{"total":73,"rows":[{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2203.01441","title":"3D Common Corruptions and Data Augmentation","created":"2022-03-02","cited_by_count":119,"area":null},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47,"area":null},{"id":"2308.02897","title":"An Adaptive Model Ensemble Adversarial Attack for Boosting Adversarial Transferability","created":"2023-08-05","cited_by_count":42,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38,"area":null},{"id":"2107.02425","title":"GradDiv: Adversarial Robustness of Randomized Neural Networks via Gradient Diversity Regularization","created":"2021-07-06","cited_by_count":34,"area":null},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24,"area":null},{"id":"2103.10919","title":"Robustness via Cross-Domain Ensembles","created":"2021-03-19","cited_by_count":23,"area":null},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2305.14846","title":"Introducing Competition to Boost the Transferability of Targeted Adversarial Examples through Clean Feature Mixup","created":"2023-05-24","cited_by_count":17,"area":null},{"id":"2105.10827","title":"Orthogonal Ensemble Networks for Biomedical Image Segmentation","created":"2021-05-22","cited_by_count":16,"area":null},{"id":"2105.14785","title":"Two Coupled Rejection Metrics Can Tell Adversarial Examples Apart","created":"2021-05-31","cited_by_count":14,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2110.07305","title":"DI-AA: An Interpretable White-box Attack for Fooling Deep Neural Networks","created":"2021-10-14","cited_by_count":10,"area":null},{"id":"2410.04968","title":"Collaboration! Towards Robust Neural Methods for Routing Problems","created":"2024-10-07","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7,"area":null},{"id":"2111.08313","title":"Towards Comprehensive Monocular Depth Estimation: Multiple Heads Are Better Than One","created":"2021-11-16","cited_by_count":7,"area":null},{"id":"2111.13841","title":"Adaptive Perturbation for Adversarial Attack","created":"2021-11-27","cited_by_count":7,"area":null},{"id":"2211.08008","title":"MORA: Improving Ensemble Robustness Evaluation with Model-Reweighing Attack","created":"2022-11-15","cited_by_count":7,"area":null},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2104.10586","title":"Mixture of Robust Experts (MoRE):A Robust Denoising Method towards multiple perturbations","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2108.12492","title":"Disrupting Adversarial Transferability in Deep Neural Networks","created":"2021-08-27","cited_by_count":6,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2107.10302","title":"Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks","created":"2021-07-11","cited_by_count":5,"area":null},{"id":"2206.06737","title":"Adversarial Vulnerability of Randomized Ensembles","created":"2022-06-14","cited_by_count":5,"area":null},{"id":"2302.11963","title":"Investigating Catastrophic Overfitting in Fast Adversarial Training: A Self-fitting Perspective","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2302.07221","title":"On the Role of Randomization in Adversarially Robust Classification","created":"2023-02-14","cited_by_count":4,"area":null},{"id":"2307.13985","title":"Enhanced Security against Adversarial Examples Using a Random Ensemble of Encrypted Vision Transformer Models","created":"2023-07-26","cited_by_count":4,"area":null},{"id":"2105.14275","title":"Greedy Bayesian Posterior Approximation with Deep Ensembles","created":"2021-05-29","cited_by_count":3,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2302.01375","title":"On the Robustness of Randomized Ensembles to Adversarial Perturbations","created":"2023-02-02","cited_by_count":3,"area":null},{"id":"2307.04036","title":"Designing a Direct Feedback Loop between Humans and Convolutional Neural Networks through Local Explanations","created":"2023-07-08","cited_by_count":3,"area":null},{"id":"2311.00428","title":"NEO-KD: Knowledge-Distillation-Based Adversarial Training for Robust Multi-Exit Neural Networks","created":"2023-11-01","cited_by_count":3,"area":"distill"},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2405.06340","title":"Improving Transferable Targeted Adversarial Attack via Normalized Logit Calibration and Truncated Feature Mixing","created":"2024-05-10","cited_by_count":3,"area":null},{"id":"2501.01529","title":"SAFER: Sharpness Aware layer-selective Finetuning for Enhanced Robustness in vision transformers","created":"2025-01-02","cited_by_count":3,"area":null},{"id":"2112.03615","title":"Saliency Diversified Deep Ensemble for Robustness to Adversaries","created":"2021-12-07","cited_by_count":2,"area":null},{"id":"2206.14477","title":"Adversarial Ensemble Training by Jointly Learning Label Dependencies and Member Models","created":"2022-06-29","cited_by_count":2,"area":null},{"id":"2401.09574","title":"Towards Scalable and Robust Model Versioning","created":"2024-01-17","cited_by_count":2,"area":null},{"id":"2405.13324","title":"Adversarial Training via Adaptive Knowledge Amalgamation of an Ensemble of Teachers","created":"2024-05-22","cited_by_count":2,"area":null},{"id":"2408.10204","title":"Criticality Leveraged Adversarial Training (CLAT) for Boosted Performance via Parameter Efficiency","created":"2024-08-19","cited_by_count":2,"area":null},{"id":"2505.12644","title":"Use as Many Surrogates as You Want: Selective Ensemble Attack to Unleash Transferability without Sacrificing Resource Efficiency","created":"2025-05-19","cited_by_count":2,"area":null},{"id":"2109.05558","title":"CoG: a Two-View Co-training Framework for Defending Adversarial Attacks on Graph","created":"2021-09-12","cited_by_count":1,"area":null},{"id":"2206.00278","title":"On the Perils of Cascading Robust Classifiers","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2209.09033","title":"A Transferable and Automatic Tuning of Deep Reinforcement Learning for Cost Effective Phishing Detection","created":"2022-09-19","cited_by_count":1,"area":null},{"id":"2210.02618","title":"Dynamic Stochastic Ensemble with Adversarial Robust Lottery Ticket Subnetworks","created":"2022-10-06","cited_by_count":1,"area":null},{"id":"2307.10788","title":"Adversarial attacks for mixtures of classifiers","created":"2023-07-20","cited_by_count":1,"area":null},{"id":"2403.13204","title":"Diversity-Aware Agnostic Ensemble of Sharpness Minimizers","created":"2024-03-19","cited_by_count":1,"area":null},{"id":"2410.05136","title":"LOTOS: Layer-wise Orthogonalization for Training Robust Ensembles","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2410.16579","title":"Conflict-Aware Adversarial Training","created":"2024-10-21","cited_by_count":1,"area":null},{"id":"2504.04747","title":"Two is Better than One: Efficient Ensemble Defense for Robust and Compact Models","created":"2025-04-07","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2507.14202","title":"PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training","created":"2025-07-14","cited_by_count":1,"area":"alignment"},{"id":"2507.22428","title":"Theoretical Analysis of Relative Errors in Gradient Computations for Adversarial Attacks with CE Loss","created":"2025-07-30","cited_by_count":1,"area":null},{"id":"2508.11279","title":"Boosting the Robustness-Accuracy Trade-off of SNNs by Robust Temporal Self-Ensemble","created":"2025-08-15","cited_by_count":1,"area":null},{"id":"2511.19636","title":"Parameter-Efficient Construction of the Rashomon Slice for Concept Bottleneck Models","created":"2025-11-24","cited_by_count":1,"area":null},{"id":"2103.14795","title":"Ensemble-in-One: Learning Ensemble within Random Gated Networks for Enhanced Adversarial Robustness","created":"2021-03-27","cited_by_count":0,"area":null},{"id":"2207.09031","title":"Decorrelative Network Architecture for Robust Electrocardiogram Classification","created":"2022-07-19","cited_by_count":0,"area":null},{"id":"2301.07794","title":"HCE: Improving Performance and Efficiency with Heterogeneously Compressed Neural Network Ensemble","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2302.00537","title":"Effectiveness of Moving Target Defenses for Adversarial Attacks in ML-based Malware Detection","created":"2023-02-01","cited_by_count":0,"area":null},{"id":"2312.14218","title":"AutoAugment Input Transformation for Highly Transferable Targeted Attacks","created":"2023-12-21","cited_by_count":0,"area":null},{"id":"2401.02633","title":"A Random Ensemble of Encrypted models for Enhancing Robustness against Adversarial Examples","created":"2024-01-05","cited_by_count":0,"area":null},{"id":"2409.08372","title":"FedProphet: Memory-Efficient Federated Adversarial Training via Robust and Consistent Cascade Learning","created":"2024-09-12","cited_by_count":0,"area":null},{"id":"2506.10888","title":"Lattice Climber Attack: Adversarial attacks for randomized mixtures of classifiers","created":"2025-06-12","cited_by_count":0,"area":null},{"id":"2509.00089","title":"Learning from Peers: Collaborative Ensemble Adversarial Training","created":"2025-08-27","cited_by_count":0,"area":null},{"id":"2511.13654","title":"Tuning for Two Adversaries: Enhancing the Robustness Against Transfer and Query-Based Attacks using Hyperparameter Tuning","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2608.15115","title":"Perspective-Invariant Attack with Enhanced Transferability of Adversarial Examples","created":"2026-08-15","cited_by_count":0,"area":null},{"id":"2608.16031","title":"AdROD: HyperNetwork-based Adversarially Robust Object Detection for Autonomous Driving","created":"2026-08-17","cited_by_count":0,"area":"driving"}],"next_cursor":null}