{"total":34,"rows":[{"id":"2305.06329","title":"Similarity of Neural Network Models: A Survey of Functional and Representational Measures","created":"2023-05-10","cited_by_count":131,"area":null},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89,"area":null},{"id":"2107.10873","title":"On the Certified Robustness for Ensemble Models and Beyond","created":"2021-07-22","cited_by_count":40,"area":null},{"id":"2210.11620","title":"LOT: Layer-wise Orthogonal Training on Improving $\\ell_2$ Certified Robustness","created":"2022-10-20","cited_by_count":33,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2310.18477","title":"Understanding and Improving Ensemble Adversarial Defense","created":"2023-10-27","cited_by_count":14,"area":null},{"id":"2401.08734","title":"Bag of Tricks to Boost Adversarial Transferability","created":"2024-01-16","cited_by_count":12,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2410.04968","title":"Collaboration! Towards Robust Neural Methods for Routing Problems","created":"2024-10-07","cited_by_count":9,"area":null},{"id":"2202.01832","title":"Adversarially Robust Models may not Transfer Better: Sufficient Conditions for Domain Transferability from the View of Regularization","created":"2022-02-03","cited_by_count":8,"area":null},{"id":"2211.08008","title":"MORA: Improving Ensemble Robustness Evaluation with Model-Reweighing Attack","created":"2022-11-15","cited_by_count":7,"area":null},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2410.06851","title":"Understanding Model Ensemble in Transferable Adversarial Attack","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2206.06737","title":"Adversarial Vulnerability of Randomized Ensembles","created":"2022-06-14","cited_by_count":5,"area":null},{"id":"2302.07221","title":"On the Role of Randomization in Adversarially Robust Classification","created":"2023-02-14","cited_by_count":4,"area":null},{"id":"2302.01375","title":"On the Robustness of Randomized Ensembles to Adversarial Perturbations","created":"2023-02-02","cited_by_count":3,"area":null},{"id":"2206.14477","title":"Adversarial Ensemble Training by Jointly Learning Label Dependencies and Member Models","created":"2022-06-29","cited_by_count":2,"area":null},{"id":"2210.03349","title":"Game-Theoretic Understanding of Misclassification","created":"2022-10-07","cited_by_count":2,"area":null},{"id":"2401.09574","title":"Towards Scalable and Robust Model Versioning","created":"2024-01-17","cited_by_count":2,"area":null},{"id":"2405.13324","title":"Adversarial Training via Adaptive Knowledge Amalgamation of an Ensemble of Teachers","created":"2024-05-22","cited_by_count":2,"area":null},{"id":"2502.17003","title":"Information-Geometric Inverse Distillation for Enhancing Adversarial Transferability","created":"2025-02-24","cited_by_count":2,"area":null},{"id":"2509.23689","title":"Merge Now, Regret Later: The Hidden Cost of Model Merging Is Adversarial Transferability","created":"2025-09-28","cited_by_count":2,"area":null},{"id":"2307.10788","title":"Adversarial attacks for mixtures of classifiers","created":"2023-07-20","cited_by_count":1,"area":null},{"id":"2401.17038","title":"Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR","created":"2024-01-30","cited_by_count":1,"area":null},{"id":"2403.13204","title":"Diversity-Aware Agnostic Ensemble of Sharpness Minimizers","created":"2024-03-19","cited_by_count":1,"area":null},{"id":"2405.02564","title":"Probing Human Visual Robustness with Neurally-Guided Deep Neural Networks","created":"2024-05-04","cited_by_count":1,"area":null},{"id":"2410.05136","title":"LOTOS: Layer-wise Orthogonalization for Training Robust Ensembles","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2511.19636","title":"Parameter-Efficient Construction of the Rashomon Slice for Concept Bottleneck Models","created":"2025-11-24","cited_by_count":1,"area":null},{"id":"2607.14921","title":"Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks","created":"2026-07-16","cited_by_count":1,"area":null},{"id":"2312.11309","title":"The Ultimate Combo: Boosting Adversarial Example Transferability by Composing Data Augmentations","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2509.00089","title":"Learning from Peers: Collaborative Ensemble Adversarial Training","created":"2025-08-27","cited_by_count":0,"area":null}],"next_cursor":null}