{"list":"other","total":72,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1909.13719","title":"RandAugment: Practical automated data augmentation with a reduced search space","created":"2019-09-30","cited_by_count":2269},{"id":"1606.04080","title":"Matching Networks for One Shot Learning","created":"2016-06-13","cited_by_count":2255},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"2002.11949","title":"Unbiased Scene Graph Generation from Biased Training","created":"2020-02-27","cited_by_count":356},{"id":"1710.10571","title":"Certifying Some Distributional Robustness with Principled Adversarial Training","created":"2017-10-29","cited_by_count":337},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1702.02284","title":"Adversarial Attacks on Neural Network Policies","created":"2017-02-08","cited_by_count":320},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1801.01944","title":"Audio Adversarial Examples: Targeted Attacks on Speech-to-Text","created":"2018-01-05","cited_by_count":274},{"id":"2006.04315","title":"Counterfactual VQA: A Cause-Effect Look at Language Bias","created":"2020-06-08","cited_by_count":266},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"2010.01950","title":"Torchattacks: A PyTorch Repository for Adversarial Attacks","created":"2020-09-24","cited_by_count":158},{"id":"1809.07016","title":"Generating 3D Adversarial Point Clouds","created":"2018-09-19","cited_by_count":144},{"id":"2103.01737","title":"Distilling Causal Effect of Data in Class-Incremental Learning","created":"2021-03-02","cited_by_count":117},{"id":"2009.13000","title":"Interventional Few-Shot Learning","created":"2020-09-28","cited_by_count":112},{"id":"1805.09190","title":"Towards the first adversarially robust neural network model on MNIST","created":"2018-05-23","cited_by_count":104},{"id":"2011.11164","title":"Learnable Boundary Guided Adversarial Training","created":"2020-11-23","cited_by_count":93},{"id":"1905.04172","title":"On the Connection Between Adversarial Robustness and Saliency Map Interpretability","created":"2019-05-10","cited_by_count":80},{"id":"1911.10496","title":"Two Causal Principles for Improving Visual Dialog","created":"2019-11-24","cited_by_count":75},{"id":"1901.04684","title":"The Limitations of Adversarial Training and the Blind-Spot Attack","created":"2019-01-15","cited_by_count":63},{"id":"2007.06189","title":"Understanding Adversarial Examples from the Mutual Influence of Images and Perturbations","created":"2020-07-13","cited_by_count":59},{"id":"2002.04599","title":"Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations","created":"2020-02-11","cited_by_count":55},{"id":"2005.01095","title":"A Causal View on Robustness of Neural Networks","created":"2020-05-03","cited_by_count":53},{"id":"1707.05373","title":"Houdini: Fooling Deep Structured Prediction Models","created":"2017-07-17","cited_by_count":50},{"id":"1802.06552","title":"Are Generative Classifiers More Robust to Adversarial Attacks?","created":"2018-02-19","cited_by_count":36},{"id":"2006.16427","title":"Biologically Inspired Mechanisms for Adversarial Robustness","created":"2020-06-29","cited_by_count":29},{"id":"1808.05537","title":"Distributionally Adversarial Attack","created":"2018-08-16","cited_by_count":26},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24},{"id":"1812.00524","title":"Generalization in anti-causal learning","created":"2018-12-03","cited_by_count":23},{"id":"1902.10286","title":"On Multi-Cause Causal Inference with Unobserved Confounding: Counterexamples, Impossibility, and Alternatives","created":"2019-02-27","cited_by_count":20},{"id":"2004.00306","title":"Towards Achieving Adversarial Robustness by Enforcing Feature Consistency Across Bit Planes","created":"2020-04-01","cited_by_count":15},{"id":"2005.02552","title":"Enhancing Intrinsic Adversarial Robustness via Feature Pyramid Decoder","created":"2020-05-06","cited_by_count":10},{"id":"2103.05232","title":"Stabilized Medical Image Attacks","created":"2021-03-09","cited_by_count":10},{"id":"1602.01051","title":"Control Function Instrumental Variable Estimation of Nonlinear Causal Effect Models","created":"2016-02-02","cited_by_count":7},{"id":"1902.03380","title":"When Causal Intervention Meets Adversarial Examples and Image Masking for Deep Neural Networks","created":"2019-02-09","cited_by_count":7},{"id":"2103.15933","title":"Learning Under Adversarial and Interventional Shifts","created":"2021-03-29","cited_by_count":3}],"next_cursor":null}