{"total":1451,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2310.11868","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","created":"2023-10-18","cited_by_count":210,"area":"diffusion"},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193,"area":null},{"id":"2111.05464","title":"Are Transformers More Robust Than CNNs?","created":"2021-11-10","cited_by_count":187,"area":null},{"id":"2405.15234","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","created":"2024-05-24","cited_by_count":168,"area":"diffusion"},{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167,"area":null},{"id":"2308.10741","title":"On the Adversarial Robustness of Multi-Modal Foundation Models","created":"2023-08-21","cited_by_count":145,"area":"safety"},{"id":"2406.13352","title":"AgentDojo: A Dynamic Environment to Evaluate Prompt Injection Attacks and Defenses for LLM Agents","created":"2024-06-19","cited_by_count":145,"area":"agents"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2303.15433","title":"Anti-DreamBooth: Protecting users from personalized text-to-image synthesis","created":"2023-03-27","cited_by_count":120,"area":"diffusion"},{"id":"2402.12336","title":"Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models","created":"2024-02-19","cited_by_count":120,"area":"mllm"},{"id":"2212.07016","title":"Understanding Zero-Shot Adversarial Robustness for Large-Scale Models","created":"2022-12-14","cited_by_count":117,"area":"mllm"},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2103.15670","title":"On the Adversarial Robustness of Vision Transformers","created":"2021-03-29","cited_by_count":106,"area":null},{"id":"2104.07167","title":"Orthogonalizing Convolutional Layers with the Cayley Transform","created":"2021-04-14","cited_by_count":105,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2302.07011","title":"A Modern Look at the Relationship between Sharpness and Generalization","created":"2023-02-14","cited_by_count":92,"area":null},{"id":"2312.03777","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","created":"2023-12-06","cited_by_count":92,"area":"mllm"},{"id":"2110.12976","title":"Stable Neural ODE with Lyapunov-Stable Equilibrium Points for Defending Against Adversarial Attacks","created":"2021-10-25","cited_by_count":91,"area":null},{"id":"2201.05057","title":"On Adversarial Robustness of Trajectory Prediction for Autonomous Vehicles","created":"2022-01-13","cited_by_count":90,"area":null},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2201.12296","title":"Benchmarking Robustness of 3D Point Cloud Recognition Against Common Corruptions","created":"2022-01-28","cited_by_count":80,"area":null},{"id":"2108.07969","title":"Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better","created":"2021-08-18","cited_by_count":79,"area":"distill"},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76,"area":null},{"id":"2303.16378","title":"A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion","created":"2023-03-29","cited_by_count":76,"area":"diffusion"},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71,"area":null},{"id":"2106.04169","title":"On Improving Adversarial Transferability of Vision Transformers","created":"2021-06-08","cited_by_count":70,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64,"area":null},{"id":"2210.07540","title":"When Adversarial Training Meets Vision Transformers: Recipes from Training to Architecture","created":"2022-10-14","cited_by_count":64,"area":null},{"id":"2110.12690","title":"A Dynamical System Perspective for Lipschitz Neural Networks","created":"2021-10-25","cited_by_count":60,"area":null},{"id":"2303.03169","title":"A Unified Algebraic Perspective on Lipschitz Neural Networks","created":"2023-03-06","cited_by_count":60,"area":null},{"id":"2305.13948","title":"Decoupled Kullback-Leibler Divergence Loss","created":"2023-05-23","cited_by_count":58,"area":"distill"},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2105.10872","title":"CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes","created":"2021-05-23","cited_by_count":56,"area":"safety"},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2207.09239","title":"Assaying Out-Of-Distribution Generalization in Transfer Learning","created":"2022-07-19","cited_by_count":53,"area":null},{"id":"2303.14460","title":"CFA: Class-wise Calibrated Fair Adversarial Training","created":"2023-03-25","cited_by_count":53,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2206.08675","title":"Understanding Robust Overfitting of Adversarial Training and Beyond","created":"2022-06-17","cited_by_count":51,"area":null},{"id":"2301.11526","title":"Direct Parameterization of Lipschitz-Bounded Deep Networks","created":"2023-01-27","cited_by_count":51,"area":null},{"id":"2402.15555","title":"Deep Networks Always Grok and Here is Why","created":"2024-02-23","cited_by_count":51,"area":null},{"id":"2102.12827","title":"Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints","created":"2021-02-25","cited_by_count":50,"area":null},{"id":"2104.02703","title":"Adversarial Robustness under Long-Tailed Distribution","created":"2021-04-06","cited_by_count":50,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2310.19737","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","created":"2023-10-30","cited_by_count":49,"area":null},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2203.16931","title":"Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyond","created":"2022-03-31","cited_by_count":48,"area":null},{"id":"2401.04350","title":"Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness","created":"2024-01-09","cited_by_count":48,"area":"mllm"},{"id":"2403.01849","title":"One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models","created":"2024-03-04","cited_by_count":48,"area":"mllm"},{"id":"2411.16721","title":"Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks","created":"2024-11-23","cited_by_count":48,"area":"mllm"},{"id":"2103.14222","title":"Adversarial Attacks are Reversible with Natural Supervision","created":"2021-03-26","cited_by_count":47,"area":null},{"id":"2303.09962","title":"Adversarial Counterfactual Visual Explanations","created":"2023-03-17","cited_by_count":47,"area":"diffusion"},{"id":"2311.00500","title":"Intriguing Properties of Data Attribution on Diffusion Models","created":"2023-11-01","cited_by_count":47,"area":"diffusion"},{"id":"2307.12499","title":"AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models","created":"2023-07-24","cited_by_count":46,"area":"diffusion"},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2108.05149","title":"Logic Explained Networks","created":"2021-08-11","cited_by_count":45,"area":null},{"id":"2103.14021","title":"Orthogonal Projection Loss","created":"2021-03-25","cited_by_count":44,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44,"area":null},{"id":"2311.11261","title":"Adversarial Prompt Tuning for Vision-Language Models","created":"2023-11-19","cited_by_count":44,"area":"mllm"},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43,"area":null},{"id":"2210.15318","title":"Efficient and Effective Augmentation Strategy for Adversarial Training","created":"2022-10-27","cited_by_count":43,"area":null},{"id":"2301.09879","title":"Data Augmentation Alone Can Improve Adversarial Training","created":"2023-01-24","cited_by_count":43,"area":null},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2212.04871","title":"Spurious Features Everywhere -- Large-Scale Detection of Harmful Spurious Features in ImageNet","created":"2022-12-09","cited_by_count":41,"area":null},{"id":"2308.00788","title":"An Introduction to Bi-level Optimization: Foundations and Applications in Signal Processing and Machine Learning","created":"2023-08-01","cited_by_count":41,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"}],"next_cursor":"100"}