{"total":54,"rows":[{"id":"2112.00059","title":"Evaluating Gradient Inversion Attacks and Defenses in Federated Learning","created":"2021-11-30","cited_by_count":196,"area":null},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2305.11733","title":"Long-tailed Visual Recognition via Gaussian Clouded Logit Adjustment","created":"2023-05-19","cited_by_count":75,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2206.07284","title":"A Survey on Gradient Inversion: Attacks, Defenses and Future Directions","created":"2022-06-15","cited_by_count":40,"area":null},{"id":"2107.02425","title":"GradDiv: Adversarial Robustness of Randomized Neural Networks via Gradient Diversity Regularization","created":"2021-07-06","cited_by_count":34,"area":null},{"id":"2105.14240","title":"Analysis and Applications of Class-wise Robustness in Adversarial Training","created":"2021-05-29","cited_by_count":33,"area":null},{"id":"2304.05538","title":"ImageNet-Hard: The Hardest Images Remaining from a Study of the Power of Zoom and Spatial Biases in Image Classification","created":"2023-04-11","cited_by_count":33,"area":null},{"id":"2212.10888","title":"A Survey of Mix-based Data Augmentation: Taxonomy, Methods, Applications, and Explainability","created":"2022-12-21","cited_by_count":31,"area":null},{"id":"2111.05639","title":"Graph Transplant: Node Saliency-Guided Graph Mixup with Local Structure Preservation","created":"2021-11-10","cited_by_count":30,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2409.05202","title":"A Survey on Mixup Augmentations and Beyond","created":"2024-09-08","cited_by_count":20,"area":null},{"id":"2112.06116","title":"Stereoscopic Universal Perturbations across Different Architectures and Datasets","created":"2021-12-12","cited_by_count":17,"area":null},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2101.04342","title":"Mixup Without Hesitation","created":"2021-01-12","cited_by_count":13,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2310.03967","title":"Sub-token ViT Embedding via Stochastic Resonance Transformers","created":"2023-10-06","cited_by_count":9,"area":null},{"id":"2102.07327","title":"Guided Interpolation for Adversarial Training","created":"2021-02-15","cited_by_count":8,"area":null},{"id":"2103.11589","title":"Adversarially Optimized Mixup for Robust Classification","created":"2021-03-22","cited_by_count":7,"area":null},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6,"area":null},{"id":"2207.13916","title":"A Novel Data Augmentation Technique for Out-of-Distribution Sample Detection using Compounded Corruptions","created":"2022-07-28","cited_by_count":6,"area":null},{"id":"2212.13381","title":"MixupE: Understanding and Improving Mixup from Directional Derivative Perspective","created":"2022-12-27","cited_by_count":6,"area":null},{"id":"2411.16598","title":"DiffBreak: Is Diffusion-Based Purification Robust?","created":"2024-11-25","cited_by_count":6,"area":"diffusion"},{"id":"2109.00936","title":"Impact of Attention on Adversarial Robustness of Image Classification Models","created":"2021-09-02","cited_by_count":4,"area":null},{"id":"2212.04681","title":"Dynamic Test-Time Augmentation via Differentiable Functions","created":"2022-12-09","cited_by_count":4,"area":null},{"id":"2508.05989","title":"ETA: Energy-based Test-time Adaptation for Depth Completion","created":"2025-08-08","cited_by_count":4,"area":null},{"id":"2109.07177","title":"Adversarial Mixing Policy for Relaxing Locally Linear Constraints in Mixup","created":"2021-09-15","cited_by_count":3,"area":null},{"id":"2306.01310","title":"EPIC: Graph Augmentation with Edit Path Interpolation via Learnable Cost","created":"2023-06-02","cited_by_count":3,"area":null},{"id":"2103.07595","title":"Learning Defense Transformers for Counterattacking Adversarial Examples","created":"2021-03-13","cited_by_count":2,"area":null},{"id":"2105.12427","title":"Deep Repulsive Prototypes for Adversarial Robustness","created":"2021-05-26","cited_by_count":2,"area":null},{"id":"2201.00148","title":"Rethinking Feature Uncertainty in Stochastic Neural Networks for Adversarial Robustness","created":"2022-01-01","cited_by_count":2,"area":null},{"id":"2202.01117","title":"An Eye for an Eye: Defending against Gradient-based Attacks with Gradients","created":"2022-02-02","cited_by_count":2,"area":null},{"id":"2210.16205","title":"Local Model Reconstruction Attacks in Federated Learning and their Uses","created":"2022-10-28","cited_by_count":2,"area":null},{"id":"2305.10293","title":"Infinite Class Mixup","created":"2023-05-17","cited_by_count":2,"area":null},{"id":"2306.01435","title":"Improving Adversarial Robustness of DEQs with Explicit Regulations Along the Neural Dynamics","created":"2023-06-02","cited_by_count":2,"area":null},{"id":"2410.12671","title":"New Paradigm of Adversarial Training: Releasing Accuracy-Robustness Trade-Off via Dummy Class","created":"2024-10-16","cited_by_count":2,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2309.12689","title":"AMPLIFY:Attention-based Mixup for Performance Improvement and Label Smoothing in Transformer","created":"2023-09-22","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2103.04565","title":"Improving Transformation-based Defenses against Adversarial Examples with First-order Perturbations","created":"2021-03-08","cited_by_count":0,"area":null},{"id":"2211.14395","title":"Deep Learning Training Procedure Augmentations","created":"2022-11-25","cited_by_count":0,"area":null},{"id":"2306.15482","title":"Cooperation or Competition: Avoiding Player Domination for Multi-Target Robustness via Adaptive Budgets","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2310.00183","title":"On the Equivalence of Graph Convolution and Mixup","created":"2023-09-29","cited_by_count":0,"area":null},{"id":"2310.01029","title":"Incorporating Supervised Domain Generalization into Data Augmentation","created":"2023-10-02","cited_by_count":0,"area":null},{"id":"2411.17959","title":"Adversarial Training in Low-Label Regimes with Margin-Based Interpolation","created":"2024-11-27","cited_by_count":0,"area":null},{"id":"2501.01025","title":"Towards Adversarially Robust Deep Metric Learning","created":"2025-01-02","cited_by_count":0,"area":null},{"id":"2508.05489","title":"Keep It Real: Challenges in Attacking Compression-Based Adversarial Purification","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2601.21543","title":"inversedMixup: Data Augmentation via Inverting Mixed Embeddings","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2606.31378","title":"MAPE: Defending Against Transferable Adversarial Attacks Using Multi-Source Adversarial Perturbations Elimination","created":"2026-06-30","cited_by_count":0,"area":null}],"next_cursor":null}