{"total":44,"rows":[{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2210.04886","title":"Revisiting adapters with adversarial training","created":"2022-10-10","cited_by_count":18,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2206.07314","title":"Fast and Reliable Evaluation of Adversarial Robustness with Minimum-Margin Attack","created":"2022-06-15","cited_by_count":13,"area":null},{"id":"2306.11035","title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game","created":"2023-06-19","cited_by_count":13,"area":null},{"id":"2410.08503","title":"Adversarial Training Can Provably Improve Robustness: Theoretical Analysis of Feature Learning Process Under Structured Data","created":"2024-10-11","cited_by_count":12,"area":null},{"id":"2206.09628","title":"Diversified Adversarial Attacks based on Conjugate Gradient Method","created":"2022-06-20","cited_by_count":11,"area":null},{"id":"2211.08008","title":"MORA: Improving Ensemble Robustness Evaluation with Model-Reweighing Attack","created":"2022-11-15","cited_by_count":7,"area":null},{"id":"2306.05873","title":"Detecting Adversarial Directions in Deep Reinforcement Learning to Make Robust Decisions","created":"2023-06-09","cited_by_count":7,"area":null},{"id":"2103.01276","title":"A Multiclass Boosting Framework for Achieving Fast and Provable Adversarial Robustness","created":"2021-03-01","cited_by_count":6,"area":null},{"id":"2211.12713","title":"Reliable Robustness Evaluation via Automatically Constructed Attack Ensembles","created":"2022-11-23","cited_by_count":6,"area":null},{"id":"2102.09012","title":"Improving Hierarchical Adversarial Robustness of Deep Neural Networks","created":"2021-02-17","cited_by_count":4,"area":null},{"id":"2107.05712","title":"A Closer Look at the Adversarial Robustness of Information Bottleneck Models","created":"2021-07-12","cited_by_count":4,"area":null},{"id":"2112.14232","title":"Constrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks","created":"2021-12-28","cited_by_count":4,"area":null},{"id":"2110.08042","title":"Adversarial Attacks on ML Defense Models Competition","created":"2021-10-15","cited_by_count":3,"area":null},{"id":"2110.08256","title":"Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness","created":"2021-10-13","cited_by_count":3,"area":null},{"id":"2210.13982","title":"Hindering Adversarial Attacks with Implicit Neural Representations","created":"2022-10-22","cited_by_count":3,"area":null},{"id":"2411.15210","title":"Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks","created":"2024-11-20","cited_by_count":3,"area":null},{"id":"2212.07992","title":"Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks","created":"2022-12-15","cited_by_count":2,"area":null},{"id":"2305.07308","title":"Efficient Search of Comprehensively Robust Neural Architectures via Multi-fidelity Evaluation","created":"2023-05-12","cited_by_count":2,"area":null},{"id":"2310.19889","title":"Exploring Geometry of Blind Spots in Vision Models","created":"2023-10-30","cited_by_count":2,"area":null},{"id":"2512.23745","title":"A Comprehensive Study of Deep Learning Model Fixing Approaches","created":"2025-12-26","cited_by_count":2,"area":null},{"id":"2110.08260","title":"Abstract Interpretation of Fixpoint Iterators with Applications to Neural Networks","created":"2021-10-14","cited_by_count":1,"area":null},{"id":"2202.12860","title":"ARIA: Adversarially Robust Image Attribution for Content Provenance","created":"2022-02-25","cited_by_count":1,"area":null},{"id":"2210.00062","title":"Learning Robust Kernel Ensembles with Kernel Average Pooling","created":"2022-09-30","cited_by_count":1,"area":null},{"id":"2405.01349","title":"Position: Towards Resilience Against Adversarial Examples","created":"2024-05-02","cited_by_count":1,"area":null},{"id":"2501.07251","title":"MOS-Attack: A Scalable Multi-objective Adversarial Attack Framework","created":"2025-01-13","cited_by_count":1,"area":null},{"id":"2110.14030","title":"Improving Local Effectiveness for Global robust training","created":"2021-10-26","cited_by_count":0,"area":null},{"id":"2207.05137","title":"Towards Effective Multi-Label Recognition Attacks via Knowledge Graph Consistency","created":"2022-07-11","cited_by_count":0,"area":null},{"id":"2208.06984","title":"A Multi-objective Memetic Algorithm for Auto Adversarial Attack Optimization Design","created":"2022-08-15","cited_by_count":0,"area":null},{"id":"2408.00193","title":"Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges","created":"2024-07-31","cited_by_count":0,"area":null},{"id":"2408.03972","title":"Enhancing Output Diversity Improves Conjugate Gradient-based Adversarial Attacks","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2602.20548","title":"Robust Spiking Neural Networks Against Adversarial Attacks","created":"2026-02-24","cited_by_count":0,"area":null}],"next_cursor":null}