{"list":"other","total":57,"rows":[{"id":"1706.03762","title":"Attention Is All You Need","created":"2017-06-12","cited_by_count":60361},{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1502.03167","title":"Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift","created":"2015-02-11","cited_by_count":7005},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"2104.04015","title":"CutPaste: Self-Supervised Learning for Anomaly Detection and Localization","created":"2021-04-08","cited_by_count":531},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1412.1193","title":"New insights and perspectives on the natural gradient method","created":"2014-12-03","cited_by_count":443},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1911.02357","title":"Uninformed Students: Student-Teacher Anomaly Detection with Discriminative Latent Embeddings","created":"2019-11-06","cited_by_count":386},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"2011.11108","title":"Multiresolution Knowledge Distillation for Anomaly Detection","created":"2020-11-22","cited_by_count":285},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"2003.13228","title":"Learning Memory-guided Normality for Anomaly Detection","created":"2020-03-30","cited_by_count":278},{"id":"1711.04623","title":"Three Factors Influencing Minima in SGD","created":"2017-11-13","cited_by_count":273},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1805.10917","title":"Deep Anomaly Detection Using Geometric Transformations","created":"2018-05-28","cited_by_count":269},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2006.16067","title":"Patch SVDD: Patch-level SVDD for Anomaly Detection and Segmentation","created":"2020-06-29","cited_by_count":212},{"id":"1903.08550","title":"OCGAN: One-class Novelty Detection Using GANs with Constrained Latent Representations","created":"2019-03-20","cited_by_count":199},{"id":"2010.01736","title":"Geometry-aware Instance-reweighted Adversarial Training","created":"2020-10-05","cited_by_count":198},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"2010.05903","title":"PANDA: Adapting Pretrained Features for Anomaly Detection and Segmentation","created":"2020-10-12","cited_by_count":175},{"id":"2010.01950","title":"Torchattacks: A PyTorch Repository for Adversarial Attacks","created":"2020-09-24","cited_by_count":158},{"id":"1911.08623","title":"Deep Anomaly Detection with Deviation Networks","created":"2019-11-19","cited_by_count":153},{"id":"1412.5068","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","created":"2014-12-11","cited_by_count":146},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130},{"id":"1704.03924","title":"A Tutorial on Kernel Density Estimation and Recent Advances","created":"2017-04-12","cited_by_count":101},{"id":"1811.02248","title":"SparseFool: a few pixels make a big difference","created":"2018-11-06","cited_by_count":94},{"id":"1805.04807","title":"Curriculum Adversarial Training","created":"2018-05-13","cited_by_count":89},{"id":"1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","created":"2017-05-08","cited_by_count":87},{"id":"1612.07767","title":"Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics","created":"2016-12-22","cited_by_count":77},{"id":"1704.00103","title":"SafetyNet: Detecting and Rejecting Adversarial Examples Robustly","created":"2017-04-01","cited_by_count":76},{"id":"1801.05365","title":"Learning Deep Features for One-Class Classification","created":"2018-01-16","cited_by_count":76},{"id":"1909.06872","title":"Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors","created":"2019-09-15","cited_by_count":72},{"id":"1901.04653","title":"Normalized Flat Minima: Exploring Scale Invariant Definition of Flat Minima for Neural Networks using PAC-Bayesian Analysis","created":"2019-01-15","cited_by_count":59},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40},{"id":"1901.06355","title":"Robust Anomaly Detection in Images using Adversarial Autoencoders","created":"2019-01-18","cited_by_count":38},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30},{"id":"1809.07402","title":"Identifying Generalization Properties in Neural Networks","created":"2018-09-19","cited_by_count":15},{"id":"1610.04256","title":"Assessing Threat of Adversarial Examples on Deep Neural Networks","created":"2016-10-13","cited_by_count":9},{"id":"1709.02538","title":"DeepFense: Online Accelerated Defense Against Adversarial Deep Learning","created":"2017-09-08","cited_by_count":3}],"next_cursor":null}