{"total":73,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64,"area":null},{"id":"2206.08675","title":"Understanding Robust Overfitting of Adversarial Training and Beyond","created":"2022-06-17","cited_by_count":51,"area":null},{"id":"2104.02703","title":"Adversarial Robustness under Long-Tailed Distribution","created":"2021-04-06","cited_by_count":50,"area":null},{"id":"2101.06560","title":"Adversarial Attacks On Multi-Agent Communication","created":"2021-01-17","cited_by_count":49,"area":null},{"id":"2111.09277","title":"SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness","created":"2021-11-17","cited_by_count":49,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2110.05007","title":"Boosting Fast Adversarial Training with Learnable Adversarial Initialization","created":"2021-10-11","cited_by_count":40,"area":null},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2212.10888","title":"A Survey of Mix-based Data Augmentation: Taxonomy, Methods, Applications, and Explainability","created":"2022-12-21","cited_by_count":31,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2106.07085","title":"Survey: Image Mixing and Deleting for Data Augmentation","created":"2021-06-13","cited_by_count":26,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2205.14826","title":"Robust Weight Perturbation for Adversarial Training","created":"2022-05-30","cited_by_count":25,"area":null},{"id":"2101.06639","title":"Removing Undesirable Feature Contributions Using Out-of-Distribution Data","created":"2021-01-17","cited_by_count":23,"area":null},{"id":"2409.05202","title":"A Survey on Mixup Augmentations and Beyond","created":"2024-09-08","cited_by_count":20,"area":null},{"id":"2302.09479","title":"Delving into the Adversarial Robustness of Federated Learning","created":"2023-02-19","cited_by_count":19,"area":null},{"id":"2208.00094","title":"Robust Trajectory Prediction against Adversarial Attacks","created":"2022-07-29","cited_by_count":17,"area":null},{"id":"2203.02006","title":"Why adversarial training can hurt robust accuracy","created":"2022-03-03","cited_by_count":14,"area":null},{"id":"2303.13813","title":"Generalist: Decoupling Natural and Robust Generalization","created":"2023-03-24","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2111.02331","title":"LTD: Low Temperature Distillation for Gradient Masking-free Adversarial Training","created":"2021-11-03","cited_by_count":13,"area":null},{"id":"2306.11035","title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game","created":"2023-06-19","cited_by_count":13,"area":null},{"id":"2403.10073","title":"Revisiting Adversarial Training under Long-Tailed Distributions","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2303.02251","title":"Certified Robust Neural Networks: Generalization and Corruption Resistance","created":"2023-03-03","cited_by_count":11,"area":null},{"id":"2401.12532","title":"DAFA: Distance-Aware Fair Adversarial Training","created":"2024-01-23","cited_by_count":11,"area":null},{"id":"2501.13273","title":"Enhancing Robust Fairness via Confusional Spectral Regularization","created":"2025-01-22","cited_by_count":11,"area":null},{"id":"2107.06456","title":"AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense","created":"2021-07-14","cited_by_count":10,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2401.11618","title":"Efficient local linearity regularization to overcome catastrophic overfitting","created":"2024-01-21","cited_by_count":8,"area":null},{"id":"2103.11589","title":"Adversarially Optimized Mixup for Robust Classification","created":"2021-03-22","cited_by_count":7,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2212.13381","title":"MixupE: Understanding and Improving Mixup from Directional Derivative Perspective","created":"2022-12-27","cited_by_count":6,"area":null},{"id":"2401.14948","title":"Conserve-Update-Revise to Cure Generalization and Robustness Trade-off in Adversarial Training","created":"2024-01-26","cited_by_count":6,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2109.00678","title":"Regional Adversarial Training for Better Robust Generalization","created":"2021-09-02","cited_by_count":4,"area":null},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2109.07177","title":"Adversarial Mixing Policy for Relaxing Locally Linear Constraints in Mixup","created":"2021-09-15","cited_by_count":3,"area":null},{"id":"2203.10693","title":"Leveraging Expert Guided Adversarial Augmentation For Improving Generalization in Named Entity Recognition","created":"2022-03-21","cited_by_count":3,"area":null},{"id":"2211.16806","title":"Toward Robust Diagnosis: A Contour Attention Preserving Adversarial Defense for COVID-19 Detection","created":"2022-11-30","cited_by_count":3,"area":null},{"id":"2204.11837","title":"A Mask-Based Adversarial Defense Scheme","created":"2022-04-21","cited_by_count":2,"area":null},{"id":"2205.07466","title":"Robust Representation via Dynamic Feature Aggregation","created":"2022-05-16","cited_by_count":2,"area":null},{"id":"2206.03717","title":"LADDER: Latent Boundary-guided Adversarial Training","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2305.10293","title":"Infinite Class Mixup","created":"2023-05-17","cited_by_count":2,"area":null},{"id":"2402.11733","title":"The Effectiveness of Random Forgetting for Robust Generalization","created":"2024-02-18","cited_by_count":2,"area":null},{"id":"2412.19354","title":"Federated Hybrid Training and Self-Adversarial Distillation: Towards Robust Edge Networks","created":"2024-12-26","cited_by_count":2,"area":"distill"},{"id":"2510.27249","title":"C-LEAD: Contrastive Learning for Enhanced Adversarial Defense","created":"2025-10-31","cited_by_count":2,"area":null},{"id":"2108.09713","title":"Robustness-via-Synthesis: Robust Training with Generative Adversarial Perturbations","created":"2021-08-22","cited_by_count":1,"area":null},{"id":"2209.14053","title":"Inducing Data Amplification Using Auxiliary Datasets in Adversarial Training","created":"2022-09-27","cited_by_count":1,"area":null},{"id":"2212.14875","title":"Guidance Through Surrogate: Towards a Generic Diagnostic Attack","created":"2022-12-30","cited_by_count":1,"area":null},{"id":"2511.00836","title":"Parameter Interpolation Adversarial Training for Robust Image Classification","created":"2025-11-02","cited_by_count":1,"area":null},{"id":"2112.13989","title":"Associative Adversarial Learning Based on Selective Attack","created":"2021-12-28","cited_by_count":0,"area":null},{"id":"2301.01343","title":"Explainability and Robustness of Deep Visual Classification Models","created":"2023-01-03","cited_by_count":0,"area":null},{"id":"2302.08066","title":"Masking and Mixing Adversarial Training","created":"2023-02-16","cited_by_count":0,"area":null},{"id":"2307.07417","title":"RoPDA: Robust Prompt-based Data Augmentation for Low-Resource Named Entity Recognition","created":"2023-07-11","cited_by_count":0,"area":null},{"id":"2310.05947","title":"Robust and Efficient Interference Neural Networks for Defending Against Adversarial Attacks in ImageNet","created":"2023-09-03","cited_by_count":0,"area":null},{"id":"2310.14561","title":"F$^2$AT: Feature-Focusing Adversarial Training via Disentanglement of Natural and Perturbed Patterns","created":"2023-10-23","cited_by_count":0,"area":null},{"id":"2502.12418","title":"Boosting Illuminant Estimation in Deep Color Constancy through Enhancing Brightness Robustness","created":"2025-02-18","cited_by_count":0,"area":null},{"id":"2504.00038","title":"Revisiting the Relationship between Adversarial and Clean Training: Why Clean Training Can Make Adversarial Training Better","created":"2025-03-30","cited_by_count":0,"area":null},{"id":"2509.12939","title":"Sy-FAR: Symmetry-based Fair Adversarial Robustness","created":"2025-09-16","cited_by_count":0,"area":null},{"id":"2603.01264","title":"S2O: Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2026-03-01","cited_by_count":0,"area":null}],"next_cursor":null}