{"total":79,"rows":[{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2206.09426","title":"ADBench: Anomaly Detection Benchmark","created":"2022-06-19","cited_by_count":232,"area":null},{"id":"2105.07926","title":"Towards Robust Vision Transformer","created":"2021-05-17","cited_by_count":137,"area":null},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2302.09462","title":"MedViT: A Robust Vision Transformer for Generalized Medical Image Classification","created":"2023-02-19","cited_by_count":89,"area":null},{"id":"2108.07969","title":"Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better","created":"2021-08-18","cited_by_count":79,"area":"distill"},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74,"area":null},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64,"area":null},{"id":"2209.07790","title":"A Large-scale Multiple-objective Method for Black-box Attack against Object Detection","created":"2022-09-16","cited_by_count":55,"area":null},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54,"area":null},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2302.04025","title":"WAT: Improve the Worst-class Robustness in Adversarial Training","created":"2023-02-08","cited_by_count":27,"area":null},{"id":"2306.10426","title":"Understanding Certified Training with Interval Bound Propagation","created":"2023-06-17","cited_by_count":26,"area":null},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23,"area":null},{"id":"2209.07263","title":"Robustness in deep learning: The good (width), the bad (depth), and the ugly (initialization)","created":"2022-09-15","cited_by_count":18,"area":null},{"id":"2109.07557","title":"CounterNet: End-to-End Training of Prediction Aware Counterfactual Explanations","created":"2021-09-15","cited_by_count":17,"area":null},{"id":"2501.14959","title":"Systemizing Multiplicity: The Curious Case of Arbitrariness in Machine Learning","created":"2025-01-24","cited_by_count":17,"area":null},{"id":"2108.02883","title":"Interpolation can hurt robust generalization even when there is no noise","created":"2021-08-05","cited_by_count":15,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2302.01629","title":"Beyond the Universal Law of Robustness: Sharper Laws for Random Features and Neural Tangent Kernels","created":"2023-02-03","cited_by_count":13,"area":null},{"id":"2403.16271","title":"Object Detectors in the Open Environment: Challenges, Solutions, and Outlook","created":"2024-03-24","cited_by_count":13,"area":null},{"id":"2205.14283","title":"Rethinking Bayesian Learning for Data Analysis: The Art of Prior and Inference in Sparsity-Aware Modeling","created":"2022-05-28","cited_by_count":12,"area":null},{"id":"2301.11553","title":"Robust Transformer with Locality Inductive Bias and Feature Normalization","created":"2023-01-27","cited_by_count":12,"area":null},{"id":"2112.02671","title":"Stochastic Local Winner-Takes-All Networks Enable Profound Adversarial Robustness","created":"2021-12-05","cited_by_count":11,"area":null},{"id":"2112.15250","title":"Benign Overfitting in Adversarially Robust Linear Classification","created":"2021-12-31","cited_by_count":11,"area":null},{"id":"2203.11864","title":"On the (Non-)Robustness of Two-Layer Neural Networks in Different Learning Regimes","created":"2022-03-22","cited_by_count":11,"area":null},{"id":"2402.02629","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","created":"2024-02-04","cited_by_count":11,"area":null},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10,"area":null},{"id":"2305.19377","title":"Benign Overfitting in Deep Neural Networks under Lazy Training","created":"2023-05-30","cited_by_count":10,"area":null},{"id":"2204.05427","title":"Generalizing Adversarial Explanations with Grad-CAM","created":"2022-04-11","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2401.12236","title":"The Surprising Harmfulness of Benign Overfitting for Adversarial Robustness","created":"2024-01-19","cited_by_count":9,"area":null},{"id":"2105.14676","title":"NoiLIn: Improving Adversarial Training and Correcting Stereotype of Noisy Labels","created":"2021-05-31","cited_by_count":8,"area":null},{"id":"2308.06703","title":"Understanding the robustness difference between stochastic gradient descent and adaptive gradient methods","created":"2023-08-13","cited_by_count":8,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2302.10980","title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks","created":"2023-02-21","cited_by_count":7,"area":null},{"id":"2311.14859","title":"An Empirical Investigation into Benchmarking Model Multiplicity for Trustworthy Machine Learning: A Case Study on Image Classification","created":"2023-11-24","cited_by_count":7,"area":null},{"id":"2206.04569","title":"Benefits of Overparameterized Convolutional Residual Networks: Function Approximation under Smoothness Constraint","created":"2022-06-09","cited_by_count":6,"area":null},{"id":"2301.03110","title":"RobArch: Designing Robust Architectures against Adversarial Attacks","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2212.06776","title":"Unfolding Local Growth Rate Estimates for (Almost) Perfect Adversarial Detection","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2402.02969","title":"Towards Understanding the Word Sensitivity of Attention Layers: A Study via Random Features","created":"2024-02-05","cited_by_count":5,"area":null},{"id":"2402.12187","title":"Adversarial Feature Alignment: Balancing Robustness and Accuracy in Deep Learning via Adversarial Training","created":"2024-02-19","cited_by_count":5,"area":null},{"id":"2412.14714","title":"Holistic Adversarially Robust Pruning","created":"2024-12-19","cited_by_count":5,"area":null},{"id":"2106.06012","title":"Learning distinct features helps, provably","created":"2021-06-10","cited_by_count":4,"area":null},{"id":"2303.06032","title":"Exploring Adversarial Attacks on Neural Networks: An Explainable Approach","created":"2023-03-08","cited_by_count":4,"area":null},{"id":"2407.13070","title":"The Cost of Arbitrariness for Individuals: Examining the Legal and Technical Challenges of Model Multiplicity","created":"2024-05-28","cited_by_count":4,"area":null},{"id":"2206.00513","title":"The robust way to stack and bag: the local Lipschitz way","created":"2022-06-01","cited_by_count":3,"area":null},{"id":"2206.03727","title":"Wavelet Regularization Benefits Adversarial Training","created":"2022-06-08","cited_by_count":3,"area":null},{"id":"2206.06496","title":"Towards Alternative Techniques for Improving Adversarial Robustness: Analysis of Adversarial Training at a Spectrum of Perturbations","created":"2022-06-13","cited_by_count":3,"area":null},{"id":"2211.02675","title":"An Adversarial Robustness Perspective on the Topology of Neural Networks","created":"2022-11-04","cited_by_count":3,"area":null},{"id":"2209.02684","title":"Bag of Tricks for FGSM Adversarial Training","created":"2022-09-06","cited_by_count":2,"area":null},{"id":"2303.06151","title":"NoiseCAM: Explainable AI for the Boundary Between Noise and Adversarial Attacks","created":"2023-03-09","cited_by_count":2,"area":null},{"id":"2405.13324","title":"Adversarial Training via Adaptive Knowledge Amalgamation of an Ensemble of Teachers","created":"2024-05-22","cited_by_count":2,"area":null},{"id":"2406.10090","title":"Over-parameterization and Adversarial Robustness in Neural Networks: An Overview and Empirical Analysis","created":"2024-06-14","cited_by_count":2,"area":null},{"id":"2505.06580","title":"TAROT: Towards Essentially Domain-Invariant Robustness with Theoretical Justification","created":"2025-05-10","cited_by_count":2,"area":null},{"id":"2210.13235","title":"Chaos Theory and Adversarial Robustness","created":"2022-10-20","cited_by_count":1,"area":null},{"id":"2303.02669","title":"Consistent Valid Physically-Realizable Adversarial Attack against Crowd-flow Prediction Models","created":"2023-03-05","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2401.14031","title":"Sparse and Transferable Universal Singular Vectors Attack","created":"2024-01-25","cited_by_count":1,"area":null},{"id":"2504.04747","title":"Two is Better than One: Efficient Ensemble Defense for Robust and Compact Models","created":"2025-04-07","cited_by_count":1,"area":null},{"id":"2507.22428","title":"Theoretical Analysis of Relative Errors in Gradient Computations for Adversarial Attacks with CE Loss","created":"2025-07-30","cited_by_count":1,"area":null},{"id":"2509.12633","title":"CIARD: Cyclic Iterative Adversarial Robustness Distillation","created":"2025-09-16","cited_by_count":1,"area":null},{"id":"2202.12435","title":"Understanding Adversarial Robustness from Feature Maps of Convolutional Layers","created":"2022-02-25","cited_by_count":0,"area":null},{"id":"2306.07613","title":"Revisiting and Advancing Adversarial Training Through A Simple Baseline","created":"2023-06-13","cited_by_count":0,"area":null},{"id":"2404.06313","title":"On adversarial training and the 1 Nearest Neighbor classifier","created":"2024-04-09","cited_by_count":0,"area":null},{"id":"2406.06792","title":"Reinforced Compressive Neural Architecture Search for Versatile Adversarial Robustness","created":"2024-06-10","cited_by_count":0,"area":null},{"id":"2408.00794","title":"CCSRP: Robust Pruning of Spiking Neural Networks through Cooperative Coevolution","created":"2024-07-18","cited_by_count":0,"area":null},{"id":"2410.15176","title":"Adaptive Pruning with Module Robustness Sensitivity: Balancing Compression and Robustness","created":"2024-10-19","cited_by_count":0,"area":null},{"id":"2503.06559","title":"MMARD: Improving the Min-Max Optimization Process in Adversarial Robustness Distillation","created":"2025-03-09","cited_by_count":0,"area":null},{"id":"2507.01044","title":"Asymptotic convexity of wide and shallow neural networks","created":"2025-06-23","cited_by_count":0,"area":null},{"id":"2507.20996","title":"Improving Adversarial Robustness Through Adaptive Learning-Driven Multi-Teacher Knowledge Distillation","created":"2025-07-28","cited_by_count":0,"area":"distill"},{"id":"2509.17898","title":"Lipschitz-Based Robustness Certification for Recurrent Neural Networks via Convex Relaxation","created":"2025-09-22","cited_by_count":0,"area":null},{"id":"2511.21799","title":"The Double-Edged Nature of the Rashomon Set for Trustworthy Machine Learning","created":"2025-11-26","cited_by_count":0,"area":null},{"id":"2605.25304","title":"When Interpretability Becomes a Liability: Adversarial Attacks on CBM Concept Layers","created":"2026-05-25","cited_by_count":0,"area":null}],"next_cursor":null}