{"list":"other","total":51,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1904.12848","title":"Unsupervised Data Augmentation for Consistency Training","created":"2019-04-29","cited_by_count":1060},{"id":"1704.03976","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","created":"2017-04-13","cited_by_count":920},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1312.6184","title":"Do Deep Nets Really Need to be Deep?","created":"2013-12-21","cited_by_count":474},{"id":"1512.02595","title":"Deep Speech 2: End-to-End Speech Recognition in English and Mandarin","created":"2015-12-08","cited_by_count":451},{"id":"1606.04586","title":"Regularization With Stochastic Transformations and Perturbations for Deep Semi-Supervised Learning","created":"2016-06-14","cited_by_count":441},{"id":"1812.01187","title":"Bag of Tricks for Image Classification with Convolutional Neural Networks","created":"2018-12-04","cited_by_count":431},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1811.08581","title":"Recent Advances in Open Set Recognition: A Survey","created":"2018-11-21","cited_by_count":310},{"id":"1708.02709","title":"Recent Trends in Deep Learning Based Natural Language Processing","created":"2017-08-09","cited_by_count":263},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"1907.02610","title":"Adversarial Robustness through Local Linearization","created":"2019-07-04","cited_by_count":146},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1511.06390","title":"Unsupervised and Semi-supervised Learning with Categorical Generative Adversarial Networks","created":"2015-11-19","cited_by_count":95},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"1803.08680","title":"Improving DNN Robustness to Adversarial Attacks using Jacobian Regularization","created":"2018-03-23","cited_by_count":88},{"id":"1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","created":"2017-05-08","cited_by_count":87},{"id":"1704.00103","title":"SafetyNet: Detecting and Rejecting Adversarial Examples Robustly","created":"2017-04-01","cited_by_count":76},{"id":"1906.00555","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","created":"2019-06-03","cited_by_count":76},{"id":"1810.09619","title":"Sparse DNNs with Improved Adversarial Robustness","created":"2018-10-23","cited_by_count":72},{"id":"1905.11971","title":"ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation","created":"2019-05-28","cited_by_count":65},{"id":"1707.06728","title":"Efficient Defenses Against Adversarial Attacks","created":"2017-07-21","cited_by_count":53},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"1705.08378","title":"Detecting Adversarial Image Examples in Deep Networks with Adaptive Noise Reduction","created":"2017-05-23","cited_by_count":49},{"id":"1905.13021","title":"Robustness to Adversarial Perturbations in Learning from Incomplete Data","created":"2019-05-24","cited_by_count":49},{"id":"1803.00404","title":"Deep Defense: Training DNNs with Improved Adversarial Robustness","created":"2018-02-23","cited_by_count":42},{"id":"2006.00731","title":"Second-Order Provable Defenses against Adversarial Attacks","created":"2020-06-01","cited_by_count":40},{"id":"1803.00401","title":"Unravelling Robustness of Deep Learning based Face Recognition Against Adversarial Attacks","created":"2018-02-22","cited_by_count":31},{"id":"2009.00814","title":"Open-set Adversarial Defense","created":"2020-09-02","cited_by_count":27},{"id":"2009.08194","title":"Vax-a-Net: Training-time Defence Against Adversarial Patch Attacks","created":"2020-09-17","cited_by_count":11},{"id":"1811.02625","title":"MixTrain: Scalable Training of Verifiably Robust Neural Networks","created":"2018-11-06","cited_by_count":9},{"id":"1910.12165","title":"Adversarial Defense via Local Flatness Regularization","created":"2019-10-27","cited_by_count":9},{"id":"1805.08736","title":"Adversarially Robust Training through Structured Gradient Regularization","created":"2018-05-22","cited_by_count":5},{"id":"2003.06974","title":"Toward Adversarial Robustness via Semi-supervised Robust Training","created":"2020-03-16","cited_by_count":5},{"id":"1907.07001","title":"Latent Adversarial Defence with Boundary-guided Generation","created":"2019-07-16","cited_by_count":3}],"next_cursor":null}