{"list":"other","total":81,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1610.02136","title":"A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networks","created":"2016-10-07","cited_by_count":2385},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1710.03740","title":"Mixed Precision Training","created":"2017-10-10","cited_by_count":1156},{"id":"1706.03825","title":"SmoothGrad: removing noise by adding noise","created":"2017-06-12","cited_by_count":1109},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1704.03976","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","created":"2017-04-13","cited_by_count":920},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1506.01186","title":"Cyclical Learning Rates for Training Neural Networks","created":"2015-06-03","cited_by_count":629},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1502.04759","title":"Coordinate Descent Algorithms","created":"2015-02-17","cited_by_count":219},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"1710.11342","title":"Generating Natural Adversarial Examples","created":"2017-10-31","cited_by_count":183},{"id":"1801.10578","title":"Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach","created":"2018-01-31","cited_by_count":182},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1908.02729","title":"Robust Learning with Jacobian Regularization","created":"2019-08-07","cited_by_count":129},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"1611.01599","title":"LipNet: End-to-End Sentence-level Lipreading","created":"2016-11-05","cited_by_count":80},{"id":"1909.00900","title":"Metric Learning for Adversarial Robustness","created":"2019-09-03","cited_by_count":77},{"id":"1906.00555","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","created":"2019-06-03","cited_by_count":76},{"id":"1905.09797","title":"Interpreting Adversarially Trained Convolutional Neural Networks","created":"2019-05-23","cited_by_count":75},{"id":"1811.00401","title":"Excessive Invariance Causes Adversarial Vulnerability","created":"2018-11-01","cited_by_count":66},{"id":"2110.09485","title":"Learning in High Dimension Always Amounts to Extrapolation","created":"2021-10-18","cited_by_count":66},{"id":"1905.11971","title":"ME-Net: Towards Effective Adversarial Robustness with Matrix Estimation","created":"2019-05-28","cited_by_count":65},{"id":"1610.05256","title":"Achieving Human Parity in Conversational Speech Recognition","created":"2016-10-17","cited_by_count":63},{"id":"1702.06832","title":"Adversarial examples for generative models","created":"2017-02-22","cited_by_count":58},{"id":"1511.05122","title":"Adversarial Manipulation of Deep Representations","created":"2015-11-16","cited_by_count":56},{"id":"2002.04599","title":"Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations","created":"2020-02-11","cited_by_count":55},{"id":"1811.10716","title":"Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attacks","created":"2018-11-26","cited_by_count":48},{"id":"1511.06385","title":"A Unified Gradient Regularization Family for Adversarial Examples","created":"2015-11-19","cited_by_count":43},{"id":"1905.11213","title":"Provable robustness against all adversarial $l_p$-perturbations for $p\\geq 1$","created":"2019-05-27","cited_by_count":39},{"id":"1911.05268","title":"Adversarial Examples in Modern Machine Learning: A Review","created":"2019-11-13","cited_by_count":36},{"id":"2006.06976","title":"Towards Robust Pattern Recognition: A Review","created":"2020-06-12","cited_by_count":31},{"id":"1909.10147","title":"Robust Local Features for Improving the Generalization of Adversarial Training","created":"2019-09-23","cited_by_count":30},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29},{"id":"2002.04725","title":"More Data Can Expand the Generalization Gap Between Adversarially Robust and Standard Models","created":"2020-02-11","cited_by_count":27},{"id":"1805.08000","title":"Adversarial Noise Layer: Regularize Neural Network By Adding Noise","created":"2018-05-21","cited_by_count":25},{"id":"1903.08778","title":"Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes","created":"2019-03-20","cited_by_count":25},{"id":"1903.10484","title":"Exploiting Excessive Invariance caused by Norm-Bounded Adversarial Robustness","created":"2019-03-25","cited_by_count":9},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9},{"id":"1804.02485","title":"Fortified Networks: Improving the Robustness of Deep Networks by Modeling the Manifold of Hidden Representations","created":"2018-04-07","cited_by_count":4},{"id":"2001.06399","title":"Robust Generalization via $\\alpha$-Mutual Information","created":"2020-01-14","cited_by_count":3}],"next_cursor":null}