{"list":"other","total":58,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1710.08092","title":"VGGFace2: A dataset for recognising faces across pose and age","created":"2017-10-23","cited_by_count":914},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1704.03296","title":"Interpretable Explanations of Black Boxes by Meaningful Perturbation","created":"2017-04-11","cited_by_count":612},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1506.06579","title":"Understanding Neural Networks Through Deep Visualization","created":"2015-06-22","cited_by_count":334},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1910.08485","title":"Understanding Deep Networks via Extremal Perturbations and Smooth Masks","created":"2019-10-18","cited_by_count":259},{"id":"1710.11342","title":"Generating Natural Adversarial Examples","created":"2017-10-31","cited_by_count":183},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"1712.02328","title":"Generative Adversarial Perturbations","created":"2017-12-06","cited_by_count":153},{"id":"1809.07016","title":"Generating 3D Adversarial Point Clouds","created":"2018-09-19","cited_by_count":144},{"id":"1811.11553","title":"Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects","created":"2018-11-28","cited_by_count":143},{"id":"1811.09600","title":"Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses","created":"2018-11-23","cited_by_count":109},{"id":"1811.12673","title":"ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples","created":"2018-11-30","cited_by_count":105},{"id":"1909.05040","title":"Sparse and Imperceivable Adversarial Attacks","created":"2019-09-11","cited_by_count":95},{"id":"1801.02753","title":"SketchyGAN: Towards Diverse and Realistic Sketch to Image Synthesis","created":"2018-01-09","cited_by_count":81},{"id":"1905.04172","title":"On the Connection Between Adversarial Robustness and Saliency Map Interpretability","created":"2019-05-10","cited_by_count":80},{"id":"1905.09797","title":"Interpreting Adversarially Trained Convolutional Neural Networks","created":"2019-05-23","cited_by_count":75},{"id":"1801.08926","title":"Deflecting Adversarial Attacks with Pixel Deflection","created":"2018-01-26","cited_by_count":71},{"id":"1711.07183","title":"Adversarial Attacks Beyond the Image Space","created":"2017-11-20","cited_by_count":67},{"id":"1707.05572","title":"Fast Feature Fool: A data independent approach to universal adversarial perturbations","created":"2017-07-18","cited_by_count":66},{"id":"1808.01664","title":"Structured Adversarial Attack: Towards General Implementation and Better Interpretability","created":"2018-08-05","cited_by_count":64},{"id":"1607.04311","title":"Defensive Distillation is Not Robust to Adversarial Examples","created":"2016-07-14","cited_by_count":60},{"id":"1709.03582","title":"Art of singular vectors and universal adversarial perturbations","created":"2017-09-11","cited_by_count":49},{"id":"1711.05929","title":"Defense against Universal Adversarial Perturbations","created":"2017-11-16","cited_by_count":48},{"id":"1711.08478","title":"MagNet and \"Efficient Defenses Against Adversarial Attacks\" are Not Robust to Adversarial Examples","created":"2017-11-22","cited_by_count":46},{"id":"1802.09707","title":"Understanding and Enhancing the Transferability of Adversarial Examples","created":"2018-02-27","cited_by_count":41},{"id":"1804.03286","title":"On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses","created":"2018-04-10","cited_by_count":40},{"id":"1904.01160","title":"Curls & Whey: Boosting Black-Box Adversarial Attacks","created":"2019-04-02","cited_by_count":37},{"id":"1806.09186","title":"Detection based Defense against Adversarial Examples from the Steganalysis Point of View","created":"2018-06-21","cited_by_count":32},{"id":"1812.00552","title":"Universal Perturbation Attack Against Image Retrieval","created":"2018-12-03","cited_by_count":32},{"id":"1909.06500","title":"Adversarial Attack on Skeleton-based Human Action Recognition","created":"2019-09-14","cited_by_count":32},{"id":"1812.00037","title":"Adversarial Defense by Stratified Convolutional Sparse Coding","created":"2018-11-30","cited_by_count":31},{"id":"1904.11042","title":"Physical Adversarial Textures that Fool Visual Object Tracking","created":"2019-04-24","cited_by_count":31},{"id":"1904.08089","title":"Adversarial Defense Through Network Profiling Based Path Extraction","created":"2019-04-17","cited_by_count":24},{"id":"1906.00945","title":"Adversarial Robustness as a Prior for Learned Representations","created":"2019-06-03","cited_by_count":20},{"id":"1705.09554","title":"Robustness of classifiers to universal perturbations: a geometric perspective","created":"2017-05-26","cited_by_count":15},{"id":"1812.06371","title":"Trust Region Based Adversarial Attack on Neural Networks","created":"2018-12-16","cited_by_count":11},{"id":"1906.09453","title":"Image Synthesis with a Single (Robust) Classifier","created":"2019-06-06","cited_by_count":9},{"id":"1912.09405","title":"Explaining Classifiers using Adversarial Perturbations on the Perceptual Ball","created":"2019-12-19","cited_by_count":2}],"next_cursor":null}