{"total":69,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2203.01441","title":"3D Common Corruptions and Data Augmentation","created":"2022-03-02","cited_by_count":119,"area":null},{"id":"2105.05612","title":"Evading the Simplicity Bias: Training a Diverse Set of Models Discovers Solutions with Superior OOD Generalization","created":"2021-05-12","cited_by_count":83,"area":null},{"id":"2202.04414","title":"Agree to Disagree: Diversity through Disagreement for Better Transferability","created":"2022-02-09","cited_by_count":70,"area":null},{"id":"2101.05544","title":"DICE: Diversity in Deep Ensembles via Conditional Redundancy Adversarial Estimation","created":"2021-01-14","cited_by_count":48,"area":null},{"id":"2308.02897","title":"An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability","created":"2023-08-05","cited_by_count":42,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38,"area":null},{"id":"2107.02425","title":"GradDiv: Adversarial Robustness of Randomized Neural Networks via Gradient Diversity Regularization","created":"2021-07-06","cited_by_count":34,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2103.10919","title":"Robustness via Cross-Domain Ensembles","created":"2021-03-19","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2305.14846","title":"Introducing Competition to Boost the Transferability of Targeted Adversarial Examples through Clean Feature Mixup","created":"2023-05-24","cited_by_count":17,"area":null},{"id":"2302.00704","title":"Pathologies of Predictive Diversity in Deep Ensembles","created":"2023-02-01","cited_by_count":16,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2102.01886","title":"Learning Diverse-Structured Networks for Adversarial Robustness","created":"2021-02-03","cited_by_count":12,"area":null},{"id":"2410.04968","title":"Collaboration! Towards Robust Neural Methods for Routing Problems","created":"2024-10-07","cited_by_count":9,"area":null},{"id":"2109.11125","title":"Adversarial Transfer Attacks With Unknown Data and Class Overlap","created":"2021-09-23","cited_by_count":8,"area":null},{"id":"2201.10908","title":"Improving robustness and calibration in ensembles with diversity regularization","created":"2022-01-26","cited_by_count":8,"area":null},{"id":"2206.03362","title":"Building Robust Ensembles via Margin Boosting","created":"2022-06-07","cited_by_count":8,"area":null},{"id":"2302.10739","title":"MalProtect: Stateful Defense Against Adversarial Query Attacks in ML-based Malware Detection","created":"2023-02-21","cited_by_count":8,"area":null},{"id":"2310.14356","title":"Semantic and Expressive Variation in Image Captions Across Languages","created":"2023-10-22","cited_by_count":8,"area":null},{"id":"2211.08008","title":"MORA: Improving Ensemble Robustness Evaluation with Model-Reweighing Attack","created":"2022-11-15","cited_by_count":7,"area":null},{"id":"2408.04400","title":"DIVE: Subgraph Disagreement for Graph Out-of-Distribution Generalization","created":"2024-08-08","cited_by_count":7,"area":null},{"id":"2410.06851","title":"Understanding Model Ensemble in Transferable Adversarial Attack","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2104.10586","title":"Mixture of Robust Experts (MoRE):A Robust Denoising Method towards multiple perturbations","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2111.04670","title":"Approximate Neural Architecture Search via Operation Distribution Learning","created":"2021-11-08","cited_by_count":6,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2404.00712","title":"Survey of Computerized Adaptive Testing: A Machine Learning Perspective","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2206.06737","title":"Adversarial Vulnerability of Randomized Ensembles","created":"2022-06-14","cited_by_count":5,"area":null},{"id":"2412.11608","title":"Towards Adversarial Robustness of Model-Level Mixture-of-Experts Architectures for Semantic Segmentation","created":"2024-12-16","cited_by_count":5,"area":"moe"},{"id":"2208.08697","title":"Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundaries","created":"2022-08-18","cited_by_count":4,"area":null},{"id":"2302.07221","title":"On the Role of Randomization in Adversarially Robust Classification","created":"2023-02-14","cited_by_count":4,"area":null},{"id":"2105.14275","title":"Greedy Bayesian Posterior Approximation with Deep Ensembles","created":"2021-05-29","cited_by_count":3,"area":null},{"id":"2302.01375","title":"On the Robustness of Randomized Ensembles to Adversarial Perturbations","created":"2023-02-02","cited_by_count":3,"area":null},{"id":"2308.03792","title":"Multi-attacks: Many images $+$ the same adversarial attack $\\to$ many target labels","created":"2023-08-04","cited_by_count":3,"area":null},{"id":"2405.06340","title":"Improving Transferable Targeted Adversarial Attack via Normalized Logit Calibration and Truncated Feature Mixing","created":"2024-05-10","cited_by_count":3,"area":null},{"id":"2102.05104","title":"\"What's in the box?!\": Deflecting Adversarial Attacks by Randomly Deploying Adversarially-Disjoint Models","created":"2021-02-09","cited_by_count":2,"area":null},{"id":"2106.02867","title":"Ensemble Defense with Data Diversity: Weak Correlation Implies Strong Robustness","created":"2021-06-05","cited_by_count":2,"area":null},{"id":"2112.03615","title":"Saliency Diversified Deep Ensemble for Robustness to Adversaries","created":"2021-12-07","cited_by_count":2,"area":null},{"id":"2206.14477","title":"Adversarial Ensemble Training by Jointly Learning Label Dependencies and Member Models","created":"2022-06-29","cited_by_count":2,"area":null},{"id":"2304.13019","title":"Certifying Ensembles: A General Certification Theory with S-Lipschitzness","created":"2023-04-25","cited_by_count":2,"area":null},{"id":"2308.00346","title":"Dynamic ensemble selection based on Deep Neural Network Uncertainty Estimation for Adversarial Robustness","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2405.13324","title":"Adversarial Training via Adaptive Knowledge Amalgamation of an Ensemble of Teachers","created":"2024-05-22","cited_by_count":2,"area":null},{"id":"2502.17397","title":"Robust Confinement State Classification with Uncertainty Quantification through Ensembled Data-Driven Methods","created":"2025-02-24","cited_by_count":2,"area":null},{"id":"2505.12644","title":"Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2509.23689","title":"Merge Now, Regret Later: The Hidden Cost of Model Merging Is Adversarial Transferability","created":"2025-09-28","cited_by_count":2,"area":null},{"id":"2109.05558","title":"CoG: a Two-View Co-training Framework for Defending Adversarial Attacks on Graph","created":"2021-09-12","cited_by_count":1,"area":null},{"id":"2109.05919","title":"Evolving Architectures with Gradient Misalignment toward Low Adversarial Transferability","created":"2021-09-13","cited_by_count":1,"area":null},{"id":"2111.15160","title":"Mitigating Adversarial Attacks by Distributing Different Copies to Different Users","created":"2021-11-30","cited_by_count":1,"area":null},{"id":"2206.00278","title":"On the Perils of Cascading Robust Classifiers","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2210.00062","title":"Learning Robust Kernel Ensembles with Kernel Average Pooling","created":"2022-09-30","cited_by_count":1,"area":null},{"id":"2307.10788","title":"Adversarial attacks for mixtures of classifiers","created":"2023-07-20","cited_by_count":1,"area":null},{"id":"2401.11126","title":"CARE: Ensemble Adversarial Robustness Evaluation Against Adaptive Attackers for Security Applications","created":"2024-01-20","cited_by_count":1,"area":null},{"id":"2410.05136","title":"LOTOS: Layer-wise Orthogonalization for Training Robust Ensembles","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2504.04747","title":"Two is Better than One: Efficient Ensemble Defense for Robust and Compact Models","created":"2025-04-07","cited_by_count":1,"area":null},{"id":"2507.22428","title":"Theoretical Analysis of Relative Errors in Gradient Computations for Adversarial Attacks with CE Loss","created":"2025-07-30","cited_by_count":1,"area":null},{"id":"2103.14795","title":"Ensemble-in-One: Learning Ensemble within Random Gated Networks for Enhanced Adversarial Robustness","created":"2021-03-27","cited_by_count":0,"area":null},{"id":"2206.10334","title":"Defending Adversarial Examples by Negative Correlation Ensemble","created":"2022-06-11","cited_by_count":0,"area":null},{"id":"2302.00537","title":"Effectiveness of Moving Target Defenses for Adversarial Attacks in ML-based Malware Detection","created":"2023-02-01","cited_by_count":0,"area":null},{"id":"2310.07725","title":"Extreme Image Transformations Facilitate Robust Latent Object Representations","created":"2023-09-19","cited_by_count":0,"area":null},{"id":"2403.16405","title":"Ensemble Adversarial Defense via Integration of Multiple Dispersed Low Curvature Models","created":"2024-03-25","cited_by_count":0,"area":null},{"id":"2405.02598","title":"UDUC: An Uncertainty-driven Approach for Learning-based Robust Control","created":"2024-05-04","cited_by_count":0,"area":"deeprl"},{"id":"2412.05466","title":"Multi-Armed Bandit Approach for Optimizing Training on Synthetic Data","created":"2024-12-06","cited_by_count":0,"area":"synth"},{"id":"2506.10888","title":"Lattice Climber Attack: Adversarial attacks for randomized mixtures of classifiers","created":"2025-06-12","cited_by_count":0,"area":null},{"id":"2509.00089","title":"Learning from Peers: Collaborative Ensemble Adversarial Training","created":"2025-08-27","cited_by_count":0,"area":null},{"id":"2511.13654","title":"Tuning for Two Adversaries: Enhancing the Robustness Against Transfer and Query-Based Attacks using Hyperparameter Tuning","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2511.13749","title":"DeepDefense: Robust Learning via Layer-Wise Gradient-Feature Alignment","created":"2025-11-13","cited_by_count":0,"area":null},{"id":"2608.15115","title":"Perspective-Invariant Attack with Enhanced Transferability of Adversarial Examples","created":"2026-08-15","cited_by_count":0,"area":null}],"next_cursor":null}