{"list":"other","total":63,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1405.0312","title":"Microsoft COCO: Common Objects in Context","created":"2014-05-01","cited_by_count":17608},{"id":"1506.01497","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","created":"2015-06-04","cited_by_count":9639},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1703.06870","title":"Mask R-CNN","created":"2017-03-20","cited_by_count":7277},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1611.07004","title":"Image-to-Image Translation with Conditional Adversarial Networks","created":"2016-11-21","cited_by_count":4527},{"id":"1606.00915","title":"DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFs","created":"2016-06-02","cited_by_count":3241},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1706.05587","title":"Rethinking Atrous Convolution for Semantic Image Segmentation","created":"2017-06-17","cited_by_count":2161},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1603.08511","title":"Colorful Image Colorization","created":"2016-03-28","cited_by_count":1114},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1805.01934","title":"Learning to See in the Dark","created":"2018-05-04","cited_by_count":460},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1608.00853","title":"A study of the effect of JPG compression on adversarial images","created":"2016-08-02","cited_by_count":197},{"id":"2010.01950","title":"Torchattacks: A PyTorch Repository for Adversarial Attacks","created":"2020-09-24","cited_by_count":158},{"id":"1712.02328","title":"Generative Adversarial Perturbations","created":"2017-12-06","cited_by_count":153},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1905.05169","title":"Zoom To Learn, Learn To Zoom","created":"2019-05-13","cited_by_count":115},{"id":"2002.05509","title":"Replacing Mobile Camera ISP with a Single Deep Learning Model","created":"2020-02-13","cited_by_count":108},{"id":"1811.12673","title":"ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples","created":"2018-11-30","cited_by_count":105},{"id":"1803.05787","title":"Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples","created":"2018-03-14","cited_by_count":99},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"1801.06724","title":"DeepISP: Towards Learning an End-to-End Image Processing Pipeline","created":"2018-01-20","cited_by_count":88},{"id":"1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","created":"2017-05-08","cited_by_count":87},{"id":"1911.10695","title":"When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks","created":"2019-11-25","cited_by_count":87},{"id":"1704.00103","title":"SafetyNet: Detecting and Rejecting Adversarial Examples Robustly","created":"2017-04-01","cited_by_count":76},{"id":"1702.05983","title":"Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN","created":"2017-02-20","cited_by_count":75},{"id":"1801.08926","title":"Deflecting Adversarial Attacks with Pixel Deflection","created":"2018-01-26","cited_by_count":71},{"id":"1912.11969","title":"Efficient Adversarial Training with Transferable Adversarial Examples","created":"2019-12-27","cited_by_count":56},{"id":"1811.10716","title":"Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attacks","created":"2018-11-26","cited_by_count":48},{"id":"1905.12156","title":"Towards Real Scene Super-Resolution with Raw Images","created":"2019-05-29","cited_by_count":44},{"id":"1701.06487","title":"Dirty Pixels: Towards End-to-End Image Processing and Perception","created":"2017-01-23","cited_by_count":42},{"id":"1901.00532","title":"Adversarial Robustness May Be at Odds With Simplicity","created":"2019-01-02","cited_by_count":39},{"id":"1908.01481","title":"CameraNet: A Two-Stage Framework for Effective Camera ISP Learning","created":"2019-08-05","cited_by_count":38},{"id":"2008.09228","title":"AWNet: Attentive Wavelet Network for Image ISP","created":"2020-08-20","cited_by_count":38},{"id":"1904.01160","title":"Curls & Whey: Boosting Black-Box Adversarial Attacks","created":"2019-04-02","cited_by_count":37},{"id":"2109.04760","title":"ReconfigISP: Reconfigurable Camera Image Processing Pipeline","created":"2021-09-10","cited_by_count":30},{"id":"2004.10162","title":"EMPIR: Ensembles of Mixed Precision Deep Networks for Increased Robustness against Adversarial Attacks","created":"2020-04-21","cited_by_count":28},{"id":"1905.11475","title":"GAT: Generative Adversarial Training for Adversarial Example Detection and Robust Classification","created":"2019-05-27","cited_by_count":20},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15},{"id":"2102.01579","title":"Exploiting Raw Images for Real-Scene Super-Resolution","created":"2021-02-02","cited_by_count":12},{"id":"1902.00236","title":"Natural and Adversarial Error Detection using Invariance to Image Transformations","created":"2019-02-01","cited_by_count":9}],"next_cursor":null}