{"total":23,"rows":[{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18,"area":null},{"id":"2109.01983","title":"Training Meta-Surrogate Model for Transferable Adversarial Attack","created":"2021-09-05","cited_by_count":15,"area":null},{"id":"2206.09098","title":"Existence and Minimax Theorems for Adversarial Surrogate Risks in Binary Classification","created":"2022-06-18","cited_by_count":15,"area":null},{"id":"2207.12203","title":"Improving Adversarial Robustness via Mutual Information Estimation","created":"2022-07-25","cited_by_count":13,"area":null},{"id":"2112.05872","title":"SLOSH: Set LOcality Sensitive Hashing via Sliced-Wasserstein Embeddings","created":"2021-12-11","cited_by_count":9,"area":null},{"id":"2109.09901","title":"Modeling Adversarial Noise for Adversarial Training","created":"2021-09-21","cited_by_count":8,"area":null},{"id":"2204.13779","title":"Formulating Robustness Against Unforeseen Attacks","created":"2022-04-28","cited_by_count":8,"area":null},{"id":"2403.11448","title":"Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM","created":"2024-03-18","cited_by_count":6,"area":null},{"id":"2106.05453","title":"Improving White-box Robustness of Pre-processing Defenses via Joint Adversarial Training","created":"2021-06-10","cited_by_count":3,"area":null},{"id":"2511.11009","title":"Unsupervised Robust Domain Adaptation: Paradigm, Theory and Algorithm","created":"2025-11-14","cited_by_count":3,"area":null},{"id":"2110.07718","title":"Adversarial Attack across Datasets","created":"2021-10-13","cited_by_count":2,"area":null},{"id":"2212.03069","title":"Multiple Perturbation Attack: Attack Pixelwise Under Different $\\ell_p$-norms For Better Adversarial Performance","created":"2022-12-05","cited_by_count":2,"area":null},{"id":"2405.04191","title":"Effective and Robust Adversarial Training against Data and Label Corruptions","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2502.04248","title":"Adapting to Evolving Adversaries with Regularized Continual Robust Training","created":"2025-02-06","cited_by_count":2,"area":null},{"id":"2103.07598","title":"Internal Wasserstein Distance for Adversarial Attack and Defense","created":"2021-03-13","cited_by_count":1,"area":null},{"id":"2405.01349","title":"Position: Towards Resilience Against Adversarial Examples","created":"2024-05-02","cited_by_count":1,"area":null},{"id":"2406.07580","title":"DMS: Addressing Information Loss with More Steps for Pragmatic Adversarial Attacks","created":"2024-06-09","cited_by_count":1,"area":null},{"id":"2105.12697","title":"Structural Causal Models Reveal Confounder Bias in Linear Program Modelling","created":"2021-05-26","cited_by_count":0,"area":null},{"id":"2203.15274","title":"Finding Structure and Causality in Linear Programs","created":"2022-03-29","cited_by_count":0,"area":null},{"id":"2601.16200","title":"Feature-Space Smoothing: Certified Robustness of Deep Representations","created":"2026-01-22","cited_by_count":0,"area":null}],"next_cursor":null}