{"list":"other","total":53,"rows":[{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1802.05957","title":"Spectral Normalization for Generative Adversarial Networks","created":"2018-02-16","cited_by_count":1636},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1803.04765","title":"Deep k-Nearest Neighbors: Towards Confident, Interpretable and Robust Deep Learning","created":"2018-03-13","cited_by_count":207},{"id":"1805.11783","title":"To Trust Or Not To Trust A Classifier","created":"2018-05-30","cited_by_count":207},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"1712.02390","title":"Noisy Natural Gradient as Variational Inference","created":"2017-12-06","cited_by_count":94},{"id":"1902.04818","title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples","created":"2019-02-13","cited_by_count":75},{"id":"1608.07690","title":"A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples","created":"2016-08-27","cited_by_count":70},{"id":"1810.01279","title":"Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network","created":"2018-10-01","cited_by_count":69},{"id":"1809.04790","title":"Adversarial Examples: Opportunities and Challenges","created":"2018-09-13","cited_by_count":63},{"id":"1909.03084","title":"Learning to Discriminate Perturbations for Blocking Adversarial Attacks in Text Classification","created":"2019-09-06","cited_by_count":57},{"id":"2004.05887","title":"Frequency-Guided Word Substitutions for Detecting Textual Adversarial Examples","created":"2020-04-13","cited_by_count":54},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"1906.03499","title":"ML-LOO: Detecting Adversarial Examples with Feature Attribution","created":"2019-06-08","cited_by_count":48},{"id":"2002.04359","title":"Robustness of Bayesian Neural Networks to Gradient-Based Attacks","created":"2020-02-11","cited_by_count":48},{"id":"1810.11580","title":"Attacks Meet Interpretability: Attribute-steered Detection of Adversarial Samples","created":"2018-10-27","cited_by_count":38},{"id":"1712.09196","title":"The Robust Manifold Defense: Adversarial Training using Generative Models","created":"2017-12-26","cited_by_count":35},{"id":"1906.04392","title":"Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks","created":"2019-06-11","cited_by_count":35},{"id":"2001.01587","title":"Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient","created":"2020-01-01","cited_by_count":31},{"id":"2004.06496","title":"Certifiable Robustness to Adversarial State Uncertainty in Deep Reinforcement Learning","created":"2020-04-11","cited_by_count":24},{"id":"2007.15147","title":"A General Framework For Detecting Anomalous Inputs to DNN Classifiers","created":"2020-07-29","cited_by_count":24},{"id":"1911.01921","title":"DLA: Dense-Layer-Analysis for Adversarial Example Detection","created":"2019-11-05","cited_by_count":20},{"id":"2101.11466","title":"Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Voting","created":"2021-01-27","cited_by_count":16},{"id":"1811.07950","title":"Optimal Transport Classifier: Defending Against Adversarial Attacks by Regularized Deep Embedding","created":"2018-11-19","cited_by_count":2}],"next_cursor":null}