{"list":"other","total":52,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1504.08083","title":"Fast R-CNN","created":"2015-04-30","cited_by_count":2933},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1605.08803","title":"Density estimation using Real NVP","created":"2016-05-27","cited_by_count":2042},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1802.05957","title":"Spectral Normalization for Generative Adversarial Networks","created":"2018-02-16","cited_by_count":1636},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1807.03039","title":"Glow: Generative Flow with Invertible 1x1 Convolutions","created":"2018-07-09","cited_by_count":1545},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1410.8516","title":"NICE: Non-linear Independent Components Estimation","created":"2014-10-30","cited_by_count":1058},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1811.00995","title":"Invertible Residual Networks","created":"2018-11-02","cited_by_count":365},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"1902.05300","title":"On instabilities of deep learning in image reconstruction - Does AI come at a cost?","created":"2019-02-14","cited_by_count":212},{"id":"1811.01057","title":"Semidefinite relaxations for certifying robustness to adversarial examples","created":"2018-11-02","cited_by_count":179},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"2006.12655","title":"Perceptual Adversarial Robustness: Defense Against Unseen Threat Models","created":"2020-06-22","cited_by_count":137},{"id":"1805.07894","title":"Constructing Unrestricted Adversarial Examples with Generative Models","created":"2018-05-21","cited_by_count":135},{"id":"1805.09190","title":"Towards the first adversarially robust neural network model on MNIST","created":"2018-05-23","cited_by_count":104},{"id":"2003.06693","title":"Certified Defenses for Adversarial Patches","created":"2020-03-14","cited_by_count":101},{"id":"1909.04068","title":"Adversarial Robustness Against the Union of Multiple Perturbation Models","created":"2019-09-09","cited_by_count":88},{"id":"1906.00001","title":"Functional Adversarial Attacks","created":"2019-05-29","cited_by_count":82},{"id":"1802.08686","title":"Adversarial vulnerability for any classifier","created":"2018-02-23","cited_by_count":78},{"id":"1902.04818","title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples","created":"2019-02-13","cited_by_count":75},{"id":"2003.02484","title":"Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization","created":"2020-03-05","cited_by_count":73},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71},{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67},{"id":"1911.09272","title":"Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation","created":"2019-11-21","cited_by_count":60},{"id":"1909.11515","title":"Mixup Inference: Better Exploiting Mixup to Defend Adversarial Attacks","created":"2019-09-25","cited_by_count":54},{"id":"1906.06784","title":"Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Too Much Accuracy","created":"2019-06-16","cited_by_count":49},{"id":"2009.02470","title":"Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks","created":"2020-09-05","cited_by_count":45},{"id":"1712.09196","title":"The Robust Manifold Defense: Adversarial Training using Generative Models","created":"2017-12-26","cited_by_count":35},{"id":"2002.03517","title":"Random Smoothing Might be Unable to Certify $\\ell_\\infty$ Robustness for High-Dimensional Images","created":"2020-02-10","cited_by_count":35},{"id":"1806.00081","title":"Resisting Adversarial Attacks using Gaussian Mixture Variational Autoencoders","created":"2018-05-31","cited_by_count":26},{"id":"1910.10783","title":"Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks","created":"2019-10-23","cited_by_count":25},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17},{"id":"1911.09058","title":"Fine-grained Synthesis of Unrestricted Adversarial Examples","created":"2019-11-20","cited_by_count":8},{"id":"2108.07958","title":"Semantic Perturbations with Normalizing Flows for Improved Generalization","created":"2021-08-18","cited_by_count":6}],"next_cursor":null}