{"total":35,"rows":[{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55,"area":null},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24,"area":null},{"id":"2206.03985","title":"How unfair is private learning ?","created":"2022-06-08","cited_by_count":18,"area":null},{"id":"2108.02883","title":"Interpolation can hurt robust generalization even when there is no noise","created":"2021-08-05","cited_by_count":15,"area":null},{"id":"2203.02006","title":"Why adversarial training can hurt robust accuracy","created":"2022-03-03","cited_by_count":14,"area":null},{"id":"2210.14019","title":"The Curious Case of Benign Memorization","created":"2022-10-25","cited_by_count":12,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2112.15250","title":"Benign Overfitting in Adversarially Robust Linear Classification","created":"2021-12-31","cited_by_count":11,"area":null},{"id":"2203.11864","title":"On the (Non-)Robustness of Two-Layer Neural Networks in Different Learning Regimes","created":"2022-03-22","cited_by_count":11,"area":null},{"id":"2309.04268","title":"Optimal Rate of Kernel Regression in Large Dimensions","created":"2023-09-08","cited_by_count":11,"area":null},{"id":"2301.07605","title":"Strong inductive biases provably prevent harmless interpolation","created":"2023-01-18","cited_by_count":10,"area":null},{"id":"2309.05145","title":"Outlier Robust Adversarial Training","created":"2023-09-10","cited_by_count":10,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2406.19049","title":"Accuracy on the wrong line: On the pitfalls of noisy data for out-of-distribution generalisation","created":"2024-06-27","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2207.03933","title":"A law of adversarial risk, interpolation, and label noise","created":"2022-07-08","cited_by_count":8,"area":null},{"id":"2207.10283","title":"One-vs-the-Rest Loss to Focus on Important Samples in Adversarial Training","created":"2022-07-21","cited_by_count":7,"area":null},{"id":"2210.11513","title":"Learning Sample Reweighting for Accuracy and Adversarial Robustness","created":"2022-10-20","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2102.12192","title":"Multiplicative Reweighting for Robust Neural Network Optimization","created":"2021-02-24","cited_by_count":4,"area":null},{"id":"2211.00269","title":"Adversarial Training with Complementary Labels: On the Benefit of Gradually Informative Attacks","created":"2022-11-01","cited_by_count":4,"area":null},{"id":"2303.00250","title":"Combating Exacerbated Heterogeneity for Robust Models in Federated Learning","created":"2023-03-01","cited_by_count":4,"area":null},{"id":"2311.05379","title":"Memorisation Cartography: Mapping out the Memorisation-Generalisation Continuum in Neural Machine Translation","created":"2023-11-09","cited_by_count":4,"area":null},{"id":"2510.17526","title":"How Does Label Noise Gradient Descent Improve Generalization in the Low SNR Regime?","created":"2025-10-20","cited_by_count":4,"area":null},{"id":"2106.04794","title":"Towards the Memorization Effect of Neural Networks in Adversarial Training","created":"2021-06-09","cited_by_count":3,"area":null},{"id":"2108.11135","title":"Bridged Adversarial Training","created":"2021-08-25","cited_by_count":3,"area":null},{"id":"2206.05530","title":"Memorization-Dilation: Modeling Neural Collapse Under Label Noise","created":"2022-06-11","cited_by_count":2,"area":null},{"id":"2206.08242","title":"Catastrophic overfitting can be induced with discriminative non-robust features","created":"2022-06-16","cited_by_count":2,"area":null},{"id":"2412.00789","title":"A Cognac Shot To Forget Bad Memories: Corrective Unlearning for Graph Neural Networks","created":"2024-12-01","cited_by_count":2,"area":null},{"id":"2202.11817","title":"Benefit of Interpolation in Nearest Neighbor Algorithms","created":"2022-02-23","cited_by_count":1,"area":null},{"id":"2206.01444","title":"XPASC: Measuring Generalization in Weak Supervision by Explainability and Association","created":"2022-06-03","cited_by_count":1,"area":null},{"id":"2305.09904","title":"On the ISS Property of the Gradient Flow for Single Hidden-Layer Neural Networks with Linear Activations","created":"2023-05-17","cited_by_count":1,"area":null},{"id":"2601.16070","title":"On damage of interpolation to adversarial robustness in regression","created":"2026-01-22","cited_by_count":1,"area":null},{"id":"2211.00748","title":"Maximum Likelihood Distillation for Robust Modulation Classification","created":"2022-11-01","cited_by_count":0,"area":null}],"next_cursor":null}