{"total":87,"rows":[{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234,"area":null},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204,"area":null},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194,"area":null},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44,"area":null},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42,"area":null},{"id":"2202.13437","title":"A Unified Wasserstein Distributional Robustness Framework for Adversarial Training","created":"2022-02-27","cited_by_count":36,"area":null},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2105.10304","title":"Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks","created":"2021-05-21","cited_by_count":33,"area":null},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23,"area":null},{"id":"2203.15331","title":"CNN Filter DB: An Empirical Investigation of Trained Convolutional Filters","created":"2022-03-29","cited_by_count":20,"area":null},{"id":"2302.09479","title":"Delving into the Adversarial Robustness of Federated Learning","created":"2023-02-19","cited_by_count":19,"area":null},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13,"area":null},{"id":"2111.02331","title":"LTD: Low Temperature Distillation for Gradient Masking-free Adversarial Training","created":"2021-11-03","cited_by_count":13,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2210.04311","title":"Pruning Adversarially Robust Neural Networks without Adversarial Examples","created":"2022-10-09","cited_by_count":12,"area":null},{"id":"2307.09763","title":"Towards Building More Robust Models with Frequency Bias","created":"2023-07-19","cited_by_count":12,"area":null},{"id":"2308.10315","title":"Improving Adversarial Robustness of Masked Autoencoders via Test-time Frequency-domain Prompting","created":"2023-08-20","cited_by_count":12,"area":null},{"id":"2206.09628","title":"Diversified Adversarial Attacks based on Conjugate Gradient Method","created":"2022-06-20","cited_by_count":11,"area":null},{"id":"2304.06430","title":"Certified Zeroth-order Black-Box Defense with Robust UNet Denoiser","created":"2023-04-13","cited_by_count":11,"area":null},{"id":"2501.13273","title":"Enhancing Robust Fairness via Confusional Spectral Regularization","created":"2025-01-22","cited_by_count":11,"area":null},{"id":"2209.07788","title":"PointCAT: Contrastive Adversarial Training for Robust Point Cloud Recognition","created":"2022-09-16","cited_by_count":10,"area":null},{"id":"2409.01249","title":"Adversarial Pruning: A Survey and Benchmark of Pruning Methods for Adversarial Robustness","created":"2024-09-02","cited_by_count":10,"area":null},{"id":"2204.02481","title":"Adversarial Robustness through the Lens of Convolutional Filters","created":"2022-04-05","cited_by_count":9,"area":null},{"id":"2207.10942","title":"Aries: Efficient Testing of Deep Neural Networks via Labeling-Free Accuracy Estimation","created":"2022-07-22","cited_by_count":9,"area":null},{"id":"2101.10027","title":"Understanding and Achieving Efficient Robustness with Adversarial Supervised Contrastive Learning","created":"2021-01-25","cited_by_count":8,"area":null},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2405.08886","title":"The Pitfalls and Promise of Conformal Inference Under Adversarial Attacks","created":"2024-05-14","cited_by_count":8,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2209.08130","title":"Robust Ensemble Morph Detection with Domain Generalization","created":"2022-09-16","cited_by_count":7,"area":null},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2312.10329","title":"Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off","created":"2023-12-16","cited_by_count":7,"area":null},{"id":"2402.14648","title":"Rethinking Invariance Regularization in Adversarial Training to Improve Robustness-Accuracy Trade-off","created":"2024-02-22","cited_by_count":7,"area":null},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6,"area":null},{"id":"2211.12713","title":"Reliable Robustness Evaluation via Automatically Constructed Attack Ensembles","created":"2022-11-23","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2209.01199","title":"Revisiting Outer Optimization in Adversarial Training","created":"2022-09-02","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2310.14637","title":"Semantic-Aware Adversarial Training for Reliable Deep Hashing Retrieval","created":"2023-10-23","cited_by_count":5,"area":null},{"id":"2311.17608","title":"Adversarial Robust Memory-Based Continual Learner","created":"2023-11-29","cited_by_count":5,"area":null},{"id":"2209.05668","title":"Class-Level Logit Perturbation","created":"2022-09-13","cited_by_count":4,"area":null},{"id":"2210.05118","title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization","created":"2022-10-11","cited_by_count":4,"area":null},{"id":"2309.04650","title":"Exploring Robust Features for Improving Adversarial Robustness","created":"2023-09-09","cited_by_count":4,"area":null},{"id":"2408.13102","title":"Dynamic Label Adversarial Training for Deep Learning Robustness Against Adversarial Attacks","created":"2024-08-23","cited_by_count":4,"area":null},{"id":"2111.05063","title":"Tightening the Approximation Error of Adversarial Risk with Auto Loss Function Search","created":"2021-11-09","cited_by_count":3,"area":null},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3,"area":null},{"id":"2303.14922","title":"CAT:Collaborative Adversarial Training","created":"2023-03-27","cited_by_count":2,"area":null},{"id":"2304.00061","title":"To be Robust and to be Fair: Aligning Fairness with Robustness","created":"2023-03-31","cited_by_count":2,"area":null},{"id":"2404.00362","title":"STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario","created":"2024-03-30","cited_by_count":2,"area":null},{"id":"2409.17589","title":"Improving Fast Adversarial Training via Self-Knowledge Guidance","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2410.05951","title":"Hyper Adversarial Tuning for Boosting Adversarial Robustness of Pretrained Large Vision Models","created":"2024-10-08","cited_by_count":2,"area":null},{"id":"2104.10377","title":"Dual Head Adversarial Training","created":"2021-04-21","cited_by_count":1,"area":null},{"id":"2207.07793","title":"Towards the Desirable Decision Boundary by Moderate-Margin Adversarial Training","created":"2022-07-16","cited_by_count":1,"area":null},{"id":"2306.16614","title":"Group-based Robustness: A General Framework for Customized Robustness in the Real World","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2306.16979","title":"Post-train Black-box Defense via Bayesian Boundary Correction","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2311.17607","title":"Topology-preserving Adversarial Training for Alleviating Natural Accuracy Degradation","created":"2023-11-29","cited_by_count":1,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2505.19459","title":"Your Classifier Can Do More: Towards Balancing the Gaps in Classification, Robustness, and Generation","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2506.07056","title":"D2R: dual regularization loss with collaborative adversarial generation for model robustness","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2511.00836","title":"Parameter Interpolation Adversarial Training for Robust Image Classification","created":"2025-11-02","cited_by_count":1,"area":null},{"id":"2205.02741","title":"CE-based white-box adversarial attacks will not work using super-fitting","created":"2022-05-04","cited_by_count":0,"area":null},{"id":"2205.02743","title":"Rethinking Classifier and Adversarial Attack","created":"2022-05-04","cited_by_count":0,"area":null},{"id":"2206.00924","title":"FACM: Intermediate Layer Still Retain Effective Features against Adversarial Examples","created":"2022-06-02","cited_by_count":0,"area":null},{"id":"2208.06984","title":"A Multi-objective Memetic Algorithm for Auto Adversarial Attack Optimization Design","created":"2022-08-15","cited_by_count":0,"area":null},{"id":"2301.01495","title":"Beckman Defense","created":"2023-01-04","cited_by_count":0,"area":null},{"id":"2303.11793","title":"Bridging Optimal Transport and Jacobian Regularization by Optimal Trajectory for Enhanced Adversarial Defense","created":"2023-03-21","cited_by_count":0,"area":null},{"id":"2303.13955","title":"PIAT: Parameter Interpolation based Adversarial Training for Image Classification","created":"2023-03-24","cited_by_count":0,"area":null},{"id":"2303.16861","title":"Beyond Empirical Risk Minimization: Local Structure Preserving Regularization for Improving Adversarial Robustness","created":"2023-03-29","cited_by_count":0,"area":null},{"id":"2306.07613","title":"Revisiting and Advancing Adversarial Training Through A Simple Baseline","created":"2023-06-13","cited_by_count":0,"area":null},{"id":"2403.06798","title":"Dynamic Perturbation-Adaptive Adversarial Training on Medical Image Classification","created":"2024-03-11","cited_by_count":0,"area":null},{"id":"2404.06313","title":"On adversarial training and the 1 Nearest Neighbor classifier","created":"2024-04-09","cited_by_count":0,"area":null},{"id":"2406.11576","title":"Harmonizing Feature Maps: A Graph Convolutional Approach for Enhancing Adversarial Robustness","created":"2024-06-17","cited_by_count":0,"area":null},{"id":"2408.03944","title":"Improving Fast Adversarial Training Paradigm: An Example Taxonomy Perspective","created":"2024-07-22","cited_by_count":0,"area":null},{"id":"2504.00038","title":"Revisiting the Relationship between Adversarial and Clean Training: Why Clean Training Can Make Adversarial Training Better","created":"2025-03-30","cited_by_count":0,"area":null},{"id":"2505.19194","title":"Curvature Dynamic Black-box Attack: revisiting adversarial robustness via dynamic curvature estimation","created":"2025-05-25","cited_by_count":0,"area":null},{"id":"2510.05317","title":"RegMix: Adversarial Mutual and Generalization Regularization for Enhancing DNN Robustness","created":"2025-10-06","cited_by_count":0,"area":null},{"id":"2603.01264","title":"S2O: Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2026-03-01","cited_by_count":0,"area":null}],"next_cursor":null}