{"total":84,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2101.01792","title":"Minibatch optimal transport distances; analysis and applications","created":"2021-01-05","cited_by_count":65,"area":null},{"id":"2112.11668","title":"How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?","created":"2021-12-22","cited_by_count":49,"area":null},{"id":"2210.03895","title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints","created":"2022-10-08","cited_by_count":48,"area":null},{"id":"2108.12463","title":"Automatic Text Evaluation through the Lens of Wasserstein Barycenters","created":"2021-08-27","cited_by_count":38,"area":null},{"id":"2105.05558","title":"AVA: Adversarial Vignetting Attack against Visual Recognition","created":"2021-05-12","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2305.05080","title":"Scalable Optimal Transport Methods in Machine Learning: A Contemporary Survey","created":"2023-05-08","cited_by_count":27,"area":null},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2206.04310","title":"GSmooth: Certified Robustness against Semantic Transformations via Generalized Randomized Smoothing","created":"2022-06-09","cited_by_count":23,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2210.08139","title":"Partial Identification of Treatment Effects with Implicit Generative Models","created":"2022-10-14","cited_by_count":17,"area":null},{"id":"2403.10045","title":"Towards Adversarially Robust Dataset Distillation by Curvature Regularization","created":"2024-03-15","cited_by_count":17,"area":null},{"id":"2205.07229","title":"RoMFAC: A robust mean-field actor-critic reinforcement learning against adversarial perturbations on states","created":"2022-05-15","cited_by_count":16,"area":null},{"id":"2206.09098","title":"Existence and Minimax Theorems for Adversarial Surrogate Risks in Binary Classification","created":"2022-06-18","cited_by_count":15,"area":null},{"id":"2208.13058","title":"Adversarial Robustness for Tabular Data through Cost and Utility Awareness","created":"2022-08-27","cited_by_count":15,"area":null},{"id":"2211.09565","title":"Towards Good Practices in Evaluating Transfer Adversarial Attacks","created":"2022-11-17","cited_by_count":15,"area":null},{"id":"2209.04779","title":"Scattering Model Guided Adversarial Examples for SAR Target Recognition: Attack and Defense","created":"2022-09-11","cited_by_count":14,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2111.05468","title":"Sparse Adversarial Video Attacks with Spatial Transformations","created":"2021-11-10","cited_by_count":11,"area":null},{"id":"2303.02251","title":"Certified Robust Neural Networks: Generalization and Corruption Resistance","created":"2023-03-03","cited_by_count":11,"area":null},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2101.07969","title":"Robust W-GAN-Based Estimation Under Wasserstein Contamination","created":"2021-01-20","cited_by_count":9,"area":null},{"id":"2103.14824","title":"Improving Model Robustness by Adaptively Correcting Perturbation Levels with Active Queries","created":"2021-03-27","cited_by_count":9,"area":null},{"id":"2112.05872","title":"SLOSH: Set LOcality Sensitive Hashing via Sliced-Wasserstein Embeddings","created":"2021-12-11","cited_by_count":9,"area":null},{"id":"2202.00769","title":"Distributional Reinforcement Learning with Regularized Wasserstein Loss","created":"2022-02-01","cited_by_count":8,"area":null},{"id":"2311.05788","title":"Structured Transforms Across Spaces with Cost-Regularized Optimal Transport","created":"2023-11-09","cited_by_count":8,"area":null},{"id":"2404.05311","title":"BruSLeAttack: A Query-Efficient Score-Based Black-Box Sparse Adversarial Attack","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2210.00973","title":"NCVX: A General-Purpose Optimization Solver for Constrained Machine and Deep Learning","created":"2022-10-03","cited_by_count":7,"area":null},{"id":"2303.13401","title":"Optimization and Optimizers for Adversarial Robustness","created":"2023-03-23","cited_by_count":6,"area":null},{"id":"2310.03614","title":"Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally","created":"2023-10-05","cited_by_count":6,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2102.09012","title":"Improving Hierarchical Adversarial Robustness of Deep Neural Networks","created":"2021-02-17","cited_by_count":4,"area":null},{"id":"2105.03251","title":"Exploiting Vulnerabilities in Deep Neural Networks: Adversarial and Fault-Injection Attacks","created":"2021-05-05","cited_by_count":4,"area":null},{"id":"2112.05235","title":"The Fundamental Limits of Interval Arithmetic for Neural Networks","created":"2021-12-09","cited_by_count":4,"area":null},{"id":"2307.14364","title":"Federated Distributionally Robust Optimization with Non-Convex Objectives: Algorithm and Analysis","created":"2023-07-25","cited_by_count":4,"area":null},{"id":"2103.15385","title":"Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training","created":"2021-03-29","cited_by_count":3,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2207.07209","title":"Sound Randomized Smoothing in Floating-Point Arithmetics","created":"2022-07-14","cited_by_count":3,"area":null},{"id":"2210.00621","title":"Optimization for Robustness Evaluation beyond $\\ell_p$ Metrics","created":"2022-10-02","cited_by_count":3,"area":null},{"id":"2308.08160","title":"Benchmarking Adversarial Robustness of Compressed Deep Learning Models","created":"2023-08-16","cited_by_count":3,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2209.01962","title":"Adversarial Detection: Attacking Object Detection in Real Time","created":"2022-09-05","cited_by_count":2,"area":null},{"id":"2212.03069","title":"Multiple Perturbation Attack: Attack Pixelwise Under Different $\\ell_p$-norms For Better Adversarial Performance","created":"2022-12-05","cited_by_count":2,"area":null},{"id":"2310.19889","title":"Exploring Geometry of Blind Spots in Vision Models","created":"2023-10-30","cited_by_count":2,"area":null},{"id":"2502.04248","title":"Adapting to Evolving Adversaries with Regularized Continual Robust Training","created":"2025-02-06","cited_by_count":2,"area":null},{"id":"2103.07598","title":"Internal Wasserstein Distance for Adversarial Attack and Defense","created":"2021-03-13","cited_by_count":1,"area":null},{"id":"2308.03363","title":"A reading survey on adversarial machine learning: Adversarial attacks and their understanding","created":"2023-08-07","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2405.01349","title":"Position: Towards Resilience Against Adversarial Examples","created":"2024-05-02","cited_by_count":1,"area":null},{"id":"2407.08678","title":"How to beat a Bayesian adversary","created":"2024-07-11","cited_by_count":1,"area":null},{"id":"2501.10906","title":"Explainable Adversarial Attacks on Coarse-to-Fine Classifiers","created":"2025-01-19","cited_by_count":1,"area":null},{"id":"2503.04107","title":"Fractional Correspondence Framework in Detection Transformer","created":"2025-03-06","cited_by_count":1,"area":null},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2603.08901","title":"NetDiffuser: Deceiving DNN-Based Network Attack Detection Systems with Diffusion-Generated Adversarial Traffic","created":"2026-03-09","cited_by_count":1,"area":null},{"id":"2102.00449","title":"Towards Imperceptible Query-limited Adversarial Attacks with Perceptual Feature Fidelity Loss","created":"2021-01-31","cited_by_count":0,"area":null},{"id":"2102.07360","title":"Generating Structured Adversarial Attacks Using Frank-Wolfe Method","created":"2021-02-15","cited_by_count":0,"area":null},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2107.00561","title":"Using Anomaly Feature Vectors for Detecting, Classifying and Warning of Outlier Adversarial Examples","created":"2021-07-01","cited_by_count":0,"area":null},{"id":"2110.06816","title":"A Framework for Verification of Wasserstein Adversarial Robustness","created":"2021-10-13","cited_by_count":0,"area":null},{"id":"2110.07182","title":"Adversarial examples by perturbing high-level features in intermediate decoder layers","created":"2021-10-14","cited_by_count":0,"area":null},{"id":"2203.00295","title":"A Domain-Theoretic Framework for Robustness Analysis of Neural Networks","created":"2022-03-01","cited_by_count":0,"area":null},{"id":"2205.15424","title":"Connecting adversarial attacks and optimal transport for domain adaptation","created":"2022-05-30","cited_by_count":0,"area":null},{"id":"2301.01343","title":"Explainability and Robustness of Deep Visual Classification Models","created":"2023-01-03","cited_by_count":0,"area":null},{"id":"2301.01495","title":"Beckman Defense","created":"2023-01-04","cited_by_count":0,"area":null},{"id":"2303.07675","title":"Sinkhorn-Flow: Predicting Probability Mass Flow in Dynamical Systems Using Optimal Transport","created":"2023-03-14","cited_by_count":0,"area":null},{"id":"2303.12357","title":"Wasserstein Adversarial Examples on Univariant Time Series Data","created":"2023-03-22","cited_by_count":0,"area":null},{"id":"2306.00042","title":"Graph-based methods coupled with specific distributional distances for adversarial attack detection","created":"2023-05-31","cited_by_count":0,"area":null},{"id":"2309.06377","title":"Adversarial attacks on hybrid classical-quantum Deep Learning models for Histopathological Cancer Detection","created":"2023-09-08","cited_by_count":0,"area":null},{"id":"2312.13575","title":"ARBiBench: Benchmarking Adversarial Robustness of Binarized Neural Networks","created":"2023-12-21","cited_by_count":0,"area":null},{"id":"2407.09550","title":"CAPM: Fast and Robust Verification on Maxpool-based CNN via Dual Network","created":"2024-06-27","cited_by_count":0,"area":null},{"id":"2503.04315","title":"Provable Robust Overfitting Mitigation in Wasserstein Distributionally Robust Optimization","created":"2025-03-06","cited_by_count":0,"area":null},{"id":"2511.19075","title":"Structured Matching via Cost-Regularized Unbalanced Optimal Transport","created":"2025-11-24","cited_by_count":0,"area":null}],"next_cursor":null}