{"total":43,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2102.11436","title":"Model-Based Domain Generalization","created":"2021-02-23","cited_by_count":104,"area":null},{"id":"2103.16440","title":"Neural Transformation Learning for Deep Anomaly Detection Beyond Images","created":"2021-03-30","cited_by_count":99,"area":null},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71,"area":null},{"id":"2208.08831","title":"Discovering Bugs in Vision Models using Off-the-shelf Image Generation and Captioning","created":"2022-08-18","cited_by_count":45,"area":null},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39,"area":null},{"id":"2106.05937","title":"Fair Normalizing Flows","created":"2021-06-10","cited_by_count":38,"area":null},{"id":"2202.01136","title":"Probabilistically Robust Learning: Balancing Average- and Worst-case Performance","created":"2022-02-02","cited_by_count":37,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2104.01086","title":"Defending Against Image Corruptions Through Adversarial Augmentations","created":"2021-04-02","cited_by_count":28,"area":null},{"id":"2110.03605","title":"Robust Feature-Level Adversaries are Interpretability Tools","created":"2021-10-07","cited_by_count":27,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2111.13650","title":"Latent Space Smoothing for Individually Fair Representations","created":"2021-11-26","cited_by_count":18,"area":null},{"id":"2102.12002","title":"Adversarial Robustness with Non-uniform Perturbations","created":"2021-02-24","cited_by_count":17,"area":null},{"id":"2107.06353","title":"Distributionally Robust Policy Learning via Adversarial Environment Generation","created":"2021-07-13","cited_by_count":17,"area":null},{"id":"2206.03669","title":"Toward Certified Robustness Against Real-World Distribution Shifts","created":"2022-06-08","cited_by_count":16,"area":null},{"id":"2206.07736","title":"Improving Diversity with Adversarially Learned Transformations for Domain Generalization","created":"2022-06-15","cited_by_count":16,"area":null},{"id":"2201.01102","title":"Towards Transferable Unrestricted Adversarial Examples with Minimum Changes","created":"2022-01-04","cited_by_count":13,"area":null},{"id":"2203.09739","title":"Do Deep Networks Transfer Invariances Across Classes?","created":"2022-03-18","cited_by_count":12,"area":null},{"id":"2405.00256","title":"ASAM: Boosting Segment Anything Model with Adversarial Tuning","created":"2024-05-01","cited_by_count":12,"area":null},{"id":"2506.06665","title":"SDP-CROWN: Efficient Bound Propagation for Neural Network Verification with Tightness of Semidefinite Programming","created":"2025-06-07","cited_by_count":12,"area":null},{"id":"2103.14824","title":"Improving Model Robustness by Adaptively Correcting Perturbation Levels with Active Queries","created":"2021-03-27","cited_by_count":9,"area":null},{"id":"2110.07165","title":"Semantically Distributed Robust Optimization for Vision-and-Language Inference","created":"2021-10-14","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2210.11242","title":"Attacking Motion Estimation with Adversarial Snow","created":"2022-10-20","cited_by_count":9,"area":null},{"id":"2210.15614","title":"Private and Reliable Neural Network Inference","created":"2022-10-27","cited_by_count":7,"area":null},{"id":"2108.07958","title":"Semantic Perturbations with Normalizing Flows for Improved Generalization","created":"2021-08-18","cited_by_count":6,"area":null},{"id":"2109.12456","title":"Auditing AI models for Verified Deployment under Semantic Specifications","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2502.04248","title":"Adapting to Evolving Adversaries with Regularized Continual Robust Training","created":"2025-02-06","cited_by_count":2,"area":null},{"id":"2106.09222","title":"Localized Uncertainty Attacks","created":"2021-06-17","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2402.06827","title":"RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations for Universal Robustness","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2405.01349","title":"Position: Towards Resilience Against Adversarial Examples","created":"2024-05-02","cited_by_count":1,"area":null},{"id":"2102.07360","title":"Generating Structured Adversarial Attacks Using Frank-Wolfe Method","created":"2021-02-15","cited_by_count":0,"area":null},{"id":"2107.09391","title":"Built-in Elastic Transformations for Improved Robustness","created":"2021-07-20","cited_by_count":0,"area":null},{"id":"2111.09779","title":"Wiggling Weights to Improve the Robustness of Classifiers","created":"2021-11-18","cited_by_count":0,"area":null},{"id":"2306.02639","title":"Evaluating robustness of support vector machines with the Lagrangian dual approach","created":"2023-06-05","cited_by_count":0,"area":null},{"id":"2310.10264","title":"Towards Open-World Co-Salient Object Detection with Generative Uncertainty-aware Group Selective Exchange-Masking","created":"2023-10-16","cited_by_count":0,"area":null},{"id":"2512.03014","title":"Instant Video Models: Universal Adapters for Stabilizing Image-Based Networks","created":"2025-12-02","cited_by_count":0,"area":null}],"next_cursor":null}