{"list":"other","total":51,"rows":[{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1811.12231","title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","created":"2018-11-29","cited_by_count":1432},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1412.0035","title":"Understanding Deep Image Representations by Inverting Them","created":"2014-11-26","cited_by_count":403},{"id":"1807.09937","title":"HiDDeN: Hiding Data With Deep Networks","created":"2018-07-26","cited_by_count":397},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1905.13545","title":"High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks","created":"2019-05-28","cited_by_count":310},{"id":"1906.08988","title":"A Fourier Perspective on Model Robustness in Computer Vision","created":"2019-06-21","cited_by_count":288},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2004.07703","title":"Unsupervised Intra-domain Adaptation for Semantic Segmentation through Self-Supervision","created":"2020-04-16","cited_by_count":198},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1712.02328","title":"Generative Adversarial Perturbations","created":"2017-12-06","cited_by_count":153},{"id":"2006.11339","title":"Video Panoptic Segmentation","created":"2020-06-19","cited_by_count":142},{"id":"1901.10513","title":"Adversarial Examples Are a Natural Consequence of Test Error in Noise","created":"2019-01-29","cited_by_count":114},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"1608.08967","title":"Robustness of classifiers: from adversarial to random noise","created":"2016-08-31","cited_by_count":88},{"id":"1711.11561","title":"Measuring the tendency of CNNs to Learn Surface Statistical Regularities","created":"2017-11-30","cited_by_count":87},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"1809.08758","title":"Low Frequency Adversarial Perturbation","created":"2018-09-24","cited_by_count":80},{"id":"1802.08686","title":"Adversarial vulnerability for any classifier","created":"2018-02-23","cited_by_count":78},{"id":"1802.06816","title":"Shield: Fast, Practical Defense and Vaccination for Deep Learning using JPEG Compression","created":"2018-02-19","cited_by_count":74},{"id":"1608.07690","title":"A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples","created":"2016-08-27","cited_by_count":70},{"id":"2007.06189","title":"Understanding Adversarial Examples from the Mutual Influence of Images and Perturbations","created":"2020-07-13","cited_by_count":59},{"id":"1703.00371","title":"Generating Steganographic Images via Adversarial Training","created":"2017-03-01","cited_by_count":58},{"id":"1903.00073","title":"On the Effectiveness of Low Frequency Perturbations","created":"2019-02-28","cited_by_count":56},{"id":"2010.03630","title":"Revisiting Batch Normalization for Improving Corruption Robustness","created":"2020-10-07","cited_by_count":55},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"1809.03063","title":"The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure","created":"2018-09-09","cited_by_count":46},{"id":"1510.05328","title":"Exploring the Space of Adversarial Images","created":"2015-10-19","cited_by_count":28},{"id":"2010.03300","title":"CD-UAP: Class Discriminative Universal Adversarial Perturbation","created":"2020-10-07","cited_by_count":27},{"id":"2010.03288","title":"Double Targeted Universal Adversarial Perturbations","created":"2020-10-07","cited_by_count":23},{"id":"1807.04200","title":"With Friends Like These, Who Needs Adversaries?","created":"2018-07-11","cited_by_count":19},{"id":"1705.09554","title":"Robustness of classifiers to universal perturbations: a geometric perspective","created":"2017-05-26","cited_by_count":15},{"id":"1803.10418","title":"The Effects of JPEG and JPEG2000 Compression on Attacks using Adversarial Examples","created":"2018-03-28","cited_by_count":12},{"id":"1909.06999","title":"Learning Residual Flow as Dynamic Motion from Stereo Videos","created":"2019-09-16","cited_by_count":12},{"id":"2010.12496","title":"ResNet or DenseNet? Introducing Dense Shortcuts to ResNet","created":"2020-10-23","cited_by_count":12},{"id":"1810.02424","title":"Feature Prioritization and Regularization Improve Standard Accuracy and Adversarial Robustness","created":"2018-10-04","cited_by_count":5},{"id":"1909.06979","title":"Visuomotor Understanding for Representation Learning of Driving Scenes","created":"2019-09-16","cited_by_count":5},{"id":"1803.03613","title":"Detecting Adversarial Examples - A Lesson from Multimedia Forensics","created":"2018-03-09","cited_by_count":2},{"id":"1806.02941","title":"Convolutional Video Steganography with Temporal Residual Modeling","created":"2018-06-08","cited_by_count":2},{"id":"1304.3629","title":"A Secure And High Capacity Image Steganography Technique","created":"2013-04-11","cited_by_count":1}],"next_cursor":null}