{"total":23,"rows":[{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29,"area":null},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2411.04376","title":"Game-Theoretic Defenses for Robust Conformal Prediction Against Adversarial Attacks in Medical Imaging","created":"2024-11-07","cited_by_count":10,"area":null},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2302.05892","title":"TextDefense: Adversarial Text Detection based on Word Importance Entropy","created":"2023-02-12","cited_by_count":9,"area":null},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2202.01341","title":"Robust Binary Models by Pruning Randomly-initialized Networks","created":"2022-02-03","cited_by_count":5,"area":null},{"id":"2111.00295","title":"Get Fooled for the Right Reason: Improving Adversarial Robustness through a Teacher-guided Curriculum Learning Approach","created":"2021-10-30","cited_by_count":4,"area":null},{"id":"2405.16918","title":"The Uncanny Valley: Exploring Adversarial Robustness from a Flatness Perspective","created":"2024-05-27","cited_by_count":4,"area":null},{"id":"2508.01845","title":"Beyond Vulnerabilities: A Survey of Adversarial Attacks as Both Threats and Defenses in Computer Vision Systems","created":"2025-08-03","cited_by_count":4,"area":null},{"id":"2510.14231","title":"When Flatness Does (Not) Guarantee Adversarial Robustness","created":"2025-10-16","cited_by_count":3,"area":null},{"id":"2303.02669","title":"Consistent Valid Physically-Realizable Adversarial Attack against Crowd-flow Prediction Models","created":"2023-03-05","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2208.01456","title":"A comment on Guo et al. [arXiv:2206.11228]","created":"2022-08-02","cited_by_count":0,"area":null},{"id":"2311.13233","title":"A Survey of Adversarial CAPTCHAs on its History, Classification and Generation","created":"2023-11-22","cited_by_count":0,"area":null},{"id":"2409.18419","title":"Robust Network Learning via Inverse Scale Variational Sparsification","created":"2024-09-27","cited_by_count":0,"area":null}],"next_cursor":null}