{"total":60,"rows":[{"id":"2305.18887","title":"How Does Information Bottleneck Help Deep Learning?","created":"2023-05-30","cited_by_count":93,"area":null},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2103.03046","title":"PointGuard: Provably Robust 3D Point Cloud Classification","created":"2021-03-04","cited_by_count":49,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2107.04570","title":"ANCER: Anisotropic Certification via Sample-wise Volume Maximization","created":"2021-07-09","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2307.07171","title":"Certified Robustness for Large Language Models with Self-Denoising","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2109.10696","title":"CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networks","created":"2021-09-22","cited_by_count":19,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2306.03048","title":"From Robustness to Explainability and Back Again","created":"2023-06-05","cited_by_count":14,"area":null},{"id":"2112.12084","title":"Input-Specific Robustness Certification for Randomized Smoothing","created":"2021-12-21","cited_by_count":11,"area":null},{"id":"2206.11423","title":"Input-agnostic Certified Group Fairness via Gaussian Parameter Smoothing","created":"2022-06-22","cited_by_count":11,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10,"area":null},{"id":"2301.02039","title":"Randomized Message-Interception Smoothing: Gray-box Certificates for Graph Neural Networks","created":"2023-01-05","cited_by_count":10,"area":null},{"id":"2203.00849","title":"Adversarially Robust Learning with Tolerance","created":"2022-03-02","cited_by_count":9,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9,"area":null},{"id":"2312.03979","title":"Node-aware Bi-smoothing: Certified Robustness against Graph Injection Attacks","created":"2023-12-07","cited_by_count":8,"area":null},{"id":"2206.10158","title":"Certifiably Robust Policy Learning against Adversarial Communication in Multi-agent Systems","created":"2022-06-21","cited_by_count":7,"area":null},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7,"area":null},{"id":"2305.04746","title":"Understanding Noise-Augmented Training for Randomized Smoothing","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2104.10868","title":"Towards Adversarial Patch Analysis and Certified Defense against Crowd Counting","created":"2021-04-22","cited_by_count":6,"area":null},{"id":"2202.01186","title":"Smoothed Embeddings for Certified Few-Shot Learning","created":"2022-02-02","cited_by_count":6,"area":null},{"id":"2512.08967","title":"CluCERT: Certifying LLM Robustness via Clustering-Guided Denoising Smoothing","created":"2025-12-01","cited_by_count":6,"area":"safety"},{"id":"2104.02189","title":"Robust Classification Under $\\ell_0$ Attack for the Gaussian Mixture Model","created":"2021-04-05","cited_by_count":5,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2205.13909","title":"(De-)Randomized Smoothing for Decision Stump Ensembles","created":"2022-05-27","cited_by_count":5,"area":null},{"id":"2302.13464","title":"Randomness in ML Defenses Helps Persistent Attackers and Hinders Evaluators","created":"2023-02-27","cited_by_count":5,"area":null},{"id":"2304.02693","title":"A Certified Radius-Guided Attack Framework to Image Segmentation Models","created":"2023-04-05","cited_by_count":5,"area":null},{"id":"2202.05758","title":"Using Random Perturbations to Mitigate Adversarial Attacks on Sentiment Analysis Models","created":"2022-02-11","cited_by_count":4,"area":null},{"id":"2403.19080","title":"MMCert: Provable Defense against Adversarial Attacks to Multi-modal Models","created":"2024-03-28","cited_by_count":4,"area":null},{"id":"2606.12703","title":"SMSR: Certified Defence Against Runtime Memory Poisoning in Persistent LLM Agent Systems","created":"2026-06-10","cited_by_count":4,"area":"rag"},{"id":"2210.13463","title":"Adversarial Pretraining of Self-Supervised Deep Networks: Past, Present and Future","created":"2022-10-23","cited_by_count":3,"area":null},{"id":"2303.13372","title":"DRSM: De-Randomized Smoothing on Malware Classifier Providing Certified Robustness","created":"2023-03-20","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2204.11837","title":"A Mask-Based Adversarial Defense Scheme","created":"2022-04-21","cited_by_count":2,"area":null},{"id":"2402.03481","title":"FINEST: Stabilizing Recommendations by Rank-Preserving Fine-Tuning","created":"2024-02-05","cited_by_count":2,"area":null},{"id":"2406.13066","title":"MaskPure: Improving Defense Against Text Adversaries with Stochastic Purification","created":"2024-06-18","cited_by_count":2,"area":null},{"id":"2408.00728","title":"CERT-ED: Certifiably Robust Text Classification for Edit Distance","created":"2024-08-01","cited_by_count":2,"area":null},{"id":"2510.00310","title":"Robust Federated Inference","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2201.09369","title":"Efficient and Robust Classification for Sparse Attacks","created":"2022-01-23","cited_by_count":1,"area":null},{"id":"2207.05127","title":"RUSH: Robust Contrastive Learning via Randomized Smoothing","created":"2022-07-11","cited_by_count":1,"area":null},{"id":"2405.14176","title":"Certified Robustness against Sparse Adversarial Perturbations via Data Localization","created":"2024-05-23","cited_by_count":1,"area":null},{"id":"2407.10874","title":"Random Channel Ablation for Robust Hand Gesture Classification with Multimodal Biosignals","created":"2024-07-15","cited_by_count":1,"area":null},{"id":"2512.23307","title":"RobustMask: Certified Robustness against Adversarial Neural Ranking Attack via Randomized Masking","created":"2025-12-29","cited_by_count":1,"area":"rag"},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2203.04855","title":"Binary Classification Under $\\ell_0$ Attacks for General Noise Distribution","created":"2022-03-09","cited_by_count":0,"area":null},{"id":"2409.13546","title":"Certified Adversarial Robustness via Partition-based Randomized Smoothing","created":"2024-09-20","cited_by_count":0,"area":null},{"id":"2505.18478","title":"Provably Robust Training of Quantum Circuit Classifiers Against Parameter Noise","created":"2025-05-24","cited_by_count":0,"area":null},{"id":"2605.12876","title":"Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2608.20791","title":"CertVLA: Certified Defense against Physical Visual Attacks for Vision-Language-Action Models","created":"2026-08-21","cited_by_count":0,"area":"vla"},{"id":"2610.10617","title":"MRCert: Towards Post-deployment Patch Robustness Certification for Adversarially Patched Samples via Type-specific Masking","created":"2026-10-07","cited_by_count":0,"area":null}],"next_cursor":null}