{"total":57,"rows":[{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2207.03162","title":"Harnessing Out-Of-Distribution Examples via Augmenting Content and Style","created":"2022-07-07","cited_by_count":43,"area":null},{"id":"2311.01796","title":"Learning to Augment Distributions for Out-of-Distribution Detection","created":"2023-11-03","cited_by_count":38,"area":null},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2303.13087","title":"Robust Generalization against Photon-Limited Corruptions via Worst-Case Sharpness Minimization","created":"2023-03-23","cited_by_count":29,"area":null},{"id":"2210.15198","title":"Watermarking for Out-of-distribution Detection","created":"2022-10-27","cited_by_count":28,"area":null},{"id":"2310.13522","title":"Teaching Language Models to Self-Improve through Interactive Demonstrations","created":"2023-10-20","cited_by_count":26,"area":"synth"},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23,"area":null},{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2502.06733","title":"Dynamic Loss-Based Sample Reweighting for Improved Large Language Model Pretraining","created":"2025-02-10","cited_by_count":16,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2210.00094","title":"Improving Robustness with Adaptive Weight Decay","created":"2022-09-30","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2309.05145","title":"Outlier Robust Adversarial Training","created":"2023-09-10","cited_by_count":10,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2403.09101","title":"Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinement","created":"2024-03-14","cited_by_count":9,"area":null},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9,"area":null},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2405.08886","title":"The Pitfalls and Promise of Conformal Inference Under Adversarial Attacks","created":"2024-05-14","cited_by_count":8,"area":null},{"id":"2207.10283","title":"One-vs-the-Rest Loss to Focus on Important Samples in Adversarial Training","created":"2022-07-21","cited_by_count":7,"area":null},{"id":"2210.11513","title":"Learning Sample Reweighting for Accuracy and Adversarial Robustness","created":"2022-10-20","cited_by_count":6,"area":null},{"id":"2210.15068","title":"Improving Adversarial Robustness with Self-Paced Hard-Class Pair Reweighting","created":"2022-10-26","cited_by_count":6,"area":null},{"id":"2406.00685","title":"Improving Accuracy-robustness Trade-off via Pixel Reweighted Adversarial Training","created":"2024-06-02","cited_by_count":6,"area":null},{"id":"2302.14302","title":"Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain","created":"2023-02-28","cited_by_count":5,"area":null},{"id":"2403.12236","title":"Improving Generalization via Meta-Learning on Hard Samples","created":"2024-03-18","cited_by_count":5,"area":null},{"id":"2210.05118","title":"Boosting Adversarial Robustness From The Perspective of Effective Margin Regularization","created":"2022-10-11","cited_by_count":4,"area":null},{"id":"2401.03156","title":"Data-Dependent Stability Analysis of Adversarial Training","created":"2024-01-06","cited_by_count":4,"area":null},{"id":"2408.13102","title":"Dynamic Label Adversarial Training for Deep Learning Robustness Against Adversarial Attacks","created":"2024-08-23","cited_by_count":4,"area":null},{"id":"2108.11135","title":"Bridged Adversarial Training","created":"2021-08-25","cited_by_count":3,"area":null},{"id":"2210.01288","title":"Strength-Adaptive Adversarial Training","created":"2022-10-04","cited_by_count":3,"area":null},{"id":"2410.01617","title":"On Using Certified Training towards Empirical Robustness","created":"2024-10-02","cited_by_count":3,"area":null},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2507.22499","title":"LoReUn: Data Itself Implicitly Provides Cues to Improve Machine Unlearning","created":"2025-07-30","cited_by_count":3,"area":"safety"},{"id":"2508.02186","title":"Failure Cases Are Better Learned But Boundary Says Sorry: Facilitating Smooth Perception Change for Accuracy-Robustness Trade-Off in Adversarial Training","created":"2025-08-04","cited_by_count":3,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2212.05987","title":"Selective classification using a robust meta-learning approach","created":"2022-12-12","cited_by_count":2,"area":null},{"id":"2307.07167","title":"Vulnerability-Aware Instance Reweighting For Adversarial Training","created":"2023-07-14","cited_by_count":2,"area":null},{"id":"2308.00311","title":"Doubly Robust Instance-Reweighted Adversarial Training","created":"2023-08-01","cited_by_count":2,"area":null},{"id":"2410.12671","title":"New Paradigm of Adversarial Training: Releasing Accuracy-Robustness Trade-Off via Dummy Class","created":"2024-10-16","cited_by_count":2,"area":null},{"id":"2505.22486","title":"Understanding Adversarial Training with Energy-based Models","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2506.06027","title":"Sample-Specific Noise Injection For Diffusion-Based Adversarial Purification","created":"2025-06-06","cited_by_count":2,"area":null},{"id":"2310.00607","title":"Understanding Robust Overfitting from the Feature Generalization Perspective","created":"2023-10-01","cited_by_count":1,"area":null},{"id":"2403.04070","title":"Improving Adversarial Training using Vulnerability-Aware Perturbation Budget","created":"2024-03-06","cited_by_count":1,"area":null},{"id":"2408.14728","title":"Improving Clean Accuracy via a Tangent-Space Perspective on Adversarial Training","created":"2024-08-27","cited_by_count":1,"area":null},{"id":"2507.18484","title":"Reinforced Embodied Active Defense: Exploiting Adaptive Interaction for Robust Visual Perception in Adversarial 3D Environments","created":"2025-07-24","cited_by_count":1,"area":null},{"id":"2511.00836","title":"Parameter Interpolation Adversarial Training for Robust Image Classification","created":"2025-11-02","cited_by_count":1,"area":null},{"id":"2306.15482","title":"Cooperation or Competition: Avoiding Player Domination for Multi-Target Robustness via Adaptive Budgets","created":"2023-06-27","cited_by_count":0,"area":null},{"id":"2411.17959","title":"Adversarial Training in Low-Label Regimes with Margin-Based Interpolation","created":"2024-11-27","cited_by_count":0,"area":null},{"id":"2412.19947","title":"Standard-Deviation-Inspired Regularization for Improving Adversarial Robustness","created":"2024-12-27","cited_by_count":0,"area":null},{"id":"2503.20583","title":"Feature Statistics with Uncertainty Help Adversarial Robustness","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2508.18019","title":"Does simple trump complex? Comparing strategies for adversarial robustness in DNNs","created":"2025-08-25","cited_by_count":0,"area":null},{"id":"2509.20786","title":"LiLAW: Lightweight Learnable Adaptive Weighting to Learn Sample Difficulty & Improve Noisy Training","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2510.01014","title":"Revisiting Adversarial Training under Hyperspectral Image","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2602.11204","title":"Zero-Sacrifice Persistent-Robustness Adversarial Defense for Pre-Trained Encoders","created":"2026-02-10","cited_by_count":0,"area":null},{"id":"2603.06650","title":"Margin-Consistent Deep Subtyping of Invasive Lung Adenocarcinoma via Perturbation Fidelity in Whole-Slide Image Analysis","created":"2026-02-27","cited_by_count":0,"area":null},{"id":"2604.26496","title":"Robust Alignment: Harmonizing Clean Accuracy and Adversarial Robustness in Adversarial Training","created":"2026-04-29","cited_by_count":0,"area":null},{"id":"2606.05678","title":"Beyond Waveform Robustness: Robust Feature-Vocoder Adversarial Attacks on Automatic Speech Recognition","created":"2026-06-04","cited_by_count":0,"area":null}],"next_cursor":null}