{"list":"other","total":56,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1706.04599","title":"On Calibration of Modern Neural Networks","created":"2017-06-14","cited_by_count":4960},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1610.02136","title":"A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networks","created":"2016-10-07","cited_by_count":2385},{"id":"1606.06565","title":"Concrete Problems in AI Safety","created":"2016-06-21","cited_by_count":1642},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1906.12340","title":"Using Self-Supervised Learning Can Improve Model Robustness and Uncertainty","created":"2019-06-28","cited_by_count":514},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1701.06548","title":"Regularizing Neural Networks by Penalizing Confident Output Distributions","created":"2017-01-23","cited_by_count":464},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"2007.08176","title":"CSI: Novelty Detection via Contrastive Learning on Distributionally Shifted Instances","created":"2020-07-16","cited_by_count":441},{"id":"1711.09325","title":"Training Confidence-calibrated Classifiers for Detecting Out-of-Distribution Samples","created":"2017-11-26","cited_by_count":389},{"id":"1906.05113","title":"A Survey of Autonomous Driving: Common Practices and Emerging Technologies","created":"2019-06-12","cited_by_count":379},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1909.10155","title":"Verified Uncertainty Calibration","created":"2019-09-23","cited_by_count":309},{"id":"2009.06962","title":"Puzzle Mix: Exploiting Saliency and Local Statistics for Optimal Mixup","created":"2020-09-15","cited_by_count":261},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"1805.11783","title":"To Trust Or Not To Trust A Classifier","created":"2018-05-30","cited_by_count":207},{"id":"1906.06316","title":"Towards Stable and Efficient Training of Verifiably Robust Neural Networks","created":"2019-06-14","cited_by_count":205},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"2010.04819","title":"How Does Mixup Help With Robustness and Generalization?","created":"2020-10-09","cited_by_count":193},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"2102.03065","title":"Co-Mixup: Saliency Guided Joint Mixup with Supermodular Diversity","created":"2021-02-05","cited_by_count":128},{"id":"1903.10346","title":"Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognition","created":"2019-03-22","cited_by_count":124},{"id":"2001.02378","title":"MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius","created":"2020-01-08","cited_by_count":114},{"id":"2009.04131","title":"SoK: Certified Robustness for Deep Neural Networks","created":"2020-09-09","cited_by_count":105},{"id":"1904.06347","title":"Unrestricted Adversarial Examples via Semantic Manipulation","created":"2019-04-12","cited_by_count":84},{"id":"2003.02484","title":"Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization","created":"2020-03-05","cited_by_count":73},{"id":"2006.04062","title":"Consistency Regularization for Certified Robustness of Smoothed Classifiers","created":"2020-06-07","cited_by_count":73},{"id":"1909.12180","title":"Towards neural networks that provably know when they don't know","created":"2019-09-26","cited_by_count":69},{"id":"1809.03008","title":"Training for Faster Adversarial Robustness Verification via Inducing ReLU Stability","created":"2018-09-09","cited_by_count":67},{"id":"1906.04948","title":"Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers","created":"2019-06-12","cited_by_count":65},{"id":"1810.07481","title":"Provable Robustness of ReLU networks via Maximization of Linear Regions","created":"2018-10-17","cited_by_count":51},{"id":"1906.06784","title":"Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Too Much Accuracy","created":"2019-06-16","cited_by_count":49},{"id":"1910.08640","title":"Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?","created":"2019-10-18","cited_by_count":43},{"id":"1905.11213","title":"Provable robustness against all adversarial $l_p$-perturbations for $p\\geq 1$","created":"2019-05-27","cited_by_count":39},{"id":"2010.06651","title":"Higher-Order Certification for Randomized Smoothing","created":"2020-10-13","cited_by_count":37},{"id":"2012.04351","title":"Data-Dependent Randomized Smoothing","created":"2020-12-08","cited_by_count":37},{"id":"1706.03475","title":"Confident Multiple Choice Learning","created":"2017-06-12","cited_by_count":24},{"id":"2103.04436","title":"Insta-RS: Instance-wise Randomized Smoothing for Improved Robustness and Accuracy","created":"2021-03-07","cited_by_count":5}],"next_cursor":null}