{"list":"other","total":52,"rows":[{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"2007.00644","title":"Measuring Robustness to Natural Distribution Shifts in Image Classification","created":"2020-07-01","cited_by_count":454},{"id":"1710.10571","title":"Certifying Some Distributional Robustness with Principled Adversarial Training","created":"2017-10-29","cited_by_count":337},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1705.08848","title":"Joint Distribution Optimal Transportation for Domain Adaptation","created":"2017-05-24","cited_by_count":282},{"id":"1808.08750","title":"Generalisation in humans and deep neural networks","created":"2018-08-27","cited_by_count":237},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1807.01069","title":"Adversarial Robustness Toolbox v1.0.0","created":"2018-07-03","cited_by_count":215},{"id":"1803.10081","title":"DeepJDOT: Deep Joint Distribution Optimal Transport for Unsupervised Domain Adaptation","created":"2018-03-27","cited_by_count":214},{"id":"1805.12177","title":"Why do deep convolutional networks generalize so poorly to small image transformations?","created":"2018-05-30","cited_by_count":198},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1811.01057","title":"Semidefinite relaxations for certifying robustness to adversarial examples","created":"2018-11-02","cited_by_count":179},{"id":"1811.11553","title":"Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects","created":"2018-11-28","cited_by_count":143},{"id":"2006.07589","title":"Adversarial Self-Supervised Contrastive Learning","created":"2020-06-13","cited_by_count":139},{"id":"2006.12655","title":"Perceptual Adversarial Robustness: Defense Against Unseen Threat Models","created":"2020-06-22","cited_by_count":137},{"id":"1604.04004","title":"Understanding How Image Quality Affects Deep Neural Networks","created":"2016-04-14","cited_by_count":119},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"1902.07906","title":"Wasserstein Adversarial Examples via Projected Sinkhorn Iterations","created":"2019-02-21","cited_by_count":89},{"id":"1909.01492","title":"Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagation","created":"2019-09-03","cited_by_count":88},{"id":"1909.04068","title":"Adversarial Robustness Against the Union of Multiple Perturbation Models","created":"2019-09-09","cited_by_count":88},{"id":"1906.00001","title":"Functional Adversarial Attacks","created":"2019-05-29","cited_by_count":82},{"id":"1903.01689","title":"Domain Adaptation with Asymmetrically-Relaxed Distribution Alignment","created":"2019-03-05","cited_by_count":61},{"id":"1911.09272","title":"Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation","created":"2019-11-21","cited_by_count":60},{"id":"1611.05760","title":"Examining the Impact of Blur on Recognition by Convolutional Networks","created":"2016-11-17","cited_by_count":58},{"id":"2002.12463","title":"Certified Defense to Image Transformations via Randomized Smoothing","created":"2020-02-27","cited_by_count":51},{"id":"2110.14189","title":"Robust Contrastive Learning Using Negative Samples with Diminished Semantics","created":"2021-10-27","cited_by_count":43},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42},{"id":"2006.00731","title":"Second-Order Provable Defenses against Adversarial Attacks","created":"2020-06-01","cited_by_count":40},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39},{"id":"1507.06535","title":"Manitest: Are classifiers really invariant?","created":"2015-07-23","cited_by_count":27},{"id":"1701.01924","title":"On Classification of Distorted Images with Deep Convolutional Neural Networks","created":"2017-01-08","cited_by_count":26},{"id":"1910.10783","title":"Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks","created":"2019-10-23","cited_by_count":25},{"id":"1906.11235","title":"Invariance-inducing regularization using worst-case transformations suffices to boost accuracy and spatial robustness","created":"2019-06-26","cited_by_count":18},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18},{"id":"2107.03919","title":"Understanding the Limits of Unsupervised Domain Adaptation via Data Poisoning","created":"2021-07-08","cited_by_count":11},{"id":"2102.10875","title":"On the robustness of randomized classifiers to adversarial examples","created":"2021-02-22","cited_by_count":9},{"id":"1902.01235","title":"Robustness Certificates Against Adversarial Examples for ReLU Networks","created":"2019-02-01","cited_by_count":6}],"next_cursor":null}