{"total":132,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2306.13213","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","created":"2023-06-22","cited_by_count":328,"area":"mllm"},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208,"area":"diffusion"},{"id":"2306.09305","title":"Fast Training of Diffusion Models with Masked Transformers","created":"2023-06-15","cited_by_count":176,"area":"diffusion"},{"id":"2211.13449","title":"Fast Sampling of Diffusion Models via Operator Learning","created":"2022-11-24","cited_by_count":175,"area":"diffusion"},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2303.16378","title":"A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion","created":"2023-03-29","cited_by_count":76,"area":"diffusion"},{"id":"2402.16192","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","created":"2024-02-25","cited_by_count":74,"area":"alignment"},{"id":"2404.07771","title":"An Overview of Diffusion Models: Applications, Guided Generation, Statistical Rates and Optimization","created":"2024-04-11","cited_by_count":73,"area":"diffusion"},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66,"area":null},{"id":"2501.18841","title":"Trading Inference-Time Compute for Adversarial Robustness","created":"2025-01-31","cited_by_count":61,"area":"lr"},{"id":"2312.00084","title":"Can Protective Perturbation Safeguard Personal Data from Being Exploited by Stable Diffusion?","created":"2023-11-30","cited_by_count":38,"area":"diffusion"},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2211.00322","title":"DensePure: Understanding Diffusion Models towards Adversarial Robustness","created":"2022-11-01","cited_by_count":33,"area":"diffusion"},{"id":"2306.00354","title":"Addressing Negative Transfer in Diffusion Models","created":"2023-06-01","cited_by_count":33,"area":"diffusion"},{"id":"2402.02316","title":"Your Diffusion Model is Secretly a Certifiably Robust Classifier","created":"2024-02-04","cited_by_count":24,"area":"diffusion"},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2302.10164","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","created":"2023-02-20","cited_by_count":23,"area":null},{"id":"2303.01507","title":"Defending against Adversarial Audio via Diffusion Model","created":"2023-03-02","cited_by_count":23,"area":"diffusion"},{"id":"2210.06983","title":"Denoising Masked AutoEncoders Help Robust Classification","created":"2022-10-10","cited_by_count":21,"area":null},{"id":"2308.14333","title":"DiffSmooth: Certifiably Robust Learning via Diffusion Models and Local Smoothing","created":"2023-08-28","cited_by_count":20,"area":"diffusion"},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2408.16769","title":"PromptSmooth: Certifying Robustness of Medical Vision-Language Models via Prompt Learning","created":"2024-08-29","cited_by_count":17,"area":"mllm"},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16,"area":null},{"id":"2311.16833","title":"1-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness","created":"2023-11-28","cited_by_count":16,"area":null},{"id":"2310.18274","title":"LipSim: A Provably Robust Perceptual Similarity Metric","created":"2023-10-27","cited_by_count":15,"area":null},{"id":"2404.09586","title":"Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing","created":"2024-04-15","cited_by_count":15,"area":null},{"id":"2404.19227","title":"Espresso: Robust Concept Filtering in Text-to-Image Models","created":"2024-04-30","cited_by_count":14,"area":"diffusion"},{"id":"2301.12549","title":"Unlocking Deterministic Robustness Certification on ImageNet","created":"2023-01-29","cited_by_count":13,"area":null},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2311.17983","title":"Improving Interpretation Faithfulness for Vision Transformers","created":"2023-11-29","cited_by_count":12,"area":null},{"id":"2402.02629","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","created":"2024-02-04","cited_by_count":11,"area":null},{"id":"2409.14424","title":"Dormant: Defending against Pose-driven Human Image Animation","created":"2024-09-22","cited_by_count":11,"area":null},{"id":"2209.05055","title":"CARE: Certifiably Robust Learning with Reasoning via Variational Inference","created":"2022-09-12","cited_by_count":10,"area":null},{"id":"2303.00215","title":"Single Image Backdoor Inversion via Robust Smoothed Classifiers","created":"2023-03-01","cited_by_count":10,"area":null},{"id":"2303.01978","title":"Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networks","created":"2023-01-26","cited_by_count":10,"area":null},{"id":"2403.02957","title":"On the Asymptotic Mean Square Error Optimality of Diffusion Models","created":"2024-03-05","cited_by_count":10,"area":"diffusion"},{"id":"2310.16779","title":"Multi-scale Diffusion Denoised Smoothing","created":"2023-10-25","cited_by_count":9,"area":"diffusion"},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2307.12822","title":"Learning Provably Robust Estimators for Inverse Problems via Jittering","created":"2023-07-24","cited_by_count":8,"area":null},{"id":"2309.16883","title":"The Lipschitz-Variance-Margin Tradeoff for Enhanced Randomized Smoothing","created":"2023-09-28","cited_by_count":8,"area":null},{"id":"2403.16067","title":"Adversarial Guided Diffusion Models for Adversarial Purification","created":"2024-03-24","cited_by_count":8,"area":"diffusion"},{"id":"2404.14309","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","created":"2024-04-22","cited_by_count":8,"area":"diffusion"},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2503.10350","title":"Enhancing Facial Privacy Protection via Weakening Diffusion Purification","created":"2025-03-13","cited_by_count":7,"area":"diffusion"},{"id":"2403.13778","title":"Certified Human Trajectory Prediction","created":"2024-03-20","cited_by_count":6,"area":null},{"id":"2411.16598","title":"DiffBreak: Is Diffusion-Based Purification Robust?","created":"2024-11-25","cited_by_count":6,"area":"diffusion"},{"id":"2506.23908","title":"Beyond Statistical Learning: Exact Learning Is Essential for General Intelligence","created":"2025-06-30","cited_by_count":6,"area":"lr"},{"id":"2303.08289","title":"Improving Adversarial Robustness with Hypersphere Embedding and Angular-based Regularizations","created":"2023-03-15","cited_by_count":5,"area":null},{"id":"2303.14961","title":"Diffusion Denoised Smoothing for Certified and Adversarial Robust Out-Of-Distribution Detection","created":"2023-03-27","cited_by_count":5,"area":null},{"id":"2304.04343","title":"Certifiable Black-Box Attacks with Randomized Adversarial Examples: Breaking Defenses with Provable Confidence","created":"2023-04-10","cited_by_count":5,"area":null},{"id":"2306.09192","title":"DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers","created":"2023-06-15","cited_by_count":5,"area":null},{"id":"2308.00854","title":"Training on Foveated Images Improves Robustness to Adversarial Attacks","created":"2023-08-01","cited_by_count":5,"area":null},{"id":"2310.03664","title":"Certification of Deep Learning Models for Medical Image Segmentation","created":"2023-10-05","cited_by_count":5,"area":"diffusion"},{"id":"2408.01541","title":"Guardians of Image Quality: Benchmarking Defenses Against Adversarial Attacks on Image Quality Metrics","created":"2024-08-02","cited_by_count":5,"area":null},{"id":"2408.05900","title":"Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information","created":"2024-08-12","cited_by_count":5,"area":"diffusion"},{"id":"2306.10617","title":"GPU-Accelerated Verification of Machine Learning Models for Power Systems","created":"2023-06-18","cited_by_count":4,"area":null},{"id":"2309.11005","title":"It's Simplex! Disaggregating Measures to Improve Certified Robustness","created":"2023-09-20","cited_by_count":4,"area":null},{"id":"2310.02513","title":"A Recipe for Improved Certifiable Robustness","created":"2023-10-04","cited_by_count":4,"area":null},{"id":"2310.07084","title":"Investigating the Adversarial Robustness of Density Estimation Using the Probability Flow ODE","created":"2023-10-10","cited_by_count":4,"area":"diffusion"},{"id":"2404.17371","title":"Estimating the Robustness Radius for Randomized Smoothing with 100$\\times$ Sample Efficiency","created":"2024-04-26","cited_by_count":4,"area":null},{"id":"2405.08892","title":"RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothing","created":"2024-05-14","cited_by_count":4,"area":null},{"id":"2406.09669","title":"Watch the Watcher! Backdoor Attacks on Security-Enhancing Diffusion Models","created":"2024-06-14","cited_by_count":4,"area":"diffusion"},{"id":"2407.02811","title":"SPLITZ: Certifiable Robustness via Split Lipschitz Randomized Smoothing","created":"2024-07-03","cited_by_count":4,"area":null},{"id":"2506.16553","title":"One Sample is Enough to Make Conformal Prediction Robust","created":"2025-06-19","cited_by_count":4,"area":null},{"id":"2304.04385","title":"On Robustness in Multimodal Learning","created":"2023-04-10","cited_by_count":3,"area":null},{"id":"2306.09951","title":"You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks","created":"2023-06-16","cited_by_count":3,"area":null},{"id":"2307.13885","title":"Characterizing Data Point Vulnerability via Average-Case Robustness","created":"2023-07-26","cited_by_count":3,"area":null},{"id":"2403.05100","title":"Exploring the Adversarial Frontier: Quantifying Robustness via Adversarial Hypervolume","created":"2024-03-08","cited_by_count":3,"area":null},{"id":"2407.18658","title":"Adversarial Robustification via Text-to-Image Diffusion Models","created":"2024-07-26","cited_by_count":3,"area":"diffusion"},{"id":"2408.04839","title":"Adversarially Robust Industrial Anomaly Detection Through Diffusion Model","created":"2024-08-09","cited_by_count":3,"area":"diffusion"},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2503.02169","title":"One Stone, Two Birds: Enhancing Adversarial Defense Through the Lens of Distributional Discrepancy","created":"2025-03-04","cited_by_count":3,"area":null},{"id":"2306.09949","title":"Towards Better Certified Segmentation via Diffusion Models","created":"2023-06-16","cited_by_count":2,"area":"diffusion"},{"id":"2309.13150","title":"Pixel-wise Smoothing for Certified Robustness against Camera Motion Perturbations","created":"2023-09-22","cited_by_count":2,"area":null},{"id":"2403.02329","title":"COMMIT: Certifying Robustness of Multi-Sensor Fusion Systems against Semantic Attacks","created":"2024-03-04","cited_by_count":2,"area":null},{"id":"2405.16036","title":"Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness","created":"2024-05-25","cited_by_count":2,"area":null},{"id":"2406.11522","title":"FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks","created":"2024-06-17","cited_by_count":2,"area":null},{"id":"2406.13066","title":"MaskPure: Improving Defense Against Text Adversaries with Stochastic Purification","created":"2024-06-18","cited_by_count":2,"area":null},{"id":"2407.00623","title":"Consistency Purification: Effective and Efficient Diffusion Purification towards Certified Robustness","created":"2024-06-30","cited_by_count":2,"area":"diffusion"},{"id":"2410.06816","title":"Expressiveness of Multi-Neuron Convex Relaxations in Neural Network Certification","created":"2024-10-09","cited_by_count":2,"area":null},{"id":"2410.24006","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","created":"2024-10-31","cited_by_count":2,"area":"diffusion"},{"id":"2504.02412","title":"Bridging the Theoretical Gap in Randomized Smoothing","created":"2025-04-03","cited_by_count":2,"area":null},{"id":"2512.15109","title":"Large Model Enabled Embodied Intelligence for 6G Integrated Perception, Communication, and Computation Network","created":"2025-12-17","cited_by_count":2,"area":null},{"id":"2601.18513","title":"LipNeXt: Scaling up Lipschitz-based Certified Robustness to Billion-parameter Models","created":"2026-01-26","cited_by_count":2,"area":null},{"id":"2208.10373","title":"Reversing Skin Cancer Adversarial Examples by Multiscale Diffusive and Denoising Aggregation Mechanism","created":"2022-08-22","cited_by_count":1,"area":null},{"id":"2307.05193","title":"Membership Inference Attacks on DNNs using Adversarial Perturbations","created":"2023-07-11","cited_by_count":1,"area":"safety"},{"id":"2309.10348","title":"Language Guided Adversarial Purification","created":"2023-09-19","cited_by_count":1,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2312.09020","title":"Exploring Transferability for Randomized Smoothing","created":"2023-12-14","cited_by_count":1,"area":null},{"id":"2312.10911","title":"The Pros and Cons of Adversarial Robustness","created":"2023-12-18","cited_by_count":1,"area":null},{"id":"2402.05675","title":"Is Adversarial Training with Compressed Datasets Effective?","created":"2024-02-08","cited_by_count":1,"area":null},{"id":"2402.13700","title":"On the Conflict of Robustness and Learning in Collaborative Machine Learning","created":"2024-02-21","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null}],"next_cursor":"100"}