{"total":79,"rows":[{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2302.10164","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","created":"2023-02-20","cited_by_count":23,"area":null},{"id":"2210.06983","title":"Denoising Masked AutoEncoders Help Robust Classification","created":"2022-10-10","cited_by_count":21,"area":null},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2311.16833","title":"1-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness","created":"2023-11-28","cited_by_count":16,"area":null},{"id":"2310.18274","title":"LipSim: A Provably Robust Perceptual Similarity Metric","created":"2023-10-27","cited_by_count":15,"area":null},{"id":"2404.09586","title":"Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing","created":"2024-04-15","cited_by_count":15,"area":null},{"id":"2301.12549","title":"Unlocking Deterministic Robustness Certification on ImageNet","created":"2023-01-29","cited_by_count":13,"area":null},{"id":"2311.17983","title":"Improving Interpretation Faithfulness for Vision Transformers","created":"2023-11-29","cited_by_count":12,"area":null},{"id":"2402.02629","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","created":"2024-02-04","cited_by_count":11,"area":null},{"id":"2409.14424","title":"Dormant: Defending against Pose-driven Human Image Animation","created":"2024-09-22","cited_by_count":11,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2303.00215","title":"Single Image Backdoor Inversion via Robust Smoothed Classifiers","created":"2023-03-01","cited_by_count":10,"area":null},{"id":"2303.01978","title":"Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networks","created":"2023-01-26","cited_by_count":10,"area":null},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2307.12822","title":"Learning Provably Robust Estimators for Inverse Problems via Jittering","created":"2023-07-24","cited_by_count":8,"area":null},{"id":"2309.16883","title":"The Lipschitz-Variance-Margin Tradeoff for Enhanced Randomized Smoothing","created":"2023-09-28","cited_by_count":8,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2403.13778","title":"Certified Human Trajectory Prediction","created":"2024-03-20","cited_by_count":6,"area":null},{"id":"2303.08289","title":"Improving Adversarial Robustness with Hypersphere Embedding and Angular-based Regularizations","created":"2023-03-15","cited_by_count":5,"area":null},{"id":"2303.14961","title":"Diffusion Denoised Smoothing for Certified and Adversarial Robust Out-Of-Distribution Detection","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2306.09192","title":"DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers","created":"2023-06-15","cited_by_count":5,"area":null},{"id":"2308.00854","title":"Training on Foveated Images Improves Robustness to Adversarial Attacks","created":"2023-08-01","cited_by_count":5,"area":null},{"id":"2408.01541","title":"Guardians of Image Quality: Benchmarking Defenses Against Adversarial Attacks on Image Quality Metrics","created":"2024-08-02","cited_by_count":5,"area":null},{"id":"2306.10617","title":"GPU-Accelerated Verification of Machine Learning Models for Power Systems","created":"2023-06-18","cited_by_count":4,"area":null},{"id":"2309.11005","title":"It's Simplex! Disaggregating Measures to Improve Certified Robustness","created":"2023-09-20","cited_by_count":4,"area":null},{"id":"2310.02513","title":"A Recipe for Improved Certifiable Robustness","created":"2023-10-04","cited_by_count":4,"area":null},{"id":"2404.17371","title":"Estimating the Robustness Radius for Randomized Smoothing with 100$\\times$ Sample Efficiency","created":"2024-04-26","cited_by_count":4,"area":null},{"id":"2405.08892","title":"RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing","created":"2024-05-14","cited_by_count":4,"area":null},{"id":"2407.02811","title":"SPLITZ: Certifiable Robustness via Split Lipschitz Randomized Smoothing","created":"2024-07-03","cited_by_count":4,"area":null},{"id":"2506.16553","title":"One Sample is Enough to Make Conformal Prediction Robust","created":"2025-06-19","cited_by_count":4,"area":null},{"id":"2304.04385","title":"On Robustness in Multimodal Learning","created":"2023-04-10","cited_by_count":3,"area":null},{"id":"2306.09951","title":"You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks","created":"2023-06-16","cited_by_count":3,"area":null},{"id":"2307.13885","title":"Characterizing Data Point Vulnerability via Average-Case Robustness","created":"2023-07-26","cited_by_count":3,"area":null},{"id":"2403.05100","title":"Exploring the Adversarial Frontier: Quantifying Robustness via Adversarial Hypervolume","created":"2024-03-08","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2309.13150","title":"Pixel-wise Smoothing for Certified Robustness against Camera Motion Perturbations","created":"2023-09-22","cited_by_count":2,"area":null},{"id":"2403.02329","title":"COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attacks","created":"2024-03-04","cited_by_count":2,"area":null},{"id":"2405.16036","title":"Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness","created":"2024-05-25","cited_by_count":2,"area":null},{"id":"2406.11522","title":"FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks","created":"2024-06-17","cited_by_count":2,"area":null},{"id":"2406.13066","title":"MaskPure: Improving Defense Against Text Adversaries with Stochastic Purification","created":"2024-06-18","cited_by_count":2,"area":null},{"id":"2410.06816","title":"Expressiveness of Multi-Neuron Convex Relaxations in Neural Network Certification","created":"2024-10-09","cited_by_count":2,"area":null},{"id":"2504.02412","title":"Bridging the Theoretical Gap in Randomized Smoothing","created":"2025-04-03","cited_by_count":2,"area":null},{"id":"2512.15109","title":"Large Model Enabled Embodied Intelligence for 6G Integrated Perception, Communication, and Computation Network","created":"2025-12-17","cited_by_count":2,"area":null},{"id":"2601.18513","title":"LipNeXt: Scaling up Lipschitz-based Certified Robustness to Billion-parameter Models","created":"2026-01-26","cited_by_count":2,"area":null},{"id":"2208.10373","title":"Reversing Skin Cancer Adversarial Examples by Multiscale Diffusive and Denoising Aggregation Mechanism","created":"2022-08-22","cited_by_count":1,"area":null},{"id":"2309.10348","title":"Language Guided Adversarial Purification","created":"2023-09-19","cited_by_count":1,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2312.09020","title":"Exploring Transferability for Randomized Smoothing","created":"2023-12-14","cited_by_count":1,"area":null},{"id":"2312.10911","title":"The Pros and Cons of Adversarial Robustness","created":"2023-12-18","cited_by_count":1,"area":null},{"id":"2402.05675","title":"Is Adversarial Training with Compressed Datasets Effective?","created":"2024-02-08","cited_by_count":1,"area":null},{"id":"2402.13700","title":"On the Conflict of Robustness and Learning in Collaborative Machine Learning","created":"2024-02-21","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2404.05350","title":"Certified PEFTSmoothing: Parameter-Efficient Fine-Tuning with Randomized Smoothing","created":"2024-04-08","cited_by_count":1,"area":null},{"id":"2405.09176","title":"Cross-Input Certified Training for Universal Perturbations","created":"2024-05-15","cited_by_count":1,"area":null},{"id":"2405.15971","title":"Robust width: A lightweight and certifiable adversarial defense","created":"2024-05-24","cited_by_count":1,"area":null},{"id":"2410.06895","title":"Average Certified Radius is a Poor Metric for Randomized Smoothing","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2410.20432","title":"Integrating uncertainty quantification into randomized smoothing based robustness guarantees","created":"2024-10-27","cited_by_count":1,"area":null},{"id":"2503.03842","title":"Task-Agnostic Attacks Against Vision Foundation Models","created":"2025-03-05","cited_by_count":1,"area":null},{"id":"2504.18556","title":"RDI: An adversarial robustness evaluation metric for deep neural networks based on model statistical features","created":"2025-04-16","cited_by_count":1,"area":null},{"id":"2505.15594","title":"Beyond Classification: Evaluating Diffusion Denoised Smoothing for Security-Utility Trade off","created":"2025-05-21","cited_by_count":1,"area":null},{"id":"2605.01519","title":"Certified vs. Empirical Adversarial Robust-ness via Hybrid Convolutions with Attention Stochasticity","created":"2026-05-02","cited_by_count":1,"area":null},{"id":"2306.07613","title":"Revisiting and Advancing Adversarial Training Through A Simple Baseline","created":"2023-06-13","cited_by_count":0,"area":null},{"id":"2310.08732","title":"Provably Cost-Sensitive Adversarial Defense via Randomized Smoothing","created":"2023-10-12","cited_by_count":0,"area":null},{"id":"2403.06013","title":"Are Classification Robustness and Explanation Robustness Really Strongly Correlated? An Analysis Through Input Loss Landscape","created":"2024-03-09","cited_by_count":0,"area":null},{"id":"2411.08933","title":"Confidence-aware Denoised Fine-tuning of Off-the-shelf Models for Certified Robustness","created":"2024-11-13","cited_by_count":0,"area":null},{"id":"2411.12575","title":"Stochastic BIQA: Median Randomized Smoothing for Certified Blind Image Quality Assessment","created":"2024-11-19","cited_by_count":0,"area":null},{"id":"2503.17172","title":"Principal Eigenvalue Regularization for Improved Worst-Class Certified Robustness of Smoothed Classifiers","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2509.12939","title":"Sy-FAR: Symmetry-based Fair Adversarial Robustness","created":"2025-09-16","cited_by_count":0,"area":null},{"id":"2512.01782","title":"Dual Randomized Smoothing: Beyond Global Noise Variance","created":"2025-12-01","cited_by_count":0,"area":null},{"id":"2605.12876","title":"Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.23065","title":"Dithering Defense: Adversarial Robustness of Vision Foundation Models via Multi-Level Floyd-Steinberg Dithering","created":"2026-05-21","cited_by_count":0,"area":null},{"id":"2610.03142","title":"CalCErt: Bin-wise Certification of Confidence Calibration in Medical Image Classification","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.15359","title":"Adversarial Detection for Pre-trained Classifiers via Lipschitz-Margin Analysis with Certification","created":"2026-10-11","cited_by_count":0,"area":null}],"next_cursor":null}