{"total":130,"rows":[{"id":"2304.07288","title":"Cross-Entropy Loss Functions: Theoretical Analysis and Applications","created":"2023-04-14","cited_by_count":210,"area":null},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95,"area":null},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2210.07540","title":"When Adversarial Training Meets Vision Transformers: Recipes from Training to Architecture","created":"2022-10-14","cited_by_count":64,"area":null},{"id":"2303.14460","title":"CFA: Class-wise Calibrated Fair Adversarial Training","created":"2023-03-25","cited_by_count":53,"area":null},{"id":"2206.08675","title":"Understanding Robust Overfitting of Adversarial Training and Beyond","created":"2022-06-17","cited_by_count":51,"area":null},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2203.09678","title":"Self-Ensemble Adversarial Training for Improved Robustness","created":"2022-03-18","cited_by_count":38,"area":null},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35,"area":null},{"id":"2202.05436","title":"Minimax Regret Optimization for Robust Machine Learning under Distribution Shift","created":"2022-02-11","cited_by_count":31,"area":null},{"id":"2210.00960","title":"Stability Analysis and Generalization Bounds of Adversarial Training","created":"2022-10-03","cited_by_count":30,"area":null},{"id":"2307.16851","title":"Towards Trustworthy and Aligned Machine Learning: A Data-centric Survey with Causality Perspectives","created":"2023-07-31","cited_by_count":30,"area":"alignment"},{"id":"2212.11005","title":"Revisiting Residual Networks for Adversarial Robustness: An Architectural Perspective","created":"2022-12-21","cited_by_count":28,"area":null},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26,"area":null},{"id":"2409.05294","title":"TERD: A Unified Framework for Safeguarding Diffusion Models Against Backdoors","created":"2024-09-09","cited_by_count":25,"area":"diffusion"},{"id":"2209.14105","title":"Exploring the Relationship between Architecture and Adversarially Robust Generalization","created":"2022-09-28","cited_by_count":23,"area":null},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21,"area":null},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2303.01289","title":"Rethinking the Effect of Data Augmentation in Adversarial Contrastive Learning","created":"2023-03-02","cited_by_count":20,"area":null},{"id":"2310.19360","title":"Balance, Imbalance, and Rebalance: Understanding Robust Overfitting from a Minimax Game Perspective","created":"2023-10-30","cited_by_count":18,"area":null},{"id":"2210.06807","title":"Improving Out-of-Distribution Generalization by Adversarial Training with Structured Priors","created":"2022-10-13","cited_by_count":17,"area":null},{"id":"2310.18936","title":"Adversarial Examples Are Not Real Features","created":"2023-10-29","cited_by_count":16,"area":null},{"id":"2311.05573","title":"Outlier-Robust Wasserstein DRO","created":"2023-11-09","cited_by_count":16,"area":null},{"id":"2206.09098","title":"Existence and Minimax Theorems for Adversarial Surrogate Risks in Binary Classification","created":"2022-06-18","cited_by_count":15,"area":null},{"id":"2202.10226","title":"Approximate Nearest Neighbor Search under Neural Similarity Metric for Large-Scale Recommendation","created":"2022-02-14","cited_by_count":14,"area":null},{"id":"2303.13813","title":"Generalist: Decoupling Natural and Robust Generalization","created":"2023-03-24","cited_by_count":14,"area":null},{"id":"2305.05392","title":"Sharpness-Aware Minimization Alone can Improve Adversarial Robustness","created":"2023-05-09","cited_by_count":14,"area":null},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2203.13455","title":"A Unified Contrastive Energy-based Model for Understanding the Generative Ability of Adversarial Training","created":"2022-03-25","cited_by_count":13,"area":null},{"id":"2206.07314","title":"Fast and Reliable Evaluation of Adversarial Robustness with Minimum-Margin Attack","created":"2022-06-15","cited_by_count":13,"area":null},{"id":"2210.04311","title":"Pruning Adversarially Robust Neural Networks without Adversarial Examples","created":"2022-10-09","cited_by_count":12,"area":null},{"id":"2112.15250","title":"Benign Overfitting in Adversarially Robust Linear Classification","created":"2021-12-31","cited_by_count":11,"area":null},{"id":"2206.00700","title":"RoCourseNet: Distributionally Robust Training of a Prediction Aware Recourse Model","created":"2022-06-01","cited_by_count":11,"area":null},{"id":"2207.05641","title":"Backdoor Attacks on Crowd Counting","created":"2022-07-12","cited_by_count":10,"area":null},{"id":"2402.15429","title":"ProTIP: Probabilistic Robustness Verification on Text-to-Image Diffusion Models against Stochastic Perturbation","created":"2024-02-23","cited_by_count":10,"area":"diffusion"},{"id":"2206.06257","title":"Distributed Adversarial Training to Robustify Deep Neural Networks at Scale","created":"2022-06-13","cited_by_count":9,"area":null},{"id":"2210.00557","title":"Adaptive Smoothness-weighted Adversarial Training for Multiple Perturbations with Its Stability Analysis","created":"2022-10-02","cited_by_count":9,"area":null},{"id":"2205.08589","title":"Hierarchical Distribution-Aware Testing of Deep Learning","created":"2022-05-17","cited_by_count":8,"area":null},{"id":"2206.03362","title":"Building Robust Ensembles via Margin Boosting","created":"2022-06-07","cited_by_count":8,"area":null},{"id":"2303.03900","title":"Nash Equilibria, Regularization and Computation in Optimal Transport-Based Distributionally Robust Optimization","created":"2023-03-07","cited_by_count":8,"area":null},{"id":"2305.06472","title":"ChatGPT-Like Large-Scale Foundation Models for Prognostics and Health Management: A Survey and Roadmaps","created":"2023-05-10","cited_by_count":8,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2205.14278","title":"Generalization Bounds of Nonconvex-(Strongly)-Concave Stochastic Minimax Optimization","created":"2022-05-28","cited_by_count":7,"area":null},{"id":"2306.15164","title":"DSRM: Boost Textual Adversarial Training with Distribution Shift Risk Minimization","created":"2023-06-27","cited_by_count":7,"area":null},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7,"area":null},{"id":"2312.10329","title":"Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off","created":"2023-12-16","cited_by_count":7,"area":null},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2508.14460","title":"DuPO: Enabling Reliable LLM Self-Verification via Dual Preference Optimization","created":"2025-08-20","cited_by_count":7,"area":"alignment"},{"id":"2204.00853","title":"Adversarial Neon Beam: A Light-based Physical Attack to DNNs","created":"2022-04-02","cited_by_count":6,"area":null},{"id":"2301.03110","title":"RobArch: Designing Robust Architectures against Adversarial Attacks","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2307.04042","title":"Sup-Norm Convergence of Deep Neural Network Estimator for Nonparametric Regression by Adversarial Training","created":"2023-07-08","cited_by_count":6,"area":null},{"id":"2406.00685","title":"Improving Accuracy-robustness Trade-off via Pixel Reweighted Adversarial Training","created":"2024-06-02","cited_by_count":6,"area":null},{"id":"2409.18214","title":"Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey","created":"2024-09-26","cited_by_count":6,"area":"diffusion"},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2203.08961","title":"On the Convergence of Certified Robust Training with Interval Bound Propagation","created":"2022-03-16","cited_by_count":5,"area":null},{"id":"2212.09082","title":"On the Connection between Invariant Learning and Adversarial Training for Out-of-Distribution Generalization","created":"2022-12-18","cited_by_count":5,"area":null},{"id":"2302.11328","title":"PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks","created":"2023-02-22","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2312.13435","title":"The Adaptive Arms Race: Redefining Robustness in AI Security","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2402.02028","title":"Unlearnable Examples For Time Series","created":"2024-02-03","cited_by_count":5,"area":null},{"id":"2410.23142","title":"FAIR-TAT: Improving Model Fairness Using Targeted Adversarial Training","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2503.18317","title":"Improved Rates of Differentially Private Nonconvex-Strongly-Concave Minimax Optimization","created":"2025-03-24","cited_by_count":5,"area":null},{"id":"2206.01736","title":"Adaptive Adversarial Training to Improve Adversarial Robustness of DNNs for Medical Image Segmentation and Detection","created":"2022-06-02","cited_by_count":4,"area":null},{"id":"2211.16316","title":"A3T: Accuracy Aware Adversarial Training","created":"2022-11-29","cited_by_count":4,"area":null},{"id":"2403.00147","title":"Analysis of Kernel Mirror Prox for Measure Optimization","created":"2024-02-29","cited_by_count":4,"area":null},{"id":"2403.11833","title":"SSCAE -- Semantic, Syntactic, and Context-aware natural language Adversarial Examples generator","created":"2024-03-18","cited_by_count":4,"area":null},{"id":"2410.01580","title":"Learning-Augmented Robust Algorithmic Recourse","created":"2024-10-02","cited_by_count":4,"area":null},{"id":"2509.22502","title":"InfiAgent: Self-Evolving Pyramid Agent Framework for Infinite Scenarios","created":"2025-09-26","cited_by_count":4,"area":"agents"},{"id":"2206.12169","title":"AdAUC: End-to-end Adversarial AUC Optimization Against Long-tail Problems","created":"2022-06-24","cited_by_count":3,"area":null},{"id":"2210.01288","title":"Strength-Adaptive Adversarial Training","created":"2022-10-04","cited_by_count":3,"area":null},{"id":"2303.13326","title":"Decentralized Adversarial Training over Graphs","created":"2023-03-23","cited_by_count":3,"area":null},{"id":"2306.02618","title":"Enhance Diffusion to Improve Robust Generalization","created":"2023-06-05","cited_by_count":3,"area":null},{"id":"2402.15586","title":"Distilling Adversarial Robustness Using Heterogeneous Teachers","created":"2024-02-23","cited_by_count":3,"area":"distill"},{"id":"2402.16397","title":"Investigating Deep Watermark Security: An Adversarial Transferability Perspective","created":"2024-02-26","cited_by_count":3,"area":null},{"id":"2409.00029","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","created":"2024-08-17","cited_by_count":3,"area":null},{"id":"2411.19853","title":"Towards Class-wise Robustness Analysis","created":"2024-11-29","cited_by_count":3,"area":null},{"id":"2505.19537","title":"Continuous-Time Analysis of Heavy Ball Momentum in Min-Max Games","created":"2025-05-26","cited_by_count":3,"area":null},{"id":"2509.21293","title":"Optimal Robust Recourse with $L^p$-Bounded Model Change","created":"2025-09-25","cited_by_count":3,"area":null},{"id":"2202.03077","title":"Adversarial Attack and Defense for Non-Parametric Two-Sample Tests","created":"2022-02-07","cited_by_count":2,"area":null},{"id":"2212.07495","title":"SAIF: Sparse Adversarial and Imperceptible Attack Framework","created":"2022-12-14","cited_by_count":2,"area":null},{"id":"2401.01750","title":"Towards Robust Semantic Segmentation against Patch-based Attack via Attention Refinement","created":"2024-01-03","cited_by_count":2,"area":null},{"id":"2406.05535","title":"Perturbation Towards Easy Samples Improves Targeted Adversarial Transferability","created":"2024-06-08","cited_by_count":2,"area":null},{"id":"2411.00839","title":"CausAdv: A Causal-based Framework for Detecting Adversarial Examples","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2508.17680","title":"Robustness Feature Adapter for Efficient Adversarial Training","created":"2025-08-25","cited_by_count":2,"area":null},{"id":"2202.10523","title":"Semi-Implicit Hybrid Gradient Methods with Application to Adversarial Robustness","created":"2022-02-21","cited_by_count":1,"area":null},{"id":"2206.00489","title":"Attack-Agnostic Adversarial Detection","created":"2022-06-01","cited_by_count":1,"area":null},{"id":"2209.08412","title":"Characterizing Internal Evasion Attacks in Federated Learning","created":"2022-09-17","cited_by_count":1,"area":null},{"id":"2211.00239","title":"ARDIR: Improving Robustness using Knowledge Distillation of Internal Representation","created":"2022-11-01","cited_by_count":1,"area":"distill"},{"id":"2211.02223","title":"Adversarial Defense via Neural Oscillation inspired Gradient Masking","created":"2022-11-04","cited_by_count":1,"area":null},{"id":"2212.14106","title":"Provable Robust Saliency-based Explanations","created":"2022-12-28","cited_by_count":1,"area":null},{"id":"2301.11546","title":"Adapting Step-size: A Unified Perspective to Analyze and Improve Gradient-based Methods for Adversarial Attacks","created":"2023-01-27","cited_by_count":1,"area":null},{"id":"2306.07544","title":"On Achieving Optimal Adversarial Test Error","created":"2023-06-13","cited_by_count":1,"area":null},{"id":"2306.12582","title":"Adversarial Training with Generated Data in High-Dimensional Regression: An Asymptotic Study","created":"2023-06-21","cited_by_count":1,"area":null},{"id":"2307.00421","title":"Brightness-Restricted Adversarial Attack Patch","created":"2023-07-01","cited_by_count":1,"area":null},{"id":"2307.02454","title":"Transgressing the boundaries: towards a rigorous understanding of deep learning and its (non-)robustness","created":"2023-07-05","cited_by_count":1,"area":null},{"id":"2310.00607","title":"Understanding Robust Overfitting from the Feature Generalization Perspective","created":"2023-10-01","cited_by_count":1,"area":null},{"id":"2405.06298","title":"PUMA: margin-based data pruning","created":"2024-05-10","cited_by_count":1,"area":null},{"id":"2410.07675","title":"Adversarial Robustness Overestimation and Instability in TRADES","created":"2024-10-10","cited_by_count":1,"area":null},{"id":"2412.18718","title":"Evaluating the Adversarial Robustness of Detection Transformers","created":"2024-12-25","cited_by_count":1,"area":null}],"next_cursor":"100"}