{"total":90,"rows":[{"id":"2205.06900","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","created":"2022-05-13","cited_by_count":55,"area":null},{"id":"2111.09277","title":"SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness","created":"2021-11-17","cited_by_count":49,"area":null},{"id":"2206.12227","title":"Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspective","created":"2022-06-24","cited_by_count":42,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2305.00241","title":"When Deep Learning Meets Polyhedral Theory: A Survey","created":"2023-04-29","cited_by_count":39,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2210.11620","title":"LOT: Layer-wise Orthogonal Training on Improving $\\ell_2$ Certified Robustness","created":"2022-10-20","cited_by_count":33,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2306.09844","title":"Wasserstein distributional robustness of neural networks","created":"2023-06-16","cited_by_count":16,"area":null},{"id":"2311.16833","title":"1-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness","created":"2023-11-28","cited_by_count":16,"area":null},{"id":"2403.10144","title":"NLP Verification: Towards a General Methodology for Certifying Robustness","created":"2024-03-15","cited_by_count":16,"area":null},{"id":"2105.11363","title":"Learning Security Classifiers with Verified Global Robustness Properties","created":"2021-05-24","cited_by_count":14,"area":null},{"id":"2302.06975","title":"A Review of the Role of Causality in Developing Trustworthy AI Systems","created":"2023-02-14","cited_by_count":14,"area":null},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14,"area":null},{"id":"2310.17498","title":"CBD: A Certified Backdoor Detector Based on Local Dominant Probability","created":"2023-10-26","cited_by_count":13,"area":null},{"id":"2402.02629","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","created":"2024-02-04","cited_by_count":11,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2309.01866","title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting","created":"2023-09-05","cited_by_count":10,"area":null},{"id":"2311.17400","title":"Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention","created":"2023-11-29","cited_by_count":10,"area":null},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9,"area":null},{"id":"2208.01220","title":"GeoECG: Data Augmentation via Wasserstein Geodesic Perturbation for Robust Electrocardiogram Prediction","created":"2022-08-02","cited_by_count":8,"area":null},{"id":"2312.03979","title":"Node-aware Bi-smoothing: Certified Robustness against Graph Injection Attacks","created":"2023-12-07","cited_by_count":8,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2210.14283","title":"Accelerating Certified Robustness Training via Knowledge Transfer","created":"2022-10-25","cited_by_count":7,"area":null},{"id":"2405.11547","title":"Certified Robust Accuracy of Neural Networks Are Bounded due to Bayes Errors","created":"2024-05-19","cited_by_count":7,"area":null},{"id":"2112.08091","title":"Ensuring DNN Solution Feasibility for Optimization Problems with Convex Constraints and Its Application to DC Optimal Power Flow Problems","created":"2021-12-15","cited_by_count":6,"area":null},{"id":"2302.10722","title":"Characterizing the Optimal 0-1 Loss for Multi-class Classification with a Test-time Attacker","created":"2023-02-21","cited_by_count":6,"area":null},{"id":"2306.08656","title":"Augment then Smooth: Reconciling Differential Privacy with Certified Robustness","created":"2023-06-14","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2312.16699","title":"Computational Tradeoffs of Optimization-Based Bound Tightening in ReLU Networks","created":"2023-12-27","cited_by_count":6,"area":null},{"id":"2404.18791","title":"Certification of Speaker Recognition Models to Additive Perturbations","created":"2024-04-29","cited_by_count":6,"area":null},{"id":"2406.05810","title":"ControlLoc: Physical-World Hijacking Attack on Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2305.13508","title":"DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagation","created":"2023-05-22","cited_by_count":5,"area":null},{"id":"2404.13456","title":"Real-Time Safe Control of Neural Network Dynamic Models with Sound Approximation","created":"2024-04-20","cited_by_count":5,"area":null},{"id":"2306.06747","title":"Precise and Generalized Robustness Certification for Neural Networks","created":"2023-06-11","cited_by_count":4,"area":null},{"id":"2402.11168","title":"Trust Regions for Explanations via Black-Box Probabilistic Certification","created":"2024-02-17","cited_by_count":4,"area":null},{"id":"2404.09961","title":"Ti-Patch: Tiled Physical Adversarial Patch for no-reference video quality metrics","created":"2024-04-15","cited_by_count":4,"area":null},{"id":"2404.12120","title":"Fortify the Guardian, Not the Treasure: Resilient Adversarial Detectors","created":"2024-04-18","cited_by_count":4,"area":null},{"id":"2405.08892","title":"RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing","created":"2024-05-14","cited_by_count":4,"area":null},{"id":"2210.04625","title":"Robustness Certification of Visual Perception Models via Camera Motion Smoothing","created":"2022-10-04","cited_by_count":3,"area":null},{"id":"2302.06086","title":"Reliability Assurance for Deep Neural Network Architectures Against Numerical Defects","created":"2023-02-13","cited_by_count":3,"area":null},{"id":"2309.06166","title":"Certified Robust Models with Slack Control and Large Lipschitz Constants","created":"2023-09-12","cited_by_count":3,"area":null},{"id":"2406.05800","title":"SlowPerception: Physical-World Latency Attack against Visual Perception in Autonomous Driving","created":"2024-06-09","cited_by_count":3,"area":null},{"id":"2309.00879","title":"Towards Certified Probabilistic Robustness with High Accuracy","created":"2023-09-02","cited_by_count":2,"area":null},{"id":"2309.13150","title":"Pixel-wise Smoothing for Certified Robustness against Camera Motion Perturbations","created":"2023-09-22","cited_by_count":2,"area":null},{"id":"2403.02329","title":"COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attacks","created":"2024-03-04","cited_by_count":2,"area":null},{"id":"2405.14923","title":"How Does Bayes Error Limit Probabilistic Robust Accuracy","created":"2024-05-23","cited_by_count":2,"area":null},{"id":"2405.16036","title":"Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness","created":"2024-05-25","cited_by_count":2,"area":null},{"id":"2405.18753","title":"Confronting the Reproducibility Crisis: A Case Study of Challenges in Cybersecurity AI","created":"2024-05-29","cited_by_count":2,"area":null},{"id":"2502.09110","title":"Pulling Back the Curtain: Unsupervised Adversarial Detection via Contrastive Auxiliary Networks","created":"2025-02-13","cited_by_count":2,"area":null},{"id":"2508.16225","title":"An Investigation of Visual Foundation Models Robustness","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2104.08382","title":"Lower Bounds on Cross-Entropy Loss in the Presence of Test-time Adversaries","created":"2021-04-16","cited_by_count":1,"area":null},{"id":"2108.11299","title":"Certifiers Make Neural Networks Vulnerable to Availability Attacks","created":"2021-08-25","cited_by_count":1,"area":null},{"id":"2301.05763","title":"A Rigorous Uncertainty-Aware Quantification Framework Is Essential for Reproducible and Replicable Machine Learning Workflows","created":"2023-01-13","cited_by_count":1,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2310.10635","title":"Towards Scenario-based Safety Validation for Autonomous Trains with Deep Generative Models","created":"2023-10-16","cited_by_count":1,"area":null},{"id":"2404.12653","title":"How Real Is Real? A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2024-04-19","cited_by_count":1,"area":null},{"id":"2406.01873","title":"CR-UTP: Certified Robustness against Universal Text Perturbations on Large Language Models","created":"2024-06-04","cited_by_count":1,"area":null},{"id":"2406.10154","title":"Automated Design of Linear Bounding Functions for Sigmoidal Nonlinearities in Neural Networks","created":"2024-06-14","cited_by_count":1,"area":null},{"id":"2410.20432","title":"Integrating uncertainty quantification into randomized smoothing based robustness guarantees","created":"2024-10-27","cited_by_count":1,"area":null},{"id":"2410.24214","title":"ARQ: A Mixed-Precision Quantization Framework for Accurate and Certifiably Robust DNNs","created":"2024-10-31","cited_by_count":1,"area":null},{"id":"2507.07776","title":"SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples","created":"2025-07-10","cited_by_count":1,"area":null},{"id":"2602.04236","title":"Cascading Robustness Verification: Toward Efficient Model-Agnostic Certification","created":"2026-02-04","cited_by_count":1,"area":null},{"id":"2606.01437","title":"CEAR: Certified Ensemble Adversarial Robustness in DNNs","created":"2026-05-31","cited_by_count":1,"area":null},{"id":"2309.16710","title":"General Lipschitz: Certified Robustness Against Resolvable Semantic Transformations via Transformation-Dependent Randomized Smoothing","created":"2023-08-17","cited_by_count":0,"area":null},{"id":"2312.08877","title":"May the Noise be with you: Adversarial Training without Adversarial Examples","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2401.05338","title":"STR-Cert: Robustness Certification for Deep Text Recognition on Deep Learning Pipelines and Vision Transformers","created":"2023-11-28","cited_by_count":0,"area":null},{"id":"2406.00699","title":"Towards General Robustness Verification of MaxPool-based Convolutional Neural Networks via Tightening Linear Approximation","created":"2024-06-02","cited_by_count":0,"area":null},{"id":"2410.23362","title":"Tightening convex relaxations of trained neural networks: a unified approach for convex and S-shaped activations","created":"2024-10-30","cited_by_count":0,"area":null},{"id":"2411.08933","title":"Confidence-aware Denoised Fine-tuning of Off-the-shelf Models for Certified Robustness","created":"2024-11-13","cited_by_count":0,"area":null},{"id":"2412.10186","title":"MIBP-Cert: Certified Training against Data Perturbations with Mixed-Integer Bilinear Programs","created":"2024-12-13","cited_by_count":0,"area":null},{"id":"2506.10269","title":"Interior-Point Vanishing Problem in Semidefinite Relaxations for Neural Network Verification","created":"2025-06-12","cited_by_count":0,"area":null},{"id":"2509.26350","title":"SoK: Systematic analysis of adversarial threats against deep learning approaches for autonomous anomaly detection systems in SDN-IoT networks","created":"2025-09-30","cited_by_count":0,"area":null},{"id":"2510.08659","title":"Provably Robust Adaptation for Language-Empowered Foundation Models","created":"2025-10-09","cited_by_count":0,"area":null},{"id":"2603.10713","title":"Probabilistic Verification of Voice Anti-Spoofing Models","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2605.21780","title":"Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2605.23203","title":"Lipschitz Optimization for Formal Verification of Homographies","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2605.23448","title":"AI Security Research Should Better Incentivize Defense Research","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2605.30155","title":"Neural Network Verification using Partial Multi-Neuron Relaxation","created":"2026-05-28","cited_by_count":0,"area":null},{"id":"2606.19652","title":"Convex training of Lipschitz-regularized shallow neural networks","created":"2026-06-17","cited_by_count":0,"area":null},{"id":"2607.03232","title":"Fast SDP certification of neural networks : towards large multi-class datasets","created":"2026-07-03","cited_by_count":0,"area":null},{"id":"2607.18195","title":"Certified Training for Convolutional Perturbations","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2608.19351","title":"Uncovering the Limits of Proof Sharing for Neural Networks","created":"2026-08-19","cited_by_count":0,"area":null},{"id":"2610.10617","title":"MRCert: Towards Post-deployment Patch Robustness Certification for Adversarially Patched Samples via Type-specific Masking","created":"2026-10-07","cited_by_count":0,"area":null},{"id":"2610.15359","title":"Adversarial Detection for Pre-trained Classifiers via Lipschitz-Margin Analysis with Certification","created":"2026-10-11","cited_by_count":0,"area":null},{"id":"2610.16016","title":"Certified Robustness via Sparse Second-Order Cone Relaxations","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}