{"list":"other","total":62,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1608.03981","title":"Beyond a Gaussian Denoiser: Residual Learning of Deep CNN for Image Denoising","created":"2016-08-13","cited_by_count":1358},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1309.5549","title":"Stochastic First- and Zeroth-order Methods for Nonconvex Stochastic Programming","created":"2013-09-22","cited_by_count":724},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"1705.01320","title":"Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks","created":"2017-05-03","cited_by_count":242},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1902.05300","title":"On instabilities of deep learning in image reconstruction - Does AI come at a cost?","created":"2019-02-14","cited_by_count":212},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"1801.10578","title":"Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach","created":"2018-01-31","cited_by_count":182},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"2006.06224","title":"A Primer on Zeroth-Order Optimization in Signal Processing and Machine Learning","created":"2020-06-11","cited_by_count":162},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"1805.10367","title":"Zeroth-Order Stochastic Variance Reduction for Nonconvex Optimization","created":"2018-05-25","cited_by_count":111},{"id":"1705.01040","title":"Maximum Resilience of Artificial Neural Networks","created":"2017-04-28","cited_by_count":97},{"id":"2006.16974","title":"Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures","created":"2020-06-30","cited_by_count":95},{"id":"1912.13464","title":"Model Inversion Networks for Model-Based Optimization","created":"2019-12-31","cited_by_count":83},{"id":"2001.08103","title":"Secure and Robust Machine Learning for Healthcare: A Survey","created":"2020-01-21","cited_by_count":80},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79},{"id":"1707.08945","title":"Robust Physical-World Attacks on Deep Learning Models","created":"2017-07-27","cited_by_count":72},{"id":"1904.00759","title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","created":"2019-03-21","cited_by_count":70},{"id":"1808.01664","title":"Structured Adversarial Attack: Towards General Implementation and Better Interpretability","created":"2018-08-05","cited_by_count":64},{"id":"1911.07140","title":"Black-Box Adversarial Attack with Transferable Model-based Embedding","created":"2019-11-17","cited_by_count":57},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52},{"id":"2003.13001","title":"Zeroth-Order Regularized Optimization (ZORO): Approximately Sparse Gradients and Adaptive Sampling","created":"2020-03-29","cited_by_count":46},{"id":"2102.10707","title":"A Zeroth-Order Block Coordinate Descent Algorithm for Huge-Scale Black-Box Optimization","created":"2021-02-21","cited_by_count":46},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45},{"id":"1606.00498","title":"A Comprehensive Linear Speedup Analysis for Asynchronous Stochastic Parallel Optimization from Zeroth-Order to First-Order","created":"2016-06-01","cited_by_count":44},{"id":"1709.09130","title":"Output Range Analysis for Deep Neural Networks","created":"2017-09-26","cited_by_count":30},{"id":"2002.11821","title":"Improving Robustness of Deep-Learning-Based Image Reconstruction","created":"2020-02-26","cited_by_count":23},{"id":"2110.07305","title":"DI-AA: An Interpretable White-box Attack for Fooling Deep Neural Networks","created":"2021-10-14","cited_by_count":10},{"id":"1909.13806","title":"Min-Max Optimization without Gradients: Convergence and Applications to Adversarial ML","created":"2019-09-30","cited_by_count":9},{"id":"2103.11362","title":"Self adversarial attack as an augmentation method for immunohistochemical stainings","created":"2021-03-21","cited_by_count":4}],"next_cursor":null}