{"list":"other","total":76,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1708.04896","title":"Random Erasing Data Augmentation","created":"2017-08-16","cited_by_count":1239},{"id":"1706.05394","title":"A Closer Look at Memorization in Deep Networks","created":"2017-06-16","cited_by_count":942},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1706.08498","title":"Spectrally-normalized margin bounds for neural networks","created":"2017-06-26","cited_by_count":686},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1703.00443","title":"OptNet: Differentiable Optimization as a Layer in Neural Networks","created":"2017-03-01","cited_by_count":599},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1910.12430","title":"Differentiable Convex Optimization Layers","created":"2019-10-28","cited_by_count":465},{"id":"2007.00644","title":"Measuring Robustness to Natural Distribution Shifts in Image Classification","created":"2020-07-01","cited_by_count":454},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1710.10571","title":"Certifying Some Distributional Robustness with Principled Adversarial Training","created":"2017-10-29","cited_by_count":337},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1702.02284","title":"Adversarial Attacks on Neural Network Policies","created":"2017-02-08","cited_by_count":320},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"1701.02434","title":"A Conceptual Introduction to Hamiltonian Monte Carlo","created":"2017-01-10","cited_by_count":209},{"id":"2104.12225","title":"DC3: A learning method for optimization with hard constraints","created":"2021-04-25","cited_by_count":184},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1604.04326","title":"Improving the Robustness of Deep Neural Networks via Stability Training","created":"2016-04-15","cited_by_count":156},{"id":"1910.13393","title":"Constrained Reinforcement Learning Has Zero Duality Gap","created":"2019-10-29","cited_by_count":151},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"1810.11914","title":"Rademacher Complexity for Adversarially Robust Generalization","created":"2018-10-29","cited_by_count":132},{"id":"1707.04926","title":"Theoretical insights into the optimization landscape of over-parameterized shallow neural networks","created":"2017-07-16","cited_by_count":128},{"id":"2009.12829","title":"Domain Generalization for Medical Imaging Classification with Linear-Dependency Regularization","created":"2020-09-27","cited_by_count":123},{"id":"1906.02611","title":"Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentation","created":"2019-06-06","cited_by_count":105},{"id":"1804.06557","title":"The Limits and Potentials of Deep Learning for Robotics","created":"2018-04-18","cited_by_count":104},{"id":"2102.11436","title":"Model-Based Domain Generalization","created":"2021-02-23","cited_by_count":104},{"id":"1506.03648","title":"Constrained Convolutional Neural Networks for Weakly Supervised Segmentation","created":"2015-06-11","cited_by_count":100},{"id":"2007.08558","title":"On Robustness and Transferability of Convolutional Neural Networks","created":"2020-07-16","cited_by_count":98},{"id":"1811.09030","title":"Data Augmentation using Random Image Cropping and Patching for Deep CNNs","created":"2018-11-22","cited_by_count":88},{"id":"1408.6491","title":"Automated Experiments on Ad Privacy Settings: A Tale of Opacity, Choice, and Discrimination","created":"2014-08-27","cited_by_count":83},{"id":"1902.04217","title":"VC Classes are Adversarially Robustly Learnable, but Only Improperly","created":"2019-02-12","cited_by_count":83},{"id":"1711.00501","title":"Learning One-hidden-layer Neural Networks with Landscape Design","created":"2017-11-01","cited_by_count":81},{"id":"2002.10477","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","created":"2020-02-24","cited_by_count":77},{"id":"2008.01825","title":"Robust Reinforcement Learning using Adversarial Populations","created":"2020-08-04","cited_by_count":66},{"id":"1702.07966","title":"Globally Optimal Gradient Descent for a ConvNet with Gaussian Inputs","created":"2017-02-26","cited_by_count":61},{"id":"2002.06789","title":"CAT: Customized Adversarial Training for Improved Robustness","created":"2020-02-17","cited_by_count":61},{"id":"2002.03239","title":"Curse of Dimensionality on Randomized Smoothing for Certifiable Robustness","created":"2020-02-08","cited_by_count":56},{"id":"2002.04599","title":"Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations","created":"2020-02-11","cited_by_count":55},{"id":"2007.08450","title":"Learning perturbation sets for robust machine learning","created":"2020-07-16","cited_by_count":48},{"id":"2004.13617","title":"Adversarial Learning Guarantees for Linear Hypotheses and Neural Networks","created":"2020-04-28","cited_by_count":47},{"id":"2006.05487","title":"Probably Approximately Correct Constrained Learning","created":"2020-06-09","cited_by_count":47},{"id":"2006.05161","title":"Provable tradeoffs in adversarially robust classification","created":"2020-06-09","cited_by_count":40},{"id":"2006.01096","title":"Invariant Policy Optimization: Towards Stronger Generalization in Reinforcement Learning","created":"2020-06-01","cited_by_count":37},{"id":"1712.09196","title":"The Robust Manifold Defense: Adversarial Training using Generative Models","created":"2017-12-26","cited_by_count":35},{"id":"1811.05232","title":"Theoretical Analysis of Adversarial Learning: A Minimax Approach","created":"2018-11-13","cited_by_count":31},{"id":"1912.03192","title":"Achieving Robustness in the Wild via Adversarial Mixing with Disentangled Representations","created":"2019-12-06","cited_by_count":28},{"id":"2005.10247","title":"Model-Based Robust Deep Learning: Generalizing to Natural, Out-of-Distribution Data","created":"2020-05-20","cited_by_count":27},{"id":"1712.06050","title":"Wasserstein Distributionally Robust Optimization and Variation Regularization","created":"2017-12-17","cited_by_count":25},{"id":"1806.01471","title":"PAC-learning in the presence of evasion adversaries","created":"2018-06-05","cited_by_count":23},{"id":"2005.07652","title":"Efficiently Learning Adversarially Robust Halfspaces with Noise","created":"2020-05-15","cited_by_count":22},{"id":"1806.08028","title":"Gradient Adversarial Training of Neural Networks","created":"2018-06-21","cited_by_count":17},{"id":"1803.10840","title":"Defending against Adversarial Images using Basis Functions Transformations","created":"2018-03-28","cited_by_count":11},{"id":"1904.01638","title":"A Strong Baseline for Domain Adaptation and Generalization in Medical Imaging","created":"2019-04-02","cited_by_count":11},{"id":"2002.05183","title":"The empirical duality gap of constrained statistical learning","created":"2020-02-12","cited_by_count":9},{"id":"1803.06453","title":"Constrained Deep Learning using Conditional Gradient and Applications in Computer Vision","created":"2018-03-17","cited_by_count":7},{"id":"2010.05355","title":"Medical Image Harmonization Using Deep Learning Based Canonical Mapping: Toward Robust and Generalizable Learning in Imaging","created":"2020-10-11","cited_by_count":7}],"next_cursor":null}