{"total":122,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71,"area":null},{"id":"2105.11144","title":"Improved OOD Generalization via Adversarial Training and Pre-training","created":"2021-05-24","cited_by_count":66,"area":null},{"id":"2207.09944","title":"Probable Domain Generalization via Quantile Risk Minimization","created":"2022-07-20","cited_by_count":66,"area":null},{"id":"2210.00055","title":"MaskTune: Mitigating Spurious Correlations by Forcing to Explore","created":"2022-09-30","cited_by_count":66,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2207.01164","title":"Aug-NeRF: Training Stronger Neural Radiance Fields with Triple-Level Physically-Grounded Augmentations","created":"2022-07-04","cited_by_count":46,"area":null},{"id":"2108.08993","title":"Distributionally Robust Learning","created":"2021-08-20","cited_by_count":44,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2203.06768","title":"Probabilistically Robust Recourse: Navigating the Trade-offs between Costs and Robustness in Algorithmic Recourse","created":"2022-03-13","cited_by_count":40,"area":null},{"id":"2202.01136","title":"Probabilistically Robust Learning: Balancing Average- and Worst-case Performance","created":"2022-02-02","cited_by_count":37,"area":null},{"id":"2104.01396","title":"Neural Network Robustness as a Verification Property: A Principled Case Study","created":"2021-04-03","cited_by_count":35,"area":null},{"id":"2405.03658","title":"A review on data-driven constitutive laws for solids","created":"2024-05-06","cited_by_count":35,"area":null},{"id":"2105.14240","title":"Analysis and Applications of Class-wise Robustness in Adversarial Training","created":"2021-05-29","cited_by_count":33,"area":null},{"id":"2312.02614","title":"Prompt Optimization via Adversarial In-Context Learning","created":"2023-12-05","cited_by_count":33,"area":null},{"id":"2212.10888","title":"A Survey of Mix-based Data Augmentation: Taxonomy, Methods, Applications, and Explainability","created":"2022-12-21","cited_by_count":31,"area":null},{"id":"2210.00960","title":"Stability Analysis and Generalization Bounds of Adversarial Training","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2103.00397","title":"Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket Perspective","created":"2021-02-28","cited_by_count":25,"area":null},{"id":"2108.04890","title":"On the Effect of Pruning on Adversarial Robustness","created":"2021-08-10","cited_by_count":23,"area":null},{"id":"2205.13863","title":"Why Robust Generalization in Deep Learning is Difficult: Perspective of Expressive Power","created":"2022-05-27","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2103.08933","title":"Reweighting Augmented Samples by Minimizing the Maximal Expected Loss","created":"2021-03-16","cited_by_count":21,"area":null},{"id":"2202.07552","title":"A Theory of PAC Learnability under Transformation Invariances","created":"2022-02-15","cited_by_count":21,"area":null},{"id":"2403.19480","title":"$H$-Consistency Guarantees for Regression","created":"2024-03-28","cited_by_count":21,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2404.01509","title":"Can Biases in ImageNet Models Explain Generalization?","created":"2024-04-01","cited_by_count":20,"area":null},{"id":"2211.14966","title":"Adversarial Rademacher Complexity of Deep Neural Networks","created":"2022-11-27","cited_by_count":18,"area":null},{"id":"2110.14855","title":"CAP: Co-Adversarial Perturbation on Weights and Features for Improving Generalization of Graph Neural Networks","created":"2021-10-28","cited_by_count":15,"area":null},{"id":"2302.01629","title":"Beyond the Universal Law of Robustness: Sharper Laws for Random Features and Neural Tangent Kernels","created":"2023-02-03","cited_by_count":13,"area":null},{"id":"2101.06309","title":"Fundamental Tradeoffs in Distributionally Adversarial Training","created":"2021-01-15","cited_by_count":12,"area":null},{"id":"2204.00487","title":"Robust and Accurate -- Compositional Architectures for Randomized Smoothing","created":"2022-04-01","cited_by_count":12,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2602.13042","title":"GPTZero: Robust Detection of LLM-Generated Texts","created":"2026-02-13","cited_by_count":11,"area":null},{"id":"2311.17400","title":"Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention","created":"2023-11-29","cited_by_count":10,"area":null},{"id":"2102.09677","title":"Training a Resilient Q-Network against Observational Interference","created":"2021-02-18","cited_by_count":9,"area":null},{"id":"2204.12822","title":"A Survey on XAI for 5G and Beyond Security: Technical Aspects, Challenges and Research Directions","created":"2022-04-27","cited_by_count":9,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2210.00557","title":"Adaptive Smoothness-weighted Adversarial Training for Multiple Perturbations with Its Stability Analysis","created":"2022-10-02","cited_by_count":9,"area":null},{"id":"2211.15762","title":"Understanding the Impact of Adversarial Robustness on Accuracy Disparity","created":"2022-11-28","cited_by_count":9,"area":null},{"id":"2303.15421","title":"ACAT: Adversarial Counterfactual Attention for Classification and Detection in Medical Imaging","created":"2023-03-27","cited_by_count":9,"area":null},{"id":"2303.16633","title":"Targeted Adversarial Attacks on Wind Power Forecasts","created":"2023-03-29","cited_by_count":9,"area":null},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9,"area":null},{"id":"2312.07067","title":"Focus on Hiders: Exploring Hidden Threats for Enhancing Adversarial Training","created":"2023-12-12","cited_by_count":9,"area":null},{"id":"2401.12236","title":"The Surprising Harmfulness of Benign Overfitting for Adversarial Robustness","created":"2024-01-19","cited_by_count":9,"area":null},{"id":"2110.11950","title":"Adversarial robustness for latent models: Revisiting the robust-standard accuracies tradeoff","created":"2021-10-22","cited_by_count":8,"area":null},{"id":"2204.13779","title":"Formulating Robustness Against Unforeseen Attacks","created":"2022-04-28","cited_by_count":8,"area":null},{"id":"2211.15897","title":"Learning Antidote Data to Individual Unfairness","created":"2022-11-29","cited_by_count":8,"area":null},{"id":"2204.07373","title":"Revisiting the Adversarial Robustness-Accuracy Tradeoff in Robot Learning","created":"2022-04-15","cited_by_count":7,"area":null},{"id":"2102.05836","title":"Online Deterministic Annealing for Classification and Clustering","created":"2021-02-11","cited_by_count":6,"area":null},{"id":"2204.09838","title":"Fast AdvProp","created":"2022-04-21","cited_by_count":6,"area":null},{"id":"2303.13401","title":"Optimization and Optimizers for Adversarial Robustness","created":"2023-03-23","cited_by_count":6,"area":null},{"id":"2304.12550","title":"Combining Adversaries with Anti-adversaries in Training","created":"2023-04-25","cited_by_count":6,"area":null},{"id":"2305.04003","title":"ANTONIO: Towards a Systematic Method of Generating NLP Benchmarks for Verification","created":"2023-05-06","cited_by_count":6,"area":null},{"id":"2401.14948","title":"Conserve-Update-Revise to Cure Generalization and Robustness Trade-off in Adversarial Training","created":"2024-01-26","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2211.05656","title":"On Proper Learnability between Average- and Worst-case Robustness","created":"2022-11-10","cited_by_count":5,"area":null},{"id":"2306.01271","title":"On the Clean Generalization and Robust Overfitting in Adversarial Training from Two Theoretical Views: Representation Complexity and Training Dynamics","created":"2023-06-02","cited_by_count":5,"area":null},{"id":"2402.12187","title":"Adversarial Feature Alignment: Balancing Robustness and Accuracy in Deep Learning via Adversarial Training","created":"2024-02-19","cited_by_count":5,"area":null},{"id":"2404.08980","title":"Stability and Generalization in Free Adversarial Training","created":"2024-04-13","cited_by_count":5,"area":null},{"id":"2408.15114","title":"Few-Shot Unsupervised Implicit Neural Shape Representation Learning with Spatial Adversaries","created":"2024-08-27","cited_by_count":5,"area":null},{"id":"2410.23142","title":"FAIR-TAT: Improving Model Fairness Using Targeted Adversarial Training","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2202.06996","title":"Unlabeled Data Help: Minimax Analysis and Adversarial Robustness","created":"2022-02-14","cited_by_count":4,"area":null},{"id":"2301.13565","title":"Learning Against Distributional Uncertainty: On the Trade-off Between Robustness and Specificity","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2308.03243","title":"Unsupervised Adversarial Detection without Extra Model: Training Loss Should Change","created":"2023-08-07","cited_by_count":4,"area":null},{"id":"2308.15466","title":"Input margins can predict generalization too","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2203.10693","title":"Leveraging Expert Guided Adversarial Augmentation For Improving Generalization in Named Entity Recognition","created":"2022-03-21","cited_by_count":3,"area":null},{"id":"2209.02826","title":"Annealing Optimization for Progressive Learning with Stochastic Approximation","created":"2022-09-06","cited_by_count":3,"area":null},{"id":"2211.16806","title":"Toward Robust Diagnosis: A Contour Attention Preserving Adversarial Defense for COVID-19 Detection","created":"2022-11-30","cited_by_count":3,"area":null},{"id":"2402.08768","title":"Adversarially Robust Feature Learning for Breast Cancer Diagnosis","created":"2024-02-13","cited_by_count":3,"area":null},{"id":"2411.19853","title":"Towards Class-wise Robustness Analysis","created":"2024-11-29","cited_by_count":3,"area":null},{"id":"2412.04245","title":"Intriguing Properties of Robust Classification","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2505.14042","title":"Adversarially Pretrained Transformers May Be Universally Robust In-Context Learners","created":"2025-05-20","cited_by_count":3,"area":null},{"id":"2508.02186","title":"Failure Cases Are Better Learned But Boundary Says Sorry: Facilitating Smooth Perception Change for Accuracy-Robustness Trade-Off in Adversarial Training","created":"2025-08-04","cited_by_count":3,"area":null},{"id":"2102.08093","title":"A Law of Robustness for Weight-bounded Neural Networks","created":"2021-02-16","cited_by_count":2,"area":null},{"id":"2106.10974","title":"Friendly Training: Neural Networks Can Adapt Data To Make Learning Easier","created":"2021-06-21","cited_by_count":2,"area":null},{"id":"2109.10161","title":"3D Point Cloud Completion with Geometric-Aware Adversarial Augmentation","created":"2021-09-21","cited_by_count":2,"area":null},{"id":"2204.13232","title":"Adversarial Fine-tune with Dynamically Regulated Adversary","created":"2022-04-28","cited_by_count":2,"area":null},{"id":"2205.10457","title":"Robust Sensible Adversarial Learning of Deep Neural Networks for Image Classification","created":"2022-05-20","cited_by_count":2,"area":null},{"id":"2303.12363","title":"Distribution-restrained Softmax Loss for the Model Robustness","created":"2023-03-22","cited_by_count":2,"area":null},{"id":"2304.05492","title":"Towards More Robust and Accurate Sequential Recommendation with Cascade-guided Adversarial Training","created":"2023-04-11","cited_by_count":2,"area":null},{"id":"2305.12219","title":"Collaborative Development of NLP models","created":"2023-05-20","cited_by_count":2,"area":null},{"id":"2309.00771","title":"Non-Asymptotic Bounds for Adversarial Excess Risk under Misspecified Models","created":"2023-09-02","cited_by_count":2,"area":null},{"id":"2309.07197","title":"Mitigating Adversarial Attacks in Federated Learning with Trusted Execution Environments","created":"2023-09-13","cited_by_count":2,"area":null},{"id":"2402.10470","title":"Theoretical Understanding of Learning from Adversarial Perturbations","created":"2024-02-16","cited_by_count":2,"area":null},{"id":"2408.10204","title":"Criticality Leveraged Adversarial Training (CLAT) for Boosted Performance via Parameter Efficiency","created":"2024-08-19","cited_by_count":2,"area":null},{"id":"2410.09402","title":"Minimax rates of convergence for nonparametric regression under adversarial attacks","created":"2024-10-12","cited_by_count":2,"area":null},{"id":"2410.12671","title":"New Paradigm of Adversarial Training: Releasing Accuracy-Robustness Trade-Off via Dummy Class","created":"2024-10-16","cited_by_count":2,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2209.06931","title":"Robust Transferable Feature Extractors: Learning to Defend Pre-Trained Networks Against White Box Adversaries","created":"2022-09-14","cited_by_count":1,"area":null},{"id":"2301.04472","title":"Adversarial training with informed data selection","created":"2023-01-07","cited_by_count":1,"area":null},{"id":"2306.12582","title":"Adversarial Training with Generated Data in High-Dimensional Regression: An Asymptotic Study","created":"2023-06-21","cited_by_count":1,"area":null}],"next_cursor":"100"}