{"total":29,"rows":[{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2301.09879","title":"Data Augmentation Alone Can Improve Adversarial Training","created":"2023-01-24","cited_by_count":43,"area":null},{"id":"2202.09844","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","created":"2022-02-20","cited_by_count":41,"area":null},{"id":"2212.11005","title":"Revisiting Residual Networks for Adversarial Robustness: An Architectural Perspective","created":"2022-12-21","cited_by_count":28,"area":null},{"id":"2110.05626","title":"Parameterizing Activation Functions for Adversarial Robustness","created":"2021-10-11","cited_by_count":22,"area":null},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21,"area":null},{"id":"2110.03135","title":"Label Noise in Adversarial Training: A Novel Perspective to Study Robust Overfitting","created":"2021-10-07","cited_by_count":14,"area":null},{"id":"2201.13351","title":"LinSyn: Synthesizing Tight Linear Bounds for Arbitrary Neural Network Activation Functions","created":"2022-01-31","cited_by_count":10,"area":null},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9,"area":null},{"id":"2401.11618","title":"Efficient local linearity regularization to overcome catastrophic overfitting","created":"2024-01-21","cited_by_count":8,"area":null},{"id":"2204.07373","title":"Revisiting the Adversarial Robustness-Accuracy Tradeoff in Robot Learning","created":"2022-04-15","cited_by_count":7,"area":null},{"id":"2312.03245","title":"A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System","created":"2023-12-06","cited_by_count":6,"area":null},{"id":"2401.10359","title":"Keeping Deep Learning Models in Check: A History-Based Approach to Mitigate Overfitting","created":"2024-01-18","cited_by_count":6,"area":null},{"id":"2409.20139","title":"Characterizing Model Robustness via Natural Input Gradients","created":"2024-09-30","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2404.08980","title":"Stability and Generalization in Free Adversarial Training","created":"2024-04-13","cited_by_count":5,"area":null},{"id":"2211.15900","title":"Towards More Robust Interpretation via Local Gradient Alignment","created":"2022-11-29","cited_by_count":4,"area":null},{"id":"2306.14275","title":"Enhancing Adversarial Training via Reweighting Optimization Trajectory","created":"2023-06-25","cited_by_count":4,"area":null},{"id":"2406.05119","title":"Compositional Curvature Bounds for Deep Neural Networks","created":"2024-06-07","cited_by_count":4,"area":null},{"id":"2204.07921","title":"Fast Multi-grid Methods for Minimizing Curvature Energy","created":"2022-04-17","cited_by_count":3,"area":null},{"id":"2209.02684","title":"Bag of Tricks for FGSM Adversarial Training","created":"2022-09-06","cited_by_count":2,"area":null},{"id":"2505.22486","title":"Understanding Adversarial Training with Energy-based Models","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2406.16200","title":"Feature compression is the root cause of adversarial fragility in neural network classifiers","created":"2024-06-23","cited_by_count":1,"area":null},{"id":"2409.09196","title":"Are Sparse Neural Networks Better Hard Sample Learners?","created":"2024-09-13","cited_by_count":1,"area":null},{"id":"2311.16526","title":"On robust overfitting: adversarial training induced distribution matters","created":"2023-11-28","cited_by_count":0,"area":null},{"id":"2312.03951","title":"Understanding the Role of Optimization in Double Descent","created":"2023-12-06","cited_by_count":0,"area":null},{"id":"2403.16405","title":"Ensemble Adversarial Defense via Integration of Multiple Dispersed Low Curvature Models","created":"2024-03-25","cited_by_count":0,"area":null},{"id":"2605.11558","title":"A Composite Activation Function for Learning Stable Binary Representations","created":"2026-05-12","cited_by_count":0,"area":null}],"next_cursor":null}