{"list":"other","total":71,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1812.11118","title":"Reconciling modern machine learning practice and the bias-variance trade-off","created":"2018-12-28","cited_by_count":927},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1912.02781","title":"AugMix: A Simple Data Processing Method to Improve Robustness and Uncertainty","created":"2019-12-05","cited_by_count":901},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1912.02292","title":"Deep Double Descent: Where Bigger Models and More Data Hurt","created":"2019-12-04","cited_by_count":672},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1901.09960","title":"Using Pre-Training Can Improve Model Robustness and Uncertainty","created":"2019-01-28","cited_by_count":373},{"id":"2006.07710","title":"The Pitfalls of Simplicity Bias in Neural Networks","created":"2020-06-13","cited_by_count":351},{"id":"1412.6614","title":"In Search of the Real Inductive Bias: On the Role of Implicit Regularization in Deep Learning","created":"2014-12-20","cited_by_count":342},{"id":"1710.10571","title":"Certifying Some Distributional Robustness with Principled Adversarial Training","created":"2017-10-29","cited_by_count":337},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1806.00451","title":"Do CIFAR-10 Classifiers Generalize to CIFAR-10?","created":"2018-06-01","cited_by_count":200},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"1810.11914","title":"Rademacher Complexity for Adversarially Robust Generalization","created":"2018-10-29","cited_by_count":132},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"2002.11328","title":"Rethinking Bias-Variance Trade-off for Generalization of Neural Networks","created":"2020-02-26","cited_by_count":107},{"id":"1902.04217","title":"VC Classes are Adversarially Robustly Learnable, but Only Improperly","created":"2019-02-12","cited_by_count":83},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"2002.10477","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","created":"2020-02-24","cited_by_count":77},{"id":"1502.02590","title":"Analysis of classifiers' robustness to adversarial perturbations","created":"2015-02-09","cited_by_count":76},{"id":"1906.00555","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","created":"2019-06-03","cited_by_count":76},{"id":"2011.03321","title":"Understanding Double Descent Requires a Fine-Grained Bias-Variance Decomposition","created":"2020-11-04","cited_by_count":76},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71},{"id":"1909.12272","title":"Lower Bounds on Adversarial Robustness from Optimal Transport","created":"2019-09-26","cited_by_count":53},{"id":"2010.11213","title":"Precise Statistical Analysis of Classification Accuracies for Adversarial Training","created":"2020-10-21","cited_by_count":50},{"id":"1905.13021","title":"Robustness to Adversarial Perturbations in Learning from Incomplete Data","created":"2019-05-24","cited_by_count":49},{"id":"2006.05161","title":"Provable tradeoffs in adversarially robust classification","created":"2020-06-09","cited_by_count":40},{"id":"1901.00532","title":"Adversarial Robustness May Be at Odds With Simplicity","created":"2019-01-02","cited_by_count":39},{"id":"2010.02681","title":"Kernel regression in high dimensions: Refined analysis beyond double descent","created":"2020-10-06","cited_by_count":39},{"id":"1706.03922","title":"Analyzing the Robustness of Nearest Neighbors to Adversarial Examples","created":"2017-06-13","cited_by_count":36},{"id":"1912.02794","title":"Adversarial Risk via Optimal Transport and Optimal Couplings","created":"2019-12-05","cited_by_count":36},{"id":"2006.16384","title":"Sharp Statistical Guarantees for Adversarially Robust Gaussian Classification","created":"2020-06-29","cited_by_count":28},{"id":"2010.05170","title":"What causes the test error? Going beyond bias-variance via ANOVA","created":"2020-10-11","cited_by_count":28},{"id":"1806.01471","title":"PAC-learning in the presence of evasion adversaries","created":"2018-06-05","cited_by_count":23},{"id":"2012.10278","title":"Adversarially Robust Estimate and Risk Analysis in Linear Regression","created":"2020-12-18","cited_by_count":22},{"id":"2003.06121","title":"When are Non-Parametric Methods Robust?","created":"2020-03-13","cited_by_count":15},{"id":"2010.13275","title":"Asymptotic Behavior of Adversarial Training in Binary Classification","created":"2020-10-26","cited_by_count":15},{"id":"1905.12202","title":"Empirically Measuring Concentration: Fundamental Limits on Intrinsic Robustness","created":"2019-05-29","cited_by_count":12},{"id":"1906.02931","title":"Inductive Bias of Gradient Descent based Adversarial Training on Separable Data","created":"2019-06-07","cited_by_count":12},{"id":"1906.03310","title":"Robustness for Non-Parametric Classification: A Generic Attack and Defense","created":"2019-06-07","cited_by_count":12},{"id":"1811.06418","title":"Adversarial Examples from Cryptographic Pseudo-Random Generators","created":"2018-11-15","cited_by_count":10},{"id":"1810.04065","title":"Generalized No Free Lunch Theorem for Adversarial Robustness","created":"2018-10-08","cited_by_count":2},{"id":"2008.00138","title":"Vulnerability Under Adversarial Machine Learning: Bias or Variance?","created":"2020-08-01","cited_by_count":2}],"next_cursor":null}