{"total":48,"rows":[{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2105.10304","title":"Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attacks","created":"2021-05-21","cited_by_count":33,"area":null},{"id":"2106.09947","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples","created":"2021-06-18","cited_by_count":23,"area":null},{"id":"2206.07179","title":"Proximal Splitting Adversarial Attacks for Semantic Segmentation","created":"2022-06-14","cited_by_count":23,"area":null},{"id":"2205.09619","title":"Improving Robustness against Real-World and Worst-Case Distribution Shifts through Decision Region Quantification","created":"2022-05-19","cited_by_count":16,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2409.01249","title":"Adversarial Pruning: A Survey and Benchmark of Pruning Methods for Adversarial Robustness","created":"2024-09-02","cited_by_count":10,"area":null},{"id":"2210.00973","title":"NCVX: A General-Purpose Optimization Solver for Constrained Machine and Deep Learning","created":"2022-10-03","cited_by_count":7,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2201.01235","title":"On the Minimal Adversarial Perturbation for Deep Neural Networks with Provable Estimation Error","created":"2022-01-04","cited_by_count":6,"area":null},{"id":"2303.13401","title":"Optimization and Optimizers for Adversarial Robustness","created":"2023-03-23","cited_by_count":6,"area":null},{"id":"2403.02723","title":"Minimum Topology Attacks for Graph Neural Networks","created":"2024-03-05","cited_by_count":6,"area":null},{"id":"2404.05219","title":"Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Survey","created":"2024-04-08","cited_by_count":6,"area":null},{"id":"2308.07673","title":"A Review of Adversarial Attacks in Computer Vision","created":"2023-08-15","cited_by_count":5,"area":null},{"id":"2408.09839","title":"Segment-Anything Models Achieve Zero-shot Robustness in Autonomous Driving","created":"2024-08-19","cited_by_count":5,"area":null},{"id":"2209.04293","title":"Robust-by-Design Classification via Unitary-Gradient Neural Networks","created":"2022-09-09","cited_by_count":4,"area":null},{"id":"2310.08177","title":"Improving Fast Minimum-Norm Attacks with Hyperparameter Optimization","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2402.17390","title":"Robustness-Congruent Adversarial Training for Secure Machine Learning Model Updates","created":"2024-02-27","cited_by_count":4,"area":null},{"id":"2404.14402","title":"A mean curvature flow arising in adversarial training","created":"2024-04-22","cited_by_count":4,"area":null},{"id":"2407.15385","title":"Towards Robust Vision Transformer via Masked Adaptive Ensemble","created":"2024-07-22","cited_by_count":4,"area":null},{"id":"2108.13930","title":"EG-Booster: Explanation-Guided Booster of ML Evasion Attacks","created":"2021-08-31","cited_by_count":3,"area":null},{"id":"2210.00621","title":"Optimization for Robustness Evaluation beyond $\\ell_p$ Metrics","created":"2022-10-02","cited_by_count":3,"area":null},{"id":"2303.13326","title":"Decentralized Adversarial Training over Graphs","created":"2023-03-23","cited_by_count":3,"area":null},{"id":"2202.13074","title":"Neuro-Inspired Deep Neural Networks with Sparse, Strong Activations","created":"2022-02-26","cited_by_count":2,"area":null},{"id":"2205.09586","title":"On Trace of PGD-Like Adversarial Attacks","created":"2022-05-19","cited_by_count":2,"area":null},{"id":"2212.07992","title":"Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks","created":"2022-12-15","cited_by_count":2,"area":null},{"id":"2307.07167","title":"Vulnerability-Aware Instance Reweighting For Adversarial Training","created":"2023-07-14","cited_by_count":2,"area":null},{"id":"2503.19347","title":"Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent","created":"2025-03-25","cited_by_count":2,"area":null},{"id":"2507.03450","title":"Evaluating the Evaluators: Trust in Adversarial Robustness Tests","created":"2025-07-04","cited_by_count":2,"area":null},{"id":"2103.07598","title":"Internal Wasserstein Distance for Adversarial Attack and Defense","created":"2021-03-13","cited_by_count":1,"area":null},{"id":"2111.07169","title":"Where to Look: A Unified Attention Model for Visual Recognition with Reinforcement Learning","created":"2021-11-13","cited_by_count":1,"area":null},{"id":"2301.01223","title":"ExploreADV: Towards exploratory attack for Neural Networks","created":"2023-01-01","cited_by_count":1,"area":null},{"id":"2303.12481","title":"Revisiting DeepFool: generalization and improvement","created":"2023-03-22","cited_by_count":1,"area":null},{"id":"2304.02312","title":"How to choose your best allies for a transferable attack?","created":"2023-04-05","cited_by_count":1,"area":null},{"id":"2310.08073","title":"Samples on Thin Ice: Re-Evaluating Adversarial Pruning of Neural Networks","created":"2023-10-12","cited_by_count":1,"area":null},{"id":"2503.03842","title":"Task-Agnostic Attacks Against Vision Foundation Models","created":"2025-03-05","cited_by_count":1,"area":null},{"id":"2503.06361","title":"Adversarial Robustness of Discriminative Self-Supervised Learning in Vision","created":"2025-03-08","cited_by_count":1,"area":null},{"id":"2503.16271","title":"Rethinking Robustness in Machine Learning: A Posterior Agreement Approach","created":"2025-03-20","cited_by_count":1,"area":null},{"id":"2506.17250","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","created":"2025-06-08","cited_by_count":1,"area":null},{"id":"2105.00278","title":"A Perceptual Distortion Reduction Framework: Towards Generating Adversarial Examples with High Perceptual Quality and Attack Success Rate","created":"2021-05-01","cited_by_count":0,"area":null},{"id":"2302.08973","title":"Measuring Equality in Machine Learning Security Defenses: A Case Study in Speech Recognition","created":"2023-02-17","cited_by_count":0,"area":null},{"id":"2305.15203","title":"Frequency maps reveal the correlation between Adversarial Attacks and Implicit Bias","created":"2023-05-24","cited_by_count":0,"area":null},{"id":"2407.08806","title":"HO-FMN: Hyperparameter Optimization for Fast Minimum-Norm Attacks","created":"2024-07-11","cited_by_count":0,"area":null},{"id":"2601.00577","title":"Adversarial Samples Are Not Created Equal","created":"2026-01-02","cited_by_count":0,"area":null},{"id":"2607.19855","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2607.24177","title":"EXE-Bench: Ranking the Tradeoffs of AI-based Windows Malware Detectors for Real-World Usability","created":"2026-07-27","cited_by_count":0,"area":null},{"id":"2610.00861","title":"Don't Waste the Noise: Importance-Guided Perturbation Allocation under Joint Global and Local Constraints","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}