{"total":194,"rows":[{"id":"2103.06624","title":"Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verification","created":"2021-03-11","cited_by_count":228,"area":null},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2101.08452","title":"Robust Reinforcement Learning on State Observations with Learned Optimal Adversary","created":"2021-01-21","cited_by_count":135,"area":null},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113,"area":null},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108,"area":null},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65,"area":null},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2301.05815","title":"First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)","created":"2023-01-14","cited_by_count":58,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2102.12827","title":"Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints","created":"2021-02-25","cited_by_count":50,"area":null},{"id":"2111.09277","title":"SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness","created":"2021-11-17","cited_by_count":49,"area":null},{"id":"2209.08744","title":"AdvDO: Realistic Adversarial Attacks for Trajectory Prediction","created":"2022-09-19","cited_by_count":49,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2405.21063","title":"Neural Network Verification with Branch-and-Bound for General Nonlinearities","created":"2024-05-31","cited_by_count":47,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2210.07394","title":"Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation","created":"2022-10-13","cited_by_count":45,"area":null},{"id":"2210.05927","title":"Efficient Adversarial Training without Attacking: Worst-Case-Aware Robust Reinforcement Learning","created":"2022-10-12","cited_by_count":43,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2212.10376","title":"The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results","created":"2022-12-20","cited_by_count":39,"area":null},{"id":"2305.00241","title":"When Deep Learning Meets Polyhedral Theory: A Survey","created":"2023-04-29","cited_by_count":39,"area":null},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2104.02466","title":"A Review of Formal Methods applied to Machine Learning","created":"2021-04-06","cited_by_count":33,"area":null},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29,"area":null},{"id":"2306.10426","title":"Understanding Certified Training with Interval Bound Propagation","created":"2023-06-17","cited_by_count":26,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2206.04310","title":"GSmooth: Certified Robustness against Semantic Transformations via Generalized Randomized Smoothing","created":"2022-06-09","cited_by_count":23,"area":null},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2206.01463","title":"Safety Certification for Stochastic Systems via Neural Barrier Functions","created":"2022-06-03","cited_by_count":22,"area":null},{"id":"2206.07912","title":"Double Sampling Randomized Smoothing","created":"2022-06-16","cited_by_count":22,"area":null},{"id":"2206.14772","title":"IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound","created":"2022-06-29","cited_by_count":21,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2106.06685","title":"Adversarial Robustness via Fisher-Rao Regularization","created":"2021-06-12","cited_by_count":19,"area":null},{"id":"2106.04260","title":"Provably Robust Detection of Out-of-distribution Data (almost) for free","created":"2021-06-08","cited_by_count":18,"area":null},{"id":"2109.06795","title":"ROMAX: Certifiably Robust Deep Multiagent Reinforcement Learning via Convex Relaxation","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2205.09927","title":"CertiFair: A Framework for Certified Global Fairness of Neural Networks","created":"2022-05-20","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2103.16652","title":"Robustness Certification for Point Cloud Models","created":"2021-03-30","cited_by_count":16,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2104.00447","title":"Towards Evaluating and Training Verifiably Robust Neural Networks","created":"2021-04-01","cited_by_count":15,"area":null},{"id":"2110.14120","title":"ScaleCert: Scalable Certified Defense against Adversarial Patches with Sparse Superficial Layers","created":"2021-10-27","cited_by_count":15,"area":null},{"id":"2206.11225","title":"RetrievalGuard: Provably Robust 1-Nearest Neighbor Image Retrieval","created":"2022-06-17","cited_by_count":15,"area":null},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2110.01388","title":"Neural Network Verification in Control","created":"2021-09-30","cited_by_count":14,"area":null},{"id":"2207.11177","title":"Provable Defense Against Geometric Transformations","created":"2022-07-22","cited_by_count":14,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14,"area":null},{"id":"2111.03165","title":"Infinite Time Horizon Safety of Bayesian Neural Networks","created":"2021-11-04","cited_by_count":13,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2401.14412","title":"Harnessing Neuron Stability to Improve DNN Verification","created":"2024-01-19","cited_by_count":13,"area":null},{"id":"2102.01886","title":"Learning Diverse-Structured Networks for Adversarial Robustness","created":"2021-02-03","cited_by_count":12,"area":null},{"id":"2102.06700","title":"On the Paradox of Certified Training","created":"2021-02-12","cited_by_count":12,"area":null},{"id":"2205.01625","title":"Toward Robust Spiking Neural Network Against Adversarial Perturbation","created":"2022-04-12","cited_by_count":12,"area":null},{"id":"2410.16281","title":"Verification of Neural Control Barrier Functions with Symbolic Derivative Bounds Propagation","created":"2024-10-04","cited_by_count":12,"area":null},{"id":"2501.05867","title":"Neural Network Verification is a Programming Language Challenge","created":"2025-01-10","cited_by_count":12,"area":null},{"id":"2112.12084","title":"Input-Specific Robustness Certification for Randomized Smoothing","created":"2021-12-21","cited_by_count":11,"area":null},{"id":"2305.04574","title":"TAPS: Connecting Certified and Adversarial Training","created":"2023-05-08","cited_by_count":11,"area":null},{"id":"2402.02629","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","created":"2024-02-04","cited_by_count":11,"area":null},{"id":"2204.05687","title":"3DeformRS: Certifying Spatial Deformations on Point Clouds","created":"2022-04-12","cited_by_count":10,"area":null},{"id":"2206.07839","title":"Linearity Grafting: Relaxed Neuron Pruning Helps Certifiable Robustness","created":"2022-06-15","cited_by_count":10,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2405.20355","title":"Enhancing Adversarial Robustness in SNNs with Sparse Gradients","created":"2024-05-30","cited_by_count":10,"area":null},{"id":"2203.07671","title":"Safe Neurosymbolic Learning with Differentiable Symbolic Execution","created":"2022-03-15","cited_by_count":9,"area":null},{"id":"2210.01111","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","created":"2022-10-03","cited_by_count":9,"area":null},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2106.09117","title":"DeepSplit: Scalable Verification of Deep Neural Networks via Operator Splitting","created":"2021-06-16","cited_by_count":8,"area":null},{"id":"2110.02628","title":"Characterizing Learning Dynamics of Deep Neural Networks via Complex Networks","created":"2021-10-06","cited_by_count":8,"area":null},{"id":"2112.05310","title":"Robustness Certificates for Implicit Neural Networks: A Mixed Monotone Contractive Approach","created":"2021-12-10","cited_by_count":8,"area":null},{"id":"2204.13779","title":"Formulating Robustness Against Unforeseen Attacks","created":"2022-04-28","cited_by_count":8,"area":null},{"id":"2311.04015","title":"Expressivity of ReLU-Networks under Convex Relaxations","created":"2023-11-07","cited_by_count":8,"area":null},{"id":"2510.11709","title":"Adversarial Attacks Leverage Interference Between Features in Superposition","created":"2025-10-13","cited_by_count":8,"area":null},{"id":"2202.09994","title":"Transferring Adversarial Robustness Through Robust Representation Matching","created":"2022-02-21","cited_by_count":7,"area":null},{"id":"2206.12292","title":"InfoAT: Improving Adversarial Training Using the Information Bottleneck Principle","created":"2022-06-23","cited_by_count":7,"area":null},{"id":"2210.14283","title":"Accelerating Certified Robustness Training via Knowledge Transfer","created":"2022-10-25","cited_by_count":7,"area":null},{"id":"2212.08649","title":"Better May Not Be Fairer: A Study on Subgroup Discrepancy in Image Classification","created":"2022-12-16","cited_by_count":7,"area":null},{"id":"2305.17342","title":"Rethinking Adversarial Policies: A Generalized Attack Formulation and Provable Defense in RL","created":"2023-05-27","cited_by_count":7,"area":null},{"id":"2311.09266","title":"Adversarially Robust Spiking Neural Networks Through Conversion","created":"2023-11-15","cited_by_count":7,"area":null},{"id":"2312.08751","title":"Improve Robustness of Reinforcement Learning against Observation Perturbations via $l_\\infty$ Lipschitz Policy Networks","created":"2023-12-14","cited_by_count":7,"area":null},{"id":"2404.13736","title":"Interval Abstractions for Robust Counterfactual Explanations","created":"2024-04-21","cited_by_count":7,"area":null},{"id":"2302.10287","title":"CertViT: Certified Robustness of Pre-Trained Vision Transformers","created":"2023-02-01","cited_by_count":6,"area":null},{"id":"2305.04003","title":"ANTONIO: Towards a Systematic Method of Generating NLP Benchmarks for Verification","created":"2023-05-06","cited_by_count":6,"area":null},{"id":"2305.10773","title":"Rate-Adaptive Coding Mechanism for Semantic Communications With Multi-Modal Data","created":"2023-05-18","cited_by_count":6,"area":null},{"id":"2401.14961","title":"Set-Based Training for Neural Network Verification","created":"2024-01-26","cited_by_count":6,"area":null},{"id":"2403.07956","title":"DeepCDCL: An CDCL-based Neural Network Verification Framework","created":"2024-03-12","cited_by_count":6,"area":null},{"id":"2102.01208","title":"Fast Training of Provably Robust Neural Networks by SingleProp","created":"2021-02-01","cited_by_count":5,"area":null},{"id":"2108.00893","title":"Static analysis of ReLU neural networks with tropical polyhedra","created":"2021-07-30","cited_by_count":5,"area":null},{"id":"2203.08961","title":"On the Convergence of Certified Robust Training with Interval Bound Propagation","created":"2022-03-16","cited_by_count":5,"area":null},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2304.10558","title":"Using Z3 for Formal Modeling and Verification of FNN Global Robustness","created":"2023-04-20","cited_by_count":5,"area":null},{"id":"2305.13508","title":"DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagation","created":"2023-05-22","cited_by_count":5,"area":null}],"next_cursor":"100"}