{"total":59,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2404.16212","title":"An Analysis of Recent Advances in Deepfake Image Detection in an Evolving Threat Landscape","created":"2024-04-24","cited_by_count":16,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2101.01121","title":"Local Competition and Stochasticity for Adversarial Robustness in Deep Learning","created":"2021-01-04","cited_by_count":12,"area":null},{"id":"2112.02671","title":"Stochastic Local Winner-Takes-All Networks Enable Profound Adversarial Robustness","created":"2021-12-05","cited_by_count":11,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2101.11888","title":"Does Typological Blinding Impede Cross-Lingual Sharing?","created":"2021-01-28","cited_by_count":9,"area":null},{"id":"2104.05232","title":"Double Perturbation: On the Robustness of Robustness and Counterfactual Bias Evaluation","created":"2021-04-12","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2405.11547","title":"Certified Robust Accuracy of Neural Networks Are Bounded due to Bayes Errors","created":"2024-05-19","cited_by_count":7,"area":null},{"id":"2106.09223","title":"Evaluating the Robustness of Bayesian Neural Networks Against Different Types of Attacks","created":"2021-06-17","cited_by_count":6,"area":null},{"id":"2210.03429","title":"Adversarially Robust Prototypical Few-shot Segmentation with Neural-ODEs","created":"2022-10-07","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2208.12428","title":"Robust Prototypical Few-Shot Organ Segmentation with Regularized Neural-ODEs","created":"2022-08-26","cited_by_count":5,"area":null},{"id":"2109.12456","title":"Auditing AI models for Verified Deployment under Semantic Specifications","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2110.13980","title":"Adversarial Attacks and Defenses for Social Network Text Processing Applications: Techniques, Challenges and Future Research Directions","created":"2021-10-26","cited_by_count":4,"area":null},{"id":"2207.07803","title":"Masked Spatial-Spectral Autoencoders Are Excellent Hyperspectral Defenders","created":"2022-07-16","cited_by_count":4,"area":null},{"id":"2403.07078","title":"Improving deep learning with prior knowledge and cognitive models: A survey on enhancing explainability, adversarial robustness and zero-shot learning","created":"2024-03-11","cited_by_count":4,"area":null},{"id":"2404.06776","title":"Logit Calibration and Feature Contrast for Robust Federated Learning on Non-IID Data","created":"2024-04-10","cited_by_count":4,"area":null},{"id":"2108.12473","title":"Mal2GCN: A Robust Malware Detection Approach Using Deep Graph Convolutional Networks With Non-Negative Weights","created":"2021-08-27","cited_by_count":3,"area":null},{"id":"2211.12864","title":"Privacy-Enhancing Optical Embeddings for Lensless Classification","created":"2022-11-23","cited_by_count":3,"area":null},{"id":"2305.17000","title":"DistriBlock: Identifying adversarial audio samples by leveraging characteristics of the output distribution","created":"2023-05-26","cited_by_count":3,"area":null},{"id":"2404.10789","title":"PASA: Attack Agnostic Unsupervised Adversarial Detection using Prediction & Attribution Sensitivity Analysis","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2506.23581","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","created":"2025-06-30","cited_by_count":3,"area":null},{"id":"2103.01359","title":"Brain Programming is Immune to Adversarial Attacks: Towards Accurate and Robust Image Classification using Symbolic Learning","created":"2021-03-01","cited_by_count":2,"area":null},{"id":"2105.12427","title":"Deep Repulsive Prototypes for Adversarial Robustness","created":"2021-05-26","cited_by_count":2,"area":null},{"id":"2212.07815","title":"Adversarially Robust Video Perception by Seeing Motion","created":"2022-12-13","cited_by_count":2,"area":null},{"id":"2307.00407","title":"WavePaint: Resource-efficient Token-mixer for Self-supervised Inpainting","created":"2023-07-01","cited_by_count":2,"area":null},{"id":"2309.00879","title":"Towards Certified Probabilistic Robustness with High Accuracy","created":"2023-09-02","cited_by_count":2,"area":null},{"id":"2309.07197","title":"Mitigating Adversarial Attacks in Federated Learning with Trusted Execution Environments","created":"2023-09-13","cited_by_count":2,"area":null},{"id":"2402.11733","title":"The Effectiveness of Random Forgetting for Robust Generalization","created":"2024-02-18","cited_by_count":2,"area":null},{"id":"2405.13324","title":"Adversarial Training via Adaptive Knowledge Amalgamation of an Ensemble of Teachers","created":"2024-05-22","cited_by_count":2,"area":null},{"id":"2405.14923","title":"How Does Bayes Error Limit Probabilistic Robust Accuracy","created":"2024-05-23","cited_by_count":2,"area":null},{"id":"2201.12143","title":"Locally Invariant Explanations: Towards Stable and Unidirectional Explanations through Local Invariant Learning","created":"2022-01-28","cited_by_count":1,"area":null},{"id":"2204.11596","title":"A Simple Structure For Building A Robust Model","created":"2022-04-25","cited_by_count":1,"area":null},{"id":"2303.11552","title":"Boosting Verified Training for Robust Image Classifications via Abstraction","created":"2023-03-21","cited_by_count":1,"area":null},{"id":"2306.08422","title":"X-Detect: Explainable Adversarial Patch Detection for Object Detectors in Retail","created":"2023-06-14","cited_by_count":1,"area":null},{"id":"2308.04373","title":"Pelta: Shielding Transformers to Mitigate Evasion Attacks in Federated Learning","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2401.14232","title":"AR-GAN: Generative Adversarial Network-Based Defense Method Against Adversarial Attacks on the Traffic Sign Classification System of Autonomous Vehicles","created":"2023-12-31","cited_by_count":1,"area":null},{"id":"2409.01813","title":"Comparative Study on Noise-Augmented Training and its Effect on Adversarial Robustness in ASR Systems","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2409.19788","title":"Exploring Adversarial Robustness in Classification tasks using DNA Language Models","created":"2024-09-29","cited_by_count":1,"area":null},{"id":"2412.18218","title":"On the Effectiveness of Adversarial Training on Malware Classifiers","created":"2024-12-24","cited_by_count":1,"area":null},{"id":"2501.15257","title":"Towards Communication-Efficient Adversarial Federated Learning for Robust Edge Intelligence","created":"2025-01-25","cited_by_count":1,"area":null},{"id":"2111.09779","title":"Wiggling Weights to Improve the Robustness of Classifiers","created":"2021-11-18","cited_by_count":0,"area":null},{"id":"2201.02504","title":"Repairing Adversarial Texts through Perturbation","created":"2021-12-29","cited_by_count":0,"area":null},{"id":"2405.00392","title":"Certified Adversarial Robustness of Machine Learning-based Malware Detectors via (De)Randomized Smoothing","created":"2024-05-01","cited_by_count":0,"area":null},{"id":"2407.03115","title":"$L_p$-norm Distortion-Efficient Adversarial Attack","created":"2024-07-03","cited_by_count":0,"area":null},{"id":"2408.16025","title":"Improving Adversarial Robustness in Android Malware Detection by Reducing the Impact of Spurious Correlations","created":"2024-08-27","cited_by_count":0,"area":null},{"id":"2501.19155","title":"SWAT: Sliding Window Adversarial Training for Gradual Domain Adaptation","created":"2025-01-31","cited_by_count":0,"area":null},{"id":"2502.05925","title":"Sign-Symmetry Learning Rules are Robust Fine-Tuners","created":"2025-02-09","cited_by_count":0,"area":null},{"id":"2603.07302","title":"Training for Trustworthy Saliency Maps: Adversarial Training Meets Feature-Map Smoothing","created":"2026-03-07","cited_by_count":0,"area":null},{"id":"2603.22590","title":"Precision-Varying Prediction (PVP): Robustifying ASR systems against adversarial attacks","created":"2026-03-23","cited_by_count":0,"area":null}],"next_cursor":null}