{"total":33,"rows":[{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44,"area":null},{"id":"2104.11408","title":"Neural Mean Discrepancy for Efficient Out-of-Distribution Detection","created":"2021-04-23","cited_by_count":42,"area":null},{"id":"2306.04226","title":"Normalization Layers Are All That Sharpness-Aware Minimization Needs","created":"2023-06-07","cited_by_count":27,"area":null},{"id":"2204.00089","title":"Investigating Top-$k$ White-Box and Transferable Black-box Attack","created":"2022-03-30","cited_by_count":26,"area":null},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24,"area":null},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2207.06202","title":"Adversarially-Aware Robust Object Detector","created":"2022-07-13","cited_by_count":20,"area":null},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16,"area":null},{"id":"2310.18936","title":"Adversarial Examples Are Not Real Features","created":"2023-10-29","cited_by_count":16,"area":null},{"id":"2306.08565","title":"Reliable Evaluation of Adversarial Transferability","created":"2023-06-14","cited_by_count":13,"area":null},{"id":"2412.16958","title":"Breaking Barriers in Physical-World Adversarial Examples: Improving Robustness and Transferability via Robust Feature","created":"2024-12-22","cited_by_count":13,"area":null},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11,"area":null},{"id":"2206.09238","title":"On the Role of Generalization in Transferability of Adversarial Examples","created":"2022-06-18","cited_by_count":9,"area":null},{"id":"2308.06703","title":"Understanding the robustness difference between stochastic gradient descent and adaptive gradient methods","created":"2023-08-13","cited_by_count":8,"area":null},{"id":"2311.09266","title":"Adversarially Robust Spiking Neural Networks Through Conversion","created":"2023-11-15","cited_by_count":7,"area":null},{"id":"2503.06276","title":"Exploring Adversarial Transferability between Kolmogorov-arnold Networks","created":"2025-03-08","cited_by_count":4,"area":null},{"id":"2205.11702","title":"Functional Network: A Novel Framework for Interpretability of Deep Neural Networks","created":"2022-05-24","cited_by_count":2,"area":null},{"id":"2210.06932","title":"NoMorelization: Building Normalizer-Free Models from a Sample's Perspective","created":"2022-10-13","cited_by_count":2,"area":null},{"id":"2304.02688","title":"Going Further: Flatness at the Rescue of Early Stopping for Adversarial Example Transferability","created":"2023-04-05","cited_by_count":2,"area":null},{"id":"2402.10470","title":"Theoretical Understanding of Learning from Adversarial Perturbations","created":"2024-02-16","cited_by_count":2,"area":null},{"id":"2510.03224","title":"Test-Time Defense Against Adversarial Attacks via Stochastic Resonance of Latent Ensembles","created":"2025-10-03","cited_by_count":2,"area":null},{"id":"2102.05096","title":"Towards Bridging the gap between Empirical and Certified Robustness against Adversarial Examples","created":"2021-02-09","cited_by_count":1,"area":null},{"id":"2303.02322","title":"Improved Robustness Against Adaptive Attacks With Ensembles and Error-Correcting Output Codes","created":"2023-03-04","cited_by_count":1,"area":null},{"id":"2402.06827","title":"RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations for Universal Robustness","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2405.20672","title":"Investigating and unmasking feature-level vulnerabilities of CNNs to adversarial perturbations","created":"2024-05-31","cited_by_count":1,"area":null},{"id":"2501.08005","title":"DisCoPatch: Taming Adversarially-driven Batch Statistics for Improved Out-of-Distribution Detection","created":"2025-01-14","cited_by_count":1,"area":null},{"id":"2605.24420","title":"Batch Normalization Amplifies Memorization and Privacy Risks","created":"2026-05-23","cited_by_count":1,"area":null},{"id":"2207.02625","title":"$L_2$BN: Enhancing Batch Normalization by Equalizing the $L_2$ Norms of Features","created":"2022-07-06","cited_by_count":0,"area":null},{"id":"2309.15669","title":"On the Computational Entanglement of Distant Features in Adversarial Machine Learning","created":"2023-09-27","cited_by_count":0,"area":null},{"id":"2403.16569","title":"Revealing Vulnerabilities of Neural Networks in Parameter Learning and Defense Against Explanation-Aware Backdoors","created":"2024-03-25","cited_by_count":0,"area":null},{"id":"2403.19150","title":"Towards Understanding Dual BN In Hybrid Adversarial Training","created":"2024-03-28","cited_by_count":0,"area":null},{"id":"2502.16610","title":"AdverX-Ray: Ensuring X-Ray Integrity Through Frequency-Sensitive Adversarial VAEs","created":"2025-02-23","cited_by_count":0,"area":null},{"id":"2607.06592","title":"LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection","created":"2026-07-06","cited_by_count":0,"area":null}],"next_cursor":null}