{"total":727,"rows":[{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2204.02610","title":"Efficient Test-Time Model Adaptation without Forgetting","created":"2022-04-06","cited_by_count":469,"area":null},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2110.09506","title":"MEMO: Test Time Robustness via Adaptation and Augmentation","created":"2021-10-18","cited_by_count":377,"area":null},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2106.01548","title":"When Vision Transformers Outperform ResNets without Pre-training or Strong Data Augmentations","created":"2021-06-03","cited_by_count":260,"area":null},{"id":"2402.08787","title":"Rethinking Machine Unlearning for Large Language Models","created":"2024-02-13","cited_by_count":257,"area":"lr"},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2111.05464","title":"Are Transformers More Robust Than CNNs?","created":"2021-11-10","cited_by_count":187,"area":null},{"id":"2405.15234","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","created":"2024-05-24","cited_by_count":168,"area":"diffusion"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2405.15589","title":"Efficient Adversarial Training in LLMs with Continuous Attacks","created":"2024-05-24","cited_by_count":113,"area":"safety"},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2103.15670","title":"On the Adversarial Robustness of Vision Transformers","created":"2021-03-29","cited_by_count":106,"area":null},{"id":"2106.09249","title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks","created":"2021-06-17","cited_by_count":101,"area":"driving"},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2405.14881","title":"DiffuseMix: Label-Preserving Data Augmentation with Diffusion Models","created":"2024-04-05","cited_by_count":78,"area":"diffusion"},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71,"area":null},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2105.02968","title":"This Looks Like That... Does it? Shortcomings of Latent Space Prototype Interpretability in Deep Networks","created":"2021-05-05","cited_by_count":65,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2104.02703","title":"Adversarial Robustness under Long-Tailed Distribution","created":"2021-04-06","cited_by_count":50,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2209.08744","title":"AdvDO: Realistic Adversarial Attacks for Trajectory Prediction","created":"2022-09-19","cited_by_count":49,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2403.01849","title":"One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models","created":"2024-03-04","cited_by_count":48,"area":"mllm"},{"id":"2103.14222","title":"Adversarial Attacks are Reversible with Natural Supervision","created":"2021-03-26","cited_by_count":47,"area":null},{"id":"2104.09658","title":"Calibration and Consistency of Adversarial Surrogate Losses","created":"2021-04-19","cited_by_count":47,"area":null},{"id":"2111.14341","title":"OOD-CV: A Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Images","created":"2021-11-29","cited_by_count":46,"area":null},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43,"area":null},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2308.00788","title":"An Introduction to Bi-level Optimization: Foundations and Applications in Signal Processing and Machine Learning","created":"2023-08-01","cited_by_count":41,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2110.08335","title":"Trigger Hunting with a Topological Prior for Trojan Detection","created":"2021-10-15","cited_by_count":39,"area":"safety"},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2103.16241","title":"Improving robustness against common corruptions with frequency biased models","created":"2021-03-30","cited_by_count":34,"area":null},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2105.10304","title":"Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks","created":"2021-05-21","cited_by_count":33,"area":null},{"id":"2105.14240","title":"Analysis and Applications of Class-wise Robustness in Adversarial Training","created":"2021-05-29","cited_by_count":33,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2302.05086","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","created":"2023-02-10","cited_by_count":32,"area":null},{"id":"2212.10888","title":"A Survey of Mix-based Data Augmentation: Taxonomy, Methods, Applications, and Explainability","created":"2022-12-21","cited_by_count":31,"area":null},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30,"area":null},{"id":"2210.00960","title":"Stability Analysis and Generalization Bounds of Adversarial Training","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2308.10110","title":"Robust Mixture-of-Expert Training for Convolutional Neural Networks","created":"2023-08-19","cited_by_count":30,"area":"moe"},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2102.10454","title":"On Fast Adversarial Robustness Adaptation in Model-Agnostic Meta-Learning","created":"2021-02-20","cited_by_count":29,"area":null},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2211.11056","title":"Safe Control Under Input Limits with Neural Control Barrier Functions","created":"2022-11-20","cited_by_count":29,"area":null},{"id":"2211.12681","title":"Benchmarking Adversarially Robust Quantum Machine Learning at Scale","created":"2022-11-23","cited_by_count":29,"area":null},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29,"area":null},{"id":"2504.09491","title":"DropoutGS: Dropping Out Gaussians for Better Sparse-view Rendering","created":"2025-04-13","cited_by_count":29,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2204.00491","title":"FrequencyLowCut Pooling -- Plug & Play against Catastrophic Overfitting","created":"2022-04-01","cited_by_count":28,"area":null},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2212.11005","title":"Revisiting Residual Networks for Adversarial Robustness: An Architectural Perspective","created":"2022-12-21","cited_by_count":28,"area":null},{"id":"2306.12688","title":"Towards quantum enhanced adversarial robustness in machine learning","created":"2023-06-22","cited_by_count":28,"area":null},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27,"area":null},{"id":"2203.04412","title":"ImageNet-Patch: A Dataset for Benchmarking Machine Learning Robustness against Adversarial Patches","created":"2022-03-07","cited_by_count":27,"area":null},{"id":"2302.02213","title":"CosPGD: an efficient white-box adversarial attack for pixel-wise prediction tasks","created":"2023-02-04","cited_by_count":27,"area":null},{"id":"2105.01550","title":"A Finer Calibration Analysis for Adversarial Robustness","created":"2021-05-04","cited_by_count":26,"area":null},{"id":"2108.09093","title":"Towards Understanding the Generative Capability of Adversarially Robust Classifiers","created":"2021-08-20","cited_by_count":26,"area":null}],"next_cursor":"100"}