{"total":183,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2106.15590","title":"The Values Encoded in Machine Learning Research","created":"2021-06-29","cited_by_count":172,"area":null},{"id":"2401.17263","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","created":"2024-01-30","cited_by_count":156,"area":"safety"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2308.07026","title":"AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learning","created":"2023-08-14","cited_by_count":103,"area":null},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2103.01315","title":"Exploring Complementary Strengths of Invariant and Equivariant Representations for Few-Shot Learning","created":"2021-03-01","cited_by_count":56,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2202.13437","title":"A Unified Wasserstein Distributional Robustness Framework for Adversarial Training","created":"2022-02-27","cited_by_count":36,"area":null},{"id":"2307.12280","title":"Downstream-agnostic Adversarial Examples","created":"2023-07-23","cited_by_count":32,"area":null},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2210.02447","title":"Practical Adversarial Attacks on Spatiotemporal Traffic Forecasting Models","created":"2022-10-05","cited_by_count":29,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26,"area":null},{"id":"2102.02145","title":"Adversarially Robust Learning with Unknown Perturbation Sets","created":"2021-02-03","cited_by_count":24,"area":null},{"id":"2109.00946","title":"Adversarial Robustness for Unsupervised Domain Adaptation","created":"2021-09-02","cited_by_count":24,"area":null},{"id":"2402.02316","title":"Your Diffusion Model is Secretly a Certifiably Robust Classifier","created":"2024-02-04","cited_by_count":24,"area":"diffusion"},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2302.10164","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","created":"2023-02-20","cited_by_count":23,"area":null},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2108.03429","title":"Enhancing MR Image Segmentation with Realistic Adversarial Data Augmentation","created":"2021-08-07","cited_by_count":20,"area":null},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17,"area":null},{"id":"2412.16955","title":"NumbOD: A Spatial-Frequency Fusion Attack Against Object Detectors","created":"2024-12-22","cited_by_count":17,"area":null},{"id":"2202.10627","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","created":"2022-02-22","cited_by_count":16,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2112.03000","title":"Sequential Randomized Smoothing for Adversarially Robust Speech Recognition","created":"2021-11-05","cited_by_count":13,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2206.09868","title":"Understanding Robust Learning through the Lens of Representation Similarities","created":"2022-06-20","cited_by_count":12,"area":null},{"id":"2206.07953","title":"Analysis and Extensions of Adversarial Training for Video Classification","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2207.00887","title":"Towards Robust Video Object Segmentation with Adaptive Object Calibration","created":"2022-07-02","cited_by_count":11,"area":null},{"id":"2402.15989","title":"PIDformer: Transformer Meets Control Theory","created":"2024-02-25","cited_by_count":11,"area":null},{"id":"2602.13042","title":"GPTZero: Robust Detection of LLM-Generated Texts","created":"2026-02-13","cited_by_count":11,"area":null},{"id":"2103.16493","title":"Enabling Data Diversity: Efficient Automatic Augmentation via Regularized Adversarial Training","created":"2021-03-30","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2210.00557","title":"Adaptive Smoothness-weighted Adversarial Training for Multiple Perturbations with Its Stability Analysis","created":"2022-10-02","cited_by_count":9,"area":null},{"id":"2306.14126","title":"Robust Spatiotemporal Traffic Forecasting with Reinforced Dynamic Adversarial Training","created":"2023-06-25","cited_by_count":9,"area":null},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2106.06667","title":"CARTL: Cooperative Adversarially-Robust Transfer Learning","created":"2021-06-12","cited_by_count":8,"area":null},{"id":"2204.13779","title":"Formulating Robustness Against Unforeseen Attacks","created":"2022-04-28","cited_by_count":8,"area":null},{"id":"2207.01919","title":"Vector Quantisation for Robust Segmentation","created":"2022-07-05","cited_by_count":8,"area":null},{"id":"2305.06472","title":"ChatGPT-Like Large-Scale Foundation Models for Prognostics and Health Management: A Survey and Roadmaps","created":"2023-05-10","cited_by_count":8,"area":null},{"id":"2105.09109","title":"An Orthogonal Classifier for Improving the Adversarial Robustness of Neural Networks","created":"2021-05-19","cited_by_count":7,"area":null},{"id":"2209.08130","title":"Robust Ensemble Morph Detection with Domain Generalization","created":"2022-09-16","cited_by_count":7,"area":null},{"id":"2302.10980","title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks","created":"2023-02-21","cited_by_count":7,"area":null},{"id":"2406.13762","title":"Unveiling the Hidden Structure of Self-Attention via Kernel Principal Component Analysis","created":"2024-06-19","cited_by_count":7,"area":null},{"id":"2104.08323","title":"Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Accelerators","created":"2021-04-16","cited_by_count":6,"area":null},{"id":"2104.10586","title":"Mixture of Robust Experts (MoRE):A Robust Denoising Method towards multiple perturbations","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2105.07334","title":"Real-time Detection of Practical Universal Adversarial Perturbations","created":"2021-05-16","cited_by_count":6,"area":null},{"id":"2106.06624","title":"Relaxing Local Robustness","created":"2021-06-11","cited_by_count":6,"area":null},{"id":"2106.14956","title":"Robust Distributed Optimization With Randomly Corrupted Gradients","created":"2021-06-28","cited_by_count":6,"area":null},{"id":"2207.07032","title":"Adversarial Attacks on Monocular Pose Estimation","created":"2022-07-14","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2102.06747","title":"Realizable Universal Adversarial Perturbations for Malware","created":"2021-02-12","cited_by_count":5,"area":null},{"id":"2102.08868","title":"Bridging the Gap Between Adversarial Robustness and Optimization Bias","created":"2021-02-17","cited_by_count":5,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2205.13909","title":"(De-)Randomized Smoothing for Decision Stump Ensembles","created":"2022-05-27","cited_by_count":5,"area":null},{"id":"2208.11264","title":"Towards an Awareness of Time Series Anomaly Detection Models' Adversarial Vulnerability","created":"2022-08-24","cited_by_count":5,"area":null},{"id":"2210.03150","title":"Towards Out-of-Distribution Adversarial Robustness","created":"2022-10-06","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2307.01390","title":"Adversarial Learning in Real-World Fraud Detection: Challenges and Perspectives","created":"2023-07-03","cited_by_count":5,"area":null},{"id":"2311.10992","title":"Towards Robust and Accurate Visual Prompting","created":"2023-11-18","cited_by_count":5,"area":null},{"id":"2407.12588","title":"Benchmarking Robust Self-Supervised Learning Across Diverse Downstream Tasks","created":"2024-07-17","cited_by_count":5,"area":null},{"id":"2102.07265","title":"Exploring Adversarial Robustness of Deep Metric Learning","created":"2021-02-14","cited_by_count":4,"area":null},{"id":"2203.04886","title":"Reverse Engineering $\\ell_p$ attacks: A block-sparse optimization approach with recovery guarantees","created":"2022-03-09","cited_by_count":4,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2207.02337","title":"Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanisms","created":"2022-07-05","cited_by_count":4,"area":null},{"id":"2209.06953","title":"On the interplay of adversarial robustness and architecture components: patches, convolution and attention","created":"2022-09-14","cited_by_count":4,"area":null},{"id":"2211.00269","title":"Adversarial Training with Complementary Labels: On the Benefit of Gradually Informative Attacks","created":"2022-11-01","cited_by_count":4,"area":null},{"id":"2304.10446","title":"Certified Adversarial Robustness Within Multiple Perturbation Bounds","created":"2023-04-20","cited_by_count":4,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2402.18211","title":"Catastrophic Overfitting: A Potential Blessing in Disguise","created":"2024-02-28","cited_by_count":4,"area":null},{"id":"2404.12120","title":"Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectors","created":"2024-04-18","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2407.17797","title":"A Unified Understanding of Adversarial Vulnerability Regarding Unimodal Models and Vision-Language Pre-training Models","created":"2024-07-25","cited_by_count":4,"area":"mllm"},{"id":"2409.07321","title":"Module-wise Adaptive Adversarial Training for End-to-end Autonomous Driving","created":"2024-09-11","cited_by_count":4,"area":"driving"},{"id":"2504.00638","title":"Impact of Data Duplication on Deep Neural Network-Based Image Classifiers: Robust vs. Standard Models","created":"2025-04-01","cited_by_count":4,"area":null},{"id":"2103.15385","title":"Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training","created":"2021-03-29","cited_by_count":3,"area":null},{"id":"2110.14871","title":"Generalized Depthwise-Separable Convolutions for Adversarially Robust and Efficient Neural Networks","created":"2021-10-28","cited_by_count":3,"area":null},{"id":"2111.05063","title":"Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search","created":"2021-11-09","cited_by_count":3,"area":null},{"id":"2206.12169","title":"AdAUC: End-to-end Adversarial AUC Optimization Against Long-tail Problems","created":"2022-06-24","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2303.13326","title":"Decentralized Adversarial Training over Graphs","created":"2023-03-23","cited_by_count":3,"area":null},{"id":"2404.00828","title":"PID Control-Based Self-Healing to Improve the Robustness of Large Language Models","created":"2024-03-31","cited_by_count":3,"area":null}],"next_cursor":"100"}