{"list":"other","total":89,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1911.05722","title":"Momentum Contrast for Unsupervised Visual Representation Learning","created":"2019-11-13","cited_by_count":7513},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1905.11946","title":"EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks","created":"2019-05-28","cited_by_count":6442},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.03983","title":"SGDR: Stochastic Gradient Descent with Warm Restarts","created":"2016-08-13","cited_by_count":5045},{"id":"1706.04599","title":"On Calibration of Modern Neural Networks","created":"2017-06-14","cited_by_count":4960},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"2012.12877","title":"Training data-efficient image transformers & distillation through attention","created":"2020-12-23","cited_by_count":4586},{"id":"1409.0473","title":"Neural Machine Translation by Jointly Learning to Align and Translate","created":"2014-09-01","cited_by_count":4548},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1611.05431","title":"Aggregated Residual Transformations for Deep Neural Networks","created":"2016-11-16","cited_by_count":2546},{"id":"1905.02244","title":"Searching for MobileNetV3","created":"2019-05-06","cited_by_count":1994},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1602.07261","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","created":"2016-02-23","cited_by_count":1512},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"2105.01601","title":"MLP-Mixer: An all-MLP Architecture for Vision","created":"2021-05-04","cited_by_count":1446},{"id":"1907.07174","title":"Natural Adversarial Examples","created":"2019-07-16","cited_by_count":1408},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1803.05407","title":"Averaging Weights Leads to Wider Optima and Better Generalization","created":"2018-03-14","cited_by_count":1209},{"id":"1807.11164","title":"ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Design","created":"2018-07-30","cited_by_count":1136},{"id":"1609.04747","title":"An overview of gradient descent optimization algorithms","created":"2016-09-15","cited_by_count":1033},{"id":"2003.13678","title":"Designing Network Design Spaces","created":"2020-03-30","cited_by_count":960},{"id":"1912.02781","title":"AugMix: A Simple Data Processing Method to Improve Robustness and Uncertainty","created":"2019-12-05","cited_by_count":901},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"2101.03697","title":"RepVGG: Making VGG-style ConvNets Great Again","created":"2021-01-11","cited_by_count":522},{"id":"1712.00559","title":"Progressive Neural Architecture Search","created":"2017-12-02","cited_by_count":487},{"id":"1701.06548","title":"Regularizing Neural Networks by Penalizing Confident Output Distributions","created":"2017-01-23","cited_by_count":464},{"id":"2007.00644","title":"Measuring Robustness to Natural Distribution Shifts in Image Classification","created":"2020-07-01","cited_by_count":454},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"2105.10497","title":"Intriguing Properties of Vision Transformers","created":"2021-05-21","cited_by_count":446},{"id":"1910.07738","title":"A Survey of Deep Learning Techniques for Autonomous Driving","created":"2019-10-17","cited_by_count":403},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"2004.06100","title":"Pretrained Transformers Improve Out-of-Distribution Robustness","created":"2020-04-13","cited_by_count":294},{"id":"1704.08847","title":"Parseval Networks: Improving Robustness to Adversarial Examples","created":"2017-04-28","cited_by_count":293},{"id":"1807.00412","title":"Learning to Drive in a Day","created":"2018-07-01","cited_by_count":273},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"2106.03348","title":"ViTAE: Vision Transformer Advanced by Exploring Intrinsic Inductive Bias","created":"2021-06-07","cited_by_count":216},{"id":"1807.01069","title":"Adversarial Robustness Toolbox v1.0.0","created":"2018-07-03","cited_by_count":215},{"id":"2105.07581","title":"Vision Transformers are Robust Learners","created":"2021-05-17","cited_by_count":207},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"2003.11142","title":"BigNAS: Scaling Up Neural Architecture Search with Big Single-Stage Models","created":"2020-03-24","cited_by_count":188},{"id":"2106.07411","title":"Partial success in closing the gap between human and machine vision","created":"2021-06-14","cited_by_count":185},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167},{"id":"1803.07519","title":"DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems","created":"2018-03-20","cited_by_count":147},{"id":"1808.01688","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","created":"2018-08-05","cited_by_count":135},{"id":"1711.09856","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","created":"2017-11-27","cited_by_count":126},{"id":"1703.01513","title":"Genetic CNN","created":"2017-03-04","cited_by_count":124},{"id":"1811.09600","title":"Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses","created":"2018-11-23","cited_by_count":109},{"id":"2006.14536","title":"Smooth Adversarial Training","created":"2020-06-25","cited_by_count":89},{"id":"1801.08092","title":"Generalizable Data-free Objective for Crafting Universal Adversarial Perturbations","created":"2018-01-24","cited_by_count":88},{"id":"1802.08241","title":"Hessian-based Analysis of Large Batch Training and Robustness to Adversaries","created":"2018-02-22","cited_by_count":87},{"id":"2010.05981","title":"Shape-Texture Debiased Neural Network Training","created":"2020-10-12","cited_by_count":76},{"id":"1905.09797","title":"Interpreting Adversarially Trained Convolutional Neural Networks","created":"2019-05-23","cited_by_count":75},{"id":"1502.00873","title":"DeepID3: Face Recognition with Very Deep Neural Networks","created":"2015-02-03","cited_by_count":62},{"id":"1909.09034","title":"Training Robust Deep Neural Networks via Adversarial Noise Propagation","created":"2019-09-19","cited_by_count":62},{"id":"2001.02312","title":"Stochastic Weight Averaging in Parallel: Large-Batch Training that Generalizes Well","created":"2020-01-07","cited_by_count":57},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43},{"id":"1912.09640","title":"AtomNAS: Fine-Grained End-to-End Neural Architecture Search","created":"2019-12-20","cited_by_count":40},{"id":"2008.08847","title":"Yet Another Intermediate-Level Attack","created":"2020-08-20","cited_by_count":35},{"id":"2004.01961","title":"Neural Architecture Search for Lightweight Non-Local Networks","created":"2020-04-04","cited_by_count":23},{"id":"1910.11585","title":"Label Smoothing and Logit Squeezing: A Replacement for Adversarial Training?","created":"2019-10-25","cited_by_count":18},{"id":"2010.07849","title":"A Hamiltonian Monte Carlo Method for Probabilistic Adversarial Attack and Learning","created":"2020-10-15","cited_by_count":13},{"id":"2009.08233","title":"Label Smoothing and Adversarial Robustness","created":"2020-09-17","cited_by_count":10},{"id":"2109.00864","title":"Real World Robustness from Systematic Noise","created":"2021-09-02","cited_by_count":5},{"id":"2006.11604","title":"How do SGD hyperparameters in natural training affect adversarial robustness?","created":"2020-06-20","cited_by_count":2}],"next_cursor":null}