{"list":"other","total":82,"rows":[{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"2106.01946","title":"Convex optimization","created":"2021-06-03","cited_by_count":2515},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1706.05394","title":"A Closer Look at Memorization in Deep Networks","created":"2017-06-16","cited_by_count":942},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"2002.06673","title":"Performative Prediction","created":"2020-02-16","cited_by_count":327},{"id":"1702.02284","title":"Adversarial Attacks on Neural Network Policies","created":"2017-02-08","cited_by_count":320},{"id":"1906.04893","title":"Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networks","created":"2019-06-12","cited_by_count":293},{"id":"1505.05116","title":"Data-driven Distributionally Robust Optimization Using the Wasserstein Metric: Performance Guarantees and Tractable Reformulations","created":"2015-05-19","cited_by_count":291},{"id":"1408.5093","title":"Caffe: Convolutional Architecture for Fast Feature Embedding","created":"2014-06-20","cited_by_count":288},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"2103.06624","title":"Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verification","created":"2021-03-11","cited_by_count":228},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1610.03425","title":"Statistics of Robust Optimization: A Generalized Empirical Likelihood Approach","created":"2016-10-11","cited_by_count":183},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1811.01057","title":"Semidefinite relaxations for certifying robustness to adversarial examples","created":"2018-11-02","cited_by_count":179},{"id":"1809.08098","title":"Efficient Formal Safety Analysis of Neural Networks","created":"2018-09-19","cited_by_count":165},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1509.09259","title":"Distributionally Robust Logistic Regression","created":"2015-09-30","cited_by_count":126},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"1902.08722","title":"A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks","created":"2019-02-23","cited_by_count":125},{"id":"1405.3531","title":"Return of the Devil in the Details: Delving Deep into Convolutional Nets","created":"2014-05-14","cited_by_count":122},{"id":"2001.02378","title":"MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius","created":"2020-01-08","cited_by_count":114},{"id":"1903.01287","title":"Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programming","created":"2019-03-04","cited_by_count":101},{"id":"2002.10553","title":"Neural Networks are Convex Regularizers: Exact Polynomial-time Convex Optimization Formulations for Two-layer Networks","created":"2020-02-24","cited_by_count":98},{"id":"1805.02242","title":"Reachability Analysis of Deep Neural Networks with Provable Guarantees","created":"2018-05-06","cited_by_count":93},{"id":"1711.11561","title":"Measuring the tendency of CNNs to Learn Surface Statistical Regularities","created":"2017-11-30","cited_by_count":87},{"id":"1401.0212","title":"Data-Driven Robust Optimization","created":"2013-12-31","cited_by_count":85},{"id":"1905.10943","title":"Distributionally Robust Optimization and Generalization in Kernel Methods","created":"2019-05-27","cited_by_count":73},{"id":"2109.00498","title":"The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Results","created":"2021-08-31","cited_by_count":71},{"id":"1906.04948","title":"Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers","created":"2019-06-12","cited_by_count":65},{"id":"1511.05122","title":"Adversarial Manipulation of Deep Representations","created":"2015-11-16","cited_by_count":56},{"id":"1811.07209","title":"A Statistical Approach to Assessing Neural Network Robustness","created":"2018-11-17","cited_by_count":54},{"id":"2006.14076","title":"The Convex Relaxation Barrier, Revisited: Tightened Single-Neuron Relaxations for Neural Network Verification","created":"2020-06-24","cited_by_count":50},{"id":"2011.02948","title":"An SMT-Based Approach for Verifying Binarized Neural Networks","created":"2020-11-05","cited_by_count":47},{"id":"2002.09169","title":"Black-Box Certification with Randomized Smoothing: A Functional Optimization Based Framework","created":"2020-02-21","cited_by_count":46},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40},{"id":"1902.05983","title":"Robustness of Neural Networks: A Probabilistic and Practical Approach","created":"2019-02-15","cited_by_count":38},{"id":"2012.04351","title":"Data-Dependent Randomized Smoothing","created":"2020-12-08","cited_by_count":37},{"id":"1911.05268","title":"Adversarial Examples in Modern Machine Learning: A Review","created":"2019-11-13","cited_by_count":36},{"id":"1605.01775","title":"Adversarial Diversity and Hard Positive Generation","created":"2016-05-05","cited_by_count":35},{"id":"1910.10783","title":"Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks","created":"2019-10-23","cited_by_count":25},{"id":"2110.05365","title":"Intriguing Properties of Input-dependent Randomized Smoothing","created":"2021-10-11","cited_by_count":24},{"id":"2107.04570","title":"ANCER: Anisotropic Certification via Sample-wise Volume Maximization","created":"2021-07-09","cited_by_count":23},{"id":"1902.07247","title":"Fast Neural Network Verification via Shadow Prices","created":"2019-02-19","cited_by_count":17},{"id":"2006.03712","title":"Lipschitz Bounds and Provably Robust Training by Laplacian Smoothing","created":"2020-06-05","cited_by_count":17},{"id":"2102.12002","title":"Adversarial Robustness with Non-uniform Perturbations","created":"2021-02-24","cited_by_count":17},{"id":"1910.04249","title":"Probabilistic Verification and Reachability Analysis of Neural Networks via Semidefinite Programming","created":"2019-10-09","cited_by_count":15},{"id":"2201.01965","title":"Efficient Global Optimization of Two-Layer ReLU Networks: Quadratic-Time Algorithms and Adversarial Training","created":"2022-01-06","cited_by_count":15},{"id":"2004.00570","title":"Tightened Convex Relaxations for Neural Network Robustness Certification","created":"2020-04-01","cited_by_count":14},{"id":"2006.06759","title":"On the Tightness of Semidefinite Relaxations for Certifying Robustness to Adversarial Examples","created":"2020-06-11","cited_by_count":14},{"id":"1805.09944","title":"Reachability Analysis and Safety Verification for Neural Network Control Systems","created":"2018-05-25","cited_by_count":12},{"id":"2010.01171","title":"Data-Driven Certification of Neural Networks with Random Input Noise","created":"2020-10-02","cited_by_count":8},{"id":"2010.08603","title":"A Sequential Framework Towards an Exact SDP Verification of Neural Networks","created":"2020-10-16","cited_by_count":6},{"id":"2003.01595","title":"Analyzing Accuracy Loss in Randomized Smoothing Defenses","created":"2020-03-03","cited_by_count":3},{"id":"2010.00540","title":"Robustness Analysis of Neural Networks via Efficient Partitioning with Applications in Control Systems","created":"2020-10-01","cited_by_count":1}],"next_cursor":null}