{"total":92,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2101.11517","title":"Investigating Bi-Level Optimization for Learning and Vision from a Unified Perspective: A Survey and Beyond","created":"2021-01-27","cited_by_count":153,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2104.02703","title":"Adversarial Robustness under Long-Tailed Distribution","created":"2021-04-06","cited_by_count":50,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2105.10304","title":"Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks","created":"2021-05-21","cited_by_count":33,"area":null},{"id":"2105.14240","title":"Analysis and Applications of Class-wise Robustness in Adversarial Training","created":"2021-05-29","cited_by_count":33,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24,"area":null},{"id":"2301.13096","title":"Language-Driven Anchors for Zero-Shot Adversarial Robustness","created":"2023-01-30","cited_by_count":23,"area":null},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22,"area":null},{"id":"2203.15331","title":"CNN Filter DB: An Empirical Investigation of Trained Convolutional Filters","created":"2022-03-29","cited_by_count":20,"area":null},{"id":"2210.04886","title":"Revisiting adapters with adversarial training","created":"2022-10-10","cited_by_count":18,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2207.11378","title":"Do Perceptually Aligned Gradients Imply Adversarial Robustness?","created":"2022-07-22","cited_by_count":15,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2111.02331","title":"LTD: Low Temperature Distillation for Gradient Masking-free Adversarial Training","created":"2021-11-03","cited_by_count":13,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2403.10073","title":"Revisiting Adversarial Training under Long-Tailed Distributions","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2205.14283","title":"Rethinking Bayesian Learning for Data Analysis: The Art of Prior and Inference in Sparsity-Aware Modeling","created":"2022-05-28","cited_by_count":12,"area":null},{"id":"2112.02671","title":"Stochastic Local Winner-Takes-All Networks Enable Profound Adversarial Robustness","created":"2021-12-05","cited_by_count":11,"area":null},{"id":"2206.09628","title":"Diversified Adversarial Attacks based on Conjugate Gradient Method","created":"2022-06-20","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2204.02481","title":"Adversarial Robustness through the Lens of Convolutional Filters","created":"2022-04-05","cited_by_count":9,"area":null},{"id":"2207.04129","title":"How many perturbations break this model? Evaluating robustness beyond adversarial accuracy","created":"2022-07-08","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2312.05508","title":"Improving Adversarial Robust Fairness via Anti-Bias Soft Label Distillation","created":"2023-12-09","cited_by_count":8,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2302.05703","title":"HateProof: Are Hateful Meme Detection Systems really Robust?","created":"2023-02-11","cited_by_count":7,"area":null},{"id":"2210.15068","title":"Improving Adversarial Robustness with Self-Paced Hard-Class Pair Reweighting","created":"2022-10-26","cited_by_count":6,"area":null},{"id":"2211.12713","title":"Reliable Robustness Evaluation via Automatically Constructed Attack Ensembles","created":"2022-11-23","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2503.01924","title":"TAET: Two-Stage Adversarial Equalization Training on Long-Tailed Distributions","created":"2025-03-02","cited_by_count":6,"area":null},{"id":"2303.08289","title":"Improving Adversarial Robustness with Hypersphere Embedding and Angular-based Regularizations","created":"2023-03-15","cited_by_count":5,"area":null},{"id":"2410.23142","title":"FAIR-TAT: Improving Model Fairness Using Targeted Adversarial Training","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2210.05118","title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization","created":"2022-10-11","cited_by_count":4,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2110.08042","title":"Adversarial Attacks on ML Defense Models Competition","created":"2021-10-15","cited_by_count":3,"area":null},{"id":"2110.08256","title":"Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness","created":"2021-10-13","cited_by_count":3,"area":null},{"id":"2308.01823","title":"Hard Adversarial Example Mining for Improving Robust Fairness","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2409.12479","title":"Learning Multi-Manifold Embedding for Out-Of-Distribution Detection","created":"2024-09-19","cited_by_count":3,"area":null},{"id":"2411.19853","title":"Towards Class-wise Robustness Analysis","created":"2024-11-29","cited_by_count":3,"area":null},{"id":"2109.04300","title":"Energy Attack: On Transferring Adversarial Examples","created":"2021-09-09","cited_by_count":2,"area":null},{"id":"2201.12527","title":"Scale-Invariant Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2022-01-29","cited_by_count":2,"area":null},{"id":"2303.14922","title":"CAT:Collaborative Adversarial Training","created":"2023-03-27","cited_by_count":2,"area":null},{"id":"2304.09403","title":"Wavelets Beat Monkeys at Adversarial Robustness","created":"2023-04-19","cited_by_count":2,"area":null},{"id":"2307.07167","title":"Vulnerability-Aware Instance Reweighting For Adversarial Training","created":"2023-07-14","cited_by_count":2,"area":null},{"id":"2312.07364","title":"Collapse-Aware Triplet Decoupling for Adversarially Robust Image Retrieval","created":"2023-12-12","cited_by_count":2,"area":null},{"id":"2409.17589","title":"Improving Fast Adversarial Training via Self-Knowledge Guidance","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2411.14424","title":"Learning Fair Robustness via Domain Mixup","created":"2024-11-21","cited_by_count":2,"area":null},{"id":"2502.17003","title":"Information-Geometric Inverse Distillation for Enhancing Adversarial Transferability","created":"2025-02-24","cited_by_count":2,"area":null},{"id":"2104.10377","title":"Dual Head Adversarial Training","created":"2021-04-21","cited_by_count":1,"area":null},{"id":"2210.00062","title":"Learning Robust Kernel Ensembles with Kernel Average Pooling","created":"2022-09-30","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2403.04070","title":"Improving Adversarial Training using Vulnerability-Aware Perturbation Budget","created":"2024-03-06","cited_by_count":1,"area":null},{"id":"2408.13341","title":"Toward Improving Synthetic Audio Spoofing Detection Robustness via Meta-Learning and Disentangled Training With Adversarial Examples","created":"2024-08-23","cited_by_count":1,"area":null},{"id":"2408.13355","title":"Disentangled Training with Adversarial Examples For Robust Small-footprint Keyword Spotting","created":"2024-08-23","cited_by_count":1,"area":null},{"id":"2504.03782","title":"Deep Positive-Negative Prototypes for Adversarially Robust Discriminative Prototypical Learning","created":"2025-04-03","cited_by_count":1,"area":null},{"id":"2507.22428","title":"Theoretical Analysis of Relative Errors in Gradient Computations for Adversarial Attacks with CE Loss","created":"2025-07-30","cited_by_count":1,"area":null},{"id":"2507.22446","title":"RCR-AF: Enhancing Model Generalization via Rademacher Complexity Reduction Activation Function","created":"2025-07-30","cited_by_count":1,"area":null},{"id":"2103.04565","title":"Improving Transformation-based Defenses against Adversarial Examples with First-order Perturbations","created":"2021-03-08","cited_by_count":0,"area":null},{"id":"2105.05029","title":"Adversarial examples attack based on random warm restart mechanism and improved Nesterov momentum","created":"2021-05-10","cited_by_count":0,"area":null},{"id":"2112.00428","title":"Adv-4-Adv: Thwarting Changing Adversarial Perturbations via Adversarial Domain Adaptation","created":"2021-12-01","cited_by_count":0,"area":null},{"id":"2205.02741","title":"CE-based white-box adversarial attacks will not work using super-fitting","created":"2022-05-04","cited_by_count":0,"area":null},{"id":"2205.02743","title":"Rethinking Classifier and Adversarial Attack","created":"2022-05-04","cited_by_count":0,"area":null},{"id":"2206.00924","title":"FACM: Intermediate Layer Still Retain Effective Features against Adversarial Examples","created":"2022-06-02","cited_by_count":0,"area":null},{"id":"2301.09740","title":"DODEM: DOuble DEfense Mechanism Against Adversarial Attacks Towards Secure Industrial Internet of Things Analytics","created":"2023-01-23","cited_by_count":0,"area":null},{"id":"2306.07613","title":"Revisiting and Advancing Adversarial Training Through A Simple Baseline","created":"2023-06-13","cited_by_count":0,"area":null},{"id":"2306.15482","title":"Cooperation or Competition: Avoiding Player Domination for Multi-Target Robustness via Adaptive Budgets","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2404.06313","title":"On adversarial training and the 1 Nearest Neighbor classifier","created":"2024-04-09","cited_by_count":0,"area":null},{"id":"2406.04070","title":"Batch-in-Batch: a new adversarial training framework for initial perturbation and sample selection","created":"2024-06-06","cited_by_count":0,"area":null},{"id":"2412.19947","title":"Standard-Deviation-Inspired Regularization for Improving Adversarial Robustness","created":"2024-12-27","cited_by_count":0,"area":null},{"id":"2506.08611","title":"Towards Class-wise Fair Adversarial Training via Anti-Bias Soft Label Distillation","created":"2025-06-10","cited_by_count":0,"area":null},{"id":"2508.17174","title":"Sharpness-Aware Geometric Defense for Robust Out-Of-Distribution Detection","created":"2025-08-24","cited_by_count":0,"area":null},{"id":"2603.29182","title":"Dummy-Aware Weighted Attack (DAWA): Breaking the Safe Sink in Dummy Class Defenses","created":"2026-03-31","cited_by_count":0,"area":null}],"next_cursor":null}