{"total":132,"rows":[{"id":"2110.12690","title":"A Dynamical System Perspective for Lipschitz Neural Networks","created":"2021-10-25","cited_by_count":60,"area":null},{"id":"2303.03169","title":"A Unified Algebraic Perspective on Lipschitz Neural Networks","created":"2023-03-06","cited_by_count":60,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52,"area":null},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51,"area":null},{"id":"2111.09277","title":"SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness","created":"2021-11-17","cited_by_count":49,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46,"area":null},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45,"area":null},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42,"area":null},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2110.05365","title":"Intriguing Properties of Input-dependent Randomized Smoothing","created":"2021-10-11","cited_by_count":24,"area":null},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24,"area":null},{"id":"2107.04570","title":"ANCER: Anisotropic Certification via Sample-wise Volume Maximization","created":"2021-07-09","cited_by_count":23,"area":null},{"id":"2202.09340","title":"Learning Physics-Informed Neural Networks without Stacked Back-propagation","created":"2022-02-18","cited_by_count":23,"area":null},{"id":"2206.04310","title":"GSmooth: Certified Robustness against Semantic Transformations via Generalized Randomized Smoothing","created":"2022-06-09","cited_by_count":23,"area":null},{"id":"2206.07912","title":"Double Sampling Randomized Smoothing","created":"2022-06-16","cited_by_count":22,"area":null},{"id":"2103.11257","title":"Robust Models Are More Interpretable Because Attributions Look Normal","created":"2021-03-20","cited_by_count":21,"area":null},{"id":"2210.06983","title":"Denoising Masked AutoEncoders Help Robust Classification","created":"2022-10-10","cited_by_count":21,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2203.16000","title":"StyleFool: Fooling Video Classification Systems via Style Transfer","created":"2022-03-30","cited_by_count":20,"area":null},{"id":"2405.03316","title":"Provably Unlearnable Data Examples","created":"2024-05-06","cited_by_count":18,"area":null},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17,"area":null},{"id":"2112.00659","title":"Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines","created":"2021-12-01","cited_by_count":17,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2404.09586","title":"Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing","created":"2024-04-15","cited_by_count":15,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2306.08553","title":"Noise Stability Optimization for Finding Flat Minima: A Hessian-based Regularization Approach","created":"2023-06-14","cited_by_count":14,"area":null},{"id":"2307.05902","title":"Stability Guarantees for Feature Attributions with Multiplicative Smoothing","created":"2023-07-12","cited_by_count":14,"area":null},{"id":"2102.06700","title":"On the Paradox of Certified Training","created":"2021-02-12","cited_by_count":12,"area":null},{"id":"2305.19521","title":"Incremental Randomized Smoothing Certification","created":"2023-05-31","cited_by_count":12,"area":null},{"id":"2112.12084","title":"Input-Specific Robustness Certification for Randomized Smoothing","created":"2021-12-21","cited_by_count":11,"area":null},{"id":"2202.13216","title":"Adversarial robustness of sparse local Lipschitz predictors","created":"2022-02-26","cited_by_count":11,"area":null},{"id":"2309.13794","title":"Projected Randomized Smoothing for Certified Adversarial Robustness","created":"2023-09-25","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2201.12733","title":"TPC: Transformation-Specific Smoothing for Point Cloud Models","created":"2022-01-30","cited_by_count":10,"area":null},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9,"area":null},{"id":"2202.11592","title":"A Law of Robustness beyond Isoperimetry","created":"2022-02-23","cited_by_count":9,"area":null},{"id":"2203.00849","title":"Adversarially Robust Learning with Tolerance","created":"2022-03-02","cited_by_count":9,"area":null},{"id":"2210.01111","title":"MultiGuard: Provably Robust Multi-label Classification against Adversarial Examples","created":"2022-10-03","cited_by_count":9,"area":null},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9,"area":null},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2106.06056","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","created":"2021-06-10","cited_by_count":8,"area":null},{"id":"2204.13779","title":"Formulating Robustness Against Unforeseen Attacks","created":"2022-04-28","cited_by_count":8,"area":null},{"id":"2302.01961","title":"Asymmetric Certified Robustness via Feature-Convex Neural Networks","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2406.17830","title":"Treatment of Statistical Estimation Problems in Randomized Smoothing for Adversarial Robustness","created":"2024-06-25","cited_by_count":8,"area":null},{"id":"2210.14283","title":"Accelerating Certified Robustness Training via Knowledge Transfer","created":"2022-10-25","cited_by_count":7,"area":null},{"id":"2210.15614","title":"Private and Reliable Neural Network Inference","created":"2022-10-27","cited_by_count":7,"area":null},{"id":"2305.04746","title":"Understanding Noise-Augmented Training for Randomized Smoothing","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2307.11528","title":"Improving Viewpoint Robustness for Visual Recognition via Adversarial Training","created":"2023-07-21","cited_by_count":7,"area":null},{"id":"2202.01186","title":"Smoothed Embeddings for Certified Few-Shot Learning","created":"2022-02-02","cited_by_count":6,"area":null},{"id":"2207.05327","title":"Certified Adversarial Robustness via Anisotropic Randomized Smoothing","created":"2022-07-12","cited_by_count":6,"area":null},{"id":"2311.17434","title":"GSE: Group-wise Sparse and Explainable Adversarial Attacks","created":"2023-11-29","cited_by_count":6,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2404.18791","title":"Certification of Speaker Recognition Models to Additive Perturbations","created":"2024-04-29","cited_by_count":6,"area":null},{"id":"2102.02950","title":"Adversarial Training Makes Weight Loss Landscape Sharper in Logistic Regression","created":"2021-02-05","cited_by_count":5,"area":null},{"id":"2205.13909","title":"(De-)Randomized Smoothing for Decision Stump Ensembles","created":"2022-05-27","cited_by_count":5,"area":null},{"id":"2303.14961","title":"Diffusion Denoised Smoothing for Certified and Adversarial Robust Out-Of-Distribution Detection","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2304.02693","title":"A Certified Radius-Guided Attack Framework to Image Segmentation Models","created":"2023-04-05","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2405.15942","title":"Can Implicit Bias Imply Adversarial Robustness?","created":"2024-05-24","cited_by_count":5,"area":null},{"id":"2505.15174","title":"Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss","created":"2025-05-21","cited_by_count":5,"area":null},{"id":"2112.05634","title":"Preemptive Image Robustification for Protecting Users against Man-in-the-Middle Adversarial Attacks","created":"2021-12-10","cited_by_count":4,"area":null},{"id":"2301.08842","title":"Limitations of Piecewise Linearity for Efficient Robustness Certification","created":"2023-01-21","cited_by_count":4,"area":null},{"id":"2304.10446","title":"Certified Adversarial Robustness Within Multiple Perturbation Bounds","created":"2023-04-20","cited_by_count":4,"area":null},{"id":"2402.10983","title":"Quantum-Inspired Analysis of Neural Network Vulnerabilities: The Role of Conjugate Variables in System Attacks","created":"2024-02-16","cited_by_count":4,"area":null},{"id":"2404.17371","title":"Estimating the Robustness Radius for Randomized Smoothing with 100$\\times$ Sample Efficiency","created":"2024-04-26","cited_by_count":4,"area":null},{"id":"2405.08892","title":"RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing","created":"2024-05-14","cited_by_count":4,"area":null},{"id":"2503.05239","title":"Robust Conformal Prediction with a Single Binary Certificate","created":"2025-03-07","cited_by_count":4,"area":null},{"id":"2506.13024","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","created":"2025-06-16","cited_by_count":4,"area":null},{"id":"2506.16553","title":"One Sample is Enough to Make Conformal Prediction Robust","created":"2025-06-19","cited_by_count":4,"area":null},{"id":"2204.05432","title":"A Simple Approach to Adversarial Robustness in Few-shot Image Classification","created":"2022-04-11","cited_by_count":3,"area":null},{"id":"2210.13463","title":"Adversarial Pretraining of Self-Supervised Deep Networks: Past, Present and Future","created":"2022-10-23","cited_by_count":3,"area":null},{"id":"2302.01375","title":"On the Robustness of Randomized Ensembles to Adversarial Perturbations","created":"2023-02-02","cited_by_count":3,"area":null},{"id":"2312.12608","title":"Rethinking Randomized Smoothing from the Perspective of Scalability","created":"2023-12-19","cited_by_count":3,"area":null},{"id":"2404.08069","title":"Persistent Classification: A New Approach to Stability of Data and Adversarial Examples","created":"2024-04-11","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2603.19470","title":"Adaptive Layerwise Perturbation: Unifying Off-Policy Corrections for LLM RL","created":"2026-03-19","cited_by_count":3,"area":null},{"id":"2206.01715","title":"Towards Evading the Limits of Randomized Smoothing: A Theoretical Analysis","created":"2022-06-03","cited_by_count":2,"area":null},{"id":"2211.10882","title":"Multi-head Ensemble of Smoothed Classifiers for Certified Robustness","created":"2022-11-20","cited_by_count":2,"area":null},{"id":"2304.13019","title":"Certifying Ensembles: A General Certification Theory with S-Lipschitzness","created":"2023-04-25","cited_by_count":2,"area":null},{"id":"2403.02329","title":"COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attacks","created":"2024-03-04","cited_by_count":2,"area":null},{"id":"2405.10924","title":"Boosting Few-Pixel Robustness Verification via Covering Verification Designs","created":"2024-05-17","cited_by_count":2,"area":null},{"id":"2405.16036","title":"Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness","created":"2024-05-25","cited_by_count":2,"area":null},{"id":"2509.23689","title":"Merge Now, Regret Later: The Hidden Cost of Model Merging Is Adversarial Transferability","created":"2025-09-28","cited_by_count":2,"area":null},{"id":"2509.25979","title":"Reconcile Certified Robustness and Accuracy for DNN-based Smoothed Majority Vote Classifier","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2102.05096","title":"Towards Bridging the gap between Empirical and Certified Robustness against Adversarial Examples","created":"2021-02-09","cited_by_count":1,"area":null},{"id":"2108.02010","title":"On the Exploitability of Audio Machine Learning Pipelines to Surreptitious Adversarial Examples","created":"2021-08-03","cited_by_count":1,"area":null},{"id":"2205.06154","title":"Smooth-Reduce: Leveraging Patches for Improved Certified Robustness","created":"2022-05-12","cited_by_count":1,"area":null},{"id":"2206.10235","title":"Riemannian data-dependent randomized smoothing for neural networks certification","created":"2022-06-21","cited_by_count":1,"area":null},{"id":"2207.05127","title":"RUSH: Robust Contrastive Learning via Randomized Smoothing","created":"2022-07-11","cited_by_count":1,"area":null},{"id":"2208.07464","title":"An Overview and Prospective Outlook on Robust Training and Certification of Machine Learning Models","created":"2022-08-15","cited_by_count":1,"area":null},{"id":"2302.00209","title":"Towards Large Certified Radius in Randomized Smoothing using Quasiconcave Optimization","created":"2023-02-01","cited_by_count":1,"area":null}],"next_cursor":"100"}