{"total":234,"rows":[{"id":"2209.00796","title":"Diffusion Models: A Comprehensive Survey of Methods and Applications","created":"2022-09-02","cited_by_count":1114,"area":"diffusion"},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476,"area":"diffusion"},{"id":"2304.08466","title":"Synthetic Data from Diffusion Models Improves ImageNet Classification","created":"2023-04-17","cited_by_count":327,"area":"diffusion"},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111,"area":null},{"id":"2302.02503","title":"Leaving Reality to Imagination: Robust Classification via Generated Datasets","created":"2023-02-05","cited_by_count":91,"area":null},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2203.17260","title":"Generating High Fidelity Data from Low-density Regions using Diffusion Models","created":"2022-03-31","cited_by_count":78,"area":"diffusion"},{"id":"2309.13415","title":"Dream the Impossible: Outlier Imagination with Diffusion Models","created":"2023-09-23","cited_by_count":77,"area":"diffusion"},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65,"area":null},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64,"area":null},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64,"area":null},{"id":"2305.13948","title":"Decoupled Kullback-Leibler Divergence Loss","created":"2023-05-23","cited_by_count":58,"area":"distill"},{"id":"2305.15316","title":"Training on Thin Air: Improve Image Classification with Generated Data","created":"2023-05-24","cited_by_count":50,"area":"diffusion"},{"id":"2210.15318","title":"Efficient and Effective Augmentation Strategy for Adversarial Training","created":"2022-10-27","cited_by_count":43,"area":null},{"id":"2301.09879","title":"Data Augmentation Alone Can Improve Adversarial Training","created":"2023-01-24","cited_by_count":43,"area":null},{"id":"2303.05470","title":"Spawrious: A Benchmark for Fine Control of Spurious Correlation Biases","created":"2023-03-09","cited_by_count":41,"area":null},{"id":"2307.00467","title":"MissDiff: Training Diffusion Models on Tabular Data with Missing Values","created":"2023-07-02","cited_by_count":39,"area":"diffusion"},{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38,"area":null},{"id":"2410.13821","title":"Artificial Kuramoto Oscillatory Neurons","created":"2024-10-17","cited_by_count":38,"area":null},{"id":"2403.02682","title":"Time Weaver: A Conditional Time Series Generation Model","created":"2024-03-05","cited_by_count":37,"area":null},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36,"area":null},{"id":"2311.16124","title":"DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purification","created":"2023-10-27","cited_by_count":36,"area":"diffusion"},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35,"area":null},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2204.00491","title":"FrequencyLowCut Pooling -- Plug & Play against Catastrophic Overfitting","created":"2022-04-01","cited_by_count":28,"area":null},{"id":"2212.11005","title":"Revisiting Residual Networks for Adversarial Robustness: An Architectural Perspective","created":"2022-12-21","cited_by_count":28,"area":null},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28,"area":null},{"id":"2210.05938","title":"Robust Models are less Over-Confident","created":"2022-10-12","cited_by_count":25,"area":null},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2302.10164","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","created":"2023-02-20","cited_by_count":23,"area":null},{"id":"2308.02533","title":"Improving Generalization of Adversarial Training via Robust Critical Fine-Tuning","created":"2023-08-01","cited_by_count":23,"area":null},{"id":"2401.01629","title":"Synthetic Data in AI: Challenges, Applications, and Ethical Implications","created":"2024-01-03","cited_by_count":21,"area":null},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21,"area":null},{"id":"2207.06202","title":"Adversarially-Aware Robust Object Detector","created":"2022-07-13","cited_by_count":20,"area":null},{"id":"2305.16035","title":"Detecting Adversarial Data by Probing Multiple Perturbations Using Expected Perturbation Score","created":"2023-05-25","cited_by_count":20,"area":null},{"id":"2312.02253","title":"Diversify, Don't Fine-Tune: Scaling Up Visual Recognition Training with Synthetic Images","created":"2023-12-04","cited_by_count":20,"area":null},{"id":"2403.06741","title":"Distribution-Aware Data Expansion with Diffusion Models","created":"2024-03-11","cited_by_count":20,"area":"diffusion"},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19,"area":null},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2407.11555","title":"Self-Guided Generation of Minority Samples Using Diffusion Models","created":"2024-07-16","cited_by_count":19,"area":"diffusion"},{"id":"2210.04886","title":"Revisiting adapters with adversarial training","created":"2022-10-10","cited_by_count":18,"area":null},{"id":"2212.01806","title":"Recognizing Object by Components with Human Prior Knowledge Enhances Adversarial Robustness of Deep Neural Networks","created":"2022-12-04","cited_by_count":18,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2303.11135","title":"TWINS: A Fine-Tuning Framework for Improved Transferability of Adversarial Robustness and Generalization","created":"2023-03-20","cited_by_count":18,"area":null},{"id":"2312.04802","title":"MimicDiffusion: Purifying Adversarial Perturbation via Mimicking Clean Diffusion Model","created":"2023-12-08","cited_by_count":18,"area":"diffusion"},{"id":"2306.09844","title":"Wasserstein distributional robustness of neural networks","created":"2023-06-16","cited_by_count":16,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2209.14826","title":"Towards Lightweight Black-Box Attacks against Deep Neural Networks","created":"2022-09-29","cited_by_count":13,"area":null},{"id":"2301.12549","title":"Unlocking Deterministic Robustness Certification on ImageNet","created":"2023-01-29","cited_by_count":13,"area":null},{"id":"2306.11035","title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game","created":"2023-06-19","cited_by_count":13,"area":null},{"id":"2308.15499","title":"Classification robustness to common optical aberrations","created":"2023-08-29","cited_by_count":13,"area":null},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2205.14230","title":"Semi-supervised Semantics-guided Adversarial Training for Trajectory Prediction","created":"2022-05-27","cited_by_count":12,"area":null},{"id":"2206.13991","title":"Increasing Confidence in Adversarial Robustness Evaluations","created":"2022-06-28","cited_by_count":12,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2305.17438","title":"On the Importance of Backbone to the Adversarial Robustness of Object Detectors","created":"2023-05-27","cited_by_count":12,"area":null},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12,"area":"mllm"},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11,"area":null},{"id":"2202.00838","title":"Finding Biological Plausibility for Adversarially Robust Features via Metameric Tasks","created":"2022-02-02","cited_by_count":11,"area":null},{"id":"2206.09628","title":"Diversified Adversarial Attacks based on Conjugate Gradient Method","created":"2022-06-20","cited_by_count":11,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2209.09117","title":"Part-Based Models Improve Adversarial Robustness","created":"2022-09-15","cited_by_count":11,"area":null},{"id":"2307.07250","title":"Mitigating Adversarial Vulnerability through Causal Parameter Estimation by Adversarial Double Machine Learning","created":"2023-07-14","cited_by_count":11,"area":null},{"id":"2401.12532","title":"DAFA: Distance-Aware Fair Adversarial Training","created":"2024-01-23","cited_by_count":11,"area":null},{"id":"2411.01583","title":"Trustworthy Federated Learning: Privacy, Security, and Beyond","created":"2024-11-03","cited_by_count":11,"area":null},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10,"area":null},{"id":"2204.02481","title":"Adversarial Robustness through the Lens of Convolutional Filters","created":"2022-04-05","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2303.12669","title":"An Extended Study of Human-like Behavior under Adversarial Training","created":"2023-03-22","cited_by_count":9,"area":null},{"id":"2311.01441","title":"Distilling Out-of-Distribution Robustness from Vision-Language Foundation Models","created":"2023-11-02","cited_by_count":9,"area":"mllm"},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9,"area":null},{"id":"2205.10210","title":"Test-time Batch Normalization","created":"2022-05-20","cited_by_count":8,"area":null},{"id":"2210.09643","title":"Improving Adversarial Robustness by Contrastive Guided Diffusion Process","created":"2022-10-18","cited_by_count":8,"area":"diffusion"},{"id":"2210.12606","title":"Nash Equilibria and Pitfalls of Adversarial Training in Adversarial Robustness Games","created":"2022-10-23","cited_by_count":8,"area":null},{"id":"2305.10015","title":"Utility Theory of Synthetic Data Generation","created":"2023-05-17","cited_by_count":8,"area":null},{"id":"2308.01127","title":"DiffusePast: Diffusion-based Generative Replay for Class Incremental Semantic Segmentation","created":"2023-08-02","cited_by_count":8,"area":"diffusion"},{"id":"2308.06703","title":"Understanding the robustness difference between stochastic gradient descent and adaptive gradient methods","created":"2023-08-13","cited_by_count":8,"area":null},{"id":"2403.16067","title":"Adversarial Guided Diffusion Models for Adversarial Purification","created":"2024-03-24","cited_by_count":8,"area":"diffusion"},{"id":"2404.14309","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","created":"2024-04-22","cited_by_count":8,"area":"diffusion"},{"id":"2505.01267","title":"Diffusion-based Adversarial Purification from the Perspective of the Frequency Domain","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2202.05488","title":"Fast Adversarial Training with Noise Augmentation: A Unified Perspective on RandStart and GradAlign","created":"2022-02-11","cited_by_count":7,"area":null},{"id":"2207.10283","title":"One-vs-the-Rest Loss to Focus on Important Samples in Adversarial Training","created":"2022-07-21","cited_by_count":7,"area":null},{"id":"2210.10913","title":"Palm up: Playing in the Latent Manifold for Unsupervised Pretraining","created":"2022-10-19","cited_by_count":7,"area":null},{"id":"2211.08008","title":"MORA: Improving Ensemble Robustness Evaluation with Model-Reweighing Attack","created":"2022-11-15","cited_by_count":7,"area":null},{"id":"2302.10980","title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks","created":"2023-02-21","cited_by_count":7,"area":null},{"id":"2305.10388","title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models","created":"2023-05-17","cited_by_count":7,"area":"diffusion"},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2407.10918","title":"PartImageNet++ Dataset: Scaling up Part-based Models for Robust Recognition","created":"2024-07-15","cited_by_count":7,"area":null},{"id":"2409.08255","title":"LoRID: Low-Rank Iterative Diffusion for Adversarial Purification","created":"2024-09-12","cited_by_count":7,"area":"diffusion"},{"id":"2410.12652","title":"Constrained Posterior Sampling: Time Series Generation with Hard Constraints","created":"2024-10-16","cited_by_count":7,"area":null},{"id":"2503.10350","title":"Enhancing Facial Privacy Protection via Weakening Diffusion Purification","created":"2025-03-13","cited_by_count":7,"area":"diffusion"},{"id":"2210.11513","title":"Learning Sample Reweighting for Accuracy and Adversarial Robustness","created":"2022-10-20","cited_by_count":6,"area":null}],"next_cursor":"100"}