{"total":114,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2106.15590","title":"The Values Encoded in Machine Learning Research","created":"2021-06-29","cited_by_count":172,"area":null},{"id":"2203.01441","title":"3D Common Corruptions and Data Augmentation","created":"2022-03-02","cited_by_count":119,"area":null},{"id":"2110.13771","title":"AugMax: Adversarial Composition of Random Augmentations for Robust Training","created":"2021-10-26","cited_by_count":90,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2106.14999","title":"Test-Time Adaptation to Distribution Shift by Confidence Maximization and Input Transformation","created":"2021-06-28","cited_by_count":68,"area":null},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65,"area":null},{"id":"2112.01008","title":"Editing a classifier by rewriting its prediction rules","created":"2021-12-02","cited_by_count":65,"area":null},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43,"area":null},{"id":"2206.07438","title":"Multi-Objective Hyperparameter Optimization in Machine Learning -- An Overview","created":"2022-06-15","cited_by_count":37,"area":null},{"id":"2103.16241","title":"Improving robustness against common corruptions with frequency biased models","created":"2021-03-30","cited_by_count":34,"area":null},{"id":"2110.06513","title":"Benchmarking the Robustness of Spatial-Temporal Models Against Corruptions","created":"2021-10-13","cited_by_count":34,"area":null},{"id":"2106.03805","title":"3DB: A Framework for Debugging Computer Vision Models","created":"2021-06-07","cited_by_count":31,"area":null},{"id":"2107.14110","title":"Enhancing Adversarial Robustness via Test-time Transformation Ensembling","created":"2021-07-29","cited_by_count":27,"area":null},{"id":"2206.01737","title":"MaxStyle: Adversarial Style Composition for Robust Medical Image Segmentation","created":"2022-06-02","cited_by_count":27,"area":null},{"id":"2302.06378","title":"Semantic Image Segmentation: Two Decades of Research","created":"2023-02-13","cited_by_count":27,"area":null},{"id":"2101.11588","title":"Differentiable sampling of molecular geometries with uncertainty-based adversarial attacks","created":"2021-01-27","cited_by_count":25,"area":null},{"id":"2103.10919","title":"Robustness via Cross-Domain Ensembles","created":"2021-03-19","cited_by_count":23,"area":null},{"id":"2308.02533","title":"Improving Generalization of Adversarial Training via Robust Critical Fine-Tuning","created":"2023-08-01","cited_by_count":23,"area":null},{"id":"2110.14019","title":"Reliable and Trustworthy Machine Learning for Health Using Dataset Shift Detection","created":"2021-10-26","cited_by_count":21,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2112.03241","title":"Unsupervised Domain Adaptation for Semantic Image Segmentation: a Comprehensive Survey","created":"2021-12-06","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2102.07762","title":"Membership Inference Attacks are Easier on Difficult Problems","created":"2021-02-15","cited_by_count":17,"area":"safety"},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14,"area":null},{"id":"2110.08220","title":"Combining Diverse Feature Priors","created":"2021-10-15","cited_by_count":12,"area":null},{"id":"2502.02870","title":"Uncertainty Quantification with the Empirical Neural Tangent Kernel","created":"2025-02-05","cited_by_count":11,"area":null},{"id":"2112.14299","title":"DeepAdversaries: Examining the Robustness of Deep Learning Models for Galaxy Morphology Classification","created":"2021-12-28","cited_by_count":10,"area":null},{"id":"2103.14824","title":"Improving Model Robustness by Adaptively Correcting Perturbation Levels with Active Queries","created":"2021-03-27","cited_by_count":9,"area":null},{"id":"2109.12746","title":"Training on Test Data with Bayesian Adaptation for Covariate Shift","created":"2021-09-27","cited_by_count":8,"area":null},{"id":"2302.02005","title":"DeepAstroUDA: Semi-Supervised Universal Domain Adaptation for Cross-Survey Galaxy Morphology Classification and Anomaly Detection","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2307.12822","title":"Learning Provably Robust Estimators for Inverse Problems via Jittering","created":"2023-07-24","cited_by_count":8,"area":null},{"id":"2202.12412","title":"Fourier-Based Augmentations for Improved Robustness and Uncertainty Calibration","created":"2022-02-24","cited_by_count":7,"area":null},{"id":"2106.07221","title":"Certification of embedded systems based on Machine Learning: A survey","created":"2021-06-14","cited_by_count":6,"area":null},{"id":"2203.00915","title":"MIAShield: Defending Membership Inference Attacks via Preemptive Exclusion of Members","created":"2022-03-02","cited_by_count":6,"area":"safety"},{"id":"2310.16499","title":"Data Optimization in Deep Learning: A Survey","created":"2023-10-25","cited_by_count":6,"area":null},{"id":"2505.00685","title":"On the Importance of Gaussianizing Representations","created":"2025-05-01","cited_by_count":6,"area":null},{"id":"2208.12428","title":"Robust Prototypical Few-Shot Organ Segmentation with Regularized Neural-ODEs","created":"2022-08-26","cited_by_count":5,"area":null},{"id":"2209.01199","title":"Revisiting Outer Optimization in Adversarial Training","created":"2022-09-02","cited_by_count":5,"area":null},{"id":"2210.05546","title":"What does a deep neural network confidently perceive? The effective dimension of high certainty class manifolds and their low confidence boundaries","created":"2022-10-11","cited_by_count":5,"area":null},{"id":"2212.09082","title":"On the Connection between Invariant Learning and Adversarial Training for Out-of-Distribution Generalization","created":"2022-12-18","cited_by_count":5,"area":null},{"id":"2102.05509","title":"Robustness in Compressed Neural Networks for Object Detection","created":"2021-02-10","cited_by_count":4,"area":null},{"id":"2109.00678","title":"Regional Adversarial Training for Better Robust Generalization","created":"2021-09-02","cited_by_count":4,"area":null},{"id":"2111.08413","title":"Improved Robustness of Vision Transformer via PreLayerNorm in Patch Embedding","created":"2021-11-16","cited_by_count":4,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2207.09408","title":"Bounding generalization error with input compression: An empirical study with infinite-width networks","created":"2022-07-19","cited_by_count":4,"area":null},{"id":"2305.05400","title":"Investigating the Corruption Robustness of Image Classifiers with Random Lp-norm Corruptions","created":"2023-05-09","cited_by_count":4,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2203.11807","title":"A New Approach to Improve Learning-based Deepfake Detection in Realistic Conditions","created":"2022-03-22","cited_by_count":3,"area":null},{"id":"2204.11531","title":"VITA: A Multi-Source Vicinal Transfer Augmentation Method for Out-of-Distribution Generalization","created":"2022-04-25","cited_by_count":3,"area":null},{"id":"2308.10373","title":"HoSNN: Adversarially-Robust Homeostatic Spiking Neural Networks with Adaptive Firing Thresholds","created":"2023-08-20","cited_by_count":3,"area":null},{"id":"2408.06071","title":"A-BDD: Leveraging Data Augmentations for Safe Autonomous Driving in Adverse Weather and Lighting","created":"2024-08-12","cited_by_count":3,"area":null},{"id":"2102.11502","title":"Oriole: Thwarting Privacy against Trustworthy Deep Learning Models","created":"2021-02-23","cited_by_count":2,"area":null},{"id":"2103.11372","title":"Natural Perturbed Training for General Robustness of Neural Network Classifiers","created":"2021-03-21","cited_by_count":2,"area":null},{"id":"2106.13394","title":"Countering Adversarial Examples: Combining Input Transformation and Noisy Training","created":"2021-06-25","cited_by_count":2,"area":null},{"id":"2110.01955","title":"Distribution Mismatch Correction for Improved Robustness in Deep Neural Networks","created":"2021-10-05","cited_by_count":2,"area":null},{"id":"2206.13405","title":"Utilizing Class Separation Distance for the Evaluation of Corruption Robustness of Machine Learning Classifiers","created":"2022-06-27","cited_by_count":2,"area":null},{"id":"2207.12545","title":"$p$-DkNN: Out-of-Distribution Detection Through Statistical Testing of Deep Representations","created":"2022-07-25","cited_by_count":2,"area":null},{"id":"2304.12520","title":"Hint-Aug: Drawing Hints from Foundation Vision Transformers Towards Boosted Few-Shot Parameter-Efficient Tuning","created":"2023-04-25","cited_by_count":2,"area":null},{"id":"2308.13870","title":"Brain-like representational straightening of natural movies in robust feedforward neural networks","created":"2023-08-26","cited_by_count":2,"area":null},{"id":"2310.03915","title":"Leveraging Low-Rank and Sparse Recurrent Connectivity for Robust Closed-Loop Control","created":"2023-10-05","cited_by_count":2,"area":null},{"id":"2405.09600","title":"Aggregate Representation Measure for Predictive Model Reusability","created":"2024-05-15","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2408.01446","title":"Estimating Environmental Cost Throughout Model's Adaptive Life Cycle","created":"2024-07-23","cited_by_count":2,"area":null},{"id":"2411.02871","title":"Enhancing Adversarial Robustness via Uncertainty-Aware Distributional Adversarial Training","created":"2024-11-05","cited_by_count":2,"area":null},{"id":"2501.14048","title":"SIDDA: SInkhorn Dynamic Domain Adaptation for Image Classification with Equivariant Neural Networks","created":"2025-01-23","cited_by_count":2,"area":null},{"id":"2102.05096","title":"Towards Bridging the gap between Empirical and Certified Robustness against Adversarial Examples","created":"2021-02-09","cited_by_count":1,"area":null},{"id":"2104.00139","title":"Adversarial Heart Attack: Neural Networks Fooled to Segment Heart Symbols in Chest X-Ray Images","created":"2021-03-31","cited_by_count":1,"area":null},{"id":"2109.13215","title":"Classification and Adversarial examples in an Overparameterized Linear Model: A Signal Processing Perspective","created":"2021-09-27","cited_by_count":1,"area":null},{"id":"2202.12860","title":"ARIA: Adversarially Robust Image Attribution for Content Provenance","created":"2022-02-25","cited_by_count":1,"area":null},{"id":"2206.00278","title":"On the Perils of Cascading Robust Classifiers","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2208.03958","title":"Abutting Grating Illusion: Cognitive Challenge to Neural Network Models","created":"2022-08-08","cited_by_count":1,"area":null},{"id":"2209.13382","title":"Measuring Overfitting in Convolutional Neural Networks using Adversarial Perturbations and Label Noise","created":"2022-09-27","cited_by_count":1,"area":null},{"id":"2210.00062","title":"Learning Robust Kernel Ensembles with Kernel Average Pooling","created":"2022-09-30","cited_by_count":1,"area":null},{"id":"2212.11209","title":"A Theoretical Study of The Effects of Adversarial Attacks on Sparse Regression","created":"2022-12-21","cited_by_count":1,"area":null},{"id":"2302.03750","title":"Linking convolutional kernel size to generalization bias in face analysis CNNs","created":"2023-02-07","cited_by_count":1,"area":null},{"id":"2302.07953","title":"AI Security Threats against Pervasive Robotic Systems: A Course for Next Generation Cybersecurity Workforce","created":"2023-02-15","cited_by_count":1,"area":null},{"id":"2306.11853","title":"Generalization Across Experimental Parameters in Machine Learning Analysis of High Resolution Transmission Electron Microscopy Datasets","created":"2023-06-20","cited_by_count":1,"area":null},{"id":"2308.04137","title":"A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifiers","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2312.10105","title":"SeiT++: Masked Token Modeling Improves Storage-efficient Training","created":"2023-12-15","cited_by_count":1,"area":null},{"id":"2405.20672","title":"Investigating and unmasking feature-level vulnerabilities of CNNs to adversarial perturbations","created":"2024-05-31","cited_by_count":1,"area":null},{"id":"2408.01977","title":"Label Augmentation for Neural Networks Robustness","created":"2024-08-04","cited_by_count":1,"area":null},{"id":"2408.11680","title":"First line of defense: A robust first layer mitigates adversarial attacks","created":"2024-08-21","cited_by_count":1,"area":null},{"id":"2409.01813","title":"Comparative Study on Noise-Augmented Training and its Effect on Adversarial Robustness in ASR Systems","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2410.18556","title":"Complexity Matters: Effective Dimensionality as a Measure for Adversarial Robustness","created":"2024-10-24","cited_by_count":1,"area":null},{"id":"2505.22839","title":"Demystifying Adversarial Robustness in Diffusion Models: Compression, Randomness, and Geometry","created":"2025-05-28","cited_by_count":1,"area":"diffusion"},{"id":"2601.08043","title":"The Role of Noisy Data in Improving CNN Robustness for Image Classification","created":"2026-01-12","cited_by_count":1,"area":null},{"id":"2602.03586","title":"APEX: Probing Neural Networks via Activation Perturbation","created":"2026-02-03","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2101.05950","title":"Robusta: Robust AutoML for Feature Selection via Reinforcement Learning","created":"2021-01-15","cited_by_count":0,"area":null},{"id":"2101.06061","title":"Heating up decision boundaries: isocapacitory saturation, adversarial scenarios and generalization bounds","created":"2021-01-15","cited_by_count":0,"area":null},{"id":"2103.08265","title":"Constant Random Perturbations Provide Adversarial Robustness with Minimal Effect on Accuracy","created":"2021-03-15","cited_by_count":0,"area":null},{"id":"2104.03843","title":"InAugment: Improving Classifiers via Internal Augmentation","created":"2021-04-08","cited_by_count":0,"area":null},{"id":"2104.10076","title":"MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis","created":"2021-04-20","cited_by_count":0,"area":null},{"id":"2105.14710","title":"Robustifying $\\ell_\\infty$ Adversarial Training to the Union of Perturbation Models","created":"2021-05-31","cited_by_count":0,"area":null},{"id":"2203.05212","title":"Membership Privacy Protection for Image Translation Models via Adversarial Knowledge Distillation","created":"2022-03-10","cited_by_count":0,"area":"safety"},{"id":"2203.11797","title":"A Novel Framework for Assessment of Learning-based Detectors in Realistic Conditions with Application to Deepfake Detection","created":"2022-03-22","cited_by_count":0,"area":null},{"id":"2204.11985","title":"When adversarial examples are excusable","created":"2022-04-25","cited_by_count":0,"area":null},{"id":"2206.08237","title":"Noisy Learning for Neural ODEs Acts as a Robustness Locus Widening","created":"2022-06-16","cited_by_count":0,"area":null},{"id":"2208.09449","title":"A Novel Plug-and-Play Approach for Adversarially Robust Generalization","created":"2022-08-19","cited_by_count":0,"area":null}],"next_cursor":"100"}