{"list":"other","total":67,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1806.09055","title":"DARTS: Differentiable Architecture Search","created":"2018-06-24","cited_by_count":1798},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1611.01578","title":"Neural Architecture Search with Reinforcement Learning","created":"2016-11-05","cited_by_count":1499},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1712.09913","title":"Visualizing the Loss Landscape of Neural Nets","created":"2017-12-28","cited_by_count":1130},{"id":"1707.07012","title":"Learning Transferable Architectures for Scalable Image Recognition","created":"2017-07-21","cited_by_count":1101},{"id":"1911.09070","title":"EfficientDet: Scalable and Efficient Object Detection","created":"2019-11-20","cited_by_count":1020},{"id":"1704.03976","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","created":"2017-04-13","cited_by_count":920},{"id":"1802.01548","title":"Regularized Evolution for Image Classifier Architecture Search","created":"2018-02-05","cited_by_count":909},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1802.03268","title":"Efficient Neural Architecture Search via Parameter Sharing","created":"2018-02-09","cited_by_count":837},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1802.10026","title":"Loss Surfaces, Mode Connectivity, and Fast Ensembling of DNNs","created":"2018-02-27","cited_by_count":588},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1703.01041","title":"Large-Scale Evolution of Image Classifiers","created":"2017-03-03","cited_by_count":348},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1812.09926","title":"SNAS: Stochastic Neural Architecture Search","created":"2018-12-24","cited_by_count":289},{"id":"1611.02167","title":"Designing Neural Network Architectures using Reinforcement Learning","created":"2016-11-07","cited_by_count":279},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1907.05737","title":"PC-DARTS: Partial Channel Connections for Memory-Efficient Architecture Search","created":"2019-07-12","cited_by_count":265},{"id":"1901.02985","title":"Auto-DeepLab: Hierarchical Neural Architecture Search for Semantic Image Segmentation","created":"2019-01-10","cited_by_count":260},{"id":"1910.04465","title":"Searching for A Robust Neural Architecture in Four GPU Hours","created":"2019-10-10","cited_by_count":260},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1904.12760","title":"Progressive Differentiable Architecture Search: Bridging the Depth Gap between Search and Evaluation","created":"2019-04-29","cited_by_count":230},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"1412.6544","title":"Qualitatively characterizing neural network optimization problems","created":"2014-12-19","cited_by_count":188},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1907.02610","title":"Adversarial Robustness through Local Linearization","created":"2019-07-04","cited_by_count":146},{"id":"1808.01688","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","created":"2018-08-05","cited_by_count":135},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"1911.12126","title":"Fair DARTS: Eliminating Unfair Advantages in Differentiable Architecture Search","created":"2019-11-27","cited_by_count":131},{"id":"2002.05283","title":"Stabilizing Differentiable Architecture Search via Perturbation-based Regularization","created":"2020-02-12","cited_by_count":102},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"1911.10695","title":"When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks","created":"2019-11-25","cited_by_count":87},{"id":"1903.10979","title":"DetNAS: Backbone Search for Object Detection","created":"2019-03-26","cited_by_count":81},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"2003.02484","title":"Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization","created":"2020-03-05","cited_by_count":73},{"id":"1905.06635","title":"Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization","created":"2019-05-16","cited_by_count":49},{"id":"1909.09569","title":"Understanding Architectures Learnt by Cell-based Neural Architecture Search","created":"2019-09-20","cited_by_count":48},{"id":"1908.09550","title":"Customizable Architecture Search for Semantic Segmentation","created":"2019-08-26","cited_by_count":41},{"id":"1810.10804","title":"Fast Neural Architecture Search of Compact Semantic Segmentation Models via Auxiliary Cells","created":"2018-10-25","cited_by_count":39},{"id":"2003.11818","title":"Hit-Detector: Hierarchical Trinity Architecture Search for Object Detection","created":"2020-03-26","cited_by_count":32},{"id":"1705.05264","title":"Extending Defensive Distillation","created":"2017-05-15","cited_by_count":23},{"id":"1807.04200","title":"With Friends Like These, Who Needs Adversaries?","created":"2018-07-11","cited_by_count":19},{"id":"1905.04270","title":"Interpreting and Evaluating Neural Network Robustness","created":"2019-05-10","cited_by_count":19},{"id":"2009.00165","title":"Neural Architecture Search For Keyword Spotting","created":"2020-09-01","cited_by_count":11},{"id":"2008.05695","title":"Evolutionary Algorithm Enhanced Neural Architecture Search for Text-Independent Speaker Verification","created":"2020-08-13","cited_by_count":8}],"next_cursor":null}