{"list":"other","total":52,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1503.03832","title":"FaceNet: A Unified Embedding for Face Recognition and Clustering","created":"2015-03-12","cited_by_count":2849},{"id":"1809.11096","title":"Large Scale GAN Training for High Fidelity Natural Image Synthesis","created":"2018-09-28","cited_by_count":2626},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1702.03118","title":"Sigmoid-Weighted Linear Units for Neural Network Function Approximation in Reinforcement Learning","created":"2017-02-10","cited_by_count":950},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1412.6622","title":"Deep metric learning using Triplet network","created":"2014-12-20","cited_by_count":422},{"id":"1606.05908","title":"Tutorial on Variational Autoencoders","created":"2016-06-19","cited_by_count":409},{"id":"2006.10738","title":"Differentiable Augmentation for Data-Efficient GAN Training","created":"2020-06-18","cited_by_count":363},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1610.07629","title":"A Learned Representation For Artistic Style","created":"2016-10-24","cited_by_count":341},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1802.05637","title":"cGANs with Projection Discriminator","created":"2018-02-15","cited_by_count":254},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"2010.01736","title":"Geometry-aware Instance-reweighted Adversarial Training","created":"2020-10-05","cited_by_count":198},{"id":"1404.4661","title":"Learning Fine-grained Image Similarity with Deep Ranking","created":"2014-04-17","cited_by_count":190},{"id":"1707.00683","title":"Modulating early visual processing by language","created":"2017-07-02","cited_by_count":167},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"1804.07933","title":"Is feature selection secure against training data poisoning?","created":"2018-04-21","cited_by_count":93},{"id":"1806.04498","title":"The Unusual Effectiveness of Averaging in GAN Training","created":"2018-06-12","cited_by_count":73},{"id":"2003.13746","title":"DeepHammer: Depleting the Intelligence of Deep Neural Networks through Targeted Chain of Bit Flips","created":"2020-03-30","cited_by_count":56},{"id":"1711.08478","title":"MagNet and \"Efficient Defenses Against Adversarial Attacks\" are Not Robust to Adversarial Examples","created":"2017-11-22","cited_by_count":46},{"id":"1904.08554","title":"Gotta Catch 'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks","created":"2019-04-18","cited_by_count":40},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35},{"id":"1706.04701","title":"Adversarial Example Defenses: Ensembles of Weak Defenses are not Strong","created":"2017-06-15","cited_by_count":32},{"id":"1806.09186","title":"Detection based Defense against Adversarial Examples from the Steganalysis Point of View","created":"2018-06-21","cited_by_count":32},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29},{"id":"2005.08041","title":"NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flips","created":"2020-05-16","cited_by_count":21},{"id":"1911.01921","title":"DLA: Dense-Layer-Analysis for Adversarial Example Detection","created":"2019-11-05","cited_by_count":20},{"id":"1905.11713","title":"Improving the Robustness of Deep Neural Networks via Adversarial Training with Triplet Loss","created":"2019-05-28","cited_by_count":13}],"next_cursor":null}