{"list":"other","total":82,"rows":[{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1707.07328","title":"Adversarial Examples for Evaluating Reading Comprehension Systems","created":"2017-07-23","cited_by_count":571},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1801.04354","title":"Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers","created":"2018-01-13","cited_by_count":345},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1909.08072","title":"Adversarial Attacks and Defenses in Images, Graphs and Text: A Review","created":"2019-09-17","cited_by_count":237},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"1906.06919","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","created":"2019-06-17","cited_by_count":121},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"1705.02498","title":"A Study and Comparison of Human and Deep Learning Recognition Performance Under Visual Distortions","created":"2017-05-06","cited_by_count":108},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"1803.01128","title":"Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples","created":"2018-03-03","cited_by_count":94},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"1902.07906","title":"Wasserstein Adversarial Examples via Projected Sinkhorn Iterations","created":"2019-02-21","cited_by_count":89},{"id":"1608.08967","title":"Robustness of classifiers: from adversarial to random noise","created":"2016-08-31","cited_by_count":88},{"id":"1805.11090","title":"GenAttack: Practical Black-box Attacks with Gradient-Free Optimization","created":"2018-05-28","cited_by_count":82},{"id":"1809.08758","title":"Low Frequency Adversarial Perturbation","created":"2018-09-24","cited_by_count":80},{"id":"1612.07767","title":"Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics","created":"2016-12-22","cited_by_count":77},{"id":"1902.04818","title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples","created":"2019-02-13","cited_by_count":75},{"id":"1608.07690","title":"A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples","created":"2016-08-27","cited_by_count":70},{"id":"1810.01279","title":"Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network","created":"2018-10-01","cited_by_count":69},{"id":"1906.07916","title":"Convergence of Adversarial Training in Overparametrized Neural Networks","created":"2019-06-19","cited_by_count":58},{"id":"1707.02812","title":"Towards Crafting Text Adversarial Samples","created":"2017-07-10","cited_by_count":55},{"id":"1707.06728","title":"Efficient Defenses Against Adversarial Attacks","created":"2017-07-21","cited_by_count":53},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"1712.03390","title":"NAG: Network for Adversary Generation","created":"2017-12-09","cited_by_count":51},{"id":"1906.03499","title":"ML-LOO: Detecting Adversarial Examples with Feature Attribution","created":"2019-06-08","cited_by_count":48},{"id":"2007.08450","title":"Learning perturbation sets for robust machine learning","created":"2020-07-16","cited_by_count":48},{"id":"1812.09803","title":"Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks","created":"2018-12-24","cited_by_count":46},{"id":"1805.12316","title":"Greedy Attack and Gumbel Attack: Generating Adversarial Examples for Discrete Data","created":"2018-05-31","cited_by_count":38},{"id":"1712.09196","title":"The Robust Manifold Defense: Adversarial Training using Generative Models","created":"2017-12-26","cited_by_count":35},{"id":"1906.04392","title":"Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks","created":"2019-06-11","cited_by_count":35},{"id":"1906.03849","title":"Robustness Verification of Tree-based Models","created":"2019-06-10","cited_by_count":33},{"id":"2008.04094","title":"Adversarial Examples on Object Recognition: A Comprehensive Survey","created":"2020-08-07","cited_by_count":23},{"id":"1610.03944","title":"Rank Verification for Exponential Families","created":"2016-10-13","cited_by_count":13},{"id":"2005.04871","title":"Spanning Attack: Reinforce Black-box Attacks with Unlabeled Data","created":"2020-05-11","cited_by_count":6},{"id":"1811.07950","title":"Optimal Transport Classifier: Defending Against Adversarial Attacks by Regularized Deep Embedding","created":"2018-11-19","cited_by_count":2}],"next_cursor":null}