{"total":92,"rows":[{"id":"2105.07926","title":"Towards Robust Vision Transformer","created":"2021-05-17","cited_by_count":137,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2302.09462","title":"MedViT: A Robust Vision Transformer for Generalized Medical Image Classification","created":"2023-02-19","cited_by_count":89,"area":null},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2305.19268","title":"Intriguing Properties of Quantization at Scale","created":"2023-05-30","cited_by_count":49,"area":null},{"id":"2504.09629","title":"Quantization Error Propagation: Revisiting Layer-Wise Post-Training Quantization","created":"2025-04-13","cited_by_count":41,"area":null},{"id":"2103.03344","title":"WaveGuard: Understanding and Mitigating Audio Adversarial Examples","created":"2021-03-04","cited_by_count":40,"area":null},{"id":"2111.02625","title":"Qimera: Data-free Quantization with Synthetic Boundary Supporting Samples","created":"2021-11-04","cited_by_count":40,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2204.06504","title":"DL4SciVis: A State-of-the-Art Survey on Deep Learning for Scientific Visualization","created":"2022-04-13","cited_by_count":32,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2205.14550","title":"Machine Learning for Microcontroller-Class Hardware: A Review","created":"2022-05-29","cited_by_count":28,"area":null},{"id":"2110.11331","title":"QuantumNAT: Quantum Noise-Aware Training with Noise Injection, Quantization and Normalization","created":"2021-10-21","cited_by_count":27,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2109.12338","title":"Distribution-sensitive Information Retention for Accurate Binary Neural Network","created":"2021-09-25","cited_by_count":25,"area":null},{"id":"2301.11233","title":"BiBench: Benchmarking and Analyzing Network Binarization","created":"2023-01-26","cited_by_count":22,"area":null},{"id":"2308.02350","title":"RobustMQ: Benchmarking Robustness of Quantized Models","created":"2023-08-04","cited_by_count":19,"area":null},{"id":"2207.00083","title":"DarKnight: An Accelerated Framework for Privacy and Integrity Preserving Deep Learning Using Trusted Hardware","created":"2022-06-30","cited_by_count":14,"area":null},{"id":"2207.06540","title":"Lipschitz Continuity Retained Binary Neural Network","created":"2022-07-13","cited_by_count":14,"area":null},{"id":"2310.17498","title":"CBD: A Certified Backdoor Detector Based on Local Dominant Probability","created":"2023-10-26","cited_by_count":13,"area":null},{"id":"2207.06154","title":"On the Robustness of Bayesian Neural Networks to Adversarial Attacks","created":"2022-07-13","cited_by_count":12,"area":null},{"id":"2105.00227","title":"On the Adversarial Robustness of Quantized Neural Networks","created":"2021-05-01","cited_by_count":11,"area":null},{"id":"2304.13098","title":"Uncovering the Representation of Spiking Neural Networks Trained with Surrogate Gradient","created":"2023-04-25","cited_by_count":11,"area":null},{"id":"2110.12734","title":"Fast Gradient Non-sign Methods","created":"2021-10-25","cited_by_count":9,"area":null},{"id":"2211.14917","title":"CorrectNet: Robustness Enhancement of Analog In-Memory Computing for Neural Networks by Error Suppression and Compensation","created":"2022-11-27","cited_by_count":9,"area":null},{"id":"2212.02781","title":"QEBVerif: Quantization Error Bound Verification of Neural Networks","created":"2022-12-06","cited_by_count":9,"area":null},{"id":"2404.05639","title":"Investigating the Impact of Quantization on Adversarial Robustness","created":"2024-04-08","cited_by_count":9,"area":null},{"id":"2106.06667","title":"CARTL: Cooperative Adversarially-Robust Transfer Learning","created":"2021-06-12","cited_by_count":8,"area":null},{"id":"2404.11769","title":"QGen: On the Ability to Generalize in Quantization Aware Training","created":"2024-04-17","cited_by_count":7,"area":null},{"id":"2204.09514","title":"Special Session: Towards an Agile Design Methodology for Efficient, Reliable, and Secure ML Systems","created":"2022-04-18","cited_by_count":6,"area":null},{"id":"2204.10933","title":"A Tale of Two Models: Constructing Evasive Attacks on Edge Models","created":"2022-04-22","cited_by_count":6,"area":null},{"id":"2307.10875","title":"Risk-optimized Outlier Removal for Robust 3D Point Cloud Classification","created":"2023-07-20","cited_by_count":6,"area":null},{"id":"2311.15782","title":"Relationship between Model Compression and Adversarial Robustness: A Review of Current Evidence","created":"2023-11-27","cited_by_count":6,"area":null},{"id":"2103.00944","title":"A Little Energy Goes a Long Way: Build an Energy-Efficient, Accurate Spiking Neural Network from Convolutional Neural Network","created":"2021-03-01","cited_by_count":5,"area":null},{"id":"2105.06512","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","created":"2021-05-13","cited_by_count":5,"area":null},{"id":"2109.05223","title":"2-in-1 Accelerator: Enabling Random Precision Switch for Winning Both Adversarial Robustness and Efficiency","created":"2021-09-11","cited_by_count":5,"area":null},{"id":"2202.01341","title":"Robust Binary Models by Pruning Randomly-initialized Networks","created":"2022-02-03","cited_by_count":5,"area":null},{"id":"2203.10183","title":"RoVISQ: Reduction of Video Service Quality via Adversarial Attacks on Deep Learning-based Video Compression","created":"2022-03-18","cited_by_count":4,"area":null},{"id":"2212.01957","title":"CSTAR: Towards Compact and STructured Deep Neural Networks with Adversarial Robustness","created":"2022-12-04","cited_by_count":4,"area":null},{"id":"2105.01353","title":"One Model for All Quantization: A Quantized Network Supporting Hot-Swap Bit-Width Adjustment","created":"2021-05-04","cited_by_count":3,"area":null},{"id":"2105.04003","title":"Efficiency-driven Hardware Optimization for Adversarially Robust Neural Networks","created":"2021-05-09","cited_by_count":3,"area":null},{"id":"2110.12308","title":"A Layer-wise Adversarial-aware Quantization Optimization for Improving Robustness","created":"2021-10-23","cited_by_count":3,"area":null},{"id":"2110.14871","title":"Generalized Depthwise-Separable Convolutions for Adversarially Robust and Efficient Neural Networks","created":"2021-10-28","cited_by_count":3,"area":null},{"id":"2203.08739","title":"What Do Adversarially trained Neural Networks Focus: A Fourier Domain-based Study","created":"2022-03-16","cited_by_count":3,"area":null},{"id":"2208.00338","title":"Symmetry Regularization and Saturating Nonlinearity for Robust Quantization","created":"2022-07-31","cited_by_count":3,"area":null},{"id":"2209.03450","title":"Seeking Interpretability and Explainability in Binary Activated Neural Networks","created":"2022-09-07","cited_by_count":3,"area":null},{"id":"2304.12829","title":"Improving Robustness Against Adversarial Attacks with Deeply Quantized Neural Networks","created":"2023-04-25","cited_by_count":3,"area":null},{"id":"2101.01543","title":"Noise Sensitivity-Based Energy Efficient and Robust Adversary Detection in Neural Networks","created":"2021-01-05","cited_by_count":2,"area":null},{"id":"2101.08675","title":"Adversarial Machine Learning in Text Analysis and Generation","created":"2021-01-14","cited_by_count":2,"area":null},{"id":"2202.04271","title":"Adversarial Detection without Model Information","created":"2022-02-09","cited_by_count":2,"area":null},{"id":"2205.02652","title":"Can collaborative learning be private, robust and scalable?","created":"2022-05-05","cited_by_count":2,"area":null},{"id":"2304.03968","title":"Benchmarking the Robustness of Quantized Models","created":"2023-04-08","cited_by_count":2,"area":null},{"id":"2312.09748","title":"VNN: Verification-Friendly Neural Networks with Hard Robustness Guarantees","created":"2023-12-15","cited_by_count":2,"area":null},{"id":"2401.00751","title":"Machine Translation Testing via Syntactic Tree Pruning","created":"2024-01-01","cited_by_count":2,"area":null},{"id":"2503.11159","title":"Stabilizing Quantization-Aware Training by Implicit-Regularization on Hessian Matrix","created":"2025-03-14","cited_by_count":2,"area":null},{"id":"2503.16183","title":"Variance-Aware Noisy Training: Hardening DNNs against Unstable Analog Computations","created":"2025-03-20","cited_by_count":2,"area":null},{"id":"2505.10983","title":"GenoArmory: A Unified Evaluation Framework for Adversarial Attacks on Genomic Foundation Models","created":"2025-05-16","cited_by_count":2,"area":null},{"id":"2106.12569","title":"Gradient-Based Interpretability Methods and Binarized Neural Networks","created":"2021-06-23","cited_by_count":1,"area":null},{"id":"2110.02456","title":"VC dimension of partially quantized neural networks in the overparametrized regime","created":"2021-10-06","cited_by_count":1,"area":null},{"id":"2110.13859","title":"Defensive Tensorization","created":"2021-10-26","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2301.06193","title":"RedBit: An End-to-End Flexible Framework for Evaluating the Accuracy of Quantized CNNs","created":"2023-01-15","cited_by_count":1,"area":null},{"id":"2303.02214","title":"Adversarial Attacks on Machine Learning in Embedded and IoT Platforms","created":"2023-03-03","cited_by_count":1,"area":null},{"id":"2303.16697","title":"Latent Feature Relation Consistency for Adversarial Robustness","created":"2023-03-29","cited_by_count":1,"area":null},{"id":"2403.09441","title":"An Empirical Study of the Influence of Adversarial Fine-Tuning on Compressed Neural Networks","created":"2024-03-14","cited_by_count":1,"area":null},{"id":"2410.24214","title":"ARQ: A Mixed-Precision Quantization Framework for Accurate and Certifiably Robust DNNs","created":"2024-10-31","cited_by_count":1,"area":null},{"id":"2508.13481","title":"Enhancing Robustness of Implicit Neural Representations Against Weight Perturbations","created":"2025-08-19","cited_by_count":1,"area":null},{"id":"2103.08031","title":"BreakingBED -- Breaking Binary and Efficient Deep Neural Networks by Adversarial Attacks","created":"2021-03-14","cited_by_count":0,"area":null},{"id":"2106.09886","title":"Quantized Neural Networks via {-1, +1} Encoding Decomposition and Acceleration","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2112.13551","title":"Learning Robust and Lightweight Model through Separable Structured Transformations","created":"2021-12-27","cited_by_count":0,"area":null},{"id":"2206.03325","title":"Searching Similarity Measure for Binarized Neural Networks","created":"2022-06-05","cited_by_count":0,"area":null},{"id":"2206.07406","title":"Hardening DNNs against Transfer Attacks during Network Compression using Greedy Adversarial Pruning","created":"2022-06-15","cited_by_count":0,"area":null},{"id":"2210.08701","title":"ODG-Q: Robust Quantization via Online Domain Generalization","created":"2022-10-17","cited_by_count":0,"area":null},{"id":"2210.12054","title":"Towards Global Neural Network Abstractions with Locally-Exact Reconstruction","created":"2022-10-21","cited_by_count":0,"area":null},{"id":"2307.12679","title":"An Estimator for the Sensitivity to Perturbations of Deep Neural Networks","created":"2023-07-24","cited_by_count":0,"area":null},{"id":"2308.08222","title":"HyperSNN: A new efficient and robust deep learning model for resource constrained control applications","created":"2023-08-16","cited_by_count":0,"area":null},{"id":"2310.06845","title":"RobustEdge: Low Power Adversarial Detection for Cloud-Edge Systems","created":"2023-09-05","cited_by_count":0,"area":null},{"id":"2311.05317","title":"RepQ: Generalizing Quantization-Aware Training for Re-Parametrized Architectures","created":"2023-11-09","cited_by_count":0,"area":null},{"id":"2312.00105","title":"Improving the Robustness of Quantized Deep Neural Networks to White-Box Attacks using Stochastic Quantization and Information-Theoretic Ensemble Training","created":"2023-11-30","cited_by_count":0,"area":null},{"id":"2312.13575","title":"ARBiBench: Benchmarking Adversarial Robustness of Binarized Neural Networks","created":"2023-12-21","cited_by_count":0,"area":null},{"id":"2401.12014","title":"Robustness to distribution shifts of compressed networks for edge devices","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2403.06013","title":"Are Classification Robustness and Explanation Robustness Really Strongly Correlated? An Analysis Through Input Loss Landscape","created":"2024-03-09","cited_by_count":0,"area":null},{"id":"2404.05688","title":"David and Goliath: An Empirical Evaluation of Attacks and Defenses for QNNs at the Deep Edge","created":"2024-04-08","cited_by_count":0,"area":null},{"id":"2405.03777","title":"Is ReLU Adversarially Robust?","created":"2024-05-06","cited_by_count":0,"area":null},{"id":"2503.08973","title":"Quantitative Analysis of Deeply Quantized Tiny Neural Networks Robust to Adversarial Attacks","created":"2025-03-12","cited_by_count":0,"area":null},{"id":"2504.13989","title":"Gradual Binary Search and Dimension Expansion : A general method for activation quantization in LLMs","created":"2025-04-18","cited_by_count":0,"area":null},{"id":"2511.13598","title":"Robust Client-Server Watermarking for Split Federated Learning","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2512.06243","title":"Quantization Blindspots: How Model Compression Breaks Backdoor Defenses","created":"2025-12-06","cited_by_count":0,"area":null},{"id":"2601.22660","title":"Layerwise Progressive Freezing Enables STE-Free Training of Deep Binary Neural Networks","created":"2026-01-30","cited_by_count":0,"area":null},{"id":"2604.00605","title":"Fluently Lying: Adversarial Robustness Can Be Substrate-Dependent","created":"2026-04-01","cited_by_count":0,"area":null},{"id":"2606.27759","title":"Layerwise Progressive Freezing: A Training Scaffold for Depth-Scalable Binary Networks","created":"2026-06-26","cited_by_count":0,"area":null}],"next_cursor":null}