{"list":"other","total":92,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2010.01412","title":"Sharpness-Aware Minimization for Efficiently Improving Generalization","created":"2020-10-03","cited_by_count":1417},{"id":"1609.04836","title":"On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minima","created":"2016-09-15","cited_by_count":1352},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1803.05407","title":"Averaging Weights Leads to Wider Optima and Better Generalization","created":"2018-03-14","cited_by_count":1209},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1706.08498","title":"Spectrally-normalized margin bounds for neural networks","created":"2017-06-26","cited_by_count":686},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1706.08947","title":"Exploring Generalization in Deep Learning","created":"2017-06-27","cited_by_count":600},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1703.11008","title":"Computing Nonvacuous Generalization Bounds for Deep (Stochastic) Neural Networks with Many More Parameters than Training Data","created":"2017-03-31","cited_by_count":533},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1912.02178","title":"Fantastic Generalization Measures and Where to Find Them","created":"2019-12-04","cited_by_count":513},{"id":"1703.04933","title":"Sharp Minima Can Generalize For Deep Nets","created":"2017-03-15","cited_by_count":466},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1805.10965","title":"Lipschitz regularity of deep neural networks: analysis and efficient estimation","created":"2018-05-28","cited_by_count":415},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1707.09564","title":"A PAC-Bayesian Approach to Spectrally-Normalized Margin Bounds for Neural Networks","created":"2017-07-29","cited_by_count":314},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1802.05296","title":"Stronger generalization bounds for deep nets via a compression approach","created":"2018-02-14","cited_by_count":307},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1503.00036","title":"Norm-Based Capacity Control in Neural Networks","created":"2015-02-27","cited_by_count":299},{"id":"1704.08847","title":"Parseval Networks: Improving Robustness to Adversarial Examples","created":"2017-04-28","cited_by_count":293},{"id":"1906.04893","title":"Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networks","created":"2019-06-12","cited_by_count":293},{"id":"1712.06541","title":"Size-Independent Sample Complexity of Neural Networks","created":"2017-12-18","cited_by_count":290},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"2110.11216","title":"User-friendly introduction to PAC-Bayes bounds","created":"2021-10-21","cited_by_count":239},{"id":"1902.04742","title":"Uniform convergence may be unable to explain generalization in deep learning","created":"2019-02-13","cited_by_count":224},{"id":"1802.04034","title":"Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks","created":"2018-02-12","cited_by_count":195},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1907.06826","title":"Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving","created":"2019-07-16","cited_by_count":152},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1810.11914","title":"Rademacher Complexity for Adversarially Robust Generalization","created":"2018-10-29","cited_by_count":132},{"id":"1901.05353","title":"A Primer on PAC-Bayesian Learning","created":"2019-01-16","cited_by_count":132},{"id":"1804.05862","title":"Non-Vacuous Generalization Bounds at the ImageNet Scale: A PAC-Bayesian Compression Approach","created":"2018-04-16","cited_by_count":126},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"2005.10190","title":"Feature Purification: How Adversarial Training Performs Robust Deep Learning","created":"2020-05-20","cited_by_count":107},{"id":"2003.01219","title":"Exactly Computing the Local Lipschitz Constant of ReLU Networks","created":"2020-03-02","cited_by_count":102},{"id":"2004.08688","title":"Lipschitz constant estimation of Neural Networks via sparse polynomial optimization","created":"2020-04-18","cited_by_count":87},{"id":"1712.09376","title":"Entropy-SGD optimizes the prior of a PAC-Bayes bound: Generalization properties of Entropy-SGD and data-dependent priors","created":"2017-12-26","cited_by_count":81},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"1802.08686","title":"Adversarial vulnerability for any classifier","created":"2018-02-23","cited_by_count":78},{"id":"2002.10477","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","created":"2020-02-24","cited_by_count":77},{"id":"1905.03684","title":"Data-dependent Sample Complexity of Deep Neural Networks via Lipschitz Augmentation","created":"2019-05-09","cited_by_count":71},{"id":"2010.11645","title":"Enabling certification of verification-agnostic networks via memory-efficient semidefinite programming","created":"2020-10-22","cited_by_count":66},{"id":"1807.06732","title":"Motivating the Rules of the Game for Adversarial Example Research","created":"2018-07-18","cited_by_count":57},{"id":"1910.04284","title":"Improved Sample Complexities for Deep Networks and Robust Classification via an All-Layer Margin","created":"2019-10-09","cited_by_count":56},{"id":"1903.01014","title":"Lipschitz Certificates for Layered Network Structures Driven by Averaged Activation Operators","created":"2019-03-03","cited_by_count":55},{"id":"2009.14444","title":"A law of robustness for two-layers neural networks","created":"2020-09-30","cited_by_count":55},{"id":"1905.08443","title":"The Geometry of Deep Networks: Power Diagram Subdivision","created":"2019-05-21","cited_by_count":53},{"id":"1905.13344","title":"Deterministic PAC-Bayesian generalization bounds for deep networks via generalizing noise-resilience","created":"2019-05-30","cited_by_count":51},{"id":"2003.02139","title":"Rethinking Parameter Counting in Deep Models: Effective Dimensionality Revisited","created":"2020-03-04","cited_by_count":51},{"id":"2004.13617","title":"Adversarial Learning Guarantees for Linear Hypotheses and Neural Networks","created":"2020-04-28","cited_by_count":47},{"id":"1809.03063","title":"The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure","created":"2018-09-09","cited_by_count":46},{"id":"2002.11080","title":"The Curious Case of Adversarially Robust Models: More Data Can Help, Double Descend, or Hurt Generalization","created":"2020-02-25","cited_by_count":39},{"id":"2012.04115","title":"Generalization bounds for deep learning","created":"2020-12-07","cited_by_count":38},{"id":"2002.06668","title":"Over-parameterized Adversarial Training: An Analysis Overcoming the Curse of Dimensionality","created":"2020-02-16","cited_by_count":36},{"id":"1810.11783","title":"RecurJac: An Efficient Recursive Algorithm for Bounding Jacobian Matrix of Neural Networks and Its Applications","created":"2018-10-28","cited_by_count":27},{"id":"2002.04725","title":"More Data Can Expand the Generalization Gap Between Adversarially Robust and Standard Models","created":"2020-02-11","cited_by_count":27},{"id":"1910.10783","title":"Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks","created":"2019-10-23","cited_by_count":25},{"id":"1806.05159","title":"On Tighter Generalization Bound for Deep Neural Networks: CNNs, ResNets, and Beyond","created":"2018-06-13","cited_by_count":24},{"id":"1806.01471","title":"PAC-learning in the presence of evasion adversaries","created":"2018-06-05","cited_by_count":23},{"id":"2010.12088","title":"Adversarial Robustness of Supervised Sparse Coding","created":"2020-10-22","cited_by_count":22},{"id":"1806.00701","title":"On Multi-Layer Basis Pursuit, Efficient Algorithms and Convolutional Neural Networks","created":"2018-06-02","cited_by_count":21},{"id":"2007.06555","title":"Adversarial robustness via robust low rank representations","created":"2020-07-13","cited_by_count":14},{"id":"1906.02931","title":"Inductive Bias of Gradient Descent based Adversarial Training on Separable Data","created":"2019-06-07","cited_by_count":12},{"id":"1805.11596","title":"Adversarial Noise Attacks of Deep Learning Architectures -- Stability Analysis via Sparse Modeled Signals","created":"2018-05-29","cited_by_count":9},{"id":"1806.02924","title":"Revisiting Adversarial Risk","created":"2018-06-07","cited_by_count":9},{"id":"2006.15555","title":"When and How Can Deep Generative Models be Inverted?","created":"2020-06-28","cited_by_count":8},{"id":"2002.09956","title":"De-randomized PAC-Bayes Margin Bounds: Applications to Non-convex and Non-smooth Predictors","created":"2020-02-23","cited_by_count":7},{"id":"1502.01094","title":"Multimodal Task-Driven Dictionary Learning for Image Classification","created":"2015-02-04","cited_by_count":5},{"id":"1502.00836","title":"Task-Driven Dictionary Learning for Hyperspectral Image Classification with Structured Sparsity Constraints","created":"2015-02-03","cited_by_count":1}],"next_cursor":null}