{"list":"other","total":60,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1801.07455","title":"Spatial Temporal Graph Convolutional Networks for Skeleton-Based Action Recognition","created":"2018-01-23","cited_by_count":1209},{"id":"1704.03976","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","created":"2017-04-13","cited_by_count":920},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1604.02808","title":"NTU RGB+D: A Large Scale Dataset for 3D Human Activity Analysis","created":"2016-04-11","cited_by_count":686},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1905.04757","title":"NTU RGB+D 120: A Large-Scale Benchmark for 3D Human Activity Understanding","created":"2019-05-12","cited_by_count":533},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1912.03263","title":"Your Classifier is Secretly an Energy Based Model and You Should Treat it Like One","created":"2019-12-06","cited_by_count":405},{"id":"1805.07984","title":"Adversarial Attacks on Neural Networks for Graph Data","created":"2018-05-21","cited_by_count":397},{"id":"1402.4102","title":"Stochastic Gradient Hamiltonian Monte Carlo","created":"2014-02-17","cited_by_count":343},{"id":"2003.14111","title":"Disentangling and Unifying Graph Convolutions for Skeleton-Based Action Recognition","created":"2020-03-31","cited_by_count":343},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"2107.12213","title":"Channel-wise Topology Refinement Graph Convolution for Skeleton-Based Action Recognition","created":"2021-07-26","cited_by_count":322},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1806.02371","title":"Adversarial Attack on Graph Structured Data","created":"2018-06-06","cited_by_count":301},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1802.04034","title":"Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks","created":"2018-02-12","cited_by_count":195},{"id":"1811.01057","title":"Semidefinite relaxations for certifying robustness to adversarial examples","created":"2018-11-02","cited_by_count":179},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"1904.01189","title":"Semantics-Guided Neural Networks for Efficient Skeleton-Based Human Action Recognition","created":"2019-04-02","cited_by_count":135},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"1704.08006","title":"Deep Text Classification Can be Fooled","created":"2017-04-26","cited_by_count":106},{"id":"1903.12370","title":"On the Anatomy of MCMC-Based Maximum Likelihood Learning of Energy-Based Models","created":"2019-03-29","cited_by_count":105},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"2007.00753","title":"Opportunities and Challenges in Deep Learning Adversarial Robustness: A Survey","created":"2020-07-01","cited_by_count":72},{"id":"2006.08403","title":"On the Loss Landscape of Adversarial Training: Identifying Challenges and How to Overcome Them","created":"2020-06-15","cited_by_count":59},{"id":"2005.13525","title":"Stochastic Security: Adversarial Defense Using Long-Run Dynamics of Energy-Based Models","created":"2020-05-27","cited_by_count":58},{"id":"1803.02536","title":"Sparse Adversarial Perturbations for Videos","created":"2018-03-07","cited_by_count":57},{"id":"1912.09899","title":"Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing","created":"2019-12-20","cited_by_count":54},{"id":"1810.00740","title":"Improving the Generalization of Adversarial Training with Domain Adaptation","created":"2018-10-01","cited_by_count":48},{"id":"2002.09169","title":"Black-Box Certification with Randomized Smoothing: A Functional Optimization Based Framework","created":"2020-02-21","cited_by_count":46},{"id":"1902.10755","title":"Adversarial Attacks on Time Series","created":"2019-02-27","cited_by_count":40},{"id":"1911.09449","title":"Heuristic Black-box Adversarial Attacks on Video Recognition Models","created":"2019-11-21","cited_by_count":37},{"id":"2002.05123","title":"Over-the-Air Adversarial Flickering Attacks against Video Recognition Networks","created":"2020-02-12","cited_by_count":36},{"id":"1705.09558","title":"Bayesian GAN","created":"2017-05-26","cited_by_count":32},{"id":"1908.07214","title":"Spatio-temporal Manifold Learning for Human Motions via Long-horizon Modeling","created":"2019-08-20","cited_by_count":32},{"id":"1909.06500","title":"Adversarial Attack on Skeleton-based Human Action Recognition","created":"2019-09-14","cited_by_count":32},{"id":"1909.10147","title":"Robust Local Features for Improving the Generalization of Adversarial Training","created":"2019-09-23","cited_by_count":30},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26},{"id":"2108.09093","title":"Towards Understanding the Generative Capability of Adversarially Robust Classifiers","created":"2021-08-20","cited_by_count":26},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20},{"id":"2003.07637","title":"Motion-Excited Sampler: Video Adversarial Attack with Sparked Prior","created":"2020-03-17","cited_by_count":17},{"id":"2005.07151","title":"Towards Understanding the Adversarial Vulnerability of Skeleton-based Action Recognition","created":"2020-05-14","cited_by_count":12},{"id":"2011.14585","title":"Just One Moment: Structural Vulnerability of Deep Action Recognition against One Frame Attack","created":"2020-11-30","cited_by_count":12},{"id":"2109.05830","title":"Adversarial Bone Length Attack on Action Recognition","created":"2021-09-13","cited_by_count":10}],"next_cursor":null}