{"total":136,"rows":[{"id":"2202.02526","title":"LyaNet: A Lyapunov Framework for Training Neural ODEs","created":"2022-02-05","cited_by_count":44,"area":null},{"id":"2301.09879","title":"Data Augmentation Alone Can Improve Adversarial Training","created":"2023-01-24","cited_by_count":43,"area":null},{"id":"2404.13733","title":"Elucidating the Design Space of Dataset Condensation","created":"2024-04-21","cited_by_count":40,"area":null},{"id":"2305.04769","title":"BiRT: Bio-inspired Replay in Vision Transformers for Continual Learning","created":"2023-05-08","cited_by_count":25,"area":null},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2211.16158","title":"Out-Of-Distribution Detection Is Not All You Need","created":"2022-11-29","cited_by_count":23,"area":null},{"id":"2201.12078","title":"You Only Cut Once: Boosting Data Augmentation with a Single Cut","created":"2022-01-28","cited_by_count":22,"area":null},{"id":"2212.04985","title":"Understanding and Combating Robust Overfitting via Input Loss Landscape Analysis and Regularization","created":"2022-12-09","cited_by_count":22,"area":null},{"id":"2202.02236","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","created":"2022-02-04","cited_by_count":20,"area":null},{"id":"2106.02933","title":"k-Mixup Regularization for Deep Learning via Optimal Transport","created":"2021-06-05","cited_by_count":14,"area":null},{"id":"2306.05651","title":"Differentially Private Sharpness-Aware Training","created":"2023-06-09","cited_by_count":14,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2411.05712","title":"Scaling Laws for Task-Optimized Models of the Primate Visual Ventral Stream","created":"2024-11-08","cited_by_count":13,"area":null},{"id":"2108.09891","title":"Multi-Expert Adversarial Attack Detection in Person Re-identification Using Context Inconsistency","created":"2021-08-23","cited_by_count":12,"area":null},{"id":"2101.06507","title":"Multi-objective Search of Robust Neural Architectures against Multiple Types of Adversarial Attacks","created":"2021-01-16","cited_by_count":11,"area":null},{"id":"2309.13794","title":"Projected Randomized Smoothing for Certified Adversarial Robustness","created":"2023-09-25","cited_by_count":11,"area":null},{"id":"2411.04376","title":"Game-Theoretic Defenses for Robust Conformal Prediction Against Adversarial Attacks in Medical Imaging","created":"2024-11-07","cited_by_count":10,"area":null},{"id":"2108.13446","title":"Benchmarking the Accuracy and Robustness of Feedback Alignment Algorithms","created":"2021-08-30","cited_by_count":9,"area":null},{"id":"2302.10181","title":"Exploring the Effect of Multi-step Ascent in Sharpness-Aware Minimization","created":"2023-01-27","cited_by_count":9,"area":null},{"id":"2110.06537","title":"Well-classified Examples are Underestimated in Classification with Deep Neural Networks","created":"2021-10-13","cited_by_count":8,"area":null},{"id":"2206.10915","title":"Understanding the effect of sparsity on neural networks robustness","created":"2022-06-22","cited_by_count":8,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2411.05034","title":"Eguard: Defending LLM Embeddings Against Inversion Attacks via Text Mutual Information Optimization","created":"2024-11-06","cited_by_count":8,"area":null},{"id":"2311.09266","title":"Adversarially Robust Spiking Neural Networks Through Conversion","created":"2023-11-15","cited_by_count":7,"area":null},{"id":"2210.04052","title":"FedDef: Defense Against Gradient Leakage in Federated Learning-based Network Intrusion Detection Systems","created":"2022-10-08","cited_by_count":6,"area":null},{"id":"2305.03173","title":"New Adversarial Image Detection Based on Sentiment Analysis","created":"2023-05-03","cited_by_count":6,"area":null},{"id":"2305.13057","title":"Causality-Aided Trade-off Analysis for Machine Learning Fairness","created":"2023-05-22","cited_by_count":6,"area":null},{"id":"2307.07269","title":"Frequency Domain Adversarial Training for Robust Volumetric Medical Segmentation","created":"2023-07-14","cited_by_count":6,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2505.20934","title":"NatADiff: Adversarial Boundary Guidance for Natural Adversarial Diffusion","created":"2025-05-27","cited_by_count":6,"area":null},{"id":"2112.09219","title":"All You Need is RAW: Defending Against Adversarial Attacks with Camera Image Pipelines","created":"2021-12-16","cited_by_count":5,"area":null},{"id":"2206.13581","title":"Exact Spectral Norm Regularization for Neural Networks","created":"2022-06-27","cited_by_count":5,"area":null},{"id":"2211.11835","title":"Fairness Increases Adversarial Vulnerability","created":"2022-11-21","cited_by_count":5,"area":null},{"id":"2303.14077","title":"Improved Adversarial Training Through Adaptive Instance-wise Loss Smoothing","created":"2023-03-24","cited_by_count":5,"area":null},{"id":"2306.15363","title":"Your Attack Is Too DUMB: Formalizing Attacker Scenarios for Adversarial Transferability","created":"2023-06-27","cited_by_count":5,"area":null},{"id":"2404.13788","title":"AnyPattern: Towards In-context Image Copy Detection","created":"2024-04-21","cited_by_count":5,"area":null},{"id":"2407.06714","title":"Improving the Transferability of Adversarial Examples by Feature Augmentation","created":"2024-07-09","cited_by_count":5,"area":null},{"id":"2512.00308","title":"Optimizing Distributional Geometry Alignment with Optimal Transport for Generative Dataset Distillation","created":"2025-11-29","cited_by_count":5,"area":null},{"id":"2206.06761","title":"Exploring Adversarial Attacks and Defenses in Vision Transformers trained with DINO","created":"2022-06-14","cited_by_count":4,"area":null},{"id":"2208.00906","title":"Understanding Adversarial Robustness of Vision Transformers via Cauchy Problem","created":"2022-08-01","cited_by_count":4,"area":null},{"id":"2302.02907","title":"GAT: Guided Adversarial Training with Pareto-optimal Auxiliary Tasks","created":"2023-02-06","cited_by_count":4,"area":null},{"id":"2304.11359","title":"Detecting Adversarial Faces Using Only Real Face Self-Perturbations","created":"2023-04-22","cited_by_count":4,"area":null},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2406.08298","title":"AdaNCA: Neural Cellular Automata As Adaptors For More Robust Vision Transformer","created":"2024-06-12","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2108.11135","title":"Bridged Adversarial Training","created":"2021-08-25","cited_by_count":3,"area":null},{"id":"2203.08822","title":"Understanding robustness and generalization of artificial neural networks through Fourier masks","created":"2022-03-16","cited_by_count":3,"area":null},{"id":"2206.08638","title":"Minimum Noticeable Difference based Adversarial Privacy Preserving Image Generation","created":"2022-06-17","cited_by_count":3,"area":null},{"id":"2303.05246","title":"Efficient Certified Training and Robustness Verification of Neural ODEs","created":"2023-03-09","cited_by_count":3,"area":null},{"id":"2403.07942","title":"Attacking Transformers with Feature Diversity Adversarial Perturbation","created":"2024-03-10","cited_by_count":3,"area":null},{"id":"2404.08069","title":"Persistent Classification: A New Approach to Stability of Data and Adversarial Examples","created":"2024-04-11","cited_by_count":3,"area":null},{"id":"2503.14836","title":"On the Robustness Tradeoff in Fine-Tuning","created":"2025-03-19","cited_by_count":3,"area":null},{"id":"2105.08269","title":"Sparta: Spatially Attentive and Adversarially Robust Activation","created":"2021-05-18","cited_by_count":2,"area":null},{"id":"2112.02542","title":"Robust Active Learning: Sample-Efficient Training of Robust Deep Learning Models","created":"2021-12-05","cited_by_count":2,"area":null},{"id":"2112.14340","title":"Super-Efficient Super Resolution for Fast Adversarial Defense at the Edge","created":"2021-12-29","cited_by_count":2,"area":null},{"id":"2202.04271","title":"Adversarial Detection without Model Information","created":"2022-02-09","cited_by_count":2,"area":null},{"id":"2205.09586","title":"On Trace of PGD-Like Adversarial Attacks","created":"2022-05-19","cited_by_count":2,"area":null},{"id":"2302.10896","title":"IB-RAR: Information Bottleneck as Regularizer for Adversarial Robustness","created":"2023-02-09","cited_by_count":2,"area":null},{"id":"2304.02688","title":"Going Further: Flatness at the Rescue of Early Stopping for Adversarial Example Transferability","created":"2023-04-05","cited_by_count":2,"area":null},{"id":"2304.04033","title":"Exploring the Connection between Robust and Generative Models","created":"2023-04-08","cited_by_count":2,"area":null},{"id":"2310.16332","title":"Corrupting Neuron Explanations of Deep Visual Features","created":"2023-10-25","cited_by_count":2,"area":null},{"id":"2405.08654","title":"Can we Defend Against the Unknown? An Empirical Study About Threshold Selection for Neural Network Monitoring","created":"2024-05-14","cited_by_count":2,"area":null},{"id":"2406.10933","title":"Improving Adversarial Robustness via Decoupled Visual Representation Masking","created":"2024-06-16","cited_by_count":2,"area":null},{"id":"2409.17589","title":"Improving Fast Adversarial Training via Self-Knowledge Guidance","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2411.09265","title":"BEARD: Benchmarking the Adversarial Robustness for Dataset Distillation","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2412.20987","title":"RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2501.16490","title":"Towards Robust Stability Prediction in Smart Grids: GAN-based Approach under Data Constraints and Adversarial Challenges","created":"2025-01-27","cited_by_count":2,"area":null},{"id":"2502.12377","title":"Alignment and Adversarial Robustness: Are More Human-Like Models More Secure?","created":"2025-02-17","cited_by_count":2,"area":null},{"id":"2502.17003","title":"Information-Geometric Inverse Distillation for Enhancing Adversarial Transferability","created":"2025-02-24","cited_by_count":2,"area":null},{"id":"2503.10191","title":"Robustness Tokens: Towards Adversarial Robustness of Transformers","created":"2025-03-13","cited_by_count":2,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2510.20627","title":"H-SPLID: HSIC-based Saliency Preserving Latent Information Decomposition","created":"2025-10-23","cited_by_count":2,"area":null},{"id":"2512.19472","title":"Multi-Layer Confidence Scoring for Detection of Out-of-Distribution Samples, Adversarial Attacks, and In-Distribution Misclassifications","created":"2025-12-22","cited_by_count":2,"area":null},{"id":"2111.10272","title":"Resilience from Diversity: Population-based approach to harden models against adversarial attacks","created":"2021-11-19","cited_by_count":1,"area":null},{"id":"2205.15357","title":"Searching for the Essence of Adversarial Perturbations","created":"2022-05-30","cited_by_count":1,"area":null},{"id":"2206.00489","title":"Attack-Agnostic Adversarial Detection","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2206.01904","title":"Soft Adversarial Training Can Retain Natural Accuracy","created":"2022-06-04","cited_by_count":1,"area":null},{"id":"2207.05127","title":"RUSH: Robust Contrastive Learning via Randomized Smoothing","created":"2022-07-11","cited_by_count":1,"area":null},{"id":"2208.08083","title":"Two Heads are Better than One: Robust Learning Meets Multi-branch Models","created":"2022-08-17","cited_by_count":1,"area":null},{"id":"2212.11760","title":"Aliasing is a Driver of Adversarial Attacks","created":"2022-12-22","cited_by_count":1,"area":null},{"id":"2303.10078","title":"Fuzziness-tuned: Improving the Transferability of Adversarial Examples","created":"2023-03-17","cited_by_count":1,"area":null},{"id":"2303.12481","title":"Revisiting DeepFool: generalization and improvement","created":"2023-03-22","cited_by_count":1,"area":null},{"id":"2306.00314","title":"Adversarial-Aware Deep Learning System based on a Secondary Classical Machine Learning Verification Approach","created":"2023-06-01","cited_by_count":1,"area":null},{"id":"2308.04137","title":"A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifiers","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2311.04503","title":"Constrained Adaptive Attacks: Realistic Evaluation of Adversarial Examples and Robust Training of Deep Neural Networks for Tabular Data","created":"2023-11-08","cited_by_count":1,"area":null},{"id":"2404.00185","title":"On Inherent Adversarial Robustness of Active Vision Systems","created":"2024-03-29","cited_by_count":1,"area":null},{"id":"2405.02830","title":"You Only Need Half: Boosting Data Augmentation by Using Partial Content","created":"2024-05-05","cited_by_count":1,"area":null},{"id":"2405.16226","title":"Detecting Adversarial Data using Perturbation Forgery","created":"2024-05-25","cited_by_count":1,"area":null},{"id":"2406.03143","title":"ZeroPur: Succinct Training-Free Adversarial Purification","created":"2024-06-05","cited_by_count":1,"area":null},{"id":"2409.13163","title":"Hidden Activations Are Not Enough: A General Approach to Neural Network Predictions","created":"2024-09-20","cited_by_count":1,"area":null},{"id":"2409.15028","title":"Region Mixup","created":"2024-09-23","cited_by_count":1,"area":null},{"id":"2410.03000","title":"Towards Generalized Certified Robustness with Multi-Norm Training","created":"2024-10-03","cited_by_count":1,"area":null},{"id":"2410.18556","title":"Complexity Matters: Effective Dimensionality as a Measure for Adversarial Robustness","created":"2024-10-24","cited_by_count":1,"area":null},{"id":"2412.10265","title":"Adversarial Robustness of Bottleneck Injected Deep Neural Networks for Task-Oriented Communication","created":"2024-12-13","cited_by_count":1,"area":null},{"id":"2501.18006","title":"Topological Signatures of Adversaries in Multimodal Alignments","created":"2025-01-29","cited_by_count":1,"area":null},{"id":"2503.17110","title":"Beyond Accuracy: What Matters in Designing Well-Behaved Image Classification Models?","created":"2025-03-21","cited_by_count":1,"area":null},{"id":"2504.12255","title":"Human Aligned Compression for Robust Models","created":"2025-04-16","cited_by_count":1,"area":null},{"id":"2509.20549","title":"Understanding and Improving Adversarial Robustness of Neural Probabilistic Circuits","created":"2025-09-24","cited_by_count":1,"area":null}],"next_cursor":"100"}