{"total":20,"rows":[{"id":"2303.15361","title":"A Comprehensive Survey on Test-Time Adaptation under Distribution Shifts","created":"2023-03-27","cited_by_count":359,"area":null},{"id":"2109.13916","title":"Unsolved Problems in ML Safety","created":"2021-09-28","cited_by_count":292,"area":null},{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2110.14735","title":"Towards Evaluating the Robustness of Neural Networks Learned by Transduction","created":"2021-10-27","cited_by_count":8,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2307.11672","title":"Robust Feature Inference: A Test-time Defense Strategy using Spectral Projections","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2308.00346","title":"Dynamic ensemble selection based on Deep Neural Network Uncertainty Estimation for Adversarial Robustness","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2510.03224","title":"Test-Time Defense Against Adversarial Attacks via Stochastic Resonance of Latent Ensembles","created":"2025-10-03","cited_by_count":2,"area":null},{"id":"2208.06228","title":"Unifying Gradients to Improve Real-world Robustness for Deep Networks","created":"2022-08-12","cited_by_count":1,"area":null},{"id":"2211.05854","title":"Test-time adversarial detection and robustness for localizing humans using ultra wide band channel impulse responses","created":"2022-11-10","cited_by_count":1,"area":null},{"id":"2406.08829","title":"Improving Adversarial Robustness via Feature Pattern Consistency Constraint","created":"2024-06-13","cited_by_count":1,"area":null},{"id":"2504.08414","title":"Adversarial Examples in Environment Perception for Automated Driving (Review)","created":"2025-04-11","cited_by_count":1,"area":null},{"id":"2507.03427","title":"Rectifying Adversarial Sample with Low Entropy Prior for Test-Time Defense","created":"2025-07-04","cited_by_count":1,"area":null},{"id":"2305.17528","title":"Two Heads are Actually Better than One: Towards Better Adversarial Robustness via Transduction and Rejection","created":"2023-05-27","cited_by_count":0,"area":null},{"id":"2610.17382","title":"Mitigating Black-Box Score-Based Query Attacks via Gradient Confusion","created":"2026-10-12","cited_by_count":0,"area":null}],"next_cursor":null}