{"total":38,"rows":[{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67,"area":null},{"id":"2108.04062","title":"Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100","created":"2021-08-05","cited_by_count":47,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38,"area":null},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2209.07592","title":"Explicit Tradeoffs between Adversarial and Natural Distributional Robustness","created":"2022-09-15","cited_by_count":20,"area":null},{"id":"2206.07144","title":"Efficiently Training Low-Curvature Neural Networks","created":"2022-06-14","cited_by_count":19,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2210.14283","title":"Accelerating Certified Robustness Training via Knowledge Transfer","created":"2022-10-25","cited_by_count":7,"area":null},{"id":"2404.18791","title":"Certification of Speaker Recognition Models to Additive Perturbations","created":"2024-04-29","cited_by_count":6,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2412.17432","title":"Neural Continuous-Time Supermartingale Certificates","created":"2024-12-23","cited_by_count":5,"area":null},{"id":"2103.00778","title":"Explaining Adversarial Vulnerability with a Data Sparsity Hypothesis","created":"2021-03-01","cited_by_count":4,"area":null},{"id":"2406.05119","title":"Compositional Curvature Bounds for Deep Neural Networks","created":"2024-06-07","cited_by_count":4,"area":null},{"id":"2406.04476","title":"Provable Bounds on the Hessian of Neural Networks: Derivative-Preserving Reachability Analysis","created":"2024-06-06","cited_by_count":3,"area":null},{"id":"2306.11915","title":"Structure-Aware Robustness Certificates for Graph Classification","created":"2023-06-20","cited_by_count":2,"area":null},{"id":"2310.19889","title":"Exploring Geometry of Blind Spots in Vision Models","created":"2023-10-30","cited_by_count":2,"area":null},{"id":"2303.16308","title":"Provable Robustness for Streaming Models with a Sliding Window","created":"2023-03-28","cited_by_count":1,"area":null},{"id":"2409.04208","title":"Learning to Learn Transferable Generative Attack for Person Re-Identification","created":"2024-09-06","cited_by_count":1,"area":null},{"id":"2507.09881","title":"Counterfactual Visual Explanation via Causally-Guided Adversarial Steering","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2601.04991","title":"Higher-Order Adversarial Patches for Real-Time Object Detectors","created":"2026-01-08","cited_by_count":1,"area":null},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2203.08945","title":"Provable Adversarial Robustness for Fractional Lp Threat Models","created":"2022-03-16","cited_by_count":0,"area":null},{"id":"2309.09464","title":"Reducing Adversarial Training Cost with Gradient Approximation","created":"2023-09-18","cited_by_count":0,"area":null},{"id":"2309.16710","title":"General Lipschitz: Certified Robustness Against Resolvable Semantic Transformations via Transformation-Dependent Randomized Smoothing","created":"2023-08-17","cited_by_count":0,"area":null},{"id":"2403.16405","title":"Ensemble Adversarial Defense via Integration of Multiple Dispersed Low Curvature Models","created":"2024-03-25","cited_by_count":0,"area":null},{"id":"2603.06431","title":"Certified and accurate computation of function space norms of deep neural networks","created":"2026-03-06","cited_by_count":0,"area":null},{"id":"2606.00738","title":"SORA: Free Second-Order Attacks in Fast Adversarial Training","created":"2026-05-30","cited_by_count":0,"area":null},{"id":"2607.07845","title":"Explaining Near-Zero Hessian Eigenvalues Through Approximate Symmetries in Neural Networks","created":"2026-07-08","cited_by_count":0,"area":null}],"next_cursor":null}