{"list":"other","total":55,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1604.07316","title":"End to End Learning for Self-Driving Cars","created":"2016-04-25","cited_by_count":1009},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1412.5567","title":"Deep Speech: Scaling up end-to-end speech recognition","created":"2014-12-17","cited_by_count":354},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1906.06032","title":"Adversarial Training Can Hurt Generalization","created":"2019-06-14","cited_by_count":132},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"1811.09310","title":"Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack","created":"2018-11-22","cited_by_count":125},{"id":"1906.06919","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","created":"2019-06-17","cited_by_count":121},{"id":"2005.03161","title":"MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation","created":"2020-05-06","cited_by_count":99},{"id":"1810.01279","title":"Adv-BNN: Improved Adversarial Defense through Robust Bayesian Neural Network","created":"2018-10-01","cited_by_count":69},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59},{"id":"1911.07140","title":"Black-Box Adversarial Attack with Transferable Model-based Embedding","created":"2019-11-17","cited_by_count":57},{"id":"1907.05587","title":"Stateful Detection of Black-Box Adversarial Attacks","created":"2019-07-12","cited_by_count":56},{"id":"1909.11515","title":"Mixup Inference: Better Exploiting Mixup to Defend Adversarial Attacks","created":"2019-09-25","cited_by_count":54},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47},{"id":"2001.06325","title":"Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet","created":"2020-01-16","cited_by_count":45},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41},{"id":"1902.01148","title":"Theoretical evidence for adversarial robustness through randomization","created":"2019-02-04","cited_by_count":33},{"id":"2010.03300","title":"CD-UAP: Class Discriminative Universal Adversarial Perturbation","created":"2020-10-07","cited_by_count":27},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27},{"id":"2010.03288","title":"Double Targeted Universal Adversarial Perturbations","created":"2020-10-07","cited_by_count":23},{"id":"2105.08714","title":"Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks","created":"2021-05-18","cited_by_count":20},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17},{"id":"1908.02337","title":"DNNSurv: Deep Neural Networks for Survival Analysis Using Pseudo Values","created":"2019-08-06","cited_by_count":15},{"id":"2006.09539","title":"AdvMind: Inferring Adversary Intent of Black-Box Attacks","created":"2020-06-16","cited_by_count":12},{"id":"2008.06822","title":"Relevance Attack on Detectors","created":"2020-08-16","cited_by_count":8},{"id":"2010.12190","title":"Towards Robust Neural Networks via Orthogonal Diversity","created":"2020-10-23","cited_by_count":5}],"next_cursor":null}