{"total":30,"rows":[{"id":"2102.04509","title":"Oops I Took A Gradient: Scalable Sampling for Discrete Distributions","created":"2021-02-08","cited_by_count":92,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2203.14952","title":"Energy-based Latent Aligner for Incremental Learning","created":"2022-03-28","cited_by_count":37,"area":null},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20,"area":null},{"id":"2209.07959","title":"Towards Bridging the Performance Gaps of Joint Energy-based Models","created":"2022-09-16","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2210.16486","title":"Learning Probabilistic Models from Generator Latent Spaces with Hat EBM","created":"2022-10-29","cited_by_count":11,"area":null},{"id":"2203.04713","title":"Defending Black-box Skeleton-based Human Activity Classifiers","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2505.01267","title":"Diffusion-based Adversarial Purification from the Perspective of the Frequency Domain","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2302.01056","title":"Beyond Pretrained Features: Noisy Image Modeling Provides Adversarial Defense","created":"2023-02-02","cited_by_count":7,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2403.11448","title":"Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM","created":"2024-03-18","cited_by_count":6,"area":null},{"id":"2303.15409","title":"Class-Conditioned Transformation for Enhanced Robust Image Classification","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2506.06027","title":"Sample-Specific Noise Injection For Diffusion-Based Adversarial Purification","created":"2025-06-06","cited_by_count":2,"area":null},{"id":"2309.10348","title":"Language Guided Adversarial Purification","created":"2023-09-19","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2406.03143","title":"ZeroPur: Succinct Training-Free Adversarial Purification","created":"2024-06-05","cited_by_count":1,"area":null},{"id":"2406.08829","title":"Improving Adversarial Robustness via Feature Pattern Consistency Constraint","created":"2024-06-13","cited_by_count":1,"area":null},{"id":"2410.16805","title":"Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost","created":"2024-10-22","cited_by_count":1,"area":null},{"id":"2512.21019","title":"Efficient and Robust Video Defense Framework against 3D-field Personalized Talking Face","created":"2025-12-24","cited_by_count":1,"area":null},{"id":"2205.12243","title":"EBM Life Cycle: MCMC Strategies for Synthesis, Defense, and Density Modeling","created":"2022-05-24","cited_by_count":0,"area":null},{"id":"2306.06081","title":"Blending adversarial training and representation-conditional purification via aggregation improves adversarial robustness","created":"2023-05-25","cited_by_count":0,"area":null},{"id":"2308.15072","title":"Advancing Adversarial Robustness Through Adversarial Logit Update","created":"2023-08-29","cited_by_count":0,"area":null},{"id":"2605.06357","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","created":"2026-05-07","cited_by_count":0,"area":null}],"next_cursor":null}