{"list":"other","total":55,"rows":[{"id":"1706.03762","title":"Attention Is All You Need","created":"2017-06-12","cited_by_count":60361},{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1706.04599","title":"On Calibration of Modern Neural Networks","created":"2017-06-14","cited_by_count":4960},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1602.07360","title":"SqueezeNet: AlexNet-level accuracy with 50x fewer parameters and <0.5MB model size","created":"2016-02-24","cited_by_count":1060},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"1808.01688","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","created":"2018-08-05","cited_by_count":135},{"id":"1801.02608","title":"LaVAN: Localized and Visible Adversarial Noise","created":"2018-01-08","cited_by_count":113},{"id":"1909.05040","title":"Sparse and Imperceivable Adversarial Attacks","created":"2019-09-11","cited_by_count":95},{"id":"1704.05712","title":"Universal Adversarial Perturbations Against Semantic Image Segmentation","created":"2017-04-19","cited_by_count":92},{"id":"1911.10891","title":"ColorFool: Semantic Adversarial Colorization","created":"2019-11-25","cited_by_count":89},{"id":"1612.07767","title":"Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics","created":"2016-12-22","cited_by_count":77},{"id":"1902.04818","title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples","created":"2019-02-13","cited_by_count":75},{"id":"1911.02466","title":"Towards Large yet Imperceptible Adversarial Image Perturbations with Perceptual Color Distance","created":"2019-11-06","cited_by_count":73},{"id":"1808.01664","title":"Structured Adversarial Attack: Towards General Implementation and Better Interpretability","created":"2018-08-05","cited_by_count":64},{"id":"1703.09387","title":"Adversarial Transformation Networks: Learning to Generate Adversarial Examples","created":"2017-03-28","cited_by_count":62},{"id":"1804.05296","title":"Adversarial Attacks Against Medical Deep Learning Systems","created":"2018-04-15","cited_by_count":62},{"id":"1807.06732","title":"Motivating the Rules of the Game for Adversarial Example Research","created":"2018-07-18","cited_by_count":57},{"id":"1910.07629","title":"A New Defense Against Adversarial Images: Turning a Weakness into a Strength","created":"2019-10-16","cited_by_count":49},{"id":"1907.01003","title":"Accurate, reliable and fast robustness evaluation","created":"2019-07-01","cited_by_count":43},{"id":"1803.00404","title":"Deep Defense: Training DNNs with Improved Adversarial Robustness","created":"2018-02-23","cited_by_count":42},{"id":"1804.03286","title":"On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses","created":"2018-04-10","cited_by_count":40},{"id":"1905.11213","title":"Provable robustness against all adversarial $l_p$-perturbations for $p\\geq 1$","created":"2019-05-27","cited_by_count":39},{"id":"1912.01667","title":"A Survey of Black-Box Adversarial Attacks on Computer Vision Models","created":"2019-12-03","cited_by_count":37},{"id":"1605.01775","title":"Adversarial Diversity and Hard Positive Generation","created":"2016-05-05","cited_by_count":35},{"id":"1903.10586","title":"Defending against Whitebox Adversarial Attacks via Randomized Discretization","created":"2019-03-25","cited_by_count":29},{"id":"1904.07370","title":"Are Self-Driving Cars Secure? Evasion Attacks against Deep Neural Networks for Steering Angle Prediction","created":"2019-04-15","cited_by_count":16},{"id":"2010.03180","title":"Not All Datasets Are Born Equal: On Heterogeneous Data and Adversarial Examples","created":"2020-10-07","cited_by_count":9},{"id":"1903.10396","title":"The LogBarrier adversarial attack: making effective use of decision boundary information","created":"2019-03-25","cited_by_count":7},{"id":"2006.01456","title":"Perturbation Analysis of Gradient-based Adversarial Attacks","created":"2020-06-02","cited_by_count":6},{"id":"1909.09938","title":"HAWKEYE: Adversarial Example Detector for Deep Neural Networks","created":"2019-09-22","cited_by_count":1}],"next_cursor":null}