{"list":"other","total":94,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1706.04599","title":"On Calibration of Modern Neural Networks","created":"2017-06-14","cited_by_count":4960},{"id":"2006.07733","title":"Bootstrap your own latent: A new approach to self-supervised Learning","created":"2020-06-13","cited_by_count":4750},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"2010.03759","title":"Energy-based Out-of-distribution Detection","created":"2020-10-08","cited_by_count":1299},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1705.08500","title":"Selective Classification for Deep Neural Networks","created":"2017-05-23","cited_by_count":852},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1901.09960","title":"Using Pre-Training Can Improve Model Robustness and Uncertainty","created":"2019-01-28","cited_by_count":373},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1901.09192","title":"SelectiveNet: A Deep Neural Network with an Integrated Reject Option","created":"2019-01-26","cited_by_count":350},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"2010.01736","title":"Geometry-aware Instance-reweighted Adversarial Training","created":"2020-10-05","cited_by_count":198},{"id":"1910.04851","title":"Addressing Failure Prediction by Learning Model Confidence","created":"2019-10-01","cited_by_count":186},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"2006.04924","title":"A Self-supervised Approach for Adversarial Robustness","created":"2020-06-08","cited_by_count":180},{"id":"1803.08533","title":"Understanding Measures of Uncertainty for Adversarial Example Detection","created":"2018-03-22","cited_by_count":177},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"1805.04807","title":"Curriculum Adversarial Training","created":"2018-05-13","cited_by_count":89},{"id":"1909.04068","title":"Adversarial Robustness Against the Union of Multiple Perturbation Models","created":"2019-09-09","cited_by_count":88},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"1909.00900","title":"Metric Learning for Adversarial Robustness","created":"2019-09-03","cited_by_count":77},{"id":"1704.00103","title":"SafetyNet: Detecting and Rejecting Adversarial Examples Robustly","created":"2017-04-01","cited_by_count":76},{"id":"1902.04818","title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples","created":"2019-02-13","cited_by_count":75},{"id":"2009.14720","title":"DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles","created":"2020-09-30","cited_by_count":73},{"id":"1909.06872","title":"Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors","created":"2019-09-15","cited_by_count":72},{"id":"1810.01279","title":"Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network","created":"2018-10-01","cited_by_count":69},{"id":"2011.14969","title":"Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2020-11-30","cited_by_count":62},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"1906.03499","title":"ML-LOO: Detecting Adversarial Examples with Feature Attribution","created":"2019-06-08","cited_by_count":48},{"id":"1910.09338","title":"An Alternative Surrogate Loss for PGD-based Adversarial Testing","created":"2019-10-21","cited_by_count":45},{"id":"1909.11786","title":"Probabilistic Modeling of Deep Features for Out-of-Distribution and Adversarial Detection","created":"2019-09-25","cited_by_count":39},{"id":"1810.11580","title":"Attacks Meet Interpretability: Attribute-steered Detection of Adversarial Samples","created":"2018-10-27","cited_by_count":38},{"id":"2006.03089","title":"Towards Understanding Fast Adversarial Training","created":"2020-06-04","cited_by_count":33},{"id":"1910.00470","title":"Deep Neural Rejection against Adversarial Examples","created":"2019-10-01","cited_by_count":32},{"id":"1911.01921","title":"DLA: Dense-Layer-Analysis for Adversarial Example Detection","created":"2019-11-05","cited_by_count":20},{"id":"1903.01612","title":"Defense Against Adversarial Images using Web-Scale Nearest-Neighbor Search","created":"2019-03-05","cited_by_count":19},{"id":"1810.03806","title":"The Adversarial Attack and Detection under the Fisher Information Metric","created":"2018-10-09","cited_by_count":18},{"id":"1905.09591","title":"A Direct Approach to Robust Deep Learning Using Adversarial Networks","created":"2019-05-23","cited_by_count":18},{"id":"1912.07748","title":"MimicGAN: Robust Projection onto Image Manifolds with Corruption Mimicking","created":"2019-12-16","cited_by_count":16},{"id":"2003.06979","title":"Anomalous Example Detection in Deep Learning: A Survey","created":"2020-03-16","cited_by_count":16},{"id":"1912.11852","title":"Benchmarking Adversarial Robustness","created":"2019-12-26","cited_by_count":15},{"id":"1905.11713","title":"Improving the Robustness of Deep Neural Networks via Adversarial Training with Triplet Loss","created":"2019-05-28","cited_by_count":13},{"id":"1911.06470","title":"Self-supervised Adversarial Training","created":"2019-11-15","cited_by_count":12},{"id":"1711.08244","title":"Adversarial Phenomenon in the Eyes of Bayesian Deep Learning","created":"2017-11-22","cited_by_count":11},{"id":"1812.03190","title":"Deep-RBF Networks Revisited: Robust Classification with Rejection","created":"2018-12-07","cited_by_count":10},{"id":"1809.07802","title":"Playing the Game of Universal Adversarial Perturbations","created":"2018-09-20","cited_by_count":9},{"id":"1911.11253","title":"Playing it Safe: Adversarial Robustness with an Abstain Option","created":"2019-11-25","cited_by_count":9},{"id":"2002.09632","title":"Using Single-Step Adversarial Training to Defend Iterative Adversarial Examples","created":"2020-02-22","cited_by_count":9},{"id":"2010.09119","title":"FADER: Fast Adversarial Example Rejection","created":"2020-10-18","cited_by_count":9},{"id":"1803.08773","title":"Detecting Adversarial Perturbations with Saliency","created":"2018-03-23","cited_by_count":8},{"id":"1904.02841","title":"Minimum Uncertainty Based Detection of Adversaries in Deep Neural Networks","created":"2019-04-05","cited_by_count":8},{"id":"2010.12905","title":"ATRO: Adversarial Training with a Rejection Option","created":"2020-10-24","cited_by_count":8},{"id":"1711.08001","title":"Reinforcing Adversarial Robustness using Model Confidence Induced by Adversarial Training","created":"2017-11-21","cited_by_count":4},{"id":"2005.05552","title":"Effective and Robust Detection of Adversarial Examples via Benford-Fourier Coefficients","created":"2020-05-12","cited_by_count":3},{"id":"1705.02224","title":"Detecting Adversarial Samples Using Density Ratio Estimates","created":"2017-05-05","cited_by_count":1}],"next_cursor":null}