{"list":"other","total":58,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1609.04836","title":"On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minima","created":"2016-09-15","cited_by_count":1352},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1906.02629","title":"When Does Label Smoothing Help?","created":"2019-06-06","cited_by_count":988},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1312.6120","title":"Exact solutions to the nonlinear dynamics of learning in deep linear neural networks","created":"2013-12-20","cited_by_count":763},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1706.08947","title":"Exploring Generalization in Deep Learning","created":"2017-06-27","cited_by_count":600},{"id":"1703.11008","title":"Computing Nonvacuous Generalization Bounds for Deep (Stochastic) Neural Networks with Many More Parameters than Training Data","created":"2017-03-31","cited_by_count":533},{"id":"1912.02178","title":"Fantastic Generalization Measures and Where to Find Them","created":"2019-12-04","cited_by_count":513},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1710.10571","title":"Certifying Some Distributional Robustness with Principled Adversarial Training","created":"2017-10-29","cited_by_count":337},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1707.09564","title":"A PAC-Bayesian Approach to Spectrally-Normalized Margin Bounds for Neural Networks","created":"2017-07-29","cited_by_count":314},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"2010.04819","title":"How Does Mixup Help With Robustness and Generalization?","created":"2020-10-09","cited_by_count":193},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"1706.03662","title":"Practical Gauss-Newton Optimisation for Deep Learning","created":"2017-06-12","cited_by_count":142},{"id":"1511.06422","title":"All you need is a good init","created":"2015-11-19","cited_by_count":124},{"id":"1506.04091","title":"On the properties of variational approximations of Gibbs posteriors","created":"2015-06-12","cited_by_count":121},{"id":"2007.12911","title":"Tighter risk certificates for neural networks","created":"2020-07-25","cited_by_count":112},{"id":"1411.2664","title":"Preserving Statistical Validity in Adaptive Data Analysis","created":"2014-11-10","cited_by_count":103},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"2011.11164","title":"Learnable Boundary Guided Adversarial Training","created":"2020-11-23","cited_by_count":93},{"id":"1506.02629","title":"Generalization in Adaptive Data Analysis and Holdout Reuse","created":"2015-06-08","cited_by_count":83},{"id":"1712.09376","title":"Entropy-SGD optimizes the prior of a PAC-Bayes bound: Generalization properties of Entropy-SGD and data-dependent priors","created":"2017-12-26","cited_by_count":81},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"1909.00900","title":"Metric Learning for Adversarial Robustness","created":"2019-09-03","cited_by_count":77},{"id":"2003.02484","title":"Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization","created":"2020-03-05","cited_by_count":73},{"id":"1811.07457","title":"Generalizable Adversarial Training via Spectral Normalization","created":"2018-11-19","cited_by_count":68},{"id":"1608.05610","title":"A Strongly Quasiconvex PAC-Bayesian Bound","created":"2016-08-19","cited_by_count":54},{"id":"2006.00731","title":"Second-Order Provable Defenses against Adversarial Attacks","created":"2020-06-01","cited_by_count":40},{"id":"1905.10259","title":"Dichotomize and Generalize: PAC-Bayesian Binary Activated Deep Neural Networks","created":"2019-05-24","cited_by_count":38},{"id":"1908.07380","title":"PAC-Bayes with Backprop","created":"2019-08-19","cited_by_count":36},{"id":"1807.10272","title":"Evaluating and Understanding the Robustness of Adversarial Logit Pairing","created":"2018-07-26","cited_by_count":34},{"id":"2010.05983","title":"How does Weight Correlation Affect the Generalisation Ability of Deep Neural Networks","created":"2020-10-12","cited_by_count":32},{"id":"1808.05537","title":"Distributionally Adversarial Attack","created":"2018-08-16","cited_by_count":26},{"id":"2111.05468","title":"Sparse Adversarial Video Attacks with Spatial Transformations","created":"2021-11-10","cited_by_count":11},{"id":"2009.04923","title":"Second Order Optimization for Adversarial Robustness and Interpretability","created":"2020-09-10","cited_by_count":7},{"id":"2201.09209","title":"Weight Expansion: A New Perspective on Dropout and Generalization","created":"2022-01-23","cited_by_count":6}],"next_cursor":null}