{"total":18,"rows":[{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2302.10164","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","created":"2023-02-20","cited_by_count":23,"area":null},{"id":"2303.09992","title":"LION: Implicit Vision Prompt Tuning","created":"2023-03-17","cited_by_count":22,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2310.19889","title":"Exploring Geometry of Blind Spots in Vision Models","created":"2023-10-30","cited_by_count":2,"area":null},{"id":"2502.04248","title":"Adapting to Evolving Adversaries with Regularized Continual Robust Training","created":"2025-02-06","cited_by_count":2,"area":null},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2402.06827","title":"RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations for Universal Robustness","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2405.01349","title":"Position: Towards Resilience Against Adversarial Examples","created":"2024-05-02","cited_by_count":1,"area":null},{"id":"2407.09251","title":"Deep Adversarial Defense Against Multilevel-Lp Attacks","created":"2024-07-12","cited_by_count":1,"area":null},{"id":"2410.03000","title":"Towards Generalized Certified Robustness with Multi-Norm Training","created":"2024-10-03","cited_by_count":1,"area":null},{"id":"2508.14079","title":"A Guide to Robust Generalization: The Impact of Architecture, Pre-training, and Optimization Strategy","created":"2025-08-12","cited_by_count":1,"area":null},{"id":"2510.13361","title":"Generalist++: A Meta-learning Framework for Mitigating Trade-off in Adversarial Training","created":"2025-10-15","cited_by_count":1,"area":null},{"id":"2605.26929","title":"When Muon Optimizer Meets Adversarial Training: A Theoretical and Empirical Study","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2303.10225","title":"Bridging Models to Defend: A Population-Based Strategy for Robust Adversarial Defense","created":"2023-03-17","cited_by_count":0,"area":null},{"id":"2511.12265","title":"Stabilizing Multi-Attack Adversarial Training via Bandit Optimization","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2603.01264","title":"S2O: Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2026-03-01","cited_by_count":0,"area":null},{"id":"2606.17540","title":"TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks","created":"2026-06-16","cited_by_count":0,"area":null}],"next_cursor":null}