{"total":47,"rows":[{"id":"2310.01469","title":"LLM Lies: Hallucinations are not Bugs, but Features as Adversarial Examples","created":"2023-10-02","cited_by_count":177,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2202.01459","title":"Concept Bottleneck Model with Additional Unsupervised Concepts","created":"2022-02-03","cited_by_count":79,"area":null},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2103.14222","title":"Adversarial Attacks are Reversible with Natural Supervision","created":"2021-03-26","cited_by_count":47,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2102.11860","title":"Automated Discovery of Adaptive Attacks on Adversarial Defenses","created":"2021-02-23","cited_by_count":22,"area":null},{"id":"2102.05311","title":"CIFS: Improving Adversarial Robustness of CNNs via Channel-wise Importance-based Feature Selection","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2301.05058","title":"Sparse Coding in a Dual Memory System for Lifelong Learning","created":"2022-12-28","cited_by_count":16,"area":null},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2107.06456","title":"AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense","created":"2021-07-14","cited_by_count":10,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2307.16236","title":"Synaptic Plasticity Models and Bio-Inspired Unsupervised Deep Learning: A Survey","created":"2023-07-30","cited_by_count":7,"area":null},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6,"area":null},{"id":"2403.13134","title":"Robust NAS under adversarial training: benchmark, theory, and beyond","created":"2024-03-19","cited_by_count":6,"area":null},{"id":"2202.01341","title":"Robust Binary Models by Pruning Randomly-initialized Networks","created":"2022-02-03","cited_by_count":5,"area":null},{"id":"2203.08961","title":"On the Convergence of Certified Robust Training with Interval Bound Propagation","created":"2022-03-16","cited_by_count":5,"area":null},{"id":"2302.13464","title":"Randomness in ML Defenses Helps Persistent Attackers and Hinders Evaluators","created":"2023-02-27","cited_by_count":5,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2302.02092","title":"Interpolation for Robust Learning: Data Augmentation on Wasserstein Geodesics","created":"2023-02-04","cited_by_count":3,"area":null},{"id":"2409.15190","title":"Interpretability-Guided Test-Time Adversarial Defense","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2206.03717","title":"LADDER: Latent Boundary-guided Adversarial Training","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2208.00862","title":"Attacking Adversarial Defences by Smoothing the Loss Landscape","created":"2022-08-01","cited_by_count":2,"area":null},{"id":"2510.03224","title":"Test-Time Defense Against Adversarial Attacks via Stochastic Resonance of Latent Ensembles","created":"2025-10-03","cited_by_count":2,"area":null},{"id":"2105.03569","title":"Improving Robustness for Pose Estimation via Stable Heatmap Regression","created":"2021-05-08","cited_by_count":1,"area":null},{"id":"2106.10252","title":"Less is More: Feature Selection for Adversarial Robustness with Compressive Counter-Adversarial Attacks","created":"2021-06-18","cited_by_count":1,"area":null},{"id":"2108.04979","title":"Simple black-box universal adversarial attacks on medical image classification based on deep neural networks","created":"2021-08-11","cited_by_count":1,"area":null},{"id":"2111.10844","title":"Denoised Internal Models: a Brain-Inspired Autoencoder against Adversarial Attacks","created":"2021-11-21","cited_by_count":1,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2103.12256","title":"Spatio-Temporal Sparsification for General Robust Graph Convolution Networks","created":"2021-03-23","cited_by_count":0,"area":null},{"id":"2109.14798","title":"Introducing the DOME Activation Functions","created":"2021-09-30","cited_by_count":0,"area":null},{"id":"2210.04087","title":"Symmetry Defense Against CNN Adversarial Perturbation Attacks","created":"2022-10-08","cited_by_count":0,"area":null},{"id":"2306.07613","title":"Revisiting and Advancing Adversarial Training Through A Simple Baseline","created":"2023-06-13","cited_by_count":0,"area":null},{"id":"2310.03358","title":"Enhancing Robust Representation in Adversarial Training: Alignment and Exclusion Criteria","created":"2023-10-05","cited_by_count":0,"area":null},{"id":"2402.04325","title":"Enhance DNN Adversarial Robustness and Efficiency via Injecting Noise to Non-Essential Neurons","created":"2024-02-06","cited_by_count":0,"area":null},{"id":"2512.03014","title":"Instant Video Models: Universal Adapters for Stabilizing Image-Based Networks","created":"2025-12-02","cited_by_count":0,"area":null},{"id":"2512.04264","title":"Studying Various Activation Functions and Non-IID Data for Machine Learning Model Robustness","created":"2025-12-03","cited_by_count":0,"area":null},{"id":"2606.27784","title":"Improving Adversarial Robustness via Activation Amplification and Attenuation","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2610.11534","title":"HAND: A Biologically-Inspired Activation Function that Improves Generalisation and Sample Efficiency in Image Classification","created":"2026-10-08","cited_by_count":0,"area":null}],"next_cursor":null}