{"list":"other","total":51,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1604.07316","title":"End to End Learning for Self-Driving Cars","created":"2016-04-25","cited_by_count":1009},{"id":"1801.09414","title":"CosFace: Large Margin Cosine Loss for Deep Face Recognition","created":"2018-01-29","cited_by_count":971},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244},{"id":"1505.00256","title":"DeepDriving: Learning Affordance for Direct Perception in Autonomous Driving","created":"2015-05-01","cited_by_count":231},{"id":"1704.02532","title":"Deep Reinforcement Learning framework for Autonomous Driving","created":"2017-04-08","cited_by_count":225},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156},{"id":"1612.01079","title":"End-to-end Learning of Driving Models from Large-scale Video Datasets","created":"2016-12-04","cited_by_count":148},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"1811.12641","title":"Transferable Adversarial Attacks for Image and Video Object Detection","created":"2018-11-30","cited_by_count":109},{"id":"2005.14137","title":"QEBA: Query-Efficient Boundary-Based Blackbox Attack","created":"2020-05-28","cited_by_count":104},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84},{"id":"1809.08758","title":"Low Frequency Adversarial Perturbation","created":"2018-09-24","cited_by_count":80},{"id":"2003.06468","title":"GeoDA: a geometric framework for black-box adversarial attacks","created":"2020-03-13","cited_by_count":66},{"id":"2011.12807","title":"SurFree: a fast surrogate-free black-box attack","created":"2020-11-25","cited_by_count":60},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54},{"id":"1810.00740","title":"Improving the Generalization of Adversarial Training with Domain Adaptation","created":"2018-10-01","cited_by_count":48},{"id":"1909.06723","title":"Natural Language Adversarial Defense through Synonym Encoding","created":"2019-09-15","cited_by_count":40},{"id":"1906.02398","title":"Query-efficient Meta Attack to Deep Neural Networks","created":"2019-06-06","cited_by_count":33},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32},{"id":"2108.09468","title":"End2End Occluded Face Recognition by Masking Corrupted Features","created":"2021-08-21","cited_by_count":24},{"id":"1903.10826","title":"A geometry-inspired decision-based attack","created":"2019-03-26","cited_by_count":22},{"id":"2002.07891","title":"Towards Query-Efficient Black-Box Adversary with Zeroth-Order Natural Gradient Descent","created":"2020-02-18","cited_by_count":18},{"id":"2007.07210","title":"Simple and Efficient Hard Label Black-box Adversarial Attacks in Low Query Budget Regimes","created":"2020-07-13","cited_by_count":17},{"id":"2103.08147","title":"LARNet: Lie Algebra Residual Network for Face Recognition","created":"2021-03-15","cited_by_count":14},{"id":"1812.06371","title":"Trust Region Based Adversarial Attack on Neural Networks","created":"2018-12-16","cited_by_count":11}],"next_cursor":null}