{"total":153,"rows":[{"id":"2206.08496","title":"Self-Supervised Contrastive Pre-Training For Time Series via Time-Frequency Consistency","created":"2022-06-17","cited_by_count":250,"area":null},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2301.05712","title":"A Survey on Self-supervised Learning: Algorithms, Applications, and Future Trends","created":"2023-01-13","cited_by_count":207,"area":null},{"id":"2102.06203","title":"Proof Artifact Co-training for Theorem Proving with Language Models","created":"2021-02-11","cited_by_count":132,"area":"offlinerl"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2105.13381","title":"Recent advances and clinical applications of deep learning in medical image analysis","created":"2021-05-27","cited_by_count":104,"area":null},{"id":"2106.09249","title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks","created":"2021-06-17","cited_by_count":101,"area":"driving"},{"id":"2110.13771","title":"AugMax: Adversarial Composition of Random Augmentations for Robust Training","created":"2021-10-26","cited_by_count":90,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77,"area":null},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2206.11488","title":"On the Importance and Applicability of Pre-Training for Federated Learning","created":"2022-06-23","cited_by_count":71,"area":null},{"id":"2103.16201","title":"MT3: Meta Test-Time Training for Self-Supervised Test-Time Adaption","created":"2021-03-30","cited_by_count":65,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2106.04928","title":"Reliable Adversarial Distillation with Unreliable Teachers","created":"2021-06-09","cited_by_count":56,"area":"distill"},{"id":"2403.01849","title":"One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models","created":"2024-03-04","cited_by_count":48,"area":"mllm"},{"id":"2101.09387","title":"Online Adversarial Purification based on Self-Supervision","created":"2021-01-23","cited_by_count":46,"area":null},{"id":"2406.12934","title":"Current state of LLM Risks and AI Guardrails","created":"2024-06-16","cited_by_count":46,"area":"safety"},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2111.10659","title":"Are Vision Transformers Robust to Patch Perturbations?","created":"2021-11-20","cited_by_count":39,"area":null},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39,"area":null},{"id":"2109.11926","title":"Sinkhorn Distributionally Robust Optimization","created":"2021-09-24","cited_by_count":38,"area":null},{"id":"2210.06284","title":"Visual Prompting for Adversarial Robustness","created":"2022-10-12","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2102.10454","title":"On Fast Adversarial Robustness Adaptation in Model-Agnostic Meta-Learning","created":"2021-02-20","cited_by_count":29,"area":null},{"id":"2404.19287","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","created":"2024-04-30","cited_by_count":28,"area":"mllm"},{"id":"2107.14110","title":"Enhancing Adversarial Robustness via Test-time Transformation Ensembling","created":"2021-07-29","cited_by_count":27,"area":null},{"id":"2103.00397","title":"Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket Perspective","created":"2021-02-28","cited_by_count":25,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24,"area":null},{"id":"2204.00616","title":"Simplicial Embeddings in Self-Supervised Learning and Downstream Classification","created":"2022-04-01","cited_by_count":24,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2301.13096","title":"Language-Driven Anchors for Zero-Shot Adversarial Robustness","created":"2023-01-30","cited_by_count":23,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2203.15331","title":"CNN Filter DB: An Empirical Investigation of Trained Convolutional Filters","created":"2022-03-29","cited_by_count":20,"area":null},{"id":"2207.10899","title":"Decoupled Adversarial Contrastive Learning for Self-supervised Adversarial Robustness","created":"2022-07-22","cited_by_count":20,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2303.11135","title":"TWINS: A Fine-Tuning Framework for Improved Transferability of Adversarial Robustness and Generalization","created":"2023-03-20","cited_by_count":18,"area":null},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17,"area":null},{"id":"2206.05259","title":"Is Self-Supervised Learning More Robust Than Supervised Learning?","created":"2022-06-10","cited_by_count":17,"area":null},{"id":"2106.00273","title":"Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learning","created":"2021-06-01","cited_by_count":16,"area":null},{"id":"2110.12072","title":"How and When Adversarial Robustness Transfers in Knowledge Distillation?","created":"2021-10-22","cited_by_count":16,"area":"distill"},{"id":"2210.03372","title":"Pre-trained Adversarial Perturbations","created":"2022-10-07","cited_by_count":16,"area":null},{"id":"2210.13604","title":"The Robustness Limits of SoTA Vision Models to Natural Variation","created":"2022-10-24","cited_by_count":15,"area":null},{"id":"2302.01409","title":"Hyperbolic Contrastive Learning","created":"2023-02-02","cited_by_count":15,"area":null},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2301.05852","title":"CrysGNN : Distilling pre-trained knowledge to enhance property prediction for crystalline materials","created":"2023-01-14","cited_by_count":14,"area":null},{"id":"2108.07183","title":"Improving Self-supervised Learning with Hardness-aware Dynamic Curriculum Learning: An Application to Digital Pathology","created":"2021-08-16","cited_by_count":13,"area":null},{"id":"2204.02553","title":"RODD: A Self-Supervised Approach for Robust Out-of-Distribution Detection","created":"2022-04-06","cited_by_count":13,"area":null},{"id":"2207.08374","title":"Adversarial Contrastive Learning via Asymmetric InfoNCE","created":"2022-07-18","cited_by_count":13,"area":null},{"id":"2302.12480","title":"Robust Weight Signatures: Gaining Robustness as Easy as Patching Weights?","created":"2023-02-24","cited_by_count":13,"area":null},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12,"area":"mllm"},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2201.09650","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","created":"2022-01-24","cited_by_count":11,"area":null},{"id":"2206.09628","title":"Diversified Adversarial Attacks based on Conjugate Gradient Method","created":"2022-06-20","cited_by_count":11,"area":null},{"id":"2207.05641","title":"Backdoor Attacks on Crowd Counting","created":"2022-07-12","cited_by_count":10,"area":null},{"id":"2312.05716","title":"Initialization Matters for Adversarial Transfer Learning","created":"2023-12-10","cited_by_count":10,"area":null},{"id":"2401.08139","title":"Transferring Core Knowledge via Learngenes","created":"2024-01-16","cited_by_count":10,"area":null},{"id":"2204.02481","title":"Adversarial Robustness through the Lens of Convolutional Filters","created":"2022-04-05","cited_by_count":9,"area":null},{"id":"2104.11101","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","created":"2021-04-22","cited_by_count":8,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2205.08731","title":"TTAPS: Test-Time Adaption by Aligning Prototypes using Self-Supervision","created":"2022-05-18","cited_by_count":8,"area":null},{"id":"2303.02602","title":"DPA-P2PNet: Deformable Proposal-aware P2PNet for Accurate Point-based Cell Detection","created":"2023-03-05","cited_by_count":8,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2304.08479","title":"Towards Robust Prompts on Vision-Language Models","created":"2023-04-17","cited_by_count":7,"area":"mllm"},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2403.02571","title":"DPAdapter: Improving Differentially Private Deep Learning through Noise Tolerance Pre-training","created":"2024-03-05","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2208.03835","title":"On Transfer of Adversarial Robustness from Pretraining to Downstream Tasks","created":"2022-08-07","cited_by_count":6,"area":null},{"id":"2306.13091","title":"Evading Forensic Classifiers with Attribute-Conditioned Adversarial Faces","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2512.08967","title":"CluCERT: Certifying LLM Robustness via Clustering-Guided Denoising Smoothing","created":"2025-12-01","cited_by_count":6,"area":"safety"},{"id":"2106.13497","title":"On the Robustness of Pretraining and Self-Supervision for a Deep Learning-based Analysis of Diabetic Retinopathy","created":"2021-06-25","cited_by_count":5,"area":null},{"id":"2206.04762","title":"Data-Efficient Double-Win Lottery Tickets from Robust Pre-training","created":"2022-06-09","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2104.10376","title":"Towards Corruption-Agnostic Robust Domain Adaptation","created":"2021-04-21","cited_by_count":4,"area":null},{"id":"2109.08191","title":"Simple Post-Training Robustness Using Test Time Augmentations and Random Forest","created":"2021-09-16","cited_by_count":4,"area":null},{"id":"2202.06996","title":"Unlabeled Data Help: Minimax Analysis and Adversarial Robustness","created":"2022-02-14","cited_by_count":4,"area":null},{"id":"2205.10933","title":"AutoJoin: Efficient Adversarial Training against Gradient-Free Perturbations for Robust Maneuvering via Denoising Autoencoder and Joint Learning","created":"2022-05-22","cited_by_count":4,"area":null},{"id":"2206.07842","title":"Queried Unlabeled Data Improves and Robustifies Class-Incremental Learning","created":"2022-06-15","cited_by_count":4,"area":null},{"id":"2207.04185","title":"Domain Alignment Meets Fully Test-Time Adaptation","created":"2022-07-09","cited_by_count":4,"area":null},{"id":"2302.02907","title":"GAT: Guided Adversarial Training with Pareto-optimal Auxiliary Tasks","created":"2023-02-06","cited_by_count":4,"area":null},{"id":"2303.00250","title":"Combating Exacerbated Heterogeneity for Robust Models in Federated Learning","created":"2023-03-01","cited_by_count":4,"area":null},{"id":"2103.15385","title":"Lagrangian Objective Function Leads to Improved Unforeseen Attack Generalization in Adversarial Training","created":"2021-03-29","cited_by_count":3,"area":null},{"id":"2110.08042","title":"Adversarial Attacks on ML Defense Models Competition","created":"2021-10-15","cited_by_count":3,"area":null},{"id":"2110.08256","title":"Model-Agnostic Meta-Attack: Towards Reliable Evaluation of Adversarial Robustness","created":"2021-10-13","cited_by_count":3,"area":null},{"id":"2301.02905","title":"REaaS: Enabling Adversarially Robust Downstream Classifiers via Robust Encoder as a Service","created":"2023-01-07","cited_by_count":3,"area":null},{"id":"2306.12070","title":"Task-Robust Pre-Training for Worst-Case Downstream Adaptation","created":"2023-06-21","cited_by_count":3,"area":null},{"id":"2408.03627","title":"Weakly Contrastive Learning via Batch Instance Discrimination and Feature Clustering for Small Sample SAR ATR","created":"2024-08-07","cited_by_count":3,"area":null},{"id":"2411.19853","title":"Towards Class-wise Robustness Analysis","created":"2024-11-29","cited_by_count":3,"area":null},{"id":"2503.14836","title":"On the Robustness Tradeoff in Fine-Tuning","created":"2025-03-19","cited_by_count":3,"area":null},{"id":"2111.14726","title":"Do Invariances in Deep Neural Networks Align with Human Perception?","created":"2021-11-29","cited_by_count":2,"area":null},{"id":"2112.13408","title":"Perlin Noise Improve Adversarial Robustness","created":"2021-12-26","cited_by_count":2,"area":null},{"id":"2202.02601","title":"Exemplar-Based Contrastive Self-Supervised Learning with Few-Shot Class Incremental Learning","created":"2022-02-05","cited_by_count":2,"area":null}],"next_cursor":"100"}