{"list":"other","total":54,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1505.04597","title":"U-Net: Convolutional Networks for Biomedical Image Segmentation","created":"2015-05-18","cited_by_count":19713},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1703.06870","title":"Mask R-CNN","created":"2017-03-20","cited_by_count":7277},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1411.4038","title":"Fully Convolutional Networks for Semantic Segmentation","created":"2014-11-14","cited_by_count":4859},{"id":"1506.02640","title":"You Only Look Once: Unified, Real-Time Object Detection","created":"2015-06-08","cited_by_count":4852},{"id":"1709.01507","title":"Squeeze-and-Excitation Networks","created":"2017-09-05","cited_by_count":4789},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1312.6114","title":"Auto-Encoding Variational Bayes","created":"2013-12-20","cited_by_count":4053},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1504.08083","title":"Fast R-CNN","created":"2015-04-30","cited_by_count":2933},{"id":"1503.03832","title":"FaceNet: A Unified Embedding for Face Recognition and Clustering","created":"2015-03-12","cited_by_count":2849},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1801.09414","title":"CosFace: Large Margin Cosine Loss for Deep Face Recognition","created":"2018-01-29","cited_by_count":971},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1704.08063","title":"SphereFace: Deep Hypersphere Embedding for Face Recognition","created":"2017-04-26","cited_by_count":737},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1701.05517","title":"PixelCNN++: Improving the PixelCNN with Discretized Logistic Mixture Likelihood and Other Modifications","created":"2017-01-19","cited_by_count":417},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1512.00596","title":"The MegaFace Benchmark: 1 Million Faces for Recognition at Scale","created":"2015-12-02","cited_by_count":200},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127},{"id":"1511.02683","title":"A Light CNN for Deep Face Representation with Noisy Labels","created":"2015-11-09","cited_by_count":126},{"id":"1811.09310","title":"Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack","created":"2018-11-22","cited_by_count":125},{"id":"1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","created":"2017-05-08","cited_by_count":87},{"id":"2004.05790","title":"Towards Transferable Adversarial Attack against Deep Face Recognition","created":"2020-04-13","cited_by_count":80},{"id":"1709.05583","title":"Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification","created":"2017-09-17","cited_by_count":56},{"id":"1904.00887","title":"Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks","created":"2019-04-01","cited_by_count":56},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55},{"id":"1812.00037","title":"Adversarial Defense by Stratified Convolutional Sparse Coding","created":"2018-11-30","cited_by_count":31},{"id":"1909.09481","title":"Adversarial Learning with Margin-based Triplet Embedding Regularization","created":"2019-09-20","cited_by_count":29},{"id":"1705.03387","title":"Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN","created":"2017-05-09","cited_by_count":20},{"id":"2011.14427","title":"Architectural Adversarial Robustness: The Case for Deep Pursuit","created":"2020-11-29","cited_by_count":18},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18},{"id":"1903.09799","title":"Improving Adversarial Robustness via Guided Complement Entropy","created":"2019-03-23","cited_by_count":15},{"id":"1708.02582","title":"Cascade Adversarial Machine Learning Regularized with a Unified Embedding","created":"2017-08-08","cited_by_count":13},{"id":"1802.06806","title":"Divide, Denoise, and Defend against Adversarial Attacks","created":"2018-02-19","cited_by_count":12},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11}],"next_cursor":null}