{"total":36,"rows":[{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59,"area":null},{"id":"2202.01136","title":"Probabilistically Robust Learning: Balancing Average- and Worst-case Performance","created":"2022-02-02","cited_by_count":37,"area":null},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27,"area":null},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23,"area":null},{"id":"2310.11122","title":"Sensitivity-Aware Amortized Bayesian Inference","created":"2023-10-17","cited_by_count":20,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2207.11378","title":"Do Perceptually Aligned Gradients Imply Adversarial Robustness?","created":"2022-07-22","cited_by_count":15,"area":null},{"id":"2508.17456","title":"Adversarial Examples Are Not Bugs, They Are Superposition","created":"2025-08-24","cited_by_count":13,"area":null},{"id":"2204.08624","title":"Topology and geometry of data manifold in deep learning","created":"2022-04-19","cited_by_count":12,"area":null},{"id":"2212.12641","title":"Out-of-Distribution Detection with Reconstruction Error and Typicality-based Penalty","created":"2022-12-24","cited_by_count":11,"area":null},{"id":"2309.13794","title":"Projected Randomized Smoothing for Certified Adversarial Robustness","created":"2023-09-25","cited_by_count":11,"area":null},{"id":"2206.03466","title":"Adversarial Reprogramming Revisited","created":"2022-06-07","cited_by_count":10,"area":null},{"id":"2207.03933","title":"A law of adversarial risk, interpolation, and label noise","created":"2022-07-08","cited_by_count":8,"area":null},{"id":"2303.00783","title":"Adversarial Examples Exist in Two-Layer ReLU Networks for Low Dimensional Linear Subspaces","created":"2023-03-01","cited_by_count":8,"area":null},{"id":"2510.11709","title":"Adversarial Attacks Leverage Interference Between Features in Superposition","created":"2025-10-13","cited_by_count":8,"area":null},{"id":"2304.08767","title":"Masked Language Model Based Textual Adversarial Example Detection","created":"2023-04-18","cited_by_count":5,"area":null},{"id":"2408.01808","title":"ALIF: Low-Cost Adversarial Audio Attacks on Black-Box Speech Platforms using Linguistic Features","created":"2024-08-03","cited_by_count":5,"area":null},{"id":"2201.08661","title":"The Security of Deep Learning Defences for Medical Imaging","created":"2022-01-21","cited_by_count":4,"area":null},{"id":"2309.03665","title":"How adversarial attacks can disrupt seemingly stable accurate classifiers","created":"2023-09-07","cited_by_count":4,"area":null},{"id":"2504.08798","title":"Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks","created":"2025-04-08","cited_by_count":4,"area":null},{"id":"2404.08069","title":"Persistent Classification: A New Approach to Stability of Data and Adversarial Examples","created":"2024-04-11","cited_by_count":3,"area":null},{"id":"2510.14231","title":"When Flatness Does (Not) Guarantee Adversarial Robustness","created":"2025-10-16","cited_by_count":3,"area":null},{"id":"2405.17130","title":"Explaining the role of Intrinsic Dimensionality in Adversarial Training","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2206.04316","title":"Adversarial Noises Are Linearly Separable for (Nearly) Random Neural Networks","created":"2022-06-09","cited_by_count":1,"area":null},{"id":"2305.15385","title":"Behavior quantification as the missing link between fields: Tools for digital psychiatry and their role in the future of neurobiology","created":"2023-05-24","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2505.08915","title":"An Analytical Characterization of Sloppiness in Neural Networks: Insights from Linear Models","created":"2025-05-13","cited_by_count":1,"area":null},{"id":"2205.13502","title":"An Analytic Framework for Robust Training of Artificial Neural Networks","created":"2022-05-26","cited_by_count":0,"area":null},{"id":"2309.15669","title":"On the Computational Entanglement of Distant Features in Adversarial Machine Learning","created":"2023-09-27","cited_by_count":0,"area":null},{"id":"2311.13454","title":"Explaining high-dimensional text classifiers","created":"2023-11-22","cited_by_count":0,"area":null},{"id":"2402.04660","title":"Redesigning Traffic Signs to Mitigate Machine-Learning Patch Attacks","created":"2024-02-07","cited_by_count":0,"area":null},{"id":"2402.11793","title":"Generative Kaleidoscopic Networks","created":"2024-02-19","cited_by_count":0,"area":null},{"id":"2410.06921","title":"Adversarial Vulnerability as a Consequence of On-Manifold Inseparibility","created":"2024-10-09","cited_by_count":0,"area":null},{"id":"2505.23225","title":"Generalizability vs. Counterfactual Explainability Trade-Off","created":"2025-05-29","cited_by_count":0,"area":null},{"id":"2509.07673","title":"Nearest Neighbor Projection Removal Adversarial Training","created":"2025-09-09","cited_by_count":0,"area":null},{"id":"2606.02267","title":"A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs","created":"2026-06-01","cited_by_count":0,"area":null}],"next_cursor":null}