{"list":"other","total":53,"rows":[{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1907.11692","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","created":"2019-07-26","cited_by_count":13372},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1901.11196","title":"EDA: Easy Data Augmentation Techniques for Boosting Performance on Text Classification Tasks","created":"2019-01-31","cited_by_count":807},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1907.11932","title":"Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment","created":"2019-07-27","cited_by_count":671},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"2004.09984","title":"BERT-ATTACK: Adversarial Attack Against BERT Using BERT","created":"2020-04-21","cited_by_count":491},{"id":"2007.08176","title":"CSI: Novelty Detection via Contrastive Learning on Distributionally Shifted Instances","created":"2020-07-16","cited_by_count":441},{"id":"1804.07998","title":"Generating Natural Language Adversarial Examples","created":"2018-04-21","cited_by_count":424},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1812.05271","title":"TextBugger: Generating Adversarial Text Against Real-world Applications","created":"2018-12-13","cited_by_count":381},{"id":"1801.04354","title":"Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers","created":"2018-01-13","cited_by_count":345},{"id":"2004.01970","title":"BAE: BERT-based Adversarial Examples for Text Classification","created":"2020-04-04","cited_by_count":316},{"id":"1804.06059","title":"Adversarial Example Generation with Syntactically Controlled Paraphrase Networks","created":"2018-04-17","cited_by_count":286},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234},{"id":"1710.11342","title":"Generating Natural Adversarial Examples","created":"2017-10-31","cited_by_count":183},{"id":"1909.00986","title":"Certified Robustness to Adversarial Word Substitutions","created":"2019-09-03","cited_by_count":168},{"id":"1905.11268","title":"Combating Adversarial Misspellings with Robust Word Recognition","created":"2019-05-27","cited_by_count":163},{"id":"1603.00892","title":"Counter-fitting Word Vectors to Linguistic Constraints","created":"2016-03-02","cited_by_count":140},{"id":"2009.07502","title":"Contextualized Perturbation for Textual Adversarial Attack","created":"2020-09-16","cited_by_count":136},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"1704.08006","title":"Deep Text Classification Can be Fooled","created":"2017-04-26","cited_by_count":106},{"id":"1811.12673","title":"ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples","created":"2018-11-30","cited_by_count":105},{"id":"1604.08275","title":"Crafting Adversarial Input Sequences for Recurrent Neural Networks","created":"2016-04-28","cited_by_count":103},{"id":"1803.05787","title":"Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples","created":"2018-03-14","cited_by_count":99},{"id":"1909.01492","title":"Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagation","created":"2019-09-03","cited_by_count":88},{"id":"1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","created":"2017-05-08","cited_by_count":87},{"id":"2005.14424","title":"SAFER: A Structure-free Approach for Certified Robustness to Adversarial Word Substitutions","created":"2020-05-29","cited_by_count":73},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69},{"id":"1909.03084","title":"Learning to Discriminate Perturbations for Blocking Adversarial Attacks in Text Classification","created":"2019-09-06","cited_by_count":57},{"id":"2004.05887","title":"Frequency-Guided Word Substitutions for Detecting Textual Adversarial Examples","created":"2020-04-13","cited_by_count":54},{"id":"1805.10265","title":"Training verified learners with learned verifiers","created":"2018-05-25","cited_by_count":50},{"id":"2012.14956","title":"Generating Natural Language Attacks in a Hard Label Black Box Setting","created":"2020-12-29","cited_by_count":50},{"id":"1809.08731","title":"Sentence-Level Fluency Evaluation: References Help, But Can Be Spared!","created":"2018-09-24","cited_by_count":43},{"id":"2103.14835","title":"LiBRe: A Practical Bayesian Approach to Adversarial Detection","created":"2021-03-27","cited_by_count":40},{"id":"1907.03752","title":"Improving short text classification through global augmentation methods","created":"2019-07-07","cited_by_count":33},{"id":"1907.02957","title":"Detecting and Diagnosing Adversarial Images with Class-Conditional Capsule Reconstructions","created":"2019-07-05","cited_by_count":30},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30},{"id":"1903.10586","title":"Defending against Whitebox Adversarial Attacks via Randomized Discretization","created":"2019-03-25","cited_by_count":29},{"id":"2105.11136","title":"Using Adversarial Attacks to Reveal the Statistical Bias in Machine Reading Comprehension Models","created":"2021-05-24","cited_by_count":29},{"id":"2103.11576","title":"Grey-box Adversarial Attack And Defence For Sentiment Classification","created":"2021-03-22","cited_by_count":28},{"id":"1904.08089","title":"Adversarial Defense Through Network Profiling Based Path Extraction","created":"2019-04-17","cited_by_count":24},{"id":"1707.08172","title":"The RepEval 2017 Shared Task: Multi-Genre Natural Language Inference with Sentence Representations","created":"2017-07-25","cited_by_count":23},{"id":"2010.01345","title":"A Geometry-Inspired Attack for Generating Natural Language Adversarial Examples","created":"2020-10-03","cited_by_count":20},{"id":"2109.04775","title":"A Strong Baseline for Query Efficient Attacks in a Black Box Setting","created":"2021-09-10","cited_by_count":16},{"id":"1802.04822","title":"Identify Susceptible Locations in Medical Records via Adversarial Attacks on Deep Predictive Models","created":"2018-02-13","cited_by_count":15},{"id":"2011.10492","title":"A Sweet Rabbit Hole by DARCY: Using Honeypots to Detect Universal Trigger's Adversarial Attacks","created":"2020-11-20","cited_by_count":15},{"id":"1904.00689","title":"Defending against adversarial attacks by randomized diversification","created":"2019-04-01","cited_by_count":14},{"id":"2005.00446","title":"Defense of Word-level Adversarial Attacks via Random Substitution Encoding","created":"2020-05-01","cited_by_count":9}],"next_cursor":null}