{"list":"other","total":56,"rows":[{"id":"1706.03762","title":"Attention Is All You Need","created":"2017-06-12","cited_by_count":60361},{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1905.11946","title":"EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks","created":"2019-05-28","cited_by_count":6442},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2012.12877","title":"Training data-efficient image transformers & distillation through attention","created":"2020-12-23","cited_by_count":4586},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"2105.01601","title":"MLP-Mixer: An all-MLP Architecture for Vision","created":"2021-05-04","cited_by_count":1446},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1912.11370","title":"Big Transfer (BiT): General Visual Representation Learning","created":"2019-12-24","cited_by_count":769},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1804.07723","title":"Image Inpainting for Irregular Holes Using Partial Convolutions","created":"2018-04-20","cited_by_count":505},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"2105.03404","title":"ResMLP: Feedforward networks for image classification with data-efficient training","created":"2021-05-07","cited_by_count":339},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2105.07581","title":"Vision Transformers are Robust Learners","created":"2021-05-17","cited_by_count":207},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"1801.02608","title":"LaVAN: Localized and Visible Adversarial Noise","created":"2018-01-08","cited_by_count":113},{"id":"2003.06693","title":"Certified Defenses for Adversarial Patches","created":"2020-03-14","cited_by_count":101},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"1807.01216","title":"Local Gradients Smoothing: Defense against localized adversarial attacks","created":"2018-07-03","cited_by_count":87},{"id":"2004.05682","title":"PatchAttack: A Black-box Texture-based Attack with Reinforcement Learning","created":"2020-04-12","cited_by_count":67},{"id":"1909.09552","title":"Defending Against Physically Realizable Attacks on Image Classification","created":"2019-09-20","cited_by_count":66},{"id":"1906.04948","title":"Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers","created":"2019-06-12","cited_by_count":65},{"id":"1911.09272","title":"Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation","created":"2019-11-21","cited_by_count":60},{"id":"2005.02313","title":"Adversarial Training against Location-Optimized Adversarial Patches","created":"2020-05-05","cited_by_count":50},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48},{"id":"2003.04490","title":"Compositional Convolutional Neural Networks: A Deep Architecture with Innate Robustness to Partial Occlusion","created":"2020-03-10","cited_by_count":47},{"id":"2004.13799","title":"Minority Reports Defense: Defending Against Adversarial Patches","created":"2020-04-28","cited_by_count":36},{"id":"1910.00068","title":"Role of Spatial Context in Adversarial Robustness for Object Detection","created":"2019-09-30","cited_by_count":35},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29},{"id":"2104.12609","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","created":"2021-04-26","cited_by_count":29},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24},{"id":"2103.08860","title":"Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patches","created":"2021-03-16","cited_by_count":17},{"id":"2011.07633","title":"Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations","created":"2020-11-15","cited_by_count":16},{"id":"2012.00558","title":"Robustness Out of the Box: Compositional Representations Naturally Defend Against Black-Box Patch Attacks","created":"2020-12-01","cited_by_count":4},{"id":"2102.04291","title":"A Real-time Defense against Website Fingerprinting Attacks","created":"2021-02-08","cited_by_count":2}],"next_cursor":null}