{"total":93,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2411.00816","title":"CycleResearcher: Improving Automated Research via Automated Review","created":"2024-10-28","cited_by_count":148,"area":null},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2112.14889","title":"Few-shot Backdoor Defense Using Shapley Estimation","created":"2021-12-30","cited_by_count":41,"area":null},{"id":"2202.13437","title":"A Unified Wasserstein Distributional Robustness Framework for Adversarial Training","created":"2022-02-27","cited_by_count":36,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2210.07562","title":"TokenMixup: Efficient Attention-guided Token-level Data Augmentation for Transformers","created":"2022-10-14","cited_by_count":26,"area":null},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24,"area":null},{"id":"2308.02533","title":"Improving Generalization of Adversarial Training via Robust Critical Fine-Tuning","created":"2023-08-01","cited_by_count":23,"area":null},{"id":"2102.11860","title":"Automated Discovery of Adaptive Attacks on Adversarial Defenses","created":"2021-02-23","cited_by_count":22,"area":null},{"id":"2101.04401","title":"Robustness of on-device Models: Adversarial Attack to Deep Learning Models on Android Apps","created":"2021-01-12","cited_by_count":19,"area":null},{"id":"2106.02749","title":"Predify: Augmenting deep neural networks with brain-inspired predictive coding dynamics","created":"2021-06-04","cited_by_count":19,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2103.01895","title":"Adversarial Examples can be Effective Data Augmentation for Unsupervised Machine Learning","created":"2021-03-02","cited_by_count":16,"area":null},{"id":"2107.11252","title":"Adversarial Reinforced Instruction Attacker for Robust Vision-Language Navigation","created":"2021-07-23","cited_by_count":15,"area":null},{"id":"2211.01361","title":"My Face My Choice: Privacy Enhancing Deepfakes for Social Media Anonymization","created":"2022-11-02","cited_by_count":14,"area":null},{"id":"2302.03857","title":"Efficient Adversarial Contrastive Learning via Robustness-Aware Coreset Selection","created":"2023-02-08","cited_by_count":14,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11,"area":null},{"id":"2203.00553","title":"Global-Local Regularization Via Distributional Robustness","created":"2022-03-01","cited_by_count":11,"area":null},{"id":"2205.04533","title":"How Does Frequency Bias Affect the Robustness of Neural Image Classifiers against Common Corruption and Adversarial Perturbations?","created":"2022-05-09","cited_by_count":11,"area":null},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9,"area":null},{"id":"2101.10027","title":"Understanding and Achieving Efficient Robustness with Adversarial Supervised Contrastive Learning","created":"2021-01-25","cited_by_count":8,"area":null},{"id":"2306.17431","title":"Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection","created":"2023-06-30","cited_by_count":8,"area":null},{"id":"2102.07140","title":"Perceptually Constrained Adversarial Attacks","created":"2021-02-14","cited_by_count":7,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2206.12292","title":"InfoAT: Improving Adversarial Training Using the Information Bottleneck Principle","created":"2022-06-23","cited_by_count":7,"area":null},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2211.12713","title":"Reliable Robustness Evaluation via Automatically Constructed Attack Ensembles","created":"2022-11-23","cited_by_count":6,"area":null},{"id":"2301.09069","title":"Provable Unrestricted Adversarial Training without Compromise with Generalizability","created":"2023-01-22","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2108.10451","title":"Adversarial Robustness of Deep Learning: Theory, Algorithms, and Applications","created":"2021-08-24","cited_by_count":5,"area":null},{"id":"2208.11264","title":"Towards an Awareness of Time Series Anomaly Detection Models' Adversarial Vulnerability","created":"2022-08-24","cited_by_count":5,"area":null},{"id":"2303.06302","title":"Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Survey","created":"2023-03-11","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2310.04693","title":"Robustness-enhanced Uplift Modeling with Adversarial Feature Desensitization","created":"2023-10-07","cited_by_count":5,"area":null},{"id":"2103.00778","title":"Explaining Adversarial Vulnerability with a Data Sparsity Hypothesis","created":"2021-03-01","cited_by_count":4,"area":null},{"id":"2105.01195","title":"Quality Assurance Challenges for Machine Learning Software Applications During Software Development Life Cycle Phases","created":"2021-05-03","cited_by_count":4,"area":null},{"id":"2112.05634","title":"Preemptive Image Robustification for Protecting Users against Man-in-the-Middle Adversarial Attacks","created":"2021-12-10","cited_by_count":4,"area":null},{"id":"2205.15130","title":"Why Adversarial Training of ReLU Networks Is Difficult?","created":"2022-05-30","cited_by_count":4,"area":null},{"id":"2309.04650","title":"Exploring Robust Features for Improving Adversarial Robustness","created":"2023-09-09","cited_by_count":4,"area":null},{"id":"2403.07078","title":"Improving deep learning with prior knowledge and cognitive models: A survey on enhancing explainability, adversarial robustness and zero-shot learning","created":"2024-03-11","cited_by_count":4,"area":null},{"id":"2106.05453","title":"Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training","created":"2021-06-10","cited_by_count":3,"area":null},{"id":"2110.08042","title":"Adversarial Attacks on ML Defense Models Competition","created":"2021-10-15","cited_by_count":3,"area":null},{"id":"2111.15603","title":"Human Imperceptible Attacks and Applications to Improve Fairness","created":"2021-11-30","cited_by_count":3,"area":null},{"id":"2302.02092","title":"Interpolation for Robust Learning: Data Augmentation on Wasserstein Geodesics","created":"2023-02-04","cited_by_count":3,"area":null},{"id":"2306.02618","title":"Enhance Diffusion to Improve Robust Generalization","created":"2023-06-05","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2109.01945","title":"Utilizing Adversarial Targeted Attacks to Boost Adversarial Robustness","created":"2021-09-04","cited_by_count":2,"area":null},{"id":"2207.13036","title":"Jacobian Norm with Selective Input Gradient Regularization for Improved and Interpretable Adversarial Defense","created":"2022-07-09","cited_by_count":2,"area":null},{"id":"2311.15165","title":"Mixing Classifiers to Alleviate the Accuracy-Robustness Trade-Off","created":"2023-11-26","cited_by_count":2,"area":null},{"id":"2103.13612","title":"THAT: Two Head Adversarial Training for Improving Robustness at Scale","created":"2021-03-25","cited_by_count":1,"area":null},{"id":"2104.06377","title":"Mitigating Adversarial Attack for Compute-in-Memory Accelerator Utilizing On-chip Finetune","created":"2021-04-13","cited_by_count":1,"area":null},{"id":"2106.09222","title":"Localized Uncertainty Attacks","created":"2021-06-17","cited_by_count":1,"area":null},{"id":"2108.09713","title":"Robustness-via-Synthesis: Robust Training with Generative Adversarial Perturbations","created":"2021-08-22","cited_by_count":1,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2303.05758","title":"MIXPGD: Hybrid Adversarial Training for Speech Recognition Systems","created":"2023-03-10","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2503.00384","title":"A Survey of Adversarial Defenses in Vision-based Systems: Categorization, Methods and Challenges","created":"2025-03-01","cited_by_count":1,"area":null},{"id":"2503.11032","title":"Weakly Supervised Contrastive Adversarial Training for Learning Robust Features from Semi-supervised Data","created":"2025-03-14","cited_by_count":1,"area":null},{"id":"2504.03782","title":"Deep Positive-Negative Prototypes for Adversarially Robust Discriminative Prototypical Learning","created":"2025-04-03","cited_by_count":1,"area":null},{"id":"2103.02781","title":"Structure-Preserving Progressive Low-rank Image Completion for Defending Adversarial Attacks","created":"2021-03-04","cited_by_count":0,"area":null},{"id":"2103.03325","title":"Hard-label Manifolds: Unexpected Advantages of Query Efficiency for Finding On-manifold Adversarial Examples","created":"2021-03-04","cited_by_count":0,"area":null},{"id":"2105.05029","title":"Adversarial examples attack based on random warm restart mechanism and improved Nesterov momentum","created":"2021-05-10","cited_by_count":0,"area":null},{"id":"2203.02121","title":"Adversarial Patterns: Building Robust Android Malware Classifiers","created":"2022-03-04","cited_by_count":0,"area":null},{"id":"2203.09790","title":"Towards Robust 2D Convolution for Reliable Visual Recognition","created":"2022-03-18","cited_by_count":0,"area":null},{"id":"2204.04778","title":"Measuring the False Sense of Security","created":"2022-04-10","cited_by_count":0,"area":null},{"id":"2205.02741","title":"CE-based white-box adversarial attacks will not work using super-fitting","created":"2022-05-04","cited_by_count":0,"area":null},{"id":"2205.02743","title":"Rethinking Classifier and Adversarial Attack","created":"2022-05-04","cited_by_count":0,"area":null},{"id":"2205.10617","title":"Gradient Concealment: Free Lunch for Defending Adversarial Attacks","created":"2022-05-21","cited_by_count":0,"area":null},{"id":"2208.06984","title":"A Multi-objective Memetic Algorithm for Auto Adversarial Attack Optimization Design","created":"2022-08-15","cited_by_count":0,"area":null},{"id":"2208.11839","title":"A Perturbation Resistant Transformation and Classification System for Deep Neural Networks","created":"2022-08-25","cited_by_count":0,"area":null},{"id":"2210.04087","title":"Symmetry Defense Against CNN Adversarial Perturbation Attacks","created":"2022-10-08","cited_by_count":0,"area":null},{"id":"2302.08066","title":"Masking and Mixing Adversarial Training","created":"2023-02-16","cited_by_count":0,"area":null},{"id":"2303.11793","title":"Bridging Optimal Transport and Jacobian Regularization by Optimal Trajectory for Enhanced Adversarial Defense","created":"2023-03-21","cited_by_count":0,"area":null},{"id":"2507.13727","title":"Adversarial Training Improves Generalization Under Distribution Shifts in Bird Sound Classification","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2509.07673","title":"Nearest Neighbor Projection Removal Adversarial Training","created":"2025-09-09","cited_by_count":0,"area":null},{"id":"2511.07040","title":"3D-ANC: Adaptive Neural Collapse for Robust 3D Point Cloud Recognition","created":"2025-11-10","cited_by_count":0,"area":null},{"id":"2601.00367","title":"PatchBlock: A Lightweight Defense Against Adversarial Patches for Embedded EdgeAI Devices","created":"2026-01-01","cited_by_count":0,"area":null},{"id":"2603.29182","title":"Dummy-Aware Weighted Attack (DAWA): Breaking the Safe Sink in Dummy Class Defenses","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2605.07590","title":"Beyond Defenses: Manifold-Aligned Regularization for Intrinsic 3D Point Cloud Robustness","created":"2026-05-08","cited_by_count":0,"area":null}],"next_cursor":null}