{"total":55,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2105.07581","title":"Vision Transformers are Robust Learners","created":"2021-05-17","cited_by_count":207,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2303.14460","title":"CFA: Class-wise Calibrated Fair Adversarial Training","created":"2023-03-25","cited_by_count":53,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2106.10189","title":"Adversarial Training Helps Transfer Learning via Better Representations","created":"2021-06-18","cited_by_count":36,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2206.02417","title":"Fast Adversarial Training with Adaptive Step Size","created":"2022-06-06","cited_by_count":25,"area":null},{"id":"2412.03597","title":"The Vulnerability of Language Model Benchmarks: Do They Accurately Reflect True LLM Performance?","created":"2024-12-02","cited_by_count":22,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2210.09852","title":"Scaling Adversarial Training to Large Perturbation Bounds","created":"2022-10-18","cited_by_count":20,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2102.03716","title":"SPADE: A Spectral Method for Black-Box Adversarial Robustness Evaluation","created":"2021-02-07","cited_by_count":16,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2206.10057","title":"Robust Deep Reinforcement Learning through Bootstrapped Opportunistic Curriculum","created":"2022-06-21","cited_by_count":15,"area":null},{"id":"2203.02006","title":"Why adversarial training can hurt robust accuracy","created":"2022-03-03","cited_by_count":14,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2210.00094","title":"Improving Robustness with Adaptive Weight Decay","created":"2022-09-30","cited_by_count":13,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2406.17338","title":"Robustly Optimized Deep Feature Decoupling Network for Fatty Liver Diseases Detection","created":"2024-06-25","cited_by_count":11,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2102.07437","title":"Data Quality Matters For Adversarial Training: An Empirical Study","created":"2021-02-15","cited_by_count":6,"area":null},{"id":"2210.11513","title":"Learning Sample Reweighting for Accuracy and Adversarial Robustness","created":"2022-10-20","cited_by_count":6,"area":null},{"id":"2304.12550","title":"Combining Adversaries with Anti-adversaries in Training","created":"2023-04-25","cited_by_count":6,"area":null},{"id":"2103.04436","title":"Insta-RS: Instance-wise Randomized Smoothing for Improved Robustness and Accuracy","created":"2021-03-07","cited_by_count":5,"area":null},{"id":"2303.14077","title":"Improved Adversarial Training Through Adaptive Instance-wise Loss Smoothing","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2306.01271","title":"On the Clean Generalization and Robust Overfitting in Adversarial Training from Two Theoretical Views: Representation Complexity and Training Dynamics","created":"2023-06-02","cited_by_count":5,"area":null},{"id":"2111.00295","title":"Get Fooled for the Right Reason: Improving Adversarial Robustness through a Teacher-guided Curriculum Learning Approach","created":"2021-10-30","cited_by_count":4,"area":null},{"id":"2206.01736","title":"Adaptive Adversarial Training to Improve Adversarial Robustness of DNNs for Medical Image Segmentation and Detection","created":"2022-06-02","cited_by_count":4,"area":null},{"id":"2211.16316","title":"A3T: Accuracy Aware Adversarial Training","created":"2022-11-29","cited_by_count":4,"area":null},{"id":"2306.14275","title":"Enhancing Adversarial Training via Reweighting Optimization Trajectory","created":"2023-06-25","cited_by_count":4,"area":null},{"id":"2103.15385","title":"Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training","created":"2021-03-29","cited_by_count":3,"area":null},{"id":"2206.06496","title":"Towards Alternative Techniques for Improving Adversarial Robustness: Analysis of Adversarial Training at a Spectrum of Perturbations","created":"2022-06-13","cited_by_count":3,"area":null},{"id":"2207.13192","title":"Perception-Aware Attack: Creating Adversarial Music via Reverse-Engineering Human Perception","created":"2022-07-26","cited_by_count":3,"area":null},{"id":"2210.01288","title":"Strength-Adaptive Adversarial Training","created":"2022-10-04","cited_by_count":3,"area":null},{"id":"2108.13239","title":"Adaptive perturbation adversarial training: based on reinforcement learning","created":"2021-08-30","cited_by_count":2,"area":null},{"id":"2204.10695","title":"Universum-inspired Supervised Contrastive Learning","created":"2022-04-22","cited_by_count":2,"area":null},{"id":"2204.13232","title":"Adversarial Fine-tune with Dynamically Regulated Adversary","created":"2022-04-28","cited_by_count":2,"area":null},{"id":"2205.10457","title":"Robust Sensible Adversarial Learning of Deep Neural Networks for Image Classification","created":"2022-05-20","cited_by_count":2,"area":null},{"id":"2311.15165","title":"Mixing Classifiers to Alleviate the Accuracy-Robustness Trade-Off","created":"2023-11-26","cited_by_count":2,"area":null},{"id":"2410.10554","title":"ROSAR: An Adversarial Re-Training Framework for Robust Side-Scan Sonar Object Detection","created":"2024-10-14","cited_by_count":2,"area":null},{"id":"2103.13612","title":"THAT: Two Head Adversarial Training for Improving Robustness at Scale","created":"2021-03-25","cited_by_count":1,"area":null},{"id":"2110.00623","title":"Calibrated Adversarial Training","created":"2021-10-01","cited_by_count":1,"area":null},{"id":"2405.06298","title":"PUMA: margin-based data pruning","created":"2024-05-10","cited_by_count":1,"area":null},{"id":"2408.14728","title":"Improving Clean Accuracy via a Tangent-Space Perspective on Adversarial Training","created":"2024-08-27","cited_by_count":1,"area":null},{"id":"2410.16579","title":"Conflict-Aware Adversarial Training","created":"2024-10-21","cited_by_count":1,"area":null},{"id":"2112.13989","title":"Associative Adversarial Learning Based on Selective Attack","created":"2021-12-28","cited_by_count":0,"area":null},{"id":"2301.10454","title":"A Data-Centric Approach for Improving Adversarial Training Through the Lens of Out-of-Distribution Detection","created":"2023-01-25","cited_by_count":0,"area":null},{"id":"2309.02528","title":"Adaptive Adversarial Training Does Not Increase Recourse Costs","created":"2023-09-05","cited_by_count":0,"area":null},{"id":"2310.05947","title":"Robust and Efficient Interference Neural Networks for Defending Against Adversarial Attacks in ImageNet","created":"2023-09-03","cited_by_count":0,"area":null},{"id":"2310.14561","title":"F$^2$AT: Feature-Focusing Adversarial Training via Disentanglement of Natural and Perturbed Patterns","created":"2023-10-23","cited_by_count":0,"area":null},{"id":"2403.06798","title":"Dynamic Perturbation-Adaptive Adversarial Training on Medical Image Classification","created":"2024-03-11","cited_by_count":0,"area":null},{"id":"2509.23325","title":"Robust Fine-Tuning from Non-Robust Pretrained Models: Mitigating Suboptimal Transfer With Epsilon-Scheduling","created":"2025-09-27","cited_by_count":0,"area":null},{"id":"2512.04264","title":"Studying Various Activation Functions and Non-IID Data for Machine Learning Model Robustness","created":"2025-12-03","cited_by_count":0,"area":null}],"next_cursor":null}