{"total":46,"rows":[{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2110.13771","title":"AugMax: Adversarial Composition of Random Augmentations for Robust Training","created":"2021-10-26","cited_by_count":90,"area":null},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2210.15318","title":"Efficient and Effective Augmentation Strategy for Adversarial Training","created":"2022-10-27","cited_by_count":43,"area":null},{"id":"2203.09747","title":"Efficient Split-Mix Federated Learning for On-Demand and In-Situ Customization","created":"2022-03-18","cited_by_count":35,"area":null},{"id":"2103.00397","title":"Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket Perspective","created":"2021-02-28","cited_by_count":25,"area":null},{"id":"2106.04823","title":"Taxonomy of Machine Learning Safety: A Survey and Primer","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24,"area":null},{"id":"2108.04890","title":"On the Effect of Pruning on Adversarial Robustness","created":"2021-08-10","cited_by_count":23,"area":null},{"id":"2301.09254","title":"Learning to Linearize Deep Neural Networks for Secure and Efficient Private Inference","created":"2023-01-23","cited_by_count":20,"area":null},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2102.12002","title":"Adversarial Robustness with Non-uniform Perturbations","created":"2021-02-24","cited_by_count":17,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2302.12480","title":"Robust Weight Signatures: Gaining Robustness as Easy as Patching Weights?","created":"2023-02-24","cited_by_count":13,"area":null},{"id":"2102.01886","title":"Learning Diverse-Structured Networks for Adversarial Robustness","created":"2021-02-03","cited_by_count":12,"area":null},{"id":"2103.12171","title":"Adversarial Feature Augmentation and Normalization for Visual Recognition","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2106.10196","title":"Federated Robustness Propagation: Sharing Robustness in Heterogeneous Federated Learning","created":"2021-06-18","cited_by_count":9,"area":null},{"id":"2310.01818","title":"AutoLoRa: A Parameter-Free Automated Robust Fine-Tuning Framework","created":"2023-10-03","cited_by_count":9,"area":null},{"id":"2410.04968","title":"Collaboration! Towards Robust Neural Methods for Routing Problems","created":"2024-10-07","cited_by_count":9,"area":null},{"id":"2302.01056","title":"Beyond Pretrained Features: Noisy Image Modeling Provides Adversarial Defense","created":"2023-02-02","cited_by_count":7,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2204.09838","title":"Fast AdvProp","created":"2022-04-21","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2302.03523","title":"Sparse Mixture Once-for-all Adversarial Training for Efficient In-Situ Trade-Off Between Accuracy and Robustness of DNNs","created":"2022-12-27","cited_by_count":4,"area":null},{"id":"2303.00250","title":"Combating Exacerbated Heterogeneity for Robust Models in Federated Learning","created":"2023-03-01","cited_by_count":4,"area":null},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2105.15157","title":"Adaptive Feature Alignment for Adversarial Training","created":"2021-05-31","cited_by_count":3,"area":null},{"id":"2211.16806","title":"Toward Robust Diagnosis: A Contour Attention Preserving Adversarial Defense for COVID-19 Detection","created":"2022-11-30","cited_by_count":3,"area":null},{"id":"2508.02186","title":"Failure Cases Are Better Learned But Boundary Says Sorry: Facilitating Smooth Perception Change for Accuracy-Robustness Trade-Off in Adversarial Training","created":"2025-08-04","cited_by_count":3,"area":null},{"id":"2111.01996","title":"Pareto Adversarial Robustness: Balancing Spatial Robustness and Sensitivity-based Robustness","created":"2021-11-03","cited_by_count":2,"area":null},{"id":"2406.03684","title":"Principles of Designing Robust Remote Face Anti-Spoofing Systems","created":"2024-06-06","cited_by_count":2,"area":null},{"id":"2410.12671","title":"New Paradigm of Adversarial Training: Releasing Accuracy-Robustness Trade-Off via Dummy Class","created":"2024-10-16","cited_by_count":2,"area":null},{"id":"2102.05096","title":"Towards Bridging the gap between Empirical and Certified Robustness against Adversarial Examples","created":"2021-02-09","cited_by_count":1,"area":null},{"id":"2106.15776","title":"Local Reweighting for Adversarial Training","created":"2021-06-30","cited_by_count":1,"area":null},{"id":"2204.00426","title":"A Fast and Efficient Conditional Learning for Tunable Trade-Off between Accuracy and Robustness","created":"2022-03-28","cited_by_count":1,"area":null},{"id":"2206.00924","title":"FACM: Intermediate Layer Still Retain Effective Features against Adversarial Examples","created":"2022-06-02","cited_by_count":0,"area":null},{"id":"2306.15482","title":"Cooperation or Competition: Avoiding Player Domination for Multi-Target Robustness via Adaptive Budgets","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2401.11543","title":"How Robust Are Energy-Based Models Trained With Equilibrium Propagation?","created":"2024-01-21","cited_by_count":0,"area":null},{"id":"2402.05521","title":"Linearizing Models for Efficient yet Robust Private Inference","created":"2024-02-08","cited_by_count":0,"area":null},{"id":"2403.19150","title":"Towards Understanding Dual BN In Hybrid Adversarial Training","created":"2024-03-28","cited_by_count":0,"area":null},{"id":"2509.16833","title":"SOLAR: Switchable Output Layer for Accuracy and Robustness in Once-for-All Training","created":"2025-09-20","cited_by_count":0,"area":null},{"id":"2510.10764","title":"Optimally Deep Networks -- Adapting Model Depth to Datasets for Superior Efficiency","created":"2025-10-12","cited_by_count":0,"area":null},{"id":"2604.26496","title":"Robust Alignment: Harmonizing Clean Accuracy and Adversarial Robustness in Adversarial Training","created":"2026-04-29","cited_by_count":0,"area":null}],"next_cursor":null}