{"total":33,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2110.13771","title":"AugMax: Adversarial Composition of Random Augmentations for Robust Training","created":"2021-10-26","cited_by_count":90,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2105.07576","title":"Rethinking \"Batch\" in BatchNorm","created":"2021-05-17","cited_by_count":45,"area":null},{"id":"2101.09617","title":"A Comprehensive Evaluation Framework for Deep Model Robustness","created":"2021-01-24","cited_by_count":42,"area":null},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24,"area":null},{"id":"2108.04890","title":"On the Effect of Pruning on Adversarial Robustness","created":"2021-08-10","cited_by_count":23,"area":null},{"id":"2110.05626","title":"Parameterizing Activation Functions for Adversarial Robustness","created":"2021-10-11","cited_by_count":22,"area":null},{"id":"2204.06213","title":"Defensive Patches for Robust Recognition in the Physical World","created":"2022-04-13","cited_by_count":20,"area":null},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19,"area":null},{"id":"2112.08810","title":"Pure Noise to the Rescue of Insufficient Data: Improving Imbalanced Classification by Training on Random Noise Images","created":"2021-12-16","cited_by_count":16,"area":null},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15,"area":null},{"id":"2106.03743","title":"Proxy-Normalizing Activations to Match Batch Normalization while Removing Batch Dependence","created":"2021-06-07","cited_by_count":12,"area":null},{"id":"2206.09868","title":"Understanding Robust Learning through the Lens of Representation Similarities","created":"2022-06-20","cited_by_count":12,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2102.11382","title":"Sandwich Batch Normalization: A Drop-In Replacement for Feature Distribution Heterogeneity","created":"2021-02-22","cited_by_count":7,"area":null},{"id":"2108.11801","title":"Unsupervised domain adaptation for clinician pose estimation and instance segmentation in the operating room","created":"2021-08-26","cited_by_count":7,"area":null},{"id":"2305.14986","title":"Non-adversarial Robustness of Deep Learning Methods for Computer Vision","created":"2023-05-24","cited_by_count":6,"area":null},{"id":"2102.05509","title":"Robustness in Compressed Neural Networks for Object Detection","created":"2021-02-10","cited_by_count":4,"area":null},{"id":"2204.12393","title":"On Fragile Features and Batch Normalization in Adversarial Training","created":"2022-04-26","cited_by_count":4,"area":null},{"id":"2206.07352","title":"Robust SAR ATR on MSTAR with Deep Learning Models trained on Full Synthetic MOCEM data","created":"2022-06-15","cited_by_count":4,"area":null},{"id":"2103.00363","title":"Tiny Adversarial Mulit-Objective Oneshot Neural Architecture Search","created":"2021-02-28","cited_by_count":3,"area":null},{"id":"2206.06496","title":"Towards Alternative Techniques for Improving Adversarial Robustness: Analysis of Adversarial Training at a Spectrum of Perturbations","created":"2022-06-13","cited_by_count":3,"area":null},{"id":"2212.14049","title":"Differentiable Search of Accurate and Robust Architectures","created":"2022-12-28","cited_by_count":2,"area":null},{"id":"2102.05096","title":"Towards Bridging the gap between Empirical and Certified Robustness against Adversarial Examples","created":"2021-02-09","cited_by_count":1,"area":null},{"id":"2103.13612","title":"THAT: Two Head Adversarial Training for Improving Robustness at Scale","created":"2021-03-25","cited_by_count":1,"area":null},{"id":"2202.09735","title":"Overparametrization improves robustness against adversarial attacks: A replication study","created":"2022-02-20","cited_by_count":1,"area":null},{"id":"2204.00426","title":"A Fast and Efficient Conditional Learning for Tunable Trade-Off between Accuracy and Robustness","created":"2022-03-28","cited_by_count":1,"area":null},{"id":"2211.15180","title":"Rethinking the Number of Shots in Robust Model-Agnostic Meta-Learning","created":"2022-11-28","cited_by_count":1,"area":null},{"id":"2105.14710","title":"Robustifying $\\ell_\\infty$ Adversarial Training to the Union of Perturbation Models","created":"2021-05-31","cited_by_count":0,"area":null},{"id":"2212.07283","title":"Generative Robust Classification","created":"2022-12-14","cited_by_count":0,"area":null}],"next_cursor":null}