{"list":"other","total":84,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1511.06434","title":"Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks","created":"2015-11-19","cited_by_count":2054},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1907.07174","title":"Natural Adversarial Examples","created":"2019-07-16","cited_by_count":1408},{"id":"1801.01401","title":"Demystifying MMD GANs","created":"2018-01-04","cited_by_count":1293},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1610.06545","title":"Revisiting Classifier Two-Sample Tests","created":"2016-10-20","cited_by_count":268},{"id":"1909.11764","title":"FreeLB: Enhanced Adversarial Training for Natural Language Understanding","created":"2019-09-25","cited_by_count":264},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"2010.01736","title":"Geometry-aware Instance-reweighted Adversarial Training","created":"2020-10-05","cited_by_count":198},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"1907.02610","title":"Adversarial Robustness through Local Linearization","created":"2019-07-04","cited_by_count":146},{"id":"2002.09116","title":"Learning Deep Kernels for Non-Parametric Two-Sample Tests","created":"2020-02-21","cited_by_count":130},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"1611.04488","title":"Generative Models and Model Criticism via Optimized Maximum Mean Discrepancy","created":"2016-11-14","cited_by_count":100},{"id":"2006.04662","title":"Rethinking Importance Weighting for Deep Learning under Distribution Shift","created":"2020-06-08","cited_by_count":93},{"id":"1611.03814","title":"Towards the Science of Security and Privacy in Machine Learning","created":"2016-11-11","cited_by_count":89},{"id":"1805.04807","title":"Curriculum Adversarial Training","created":"2018-05-13","cited_by_count":89},{"id":"1902.07906","title":"Wasserstein Adversarial Examples via Projected Sinkhorn Iterations","created":"2019-02-21","cited_by_count":89},{"id":"1801.08092","title":"Generalizable Data-free Objective for Crafting Universal Adversarial Perturbations","created":"2018-01-24","cited_by_count":88},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79},{"id":"2003.06468","title":"GeoDA: a geometric framework for black-box adversarial attacks","created":"2020-03-13","cited_by_count":66},{"id":"1605.06796","title":"Interpretable Distribution Features with Maximum Testing Power","created":"2016-05-22","cited_by_count":63},{"id":"2011.14969","title":"Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2020-11-30","cited_by_count":62},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57},{"id":"1506.04725","title":"Fast Two-Sample Testing with Analytic Representations of Probability Measures","created":"2015-06-15","cited_by_count":53},{"id":"1810.00740","title":"Improving the Generalization of Adversarial Training with Domain Adaptation","created":"2018-10-01","cited_by_count":48},{"id":"1907.08375","title":"Open Set Domain Adaptation: Theoretical Bound and Algorithm","created":"2019-07-19","cited_by_count":48},{"id":"2010.11415","title":"Maximum Mean Discrepancy Test is Aware of Adversarial Attacks","created":"2020-10-22","cited_by_count":44},{"id":"1803.00404","title":"Deep Defense: Training DNNs with Improved Adversarial Robustness","created":"2018-02-23","cited_by_count":42},{"id":"1902.10660","title":"Robust Decision Trees Against Adversarial Examples","created":"2019-02-27","cited_by_count":40},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39},{"id":"1804.07729","title":"ADef: an Iterative Algorithm to Construct Adversarial Deformations","created":"2018-04-20","cited_by_count":38},{"id":"1706.03922","title":"Analyzing the Robustness of Nearest Neighbors to Adversarial Examples","created":"2017-06-13","cited_by_count":36},{"id":"1408.5404","title":"A Wild Bootstrap for Degenerate Kernel Tests","created":"2014-08-23","cited_by_count":29},{"id":"1805.10611","title":"Robust Hypothesis Testing Using Wasserstein Uncertainty Sets","created":"2018-05-27","cited_by_count":28},{"id":"1910.06239","title":"Two-sample Testing Using Deep Learning","created":"2019-10-14","cited_by_count":27},{"id":"1808.05537","title":"Distributionally Adversarial Attack","created":"2018-08-16","cited_by_count":26},{"id":"1307.6294","title":"A new graph-based two-sample test for multivariate and object data","created":"2013-07-24","cited_by_count":24},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24},{"id":"2009.00902","title":"Adversarially Robust Neural Architectures","created":"2020-09-02","cited_by_count":22},{"id":"2102.11860","title":"Automated Discovery of Adaptive Attacks on Adversarial Defenses","created":"2021-02-23","cited_by_count":22},{"id":"2007.04043","title":"A One-step Approach to Covariate Shift Adaptation","created":"2020-07-08","cited_by_count":21},{"id":"2106.07636","title":"Meta Two-Sample Testing: Learning Kernels for Testing with Limited Data","created":"2021-06-14","cited_by_count":18},{"id":"2102.12002","title":"Adversarial Robustness with Non-uniform Perturbations","created":"2021-02-24","cited_by_count":17},{"id":"2003.06121","title":"When are Non-Parametric Methods Robust?","created":"2020-03-13","cited_by_count":15},{"id":"1906.03310","title":"Robustness for Non-Parametric Classification: A Generic Attack and Defense","created":"2019-06-07","cited_by_count":12},{"id":"1903.08333","title":"On the Robustness of Deep K-Nearest Neighbors","created":"2019-03-20","cited_by_count":10},{"id":"2104.09437","title":"Provable Robustness of Adversarial Training for Learning Halfspaces with Noise","created":"2021-04-19","cited_by_count":10},{"id":"2007.14612","title":"Clarinet: A One-step Approach Towards Budget-friendly Unsupervised Domain Adaptation","created":"2020-07-29","cited_by_count":8},{"id":"1705.06168","title":"Two-Sample Tests for Large Random Graphs Using Network Statistics","created":"2017-05-17","cited_by_count":7},{"id":"2102.09086","title":"Consistent Non-Parametric Methods for Maximizing Robustness","created":"2021-02-18","cited_by_count":7},{"id":"2105.14348","title":"Robust Hypothesis Testing with Wasserstein Uncertainty Sets","created":"2021-05-29","cited_by_count":7},{"id":"2004.14734","title":"A Robust Hierarchical Graph Convolutional Network Model for Collaborative Filtering","created":"2020-04-30","cited_by_count":2}],"next_cursor":null}