bias in Adversarially Robust Generalization","created":"2024-06-07","cited_by_count":5,"area":null},{"id":"2205.09037","title":"Empirical Advocacy of Bio-inspired Models for Robust Image Recognition","created":"2022-05-18","cited_by_count":3,"area":null},{"id":"2206.09099","title":"The Consistency of Adversarial Training for Binary Classification","created":"2022-06-18","cited_by_count":3,"area":null},{"id":"2210.01288","title":"Strength-Adaptive Adversarial Training","created":"2022-10-04","cited_by_count":3,"area":null},{"id":"2412.04245","title":"Intriguing Properties of Robust Classification","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2510.14231","title":"When Flatness Does (Not) Guarantee Adversarial Robustness","created":"2025-10-16","cited_by_count":3,"area":null},{"id":"2309.07197","title":"Mitigating Adversarial Attacks in Federated Learning with Trusted Execution Environments","created":"2023-09-13","cited_by_count":2,"area":null},{"id":"2109.13215","title":"Classification and Adversarial examples in an Overparameterized Linear Model: A Signal Processing Perspective","created":"2021-09-27","cited_by_count":1,"area":null},{"id":"2306.06995","title":"How robust accuracy suffers from certified training with convex relaxations","created":"2023-06-12","cited_by_count":1,"area":null},{"id":"2308.04373","title":"Pelta: Shielding Transformers to Mitigate Evasion Attacks in Federated Learning","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2503.17110","title":"Beyond Accuracy: What Matters in Designing Well-Behaved Image Classification Models?","created":"2025-03-21","cited_by_count":1,"area":null},{"id":"2208.12511","title":"Lower Difficulty and Better Robustness: A Bregman Divergence Perspective for Adversarial Training","created":"2022-08-26","cited_by_count":0,"area":null},{"id":"2310.14045","title":"Training Image Derivatives: Increased Accuracy and Universal Robustness","created":"2023-10-21","cited_by_count":0,"area":null},{"id":"2409.11754","title":"NPAT Null-Space Projected Adversarial Training Towards Zero Deterioration","created":"2024-09-18","cited_by_count":0,"area":null},{"id":"2505.15833","title":"Adversarially Robust Spiking Neural Networks with Sparse Connectivity","created":"2025-05-16","cited_by_count":0,"area":null},{"id":"2609.22240","title":"Statistical Inference for Adversarial Training: Central Limit Theorems via Optimal Transport","created":"2026-09-04","cited_by_count":0,"area":null}],"next_cursor":null}