{"list":"other","total":66,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1912.02292","title":"Deep Double Descent: Where Bigger Models and More Data Hurt","created":"2019-12-04","cited_by_count":672},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1603.00943","title":"CVXPY: A Python-Embedded Modeling Language for Convex Optimization","created":"2016-03-03","cited_by_count":641},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1903.08560","title":"Surprises in High-Dimensional Ridgeless Least Squares Interpolation","created":"2019-03-19","cited_by_count":513},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1906.05890","title":"Gradient Descent Maximizes the Margin of Homogeneous Neural Networks","created":"2019-06-13","cited_by_count":320},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1906.08988","title":"A Fourier Perspective on Model Robustness in Computer Vision","created":"2019-06-21","cited_by_count":288},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"2002.04486","title":"Implicit Bias of Gradient Descent for Wide Two-layer Neural Networks Trained with the Logistic Loss","created":"2020-02-11","cited_by_count":268},{"id":"1802.08246","title":"Characterizing Implicit Bias in Terms of Optimization Geometry","created":"2018-02-22","cited_by_count":266},{"id":"1806.00468","title":"Implicit Bias of Gradient Descent on Linear Convolutional Networks","created":"2018-06-01","cited_by_count":251},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1810.02032","title":"Gradient descent aligns the layers of deep linear networks","created":"2018-10-04","cited_by_count":182},{"id":"2006.06657","title":"Directional convergence and alignment in deep learning","created":"2020-06-11","cited_by_count":178},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"1907.02610","title":"Adversarial Robustness through Local Linearization","created":"2019-07-04","cited_by_count":146},{"id":"1810.05369","title":"Regularization Matters: Generalization and Optimization of Neural Nets v.s. their Induced Kernel","created":"2018-10-12","cited_by_count":131},{"id":"1902.08722","title":"A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks","created":"2019-02-23","cited_by_count":125},{"id":"1605.08254","title":"Robust Large Margin Deep Neural Networks","created":"2016-05-26","cited_by_count":118},{"id":"1910.01635","title":"A Function Space View of Bounded Norm Infinite Width ReLU Nets: The Multivariate Case","created":"2019-10-03","cited_by_count":114},{"id":"1803.05598","title":"Large Margin Deep Networks for Classification","created":"2018-03-15","cited_by_count":112},{"id":"1803.01905","title":"Convergence of Gradient Descent on Separable Data","created":"2018-03-05","cited_by_count":110},{"id":"2006.14536","title":"Smooth Adversarial Training","created":"2020-06-25","cited_by_count":89},{"id":"1909.04068","title":"Adversarial Robustness Against the Union of Multiple Perturbation Models","created":"2019-09-09","cited_by_count":88},{"id":"1911.05822","title":"A Model of Double Descent for High-dimensional Binary Linear Classification","created":"2019-11-13","cited_by_count":81},{"id":"1809.08758","title":"Low Frequency Adversarial Perturbation","created":"2018-09-24","cited_by_count":80},{"id":"1802.08686","title":"Adversarial vulnerability for any classifier","created":"2018-02-23","cited_by_count":78},{"id":"2002.10477","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","created":"2020-02-24","cited_by_count":77},{"id":"1502.02590","title":"Analysis of classifiers' robustness to adversarial perturbations","created":"2015-02-09","cited_by_count":76},{"id":"2010.02501","title":"A Unifying View on Implicit Bias in Training Linear Neural Networks","created":"2020-10-06","cited_by_count":75},{"id":"2003.09461","title":"Adversarial Robustness on In- and Out-Distribution Improves Explainability","created":"2020-03-20","cited_by_count":73},{"id":"1802.09653","title":"On the Suitability of $L_p$-norms for Creating and Preventing Adversarial Examples","created":"2018-02-27","cited_by_count":58},{"id":"1903.00073","title":"On the Effectiveness of Low Frequency Perturbations","created":"2019-02-28","cited_by_count":56},{"id":"2010.11213","title":"Precise Statistical Analysis of Classification Accuracies for Adversarial Training","created":"2020-10-21","cited_by_count":50},{"id":"1511.06385","title":"A Unified Gradient Regularization Family for Adversarial Examples","created":"2015-11-19","cited_by_count":43},{"id":"2006.05161","title":"Provable tradeoffs in adversarially robust classification","created":"2020-06-09","cited_by_count":40},{"id":"1303.4172","title":"Margins, Shrinkage, and Boosting","created":"2013-03-18","cited_by_count":35},{"id":"1809.04098","title":"On the Structural Sensitivity of Deep Convolutional Networks to the Directions of Fourier Basis Functions","created":"2018-09-11","cited_by_count":32},{"id":"2002.06349","title":"Hold me tight! Influence of discriminative features on deep network boundaries","created":"2020-02-15","cited_by_count":31},{"id":"1905.02161","title":"Batch Normalization is a Cause of Adversarial Vulnerability","created":"2019-05-06","cited_by_count":29},{"id":"2011.10675","title":"An Effective Anti-Aliasing Approach for Residual Networks","created":"2020-11-20","cited_by_count":23},{"id":"1906.02439","title":"Should Adversarial Attacks Use Pixel p-Norm?","created":"2019-06-06","cited_by_count":10},{"id":"2005.09147","title":"Increasing-Margin Adversarial (IMA) Training to Improve Adversarial Robustness of Neural Networks","created":"2020-05-19","cited_by_count":9},{"id":"2006.11007","title":"Towards an Adversarially Robust Normalization Approach","created":"2020-06-19","cited_by_count":9},{"id":"2007.02209","title":"On Connections between Regularizations for Improving DNN Robustness","created":"2020-07-04","cited_by_count":5},{"id":"2004.01832","title":"SOAR: Second-Order Adversarial Regularization","created":"2020-04-04","cited_by_count":4}],"next_cursor":null}