{"list":"other","total":72,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1905.11946","title":"EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks","created":"2019-05-28","cited_by_count":6442},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1704.04861","title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications","created":"2017-04-17","cited_by_count":3845},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1312.6034","title":"Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Maps","created":"2013-12-20","cited_by_count":2371},{"id":"1610.02357","title":"Xception: Deep Learning with Depthwise Separable Convolutions","created":"2016-10-07","cited_by_count":2332},{"id":"2004.07780","title":"Shortcut Learning in Deep Neural Networks","created":"2020-04-16","cited_by_count":1969},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1905.00414","title":"Similarity of Neural Network Representations Revisited","created":"2019-05-01","cited_by_count":1755},{"id":"1907.07174","title":"Natural Adversarial Examples","created":"2019-07-16","cited_by_count":1408},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1707.07012","title":"Learning Transferable Architectures for Scalable Image Recognition","created":"2017-07-21","cited_by_count":1101},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1706.05394","title":"A Closer Look at Memorization in Deep Networks","created":"2017-06-16","cited_by_count":942},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1902.01007","title":"Right for the Wrong Reasons: Diagnosing Syntactic Heuristics in Natural Language Inference","created":"2019-02-04","cited_by_count":876},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"2104.01136","title":"LeViT: a Vision Transformer in ConvNet's Clothing for Faster Inference","created":"2021-04-02","cited_by_count":475},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1412.0035","title":"Understanding Deep Image Representations by Inverting Them","created":"2014-11-26","cited_by_count":403},{"id":"2006.07710","title":"The Pitfalls of Simplicity Bias in Neural Networks","created":"2020-06-13","cited_by_count":351},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"1905.13545","title":"High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks","created":"2019-05-28","cited_by_count":310},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"2104.05704","title":"Escaping the Big Data Paradigm with Compact Transformers","created":"2021-04-12","cited_by_count":264},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1511.07543","title":"Convergent Learning: Do different neural networks learn the same representations?","created":"2015-11-24","cited_by_count":220},{"id":"1905.11604","title":"SGD on Neural Networks Learns Functions of Increasing Complexity","created":"2019-05-28","cited_by_count":204},{"id":"1710.11342","title":"Generating Natural Adversarial Examples","created":"2017-10-31","cited_by_count":183},{"id":"1805.08522","title":"Deep learning generalizes because the parameter-function map is biased towards simple functions","created":"2018-05-22","cited_by_count":183},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"1506.02753","title":"Inverting Visual Representations with Convolutional Networks","created":"2015-06-09","cited_by_count":170},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"1802.00614","title":"Visual Interpretability for Deep Learning: a Survey","created":"2018-02-02","cited_by_count":155},{"id":"1907.10823","title":"Enhancing Adversarial Example Transferability with an Intermediate Level Attack","created":"2019-07-23","cited_by_count":140},{"id":"1805.07894","title":"Constructing Unrestricted Adversarial Examples with Generative Models","created":"2018-05-21","cited_by_count":135},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"2005.10190","title":"Feature Purification: How Adversarial Training Performs Robust Deep Learning","created":"2020-05-20","cited_by_count":107},{"id":"2012.11207","title":"On Success and Simplicity: A Second Look at Transferable Targeted Attacks","created":"2020-12-21","cited_by_count":89},{"id":"1711.11561","title":"Measuring the tendency of CNNs to Learn Surface Statistical Regularities","created":"2017-11-30","cited_by_count":87},{"id":"1706.10239","title":"Towards Understanding Generalization of Deep Learning: Perspective of Loss Landscapes","created":"2017-06-30","cited_by_count":84},{"id":"2012.03528","title":"Backpropagating Linearly Improves Transferability of Adversarial Examples","created":"2020-12-07","cited_by_count":79},{"id":"2004.14861","title":"Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability","created":"2020-04-29","cited_by_count":57},{"id":"1903.00073","title":"On the Effectiveness of Low Frequency Perturbations","created":"2019-02-28","cited_by_count":56},{"id":"2004.12519","title":"Transferable Perturbations of Deep Feature Distributions","created":"2020-04-27","cited_by_count":51},{"id":"1910.08640","title":"Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?","created":"2019-10-18","cited_by_count":43},{"id":"2007.05869","title":"Adversarially-Trained Deep Nets Transfer Better: Illustration on Image Classification","created":"2020-07-11","cited_by_count":18},{"id":"1611.06179","title":"LOTS about Attacking Deep Features","created":"2016-11-18","cited_by_count":14},{"id":"1506.01151","title":"Understanding deep features with computer-generated imagery","created":"2015-06-03","cited_by_count":13},{"id":"2007.11259","title":"Adversarial Training Reduces Information and Improves Transferability","created":"2020-07-22","cited_by_count":10},{"id":"2102.05110","title":"Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers","created":"2021-02-09","cited_by_count":7}],"next_cursor":null}