{"total":268,"rows":[{"id":"2203.13591","title":"Continual Test-Time Domain Adaptation","created":"2022-03-25","cited_by_count":525,"area":null},{"id":"2110.09506","title":"MEMO: Test Time Robustness via Adaptation and Augmentation","created":"2021-10-18","cited_by_count":377,"area":null},{"id":"2202.06709","title":"How Do Vision Transformers Work?","created":"2022-02-14","cited_by_count":307,"area":null},{"id":"2105.07581","title":"Vision Transformers are Robust Learners","created":"2021-05-17","cited_by_count":207,"area":null},{"id":"2112.05135","title":"PixMix: Dreamlike Pictures Comprehensively Improve Safety Measures","created":"2021-12-09","cited_by_count":131,"area":null},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130,"area":null},{"id":"2205.12956","title":"Inception Transformer","created":"2022-05-25","cited_by_count":99,"area":null},{"id":"2102.11273","title":"On Interaction Between Augmentations and Corruptions in Natural Corruption Robustness","created":"2021-02-22","cited_by_count":97,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2204.00993","title":"Improving Vision Transformers by Revisiting High-frequency Components","created":"2022-04-03","cited_by_count":76,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2202.03377","title":"Benchmarking and Analyzing Point Cloud Classification under Corruptions","created":"2022-02-07","cited_by_count":70,"area":null},{"id":"2112.01008","title":"Editing a classifier by rewriting its prediction rules","created":"2021-12-02","cited_by_count":65,"area":null},{"id":"2310.16228","title":"On the Foundations of Shortcut Learning","created":"2023-10-24","cited_by_count":65,"area":null},{"id":"2106.09129","title":"A Winning Hand: Compressing Deep Networks Can Improve Out-Of-Distribution Robustness","created":"2021-06-16","cited_by_count":62,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2105.06422","title":"Causally motivated Shortcut Removal Using Auxiliary Labels","created":"2021-05-13","cited_by_count":55,"area":null},{"id":"2312.04089","title":"Open-Vocabulary Segmentation with Semantic-Assisted Calibration","created":"2023-12-07","cited_by_count":49,"area":null},{"id":"2307.13537","title":"Spectrum-guided Multi-granularity Referring Video Object Segmentation","created":"2023-07-25","cited_by_count":48,"area":null},{"id":"2408.12879","title":"Frequency-aware Feature Fusion for Dense Image Prediction","created":"2024-08-23","cited_by_count":48,"area":null},{"id":"2307.14008","title":"Adaptive Frequency Filters As Efficient Global Token Mixers","created":"2023-07-26","cited_by_count":45,"area":null},{"id":"2203.12198","title":"Deep Frequency Filtering for Domain Generalization","created":"2022-03-23","cited_by_count":43,"area":null},{"id":"2211.09703","title":"EfficientTrain: Exploring Generalized Curriculum Learning for Training Visual Backbones","created":"2022-11-17","cited_by_count":43,"area":null},{"id":"2105.06152","title":"When Human Pose Estimation Meets Robustness: Adversarial Algorithms and Benchmarks","created":"2021-05-13","cited_by_count":41,"area":null},{"id":"2101.09781","title":"Fighting deepfakes by detecting GAN DCT anomalies","created":"2021-01-24","cited_by_count":39,"area":null},{"id":"2111.15121","title":"Pyramid Adversarial Training Improves ViT Performance","created":"2021-11-30","cited_by_count":39,"area":null},{"id":"2212.00979","title":"PASTA: Proportional Amplitude Spectrum Training Augmentation for Syn-to-Real Domain Generalization","created":"2022-12-02","cited_by_count":39,"area":null},{"id":"2110.02424","title":"Spectral Bias in Practice: The Role of Function Frequency in Generalization","created":"2021-10-06","cited_by_count":37,"area":null},{"id":"2205.11474","title":"Exposing Outlier Exposure: What Can Be Learned From Few, One, and Zero Outlier Images","created":"2022-05-23","cited_by_count":35,"area":null},{"id":"2310.03335","title":"Continual Test-time Domain Adaptation via Dynamic Sample Selection","created":"2023-10-05","cited_by_count":35,"area":null},{"id":"2103.16241","title":"Improving robustness against common corruptions with frequency biased models","created":"2021-03-30","cited_by_count":34,"area":null},{"id":"2203.04946","title":"Do better ImageNet classifiers assess perceptual similarity better?","created":"2022-03-09","cited_by_count":34,"area":null},{"id":"2403.05369","title":"Frequency-Adaptive Dilated Convolution for Semantic Segmentation","created":"2024-03-08","cited_by_count":34,"area":null},{"id":"2104.09789","title":"Does enhanced shape bias improve neural network robustness to common corruptions?","created":"2021-04-20","cited_by_count":32,"area":null},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30,"area":null},{"id":"2207.01398","title":"Large-scale Robustness Analysis of Video Action Recognition Models","created":"2022-07-04","cited_by_count":29,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28,"area":null},{"id":"2307.09829","title":"What do neural networks learn in image classification? A frequency shortcut perspective","created":"2023-07-19","cited_by_count":28,"area":null},{"id":"2309.13190","title":"Spatial-frequency channels, shape bias, and adversarial robustness","created":"2023-09-22","cited_by_count":28,"area":null},{"id":"2107.14110","title":"Enhancing Adversarial Robustness via Test-time Transformation Ensembling","created":"2021-07-29","cited_by_count":27,"area":null},{"id":"2108.03489","title":"Impact of Aliasing on Generalization in Deep Convolutional Networks","created":"2021-08-07","cited_by_count":25,"area":null},{"id":"2207.02159","title":"Robustness Analysis of Video-Language Models Against Visual and Language Perturbations","created":"2022-07-05","cited_by_count":23,"area":null},{"id":"2207.07065","title":"On the Strong Correlation Between Model Invariance and Generalization","created":"2022-07-14","cited_by_count":23,"area":null},{"id":"2210.05567","title":"Global Spectral Filter Memory Network for Video Object Segmentation","created":"2022-10-11","cited_by_count":22,"area":null},{"id":"2305.06024","title":"A Survey on the Robustness of Computer Vision Models against Common Corruptions","created":"2023-05-10","cited_by_count":21,"area":null},{"id":"2404.01509","title":"Can Biases in ImageNet Models Explain Generalization?","created":"2024-04-01","cited_by_count":20,"area":null},{"id":"2410.10365","title":"SpeGCL: Self-supervised Graph Spectrum Contrastive Learning without Positive Samples","created":"2024-10-14","cited_by_count":20,"area":null},{"id":"2503.18783","title":"Frequency Dynamic Convolution for Dense Image Prediction","created":"2025-03-24","cited_by_count":19,"area":null},{"id":"2102.06479","title":"Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective","created":"2021-02-12","cited_by_count":18,"area":null},{"id":"2111.10991","title":"Backdoor Attack through Frequency Domain","created":"2021-11-22","cited_by_count":18,"area":null},{"id":"2303.01052","title":"Demystifying Causal Features on Adversarial Examples and Causal Inoculation for Robust Network by Adversarial Instrumental Variable Regression","created":"2023-03-02","cited_by_count":18,"area":null},{"id":"2403.01944","title":"Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classification","created":"2024-03-04","cited_by_count":18,"area":null},{"id":"2405.08768","title":"EfficientTrain++: Generalized Curriculum Learning for Efficient Visual Backbone Training","created":"2024-05-14","cited_by_count":18,"area":null},{"id":"2111.03536","title":"A Unified Game-Theoretic Interpretation of Adversarial Robustness","created":"2021-11-05","cited_by_count":17,"area":null},{"id":"2112.00659","title":"Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines","created":"2021-12-01","cited_by_count":17,"area":null},{"id":"2202.01263","title":"NoisyMix: Boosting Model Robustness to Common Corruptions","created":"2022-02-02","cited_by_count":17,"area":null},{"id":"2302.03629","title":"Ethical Considerations for Responsible Data Curation","created":"2023-02-07","cited_by_count":17,"area":null},{"id":"2205.09619","title":"Improving Robustness against Real-World and Worst-Case Distribution Shifts through Decision Region Quantification","created":"2022-05-19","cited_by_count":16,"area":null},{"id":"2106.04765","title":"Predicting Deep Neural Network Generalization with Perturbation Response Curves","created":"2021-06-09","cited_by_count":14,"area":null},{"id":"2210.12945","title":"Revisiting Sparse Convolutional Model for Visual Recognition","created":"2022-10-24","cited_by_count":14,"area":null},{"id":"2403.12033","title":"HiKER-SGG: Hierarchical Knowledge Enhanced Robust Scene Graph Generation","created":"2024-03-18","cited_by_count":14,"area":null},{"id":"2302.12480","title":"Robust Weight Signatures: Gaining Robustness as Easy as Patching Weights?","created":"2023-02-24","cited_by_count":13,"area":null},{"id":"2306.09278","title":"Robustness Analysis on Foundational Segmentation Models","created":"2023-06-15","cited_by_count":13,"area":null},{"id":"2105.02468","title":"Relative stability toward diffeomorphisms indicates performance in deep nets","created":"2021-05-06","cited_by_count":12,"area":null},{"id":"2110.08220","title":"Combining Diverse Feature Priors","created":"2021-10-15","cited_by_count":12,"area":null},{"id":"2307.11823","title":"HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustness","created":"2023-07-21","cited_by_count":12,"area":null},{"id":"2403.20254","title":"Benchmarking the Robustness of Temporal Action Detection Models Against Temporal Corruptions","created":"2024-03-29","cited_by_count":12,"area":null},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2110.00899","title":"Anti-aliasing Deep Image Classifiers using Novel Depth Adaptive Blurring and Activation Function","created":"2021-10-03","cited_by_count":11,"area":null},{"id":"2205.04533","title":"How Does Frequency Bias Affect the Robustness of Neural Image Classifiers against Common Corruption and Adversarial Perturbations?","created":"2022-05-09","cited_by_count":11,"area":null},{"id":"2309.13258","title":"Order-preserving Consistency Regularization for Domain Adaptation and Generalization","created":"2023-09-23","cited_by_count":11,"area":null},{"id":"2410.03030","title":"Dynamic Sparse Training versus Dense Training: The Unexpected Winner in Image Corruption Robustness","created":"2024-10-03","cited_by_count":11,"area":null},{"id":"2411.01432","title":"Meta-Exploiting Frequency Prior for Cross-Domain Few-Shot Learning","created":"2024-11-03","cited_by_count":11,"area":null},{"id":"2412.11807","title":"PhysAug: A Physical-guided and Frequency-based Data Augmentation for Single-Domain Generalized Object Detection","created":"2024-12-16","cited_by_count":11,"area":null},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10,"area":null},{"id":"2111.15112","title":"AugLiChem: Data Augmentation Library of Chemical Structures for Machine Learning","created":"2021-11-30","cited_by_count":10,"area":null},{"id":"2202.11287","title":"LPF-Defense: 3D Adversarial Defense based on Frequency Analysis","created":"2022-02-23","cited_by_count":10,"area":null},{"id":"2210.09020","title":"Defects of Convolutional Decoder Networks in Frequency Representation","created":"2022-10-17","cited_by_count":10,"area":null},{"id":"2212.00850","title":"When Neural Networks Fail to Generalize? A Model Sensitivity Perspective","created":"2022-12-01","cited_by_count":10,"area":null},{"id":"2309.03774","title":"Deep Learning Safety Concerns in Automated Driving Perception","created":"2023-09-07","cited_by_count":10,"area":null},{"id":"2309.15762","title":"Rapid Network Adaptation: Learning to Adapt Neural Networks Using Test-Time Feedback","created":"2023-09-27","cited_by_count":10,"area":null},{"id":"2507.12006","title":"Frequency-Dynamic Attention Modulation for Dense Prediction","created":"2025-07-16","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2205.13042","title":"How explainable are adversarially-robust CNNs?","created":"2022-05-25","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2407.13431","title":"Improving Out-of-Distribution Generalization of Trajectory Prediction for Autonomous Driving via Polynomial Representations","created":"2024-07-18","cited_by_count":9,"area":null},{"id":"2504.14921","title":"Fast Adversarial Training with Weak-to-Strong Spatial-Temporal Consistency in the Frequency Domain on Videos","created":"2025-04-21","cited_by_count":9,"area":null},{"id":"2104.12679","title":"Impact of Spatial Frequency Based Constraints on Adversarial Robustness","created":"2021-04-26","cited_by_count":8,"area":null},{"id":"2106.06056","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","created":"2021-06-10","cited_by_count":8,"area":null},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8,"area":null},{"id":"2308.06703","title":"Understanding the robustness difference between stochastic gradient descent and adaptive gradient methods","created":"2023-08-13","cited_by_count":8,"area":null},{"id":"2309.01207","title":"Spectral Adversarial MixUp for Few-Shot Unsupervised Domain Adaptation","created":"2023-09-03","cited_by_count":8,"area":null},{"id":"2310.20175","title":"LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations","created":"2023-10-31","cited_by_count":8,"area":null},{"id":"2407.20653","title":"FACL-Attack: Frequency-Aware Contrastive Learning for Transferable Adversarial Attacks","created":"2024-07-30","cited_by_count":8,"area":null},{"id":"2107.12052","title":"Using Synthetic Corruptions to Measure Robustness to Natural Distribution Shifts","created":"2021-07-26","cited_by_count":7,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2202.12412","title":"Fourier-Based Augmentations for Improved Robustness and Uncertainty Calibration","created":"2022-02-24","cited_by_count":7,"area":null}],"next_cursor":"100"}