{"list":"other","total":68,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1606.08415","title":"Gaussian Error Linear Units (GELUs)","created":"2016-06-27","cited_by_count":3502},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1803.05407","title":"Averaging Weights Leads to Wider Optima and Better Generalization","created":"2018-03-14","cited_by_count":1209},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1812.11118","title":"Reconciling modern machine learning practice and the bias-variance trade-off","created":"2018-12-28","cited_by_count":927},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1912.02292","title":"Deep Double Descent: Where Bigger Models and More Data Hurt","created":"2019-12-04","cited_by_count":672},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1706.08947","title":"Exploring Generalization in Deep Learning","created":"2017-06-27","cited_by_count":600},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1804.04368","title":"Regularisation of Neural Networks by Enforcing Lipschitz Continuity","created":"2018-04-12","cited_by_count":314},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1705.08741","title":"Train longer, generalize better: closing the generalization gap in large batch training of neural networks","created":"2017-05-24","cited_by_count":279},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1610.06940","title":"Safety Verification of Deep Neural Networks","created":"2016-10-21","cited_by_count":263},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"1705.01320","title":"Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks","created":"2017-05-03","cited_by_count":242},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1811.05381","title":"Sorting out Lipschitz function approximation","created":"2018-11-13","cited_by_count":213},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1908.08681","title":"Mish: A Self Regularized Non-Monotonic Activation Function","created":"2019-08-23","cited_by_count":141},{"id":"2006.12655","title":"Perceptual Adversarial Robustness: Defense Against Unseen Threat Models","created":"2020-06-22","cited_by_count":137},{"id":"1706.07351","title":"An approach to reachability analysis for feed-forward ReLU neural networks","created":"2017-06-22","cited_by_count":127},{"id":"1902.08722","title":"A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks","created":"2019-02-23","cited_by_count":125},{"id":"2003.01897","title":"Optimal Regularization Can Mitigate Double Descent","created":"2020-03-04","cited_by_count":109},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"2006.14536","title":"Smooth Adversarial Training","created":"2020-06-25","cited_by_count":89},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"1906.00001","title":"Functional Adversarial Attacks","created":"2019-05-29","cited_by_count":82},{"id":"2003.02484","title":"Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization","created":"2020-03-05","cited_by_count":73},{"id":"1811.07457","title":"Generalizable Adversarial Training via Spectral Normalization","created":"2018-11-19","cited_by_count":68},{"id":"2009.02470","title":"Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks","created":"2020-09-05","cited_by_count":45},{"id":"2006.00731","title":"Second-Order Provable Defenses against Adversarial Attacks","created":"2020-06-01","cited_by_count":40},{"id":"1905.12105","title":"Certifiably Robust Interpretation in Deep Learning","created":"2019-05-28","cited_by_count":35},{"id":"1712.06174","title":"Deep Neural Networks as 0-1 Mixed Integer Linear Programs: A Feasibility Study","created":"2017-12-17","cited_by_count":25},{"id":"2006.03179","title":"Discovering Parametric Activation Functions","created":"2020-06-05","cited_by_count":22},{"id":"1901.05894","title":"LiSHT: Non-Parametric Linearly Scaled Hyperbolic Tangent Activation Function for Neural Networks","created":"2019-01-01","cited_by_count":9}],"next_cursor":null}