{"total":666,"rows":[{"id":"2204.02610","title":"Efficient Test-Time Model Adaptation without Forgetting","created":"2022-04-06","cited_by_count":469,"area":null},{"id":"2110.09506","title":"MEMO: Test Time Robustness via Adaptation and Augmentation","created":"2021-10-18","cited_by_count":377,"area":null},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2106.01548","title":"When Vision Transformers Outperform ResNets without Pre-training or Strong Data Augmentations","created":"2021-06-03","cited_by_count":260,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2111.05464","title":"Are Transformers More Robust Than CNNs?","created":"2021-11-10","cited_by_count":187,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2103.15670","title":"On the Adversarial Robustness of Vision Transformers","created":"2021-03-29","cited_by_count":106,"area":null},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71,"area":null},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2105.02968","title":"This Looks Like That... Does it? Shortcomings of Latent Space Prototype Interpretability in Deep Networks","created":"2021-05-05","cited_by_count":65,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2104.02703","title":"Adversarial Robustness under Long-Tailed Distribution","created":"2021-04-06","cited_by_count":50,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2209.08744","title":"AdvDO: Realistic Adversarial Attacks for Trajectory Prediction","created":"2022-09-19","cited_by_count":49,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2103.14222","title":"Adversarial Attacks are Reversible with Natural Supervision","created":"2021-03-26","cited_by_count":47,"area":null},{"id":"2104.09658","title":"Calibration and Consistency of Adversarial Surrogate Losses","created":"2021-04-19","cited_by_count":47,"area":null},{"id":"2111.14341","title":"OOD-CV: A Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Images","created":"2021-11-29","cited_by_count":46,"area":null},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43,"area":null},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2308.00788","title":"An Introduction to Bi-level Optimization: Foundations and Applications in Signal Processing and Machine Learning","created":"2023-08-01","cited_by_count":41,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2103.16241","title":"Improving robustness against common corruptions with frequency biased models","created":"2021-03-30","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2105.10304","title":"Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks","created":"2021-05-21","cited_by_count":33,"area":null},{"id":"2105.14240","title":"Analysis and Applications of Class-wise Robustness in Adversarial Training","created":"2021-05-29","cited_by_count":33,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2302.05086","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","created":"2023-02-10","cited_by_count":32,"area":null},{"id":"2212.10888","title":"A Survey of Mix-based Data Augmentation: Taxonomy, Methods, Applications, and Explainability","created":"2022-12-21","cited_by_count":31,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2210.00960","title":"Stability Analysis and Generalization Bounds of Adversarial Training","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2102.10454","title":"On Fast Adversarial Robustness Adaptation in Model-Agnostic Meta-Learning","created":"2021-02-20","cited_by_count":29,"area":null},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2211.11056","title":"Safe Control Under Input Limits with Neural Control Barrier Functions","created":"2022-11-20","cited_by_count":29,"area":null},{"id":"2211.12681","title":"Benchmarking Adversarially Robust Quantum Machine Learning at Scale","created":"2022-11-23","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2504.09491","title":"DropoutGS: Dropping Out Gaussians for Better Sparse-view Rendering","created":"2025-04-13","cited_by_count":29,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2204.00491","title":"FrequencyLowCut Pooling -- Plug & Play against Catastrophic Overfitting","created":"2022-04-01","cited_by_count":28,"area":null},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2212.11005","title":"Revisiting Residual Networks for Adversarial Robustness: An Architectural Perspective","created":"2022-12-21","cited_by_count":28,"area":null},{"id":"2306.12688","title":"Towards quantum enhanced adversarial robustness in machine learning","created":"2023-06-22","cited_by_count":28,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2203.04412","title":"ImageNet-Patch: A Dataset for Benchmarking Machine Learning Robustness against Adversarial Patches","created":"2022-03-07","cited_by_count":27,"area":null},{"id":"2302.02213","title":"CosPGD: an efficient white-box adversarial attack for pixel-wise prediction tasks","created":"2023-02-04","cited_by_count":27,"area":null},{"id":"2105.01550","title":"A Finer Calibration Analysis for Adversarial Robustness","created":"2021-05-04","cited_by_count":26,"area":null},{"id":"2108.09093","title":"Towards Understanding the Generative Capability of Adversarially Robust Classifiers","created":"2021-08-20","cited_by_count":26,"area":null},{"id":"2111.12485","title":"Understanding the Dynamics of DNNs Using Graph Modularity","created":"2021-11-24","cited_by_count":26,"area":null},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25,"area":null},{"id":"2206.02417","title":"Fast Adversarial Training with Adaptive Step Size","created":"2022-06-06","cited_by_count":25,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24,"area":null},{"id":"2109.00946","title":"Adversarial Robustness for Unsupervised Domain Adaptation","created":"2021-09-02","cited_by_count":24,"area":null},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24,"area":null},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2203.13639","title":"Give Me Your Attention: Dot-Product Attention Considered Harmful for Adversarial Patch Robustness","created":"2022-03-25","cited_by_count":23,"area":null},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2305.02190","title":"Rethinking Graph Lottery Tickets: Graph Sparsity Matters","created":"2023-05-03","cited_by_count":23,"area":null}],"next_cursor":"100"}