{"list":"other","total":55,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1608.03981","title":"Beyond a Gaussian Denoiser: Residual Learning of Deep CNN for Image Denoising","created":"2016-08-13","cited_by_count":1358},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1902.05300","title":"On instabilities of deep learning in image reconstruction - Does AI come at a cost?","created":"2019-02-14","cited_by_count":212},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"1803.01128","title":"Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples","created":"2018-03-03","cited_by_count":94},{"id":"1902.07906","title":"Wasserstein Adversarial Examples via Projected Sinkhorn Iterations","created":"2019-02-21","cited_by_count":89},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77},{"id":"1904.00759","title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","created":"2019-03-21","cited_by_count":70},{"id":"1808.01664","title":"Structured Adversarial Attack: Towards General Implementation and Better Interpretability","created":"2018-08-05","cited_by_count":64},{"id":"1511.05122","title":"Adversarial Manipulation of Deep Representations","created":"2015-11-16","cited_by_count":56},{"id":"1906.03499","title":"ML-LOO: Detecting Adversarial Examples with Feature Attribution","created":"2019-06-08","cited_by_count":48},{"id":"2006.14748","title":"Proper Network Interpretability Helps Adversarial Robustness in Classification","created":"2020-06-26","cited_by_count":41},{"id":"1511.06292","title":"Foveation-based Mechanisms Alleviate Adversarial Examples","created":"2015-11-19","cited_by_count":32},{"id":"2012.02525","title":"Practical No-box Adversarial Attacks against DNNs","created":"2020-12-04","cited_by_count":32},{"id":"2103.11882","title":"Generating Adversarial Computer Programs using Optimized Obfuscations","created":"2021-03-18","cited_by_count":22},{"id":"1904.02057","title":"Interpreting Adversarial Examples by Activation Promotion and Suppression","created":"2019-04-03","cited_by_count":17},{"id":"1910.11099","title":"Adversarial T-shirt! Evading Person Detectors in A Physical World","created":"2019-10-18","cited_by_count":13},{"id":"2006.09539","title":"AdvMind: Inferring Adversary Intent of Black-Box Attacks","created":"2020-06-16","cited_by_count":12},{"id":"2006.10013","title":"Adversarial Examples Detection and Analysis with Layer-wise Autoencoders","created":"2020-06-17","cited_by_count":9},{"id":"2012.09384","title":"On the Limitations of Denoising Strategies as Adversarial Defenses","created":"2020-12-17","cited_by_count":9},{"id":"2110.06802","title":"Identification of Attack-Specific Signatures in Adversarial Examples","created":"2021-10-13","cited_by_count":4}],"next_cursor":null}