{"list":"other","total":66,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1506.01497","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","created":"2015-06-04","cited_by_count":9639},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1703.06870","title":"Mask R-CNN","created":"2017-03-20","cited_by_count":7277},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1411.4038","title":"Fully Convolutional Networks for Semantic Segmentation","created":"2014-11-14","cited_by_count":4859},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1709.01507","title":"Squeeze-and-Excitation Networks","created":"2017-09-05","cited_by_count":4789},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1311.2901","title":"Visualizing and Understanding Convolutional Networks","created":"2013-11-12","cited_by_count":2290},{"id":"1706.05587","title":"Rethinking Atrous Convolution for Semantic Image Segmentation","created":"2017-06-17","cited_by_count":2161},{"id":"1306.5151","title":"Fine-Grained Visual Classification of Aircraft","created":"2013-06-21","cited_by_count":1726},{"id":"1602.07261","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","created":"2016-02-23","cited_by_count":1512},{"id":"1811.12231","title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","created":"2018-11-29","cited_by_count":1432},{"id":"1807.11164","title":"ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Design","created":"2018-07-30","cited_by_count":1136},{"id":"1602.07360","title":"SqueezeNet: AlexNet-level accuracy with 50x fewer parameters and <0.5MB model size","created":"2016-02-24","cited_by_count":1060},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"1811.11721","title":"CCNet: Criss-Cross Attention for Semantic Segmentation","created":"2018-11-28","cited_by_count":718},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1712.00559","title":"Progressive Neural Architecture Search","created":"2017-12-02","cited_by_count":487},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1905.13545","title":"High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks","created":"2019-05-28","cited_by_count":310},{"id":"1608.00853","title":"A study of the effect of JPG compression on adversarial images","created":"2016-08-02","cited_by_count":197},{"id":"2006.04924","title":"A Self-supervised Approach for Adversarial Robustness","created":"2020-06-08","cited_by_count":180},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"1907.10823","title":"Enhancing Adversarial Example Transferability with an Intermediate Level Attack","created":"2019-07-23","cited_by_count":140},{"id":"1905.11736","title":"Cross-Domain Transferability of Adversarial Perturbations","created":"2019-05-28","cited_by_count":92},{"id":"1711.11561","title":"Measuring the tendency of CNNs to Learn Surface Statistical Regularities","created":"2017-11-30","cited_by_count":87},{"id":"1809.08758","title":"Low Frequency Adversarial Perturbation","created":"2018-09-24","cited_by_count":80},{"id":"2007.06765","title":"Patch-wise Attack for Fooling Deep Neural Network","created":"2020-07-14","cited_by_count":78},{"id":"1802.06816","title":"Shield: Fast, Practical Defense and Vaccination for Deep Learning using JPEG Compression","created":"2018-02-19","cited_by_count":74},{"id":"1812.03413","title":"Learning Transferable Adversarial Examples via Ghost Networks","created":"2018-12-09","cited_by_count":70},{"id":"2003.12703","title":"DaST: Data-free Substitute Training for Adversarial Attacks","created":"2020-03-28","cited_by_count":60},{"id":"2007.06189","title":"Understanding Adversarial Examples from the Mutual Influence of Images and Perturbations","created":"2020-07-13","cited_by_count":59},{"id":"1903.00073","title":"On the Effectiveness of Low Frequency Perturbations","created":"2019-02-28","cited_by_count":56},{"id":"1909.04385","title":"FDA: Feature Disruptive Attack","created":"2019-09-10","cited_by_count":56},{"id":"1911.11616","title":"Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction","created":"2019-11-22","cited_by_count":47},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42},{"id":"1906.04392","title":"Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks","created":"2019-06-11","cited_by_count":35},{"id":"2012.02525","title":"Practical No-box Adversarial Attacks against DNNs","created":"2020-12-04","cited_by_count":32},{"id":"1904.00979","title":"Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses","created":"2019-04-01","cited_by_count":23},{"id":"2105.11645","title":"Feature Space Targeted Attacks by Statistic Alignment","created":"2021-05-25","cited_by_count":21},{"id":"2012.15503","title":"Patch-wise++ Perturbation for Adversarial Targeted Attacks","created":"2020-12-31","cited_by_count":19},{"id":"1803.10418","title":"The Effects of JPEG and JPEG2000 Compression on Attacks using Adversarial Examples","created":"2018-03-28","cited_by_count":12},{"id":"2104.09722","title":"Staircase Sign Method for Boosting Adversarial Attacks","created":"2021-04-20","cited_by_count":12},{"id":"1810.02424","title":"Feature Prioritization and Regularization Improve Standard Accuracy and Adversarial Robustness","created":"2018-10-04","cited_by_count":5},{"id":"2012.00802","title":"Adversarial Robustness Across Representation Spaces","created":"2020-12-01","cited_by_count":2}],"next_cursor":null}