{"total":22,"rows":[{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64,"area":null},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2212.11005","title":"Revisiting Residual Networks for Adversarial Robustness: An Architectural Perspective","created":"2022-12-21","cited_by_count":28,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21,"area":null},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10,"area":null},{"id":"2204.02481","title":"Adversarial Robustness through the Lens of Convolutional Filters","created":"2022-04-05","cited_by_count":9,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2301.03110","title":"RobArch: Designing Robust Architectures against Adversarial Attacks","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2212.07992","title":"Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks","created":"2022-12-15","cited_by_count":2,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2402.09249","title":"Exploring the Relationship: Transformative Adaptive Activation Functions in Comparison to Other Activation Functions","created":"2024-02-14","cited_by_count":1,"area":null},{"id":"2202.12435","title":"Understanding Adversarial Robustness from Feature Maps of Convolutional Layers","created":"2022-02-25","cited_by_count":0,"area":null},{"id":"2512.04264","title":"Studying Various Activation Functions and Non-IID Data for Machine Learning Model Robustness","created":"2025-12-03","cited_by_count":0,"area":null},{"id":"2512.10275","title":"Sample-wise Adaptive Weighting for Transfer Consistency in Adversarial Distillation","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2603.25517","title":"NERO-Net: A Neuroevolutionary Approach for the Design of Adversarially Robust CNNs","created":"2026-03-26","cited_by_count":0,"area":null}],"next_cursor":null}