{"total":30,"rows":[{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71,"area":null},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59,"area":null},{"id":"2106.09672","title":"The 2021 Image Similarity Dataset and Challenge","created":"2021-06-17","cited_by_count":44,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2104.03863","title":"A single gradient step finds adversarial examples on random two-layers neural networks","created":"2021-04-08","cited_by_count":26,"area":null},{"id":"2106.12611","title":"Adversarial Examples in Multi-Layer Random ReLU Networks","created":"2021-06-23","cited_by_count":26,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2103.02695","title":"Shift Invariance Can Reduce Adversarial Robustness","created":"2021-03-03","cited_by_count":16,"area":null},{"id":"2102.05431","title":"Dompteur: Taming Audio Adversarial Examples","created":"2021-02-10","cited_by_count":10,"area":null},{"id":"2104.05921","title":"Thief, Beware of What Get You There: Towards Understanding Model Extraction Attack","created":"2021-04-13","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2105.00433","title":"Who's Afraid of Adversarial Transferability?","created":"2021-05-02","cited_by_count":6,"area":null},{"id":"2207.00411","title":"Adversarial Robustness is at Odds with Lazy Training","created":"2022-06-18","cited_by_count":6,"area":null},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2211.11835","title":"Fairness Increases Adversarial Vulnerability","created":"2022-11-21","cited_by_count":5,"area":null},{"id":"2305.01808","title":"Hamming Similarity and Graph Laplacians for Class Partitioning and Adversarial Image Detection","created":"2023-05-02","cited_by_count":4,"area":null},{"id":"2211.13305","title":"Dual Graphs of Polyhedral Decompositions for the Detection of Adversarial Attacks","created":"2022-11-23","cited_by_count":2,"area":null},{"id":"2311.01356","title":"Upper and lower bounds for the Lipschitz constant of random neural networks","created":"2023-11-02","cited_by_count":2,"area":null},{"id":"2107.10599","title":"Towards Explaining Adversarial Examples Phenomenon in Artificial Neural Networks","created":"2021-07-22","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2203.04855","title":"Binary Classification Under $\\ell_0$ Attacks for General Noise Distribution","created":"2022-03-09","cited_by_count":0,"area":null},{"id":"2303.16861","title":"Beyond Empirical Risk Minimization: Local Structure Preserving Regularization for Improving Adversarial Robustness","created":"2023-03-29","cited_by_count":0,"area":null},{"id":"2307.03803","title":"A Theoretical Perspective on Subnetwork Contributions to Adversarial Robustness","created":"2023-07-07","cited_by_count":0,"area":null},{"id":"2309.15669","title":"On the Computational Entanglement of Distant Features in Adversarial Machine Learning","created":"2023-09-27","cited_by_count":0,"area":null},{"id":"2402.03576","title":"Generalization Properties of Adversarial Training for $\\ell_0$-Bounded Adversarial Attacks","created":"2024-02-05","cited_by_count":0,"area":null},{"id":"2504.15823","title":"Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models","created":"2025-04-22","cited_by_count":0,"area":null},{"id":"2506.12613","title":"Existence of Adversarial Examples for Random Convolutional Networks via Isoperimetric Inequalities on $\\mathbb{so}(d)$","created":"2025-06-14","cited_by_count":0,"area":null},{"id":"2602.03415","title":"Most Convolutional Networks Suffer from Small Adversarial Perturbations","created":"2026-02-03","cited_by_count":0,"area":null}],"next_cursor":null}