{"list":"other","total":60,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1502.03167","title":"Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift","created":"2015-02-11","cited_by_count":7005},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1911.04252","title":"Self-training with Noisy Student improves ImageNet classification","created":"2019-11-11","cited_by_count":1311},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"2006.16971","title":"Improving robustness against common corruptions by covariate shift adaptation","created":"2020-06-30","cited_by_count":431},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1603.04779","title":"Revisiting Batch Normalization For Practical Domain Adaptation","created":"2016-03-15","cited_by_count":288},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"2006.10963","title":"Evaluating Prediction-Time Batch Normalization for Robustness under Covariate Shift","created":"2020-06-19","cited_by_count":236},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1809.08098","title":"Efficient Formal Safety Analysis of Neural Networks","created":"2018-09-19","cited_by_count":165},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"1612.01939","title":"Correlation Alignment for Unsupervised Domain Adaptation","created":"2016-12-06","cited_by_count":147},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1907.02610","title":"Adversarial Robustness through Local Linearization","created":"2019-07-04","cited_by_count":146},{"id":"2010.13337","title":"Robust Pre-Training by Adversarial Contrastive Learning","created":"2020-10-26","cited_by_count":144},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"1902.08722","title":"A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks","created":"2019-02-23","cited_by_count":125},{"id":"1901.10513","title":"Adversarial Examples Are a Natural Consequence of Test Error in Noise","created":"2019-01-29","cited_by_count":114},{"id":"2001.02378","title":"MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius","created":"2020-01-08","cited_by_count":114},{"id":"1805.09190","title":"Towards the first adversarially robust neural network model on MNIST","created":"2018-05-23","cited_by_count":104},{"id":"1804.08450","title":"Decorrelated Batch Normalization","created":"2018-04-23","cited_by_count":83},{"id":"1905.04172","title":"On the Connection Between Adversarial Robustness and Saliency Map Interpretability","created":"2019-05-10","cited_by_count":80},{"id":"1704.08082","title":"AutoDIAL: Automatic DomaIn Alignment Layers","created":"2017-04-26","cited_by_count":75},{"id":"2006.04062","title":"Consistency Regularization for Certified Robustness of Smoothed Classifiers","created":"2020-06-07","cited_by_count":73},{"id":"1903.03215","title":"Unsupervised Domain Adaptation using Feature-Whitening and Consensus Loss","created":"2019-03-07","cited_by_count":67},{"id":"1906.04948","title":"Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers","created":"2019-06-12","cited_by_count":65},{"id":"1709.05583","title":"Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification","created":"2017-09-17","cited_by_count":56},{"id":"2010.03630","title":"Revisiting Batch Normalization for Improving Corruption Robustness","created":"2020-10-07","cited_by_count":55},{"id":"2010.11828","title":"Once-for-All Adversarial Training: In-Situ Tradeoff between Robustness and Accuracy for Free","created":"2020-10-22","cited_by_count":48},{"id":"1712.09196","title":"The Robust Manifold Defense: Adversarial Training using Generative Models","created":"2017-12-26","cited_by_count":35},{"id":"2010.03316","title":"Batch Normalization Increases Adversarial Vulnerability and Decreases Adversarial Transferability: A Non-Robust Feature Perspective","created":"2020-10-07","cited_by_count":35},{"id":"1906.03787","title":"Intriguing properties of adversarial training at scale","created":"2019-06-10","cited_by_count":33},{"id":"2004.02183","title":"Approximate Manifold Defense Against Multiple Adversarial Perturbations","created":"2020-04-05","cited_by_count":7}],"next_cursor":null}