{"list":"other","total":52,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2008.09104","title":"A review of deep learning in medical imaging: Imaging traits, technology trends, case studies with progress highlights, and future promises","created":"2020-08-02","cited_by_count":231},{"id":"1803.04765","title":"Deep k-Nearest Neighbors: Towards Confident, Interpretable and Robust Deep Learning","created":"2018-03-13","cited_by_count":207},{"id":"1608.00853","title":"A study of the effect of JPG compression on adversarial images","created":"2016-08-02","cited_by_count":197},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"1907.10456","title":"Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems","created":"2019-07-24","cited_by_count":153},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1612.07767","title":"Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics","created":"2016-12-22","cited_by_count":77},{"id":"1704.00103","title":"SafetyNet: Detecting and Rejecting Adversarial Examples Robustly","created":"2017-04-01","cited_by_count":76},{"id":"1909.06872","title":"Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors","created":"2019-09-15","cited_by_count":72},{"id":"1804.05296","title":"Adversarial Attacks Against Medical Deep Learning Systems","created":"2018-04-15","cited_by_count":62},{"id":"1511.05122","title":"Adversarial Manipulation of Deep Representations","created":"2015-11-16","cited_by_count":56},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40},{"id":"1904.09412","title":"Cubic LSTMs for Video Prediction","created":"2019-04-20","cited_by_count":32},{"id":"1907.13124","title":"Impact of Adversarial Examples on Deep Learning Models for Biomedical Image Segmentation","created":"2019-07-30","cited_by_count":26},{"id":"1804.00504","title":"Generalizability vs. Robustness: Adversarial Examples for Medical Imaging","created":"2018-03-23","cited_by_count":23},{"id":"2007.05225","title":"Miss the Point: Targeted Adversarial Attack on Multiple Landmark Detection","created":"2020-07-10","cited_by_count":21},{"id":"1905.11475","title":"GAT: Generative Adversarial Training for Adversarial Example Detection and Robust Classification","created":"2019-05-27","cited_by_count":20},{"id":"1903.01612","title":"Defense Against Adversarial Images using Web-Scale Nearest-Neighbor Search","created":"2019-03-05","cited_by_count":19},{"id":"1912.11852","title":"Benchmarking Adversarial Robustness","created":"2019-12-26","cited_by_count":15},{"id":"2107.04263","title":"Towards Robust General Medical Image Segmentation","created":"2021-07-09","cited_by_count":14},{"id":"1903.01015","title":"A Kernelized Manifold Mapping to Diminish the Effect of Adversarial Perturbations","created":"2019-03-03","cited_by_count":11},{"id":"2012.09501","title":"A Hierarchical Feature Constraint to Camouflage Medical Adversarial Attacks","created":"2020-12-17","cited_by_count":8}],"next_cursor":null}