{"total":26,"rows":[{"id":"2110.02180","title":"Noisy Feature Mixup","created":"2021-10-05","cited_by_count":27,"area":null},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24,"area":null},{"id":"2202.02842","title":"Evaluating natural language processing models with generalization metrics that do not need access to any training or testing data","created":"2022-02-06","cited_by_count":19,"area":null},{"id":"2206.09355","title":"A Unified Understanding of Deep NLP Models for Text Classification","created":"2022-06-19","cited_by_count":18,"area":null},{"id":"2306.06788","title":"Graph Mixup with Soft Alignments","created":"2023-06-11","cited_by_count":15,"area":null},{"id":"2306.08805","title":"Exact Count of Boundary Pieces of ReLU Classifiers: Towards the Proper Complexity Measure for Classification","created":"2023-06-15","cited_by_count":11,"area":null},{"id":"2210.05742","title":"Curved Representation Space of Vision Transformers","created":"2022-10-11","cited_by_count":8,"area":null},{"id":"2107.10302","title":"Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks","created":"2021-07-11","cited_by_count":5,"area":null},{"id":"2301.13869","title":"Reverse engineering adversarial attacks with fingerprints from adversarial examples","created":"2023-01-31","cited_by_count":4,"area":null},{"id":"2308.15466","title":"Input margins can predict generalization too","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2108.11135","title":"Bridged Adversarial Training","created":"2021-08-25","cited_by_count":3,"area":null},{"id":"2602.20418","title":"CITED: A Decision Boundary-Aware Signature for GNNs Towards Model Extraction Defense","created":"2026-02-23","cited_by_count":3,"area":null},{"id":"2106.15360","title":"Attack Transferability Characterization for Adversarially Robust Multi-label Classification","created":"2021-06-29","cited_by_count":2,"area":null},{"id":"2302.14059","title":"Scalable Attribution of Adversarial Attacks via Multi-Task Learning","created":"2023-02-25","cited_by_count":2,"area":null},{"id":"2207.03400","title":"On the Relationship Between Adversarial Robustness and Decision Region in Deep Neural Networks","created":"2022-07-07","cited_by_count":1,"area":null},{"id":"2212.14106","title":"Provable Robust Saliency-based Explanations","created":"2022-12-28","cited_by_count":1,"area":null},{"id":"2310.03927","title":"Improving classifier decision boundaries using nearest neighbors","created":"2023-10-05","cited_by_count":1,"area":null},{"id":"2410.18556","title":"Complexity Matters: Effective Dimensionality as a Measure for Adversarial Robustness","created":"2024-10-24","cited_by_count":1,"area":null},{"id":"2504.18556","title":"RDI: An adversarial robustness evaluation metric for deep neural networks based on model statistical features","created":"2025-04-16","cited_by_count":1,"area":null},{"id":"2505.24592","title":"A Flat Minima Perspective on Understanding Augmentations and Model Robustness","created":"2025-05-30","cited_by_count":1,"area":null},{"id":"2107.07564","title":"On the Importance of Regularisation & Auxiliary Information in OOD Detection","created":"2021-07-15","cited_by_count":0,"area":null},{"id":"2205.00637","title":"Enhancing Adversarial Training with Feature Separability","created":"2022-05-02","cited_by_count":0,"area":null},{"id":"2307.04024","title":"Robust Ranking Explanations","created":"2023-07-08","cited_by_count":0,"area":null},{"id":"2601.14505","title":"Uncovering and Understanding FPR Manipulation Attack in Industrial IoT Networks","created":"2026-01-20","cited_by_count":0,"area":null},{"id":"2603.14768","title":"Understanding the geometry of deep learning with decision boundary volume","created":"2026-03-16","cited_by_count":0,"area":null},{"id":"2608.06712","title":"Suppress and Diversify: Refining Robust Pathways for Corruption Robustness","created":"2026-08-07","cited_by_count":0,"area":null}],"next_cursor":null}