{"total":56,"rows":[{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2303.03169","title":"A Unified Algebraic Perspective on Lipschitz Neural Networks","created":"2023-03-06","cited_by_count":60,"area":null},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2108.04062","title":"Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100","created":"2021-08-05","cited_by_count":47,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39,"area":null},{"id":"2110.05365","title":"Intriguing Properties of Input-dependent Randomized Smoothing","created":"2021-10-11","cited_by_count":24,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2402.02316","title":"Your Diffusion Model is Secretly a Certifiably Robust Classifier","created":"2024-02-04","cited_by_count":24,"area":"diffusion"},{"id":"2107.04570","title":"ANCER: Anisotropic Certification via Sample-wise Volume Maximization","created":"2021-07-09","cited_by_count":23,"area":null},{"id":"2206.07912","title":"Double Sampling Randomized Smoothing","created":"2022-06-16","cited_by_count":22,"area":null},{"id":"2210.06983","title":"Denoising Masked AutoEncoders Help Robust Classification","created":"2022-10-10","cited_by_count":21,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2405.03316","title":"Provably Unlearnable Data Examples","created":"2024-05-06","cited_by_count":18,"area":null},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17,"area":null},{"id":"2302.02300","title":"Run-Off Election: Improved Provable Defense against Data Poisoning Attacks","created":"2023-02-05","cited_by_count":17,"area":"safety"},{"id":"2206.11225","title":"RetrievalGuard: Provably Robust 1-Nearest Neighbor Image Retrieval","created":"2022-06-17","cited_by_count":15,"area":null},{"id":"2404.09586","title":"Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing","created":"2024-04-15","cited_by_count":15,"area":null},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2309.13794","title":"Projected Randomized Smoothing for Certified Adversarial Robustness","created":"2023-09-25","cited_by_count":11,"area":null},{"id":"2202.11592","title":"A Law of Robustness beyond Isoperimetry","created":"2022-02-23","cited_by_count":9,"area":null},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9,"area":null},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2110.15764","title":"{\\epsilon}-weakened Robustness of Deep Neural Networks","created":"2021-10-29","cited_by_count":8,"area":null},{"id":"2305.04746","title":"Understanding Noise-Augmented Training for Randomized Smoothing","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2106.14432","title":"Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations","created":"2021-06-28","cited_by_count":6,"area":null},{"id":"2304.02693","title":"A Certified Radius-Guided Attack Framework to Image Segmentation Models","created":"2023-04-05","cited_by_count":5,"area":null},{"id":"2112.14232","title":"Constrained Gradient Descent: A Powerful and Principled Evasion Attack Against Neural Networks","created":"2021-12-28","cited_by_count":4,"area":null},{"id":"2405.08892","title":"RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing","created":"2024-05-14","cited_by_count":4,"area":null},{"id":"2201.04770","title":"Certifiable Robustness for Nearest Neighbor Classifiers","created":"2022-01-13","cited_by_count":3,"area":null},{"id":"2312.12608","title":"Rethinking Randomized Smoothing from the Perspective of Scalability","created":"2023-12-19","cited_by_count":3,"area":null},{"id":"2404.08069","title":"Persistent Classification: A New Approach to Stability of Data and Adversarial Examples","created":"2024-04-11","cited_by_count":3,"area":null},{"id":"2206.01715","title":"Towards Evading the Limits of Randomized Smoothing: A Theoretical Analysis","created":"2022-06-03","cited_by_count":2,"area":null},{"id":"2306.09949","title":"Towards Better Certified Segmentation via Diffusion Models","created":"2023-06-16","cited_by_count":2,"area":"diffusion"},{"id":"2509.23689","title":"Merge Now, Regret Later: The Hidden Cost of Model Merging Is Adversarial Transferability","created":"2025-09-28","cited_by_count":2,"area":null},{"id":"2509.25979","title":"Reconcile Certified Robustness and Accuracy for DNN-based Smoothed Majority Vote Classifier","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2206.10235","title":"Riemannian data-dependent randomized smoothing for neural networks certification","created":"2022-06-21","cited_by_count":1,"area":null},{"id":"2302.00209","title":"Towards Large Certified Radius in Randomized Smoothing using Quasiconcave Optimization","created":"2023-02-01","cited_by_count":1,"area":null},{"id":"2303.16308","title":"Provable Robustness for Streaming Models with a Sliding Window","created":"2023-03-28","cited_by_count":1,"area":null},{"id":"2306.06995","title":"How robust accuracy suffers from certified training with convex relaxations","created":"2023-06-12","cited_by_count":1,"area":null},{"id":"2406.02309","title":"Effects of Exponential Gaussian Distribution on (Double Sampling) Randomized Smoothing","created":"2024-06-04","cited_by_count":1,"area":null},{"id":"2501.17667","title":"CAMP in the Odyssey: Provably Robust Reinforcement Learning with Certified Radius Maximization","created":"2025-01-29","cited_by_count":1,"area":"deeprl"},{"id":"2306.15221","title":"[Re] Double Sampling Randomized Smoothing","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2407.08806","title":"HO-FMN: Hyperparameter Optimization for Fast Minimum-Norm Attacks","created":"2024-07-11","cited_by_count":0,"area":null},{"id":"2409.13546","title":"Certified Adversarial Robustness via Partition-based Randomized Smoothing","created":"2024-09-20","cited_by_count":0,"area":null},{"id":"2503.10661","title":"CeTAD: Towards Certified Toxicity-Aware Distance in Vision Language Models","created":"2025-03-08","cited_by_count":0,"area":"mllm"},{"id":"2503.17172","title":"Principal Eigenvalue Regularization for Improved Worst-Class Certified Robustness of Smoothed Classifiers","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2512.01782","title":"Dual Randomized Smoothing: Beyond Global Noise Variance","created":"2025-12-01","cited_by_count":0,"area":null},{"id":"2607.05541","title":"Self-Review Reinforcement Learning (SRRL) with Cross-Episode Memory and Policy Distillation","created":"2026-07-06","cited_by_count":0,"area":"lr"},{"id":"2607.13801","title":"Traffic-Aware Randomized Smoothing for LLM-Based Network Intrusion Detection","created":"2026-07-15","cited_by_count":0,"area":null}],"next_cursor":null}