{"total":24,"rows":[{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2302.10980","title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks","created":"2023-02-21","cited_by_count":7,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2207.07797","title":"CARBEN: Composite Adversarial Robustness Benchmark","created":"2022-07-16","cited_by_count":5,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2210.02577","title":"A Closer Look at Robustness to L-infinity and Spatial Perturbations and their Composition","created":"2022-10-05","cited_by_count":2,"area":null},{"id":"2305.07308","title":"Efficient Search of Comprehensively Robust Neural Architectures via Multi-fidelity Evaluation","created":"2023-05-12","cited_by_count":2,"area":null},{"id":"2406.18144","title":"Artificial Immune System of Secure Face Recognition Against Adversarial Attacks","created":"2024-06-26","cited_by_count":2,"area":null},{"id":"2409.03458","title":"Non-Uniform Illumination Attack for Fooling Convolutional Neural Networks","created":"2024-09-05","cited_by_count":2,"area":null},{"id":"2306.01762","title":"Rapid Plug-in Defenders","created":"2023-05-27","cited_by_count":1,"area":null},{"id":"2307.06496","title":"Microbial Genetic Algorithm-based Black-box Attack against Interpretable Deep Learning Systems","created":"2023-07-13","cited_by_count":1,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2405.01349","title":"Position: Towards Resilience Against Adversarial Examples","created":"2024-05-02","cited_by_count":1,"area":null},{"id":"2410.16805","title":"Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost","created":"2024-10-22","cited_by_count":1,"area":null},{"id":"2509.12633","title":"CIARD: Cyclic Iterative Adversarial Robustness Distillation","created":"2025-09-16","cited_by_count":1,"area":null},{"id":"2509.25927","title":"The Impact of Scaling Training Data on Adversarial Robustness","created":"2025-09-30","cited_by_count":1,"area":null},{"id":"2605.16720","title":"Compositional Adversarial Training for Robust Visual Watermarking","created":"2026-05-16","cited_by_count":1,"area":null},{"id":"2307.06548","title":"Multi-objective Evolutionary Search of Variable-length Composite Semantic Perturbations","created":"2023-07-13","cited_by_count":0,"area":null},{"id":"2309.16710","title":"General Lipschitz: Certified Robustness Against Resolvable Semantic Transformations via Transformation-Dependent Randomized Smoothing","created":"2023-08-17","cited_by_count":0,"area":null},{"id":"2509.20793","title":"FERD: Fairness-Enhanced Data-Free Robustness Distillation","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2511.12265","title":"Stabilizing Multi-Attack Adversarial Training via Bandit Optimization","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2602.11646","title":"Brain Tumor Classifiers Under Attack: Robustness of ResNet Variants Against Transferable FGSM and PGD Attacks","created":"2026-02-12","cited_by_count":0,"area":null},{"id":"2605.23203","title":"Lipschitz Optimization for Formal Verification of Homographies","created":"2026-05-22","cited_by_count":0,"area":null}],"next_cursor":null}