{"list":"other","total":53,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1812.11118","title":"Reconciling modern machine learning practice and the bias-variance trade-off","created":"2018-12-28","cited_by_count":927},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1710.10345","title":"The Implicit Bias of Gradient Descent on Separable Data","created":"2017-10-27","cited_by_count":655},{"id":"1906.11300","title":"Benign Overfitting in Linear Regression","created":"2019-06-26","cited_by_count":549},{"id":"1903.08560","title":"Surprises in High-Dimensional Ridgeless Least Squares Interpolation","created":"2019-03-19","cited_by_count":513},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1905.13655","title":"Implicit Regularization in Deep Matrix Factorization","created":"2019-05-31","cited_by_count":405},{"id":"1705.09280","title":"Implicit Regularization in Matrix Factorization","created":"2017-05-25","cited_by_count":322},{"id":"1906.05890","title":"Gradient Descent Maximizes the Margin of Homogeneous Neural Networks","created":"2019-06-13","cited_by_count":320},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1802.08246","title":"Characterizing Implicit Bias in Terms of Optimization Geometry","created":"2018-02-22","cited_by_count":266},{"id":"1903.07571","title":"Two models of double descent for weak features","created":"2019-03-18","cited_by_count":195},{"id":"1802.01396","title":"To understand deep learning we need to understand kernel learning","created":"2018-02-05","cited_by_count":187},{"id":"1810.02032","title":"Gradient descent aligns the layers of deep linear networks","created":"2018-10-04","cited_by_count":182},{"id":"2009.14286","title":"Benign overfitting in ridge regression","created":"2020-09-29","cited_by_count":153},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"1810.11914","title":"Rademacher Complexity for Adversarially Robust Generalization","created":"2018-10-29","cited_by_count":132},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130},{"id":"2005.10190","title":"Feature Purification: How Adversarial Training Performs Robust Deep Learning","created":"2020-05-20","cited_by_count":107},{"id":"2006.05800","title":"On the Optimal Weighted $\\ell_2$ Regularization in Overparameterized Linear Regression","created":"2020-06-10","cited_by_count":98},{"id":"1709.01953","title":"Implicit Regularization in Deep Learning","created":"2017-09-06","cited_by_count":90},{"id":"2004.12019","title":"Finite-sample Analysis of Interpolating Linear Classifiers in the Overparameterized Regime","created":"2020-04-25","cited_by_count":81},{"id":"2010.01279","title":"Do Wider Neural Networks Really Help Adversarial Robustness?","created":"2020-10-03","cited_by_count":79},{"id":"1802.08686","title":"Adversarial vulnerability for any classifier","created":"2018-02-23","cited_by_count":78},{"id":"2103.12692","title":"Benign Overfitting of Constant-Stepsize SGD for Linear Regression","created":"2021-03-23","cited_by_count":71},{"id":"1806.01796","title":"Stochastic Gradient Descent on Separable Data: Exact Convergence with a Fixed Learning Rate","created":"2018-06-05","cited_by_count":64},{"id":"1906.07916","title":"Convergence of Adversarial Training in Overparametrized Neural Networks","created":"2019-06-19","cited_by_count":58},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55},{"id":"2010.11213","title":"Precise Statistical Analysis of Classification Accuracies for Adversarial Training","created":"2020-10-21","cited_by_count":50},{"id":"2104.13628","title":"Risk Bounds for Over-parameterized Maximum Margin Classification on Sub-Gaussian Mixtures","created":"2021-04-28","cited_by_count":49},{"id":"2006.05161","title":"Provable tradeoffs in adversarially robust classification","created":"2020-06-09","cited_by_count":40},{"id":"2007.04028","title":"How benign is benign overfitting?","created":"2020-07-08","cited_by_count":40},{"id":"2002.06668","title":"Over-parameterized Adversarial Training: An Analysis Overcoming the Curse of Dimensionality","created":"2020-02-16","cited_by_count":36},{"id":"2006.16384","title":"Sharp Statistical Guarantees for Adversarially Robust Gaussian Classification","created":"2020-06-29","cited_by_count":28},{"id":"2002.04725","title":"More Data Can Expand the Generalization Gap Between Adversarially Robust and Standard Models","created":"2020-02-11","cited_by_count":27},{"id":"2110.02914","title":"Foolish Crowds Support Benign Overfitting","created":"2021-10-06","cited_by_count":24},{"id":"1806.01471","title":"PAC-learning in the presence of evasion adversaries","created":"2018-06-05","cited_by_count":23},{"id":"2005.07652","title":"Efficiently Learning Adversarially Robust Halfspaces with Noise","created":"2020-05-15","cited_by_count":22},{"id":"2007.15220","title":"The Complexity of Adversarially Robust Proper Learning of Halfspaces with Agnostic Noise","created":"2020-07-30","cited_by_count":15},{"id":"2010.13275","title":"Asymptotic Behavior of Adversarial Training in Binary Classification","created":"2020-10-26","cited_by_count":15},{"id":"2112.07324","title":"On the Impact of Hard Adversarial Instances on Overfitting in Adversarial Training","created":"2021-12-14","cited_by_count":11},{"id":"2104.09437","title":"Provable Robustness of Adversarial Training for Learning Halfspaces with Noise","created":"2021-04-19","cited_by_count":10},{"id":"1905.09209","title":"Convergence and Margin of Adversarial Training on Separable Data","created":"2019-05-22","cited_by_count":5},{"id":"2003.00378","title":"Understanding the Intrinsic Robustness of Image Distributions using Conditional Generative Models","created":"2020-03-01","cited_by_count":5}],"next_cursor":null}