{"list":"other","total":69,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1712.09913","title":"Visualizing the Loss Landscape of Neural Nets","created":"2017-12-28","cited_by_count":1130},{"id":"1804.06872","title":"Co-teaching: Robust Training of Deep Neural Networks with Extremely Noisy Labels","created":"2018-04-18","cited_by_count":1059},{"id":"1610.02242","title":"Temporal Ensembling for Semi-Supervised Learning","created":"2016-10-07","cited_by_count":1057},{"id":"1805.07836","title":"Generalized Cross Entropy Loss for Training Deep Neural Networks with Noisy Labels","created":"2018-05-20","cited_by_count":997},{"id":"1706.05394","title":"A Closer Look at Memorization in Deep Networks","created":"2017-06-16","cited_by_count":942},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1812.11118","title":"Reconciling modern machine learning practice and the bias-variance trade-off","created":"2018-12-28","cited_by_count":927},{"id":"1811.03962","title":"A Convergence Theory for Deep Learning via Over-Parameterization","created":"2018-11-09","cited_by_count":787},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1706.08498","title":"Spectrally-normalized margin bounds for neural networks","created":"2017-06-26","cited_by_count":686},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1803.09050","title":"Learning to Reweight Examples for Robust Deep Learning","created":"2018-03-24","cited_by_count":675},{"id":"1609.03683","title":"Making Deep Neural Networks Robust to Label Noise: a Loss Correction Approach","created":"2016-09-13","cited_by_count":665},{"id":"1712.05055","title":"MentorNet: Learning Data-Driven Curriculum for Very Deep Neural Networks on Corrupted Labels","created":"2017-12-14","cited_by_count":653},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1706.08947","title":"Exploring Generalization in Deep Learning","created":"2017-06-27","cited_by_count":600},{"id":"1811.03804","title":"Gradient Descent Finds Global Minima of Deep Neural Networks","created":"2018-11-09","cited_by_count":574},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1912.02178","title":"Fantastic Generalization Measures and Where to Find Them","created":"2019-12-04","cited_by_count":513},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"2008.03703","title":"What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimation","created":"2020-08-09","cited_by_count":497},{"id":"1906.05271","title":"Does Learning Require Memorization? A Short Tale about a Long Tail","created":"2019-06-12","cited_by_count":460},{"id":"1707.06484","title":"Deep Layer Aggregation","created":"2017-07-20","cited_by_count":436},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1901.09960","title":"Using Pre-Training Can Improve Model Robustness and Uncertainty","created":"2019-01-28","cited_by_count":373},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1802.05296","title":"Stronger generalization bounds for deep nets via a compression approach","created":"2018-02-14","cited_by_count":307},{"id":"1503.00036","title":"Norm-Based Capacity Control in Neural Networks","created":"2015-02-27","cited_by_count":299},{"id":"1704.08847","title":"Parseval Networks: Improving Robustness to Adversarial Examples","created":"2017-04-28","cited_by_count":293},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1905.13210","title":"Generalization Bounds of Stochastic Gradient Descent for Wide and Deep Neural Networks","created":"2019-05-30","cited_by_count":222},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"1802.08760","title":"Sensitivity and Generalization in Neural Networks: an Empirical Study","created":"2018-02-23","cited_by_count":189},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"1907.02610","title":"Adversarial Robustness through Local Linearization","created":"2019-07-04","cited_by_count":146},{"id":"1810.11914","title":"Rademacher Complexity for Adversarially Robust Generalization","created":"2018-10-29","cited_by_count":132},{"id":"2002.10319","title":"Self-Adaptive Training: beyond Empirical Risk Minimization","created":"2020-02-24","cited_by_count":126},{"id":"1911.12360","title":"How Much Over-parameterization Is Sufficient to Learn Deep ReLU Networks?","created":"2019-11-27","cited_by_count":84},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"1909.00900","title":"Metric Learning for Adversarial Robustness","created":"2019-09-03","cited_by_count":77},{"id":"1906.00555","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","created":"2019-06-03","cited_by_count":76},{"id":"2002.06789","title":"CAT: Customized Adversarial Training for Improved Robustness","created":"2020-02-17","cited_by_count":61},{"id":"2006.08403","title":"On the Loss Landscape of Adversarial Training: Identifying Challenges and How to Overcome Them","created":"2020-06-15","cited_by_count":59},{"id":"2006.10455","title":"What Do Neural Networks Learn When Trained With Random Labels?","created":"2020-06-18","cited_by_count":59},{"id":"1906.07916","title":"Convergence of Adversarial Training in Overparametrized Neural Networks","created":"2019-06-19","cited_by_count":58},{"id":"1906.02613","title":"Bad Global Minima Exist and SGD Can Reach Them","created":"2019-06-06","cited_by_count":49},{"id":"2007.04028","title":"How benign is benign overfitting?","created":"2020-07-08","cited_by_count":40},{"id":"2002.06668","title":"Over-parameterized Adversarial Training: An Analysis Overcoming the Curse of Dimensionality","created":"2020-02-16","cited_by_count":36},{"id":"1906.03787","title":"Intriguing properties of adversarial training at scale","created":"2019-06-10","cited_by_count":33},{"id":"1811.05232","title":"Theoretical Analysis of Adversarial Learning: A Minimax Approach","created":"2018-11-13","cited_by_count":31}],"next_cursor":null}