{"list":"other","total":53,"rows":[{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1909.13719","title":"RandAugment: Practical automated data augmentation with a reduced search space","created":"2019-09-30","cited_by_count":2269},{"id":"2004.07780","title":"Shortcut Learning in Deep Neural Networks","created":"2020-04-16","cited_by_count":1969},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1907.07174","title":"Natural Adversarial Examples","created":"2019-07-16","cited_by_count":1408},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1911.04252","title":"Self-training with Noisy Student improves ImageNet classification","created":"2019-11-11","cited_by_count":1311},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1912.11370","title":"Big Transfer (BiT): General Visual Representation Learning","created":"2019-12-24","cited_by_count":769},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1702.02284","title":"Adversarial Attacks on Neural Network Policies","created":"2017-02-08","cited_by_count":320},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"2103.14586","title":"Understanding Robustness of Transformers for Image Classification","created":"2021-03-26","cited_by_count":249},{"id":"1806.00451","title":"Do CIFAR-10 Classifiers Generalize to CIFAR-10?","created":"2018-06-01","cited_by_count":200},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1704.03453","title":"The Space of Transferable Adversarial Examples","created":"2017-04-11","cited_by_count":158},{"id":"1412.5068","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","created":"2014-12-11","cited_by_count":146},{"id":"2105.07926","title":"Towards Robust Vision Transformer","created":"2021-05-17","cited_by_count":137},{"id":"1604.04004","title":"Understanding How Image Quality Affects Deep Neural Networks","created":"2016-04-14","cited_by_count":119},{"id":"1705.02498","title":"A Study and Comparison of Human and Deep Learning Recognition Performance Under Visual Distortions","created":"2017-05-06","cited_by_count":108},{"id":"2005.10190","title":"Feature Purification: How Adversarial Training Performs Robust Deep Learning","created":"2020-05-20","cited_by_count":107},{"id":"1909.05040","title":"Sparse and Imperceivable Adversarial Attacks","created":"2019-09-11","cited_by_count":95},{"id":"1911.10891","title":"ColorFool: Semantic Adversarial Colorization","created":"2019-11-25","cited_by_count":89},{"id":"1803.08680","title":"Improving DNN Robustness to Adversarial Attacks using Jacobian Regularization","created":"2018-03-23","cited_by_count":88},{"id":"1804.00499","title":"Semantic Adversarial Examples","created":"2018-03-16","cited_by_count":86},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71},{"id":"2003.06468","title":"GeoDA: a geometric framework for black-box adversarial attacks","created":"2020-03-13","cited_by_count":66},{"id":"1611.05760","title":"Examining the Impact of Blur on Recognition by Convolutional Networks","created":"2016-11-17","cited_by_count":58},{"id":"1511.06385","title":"A Unified Gradient Regularization Family for Adversarial Examples","created":"2015-11-19","cited_by_count":43},{"id":"2112.13547","title":"PRIME: A few primitives can boost robustness to common corruptions","created":"2021-12-27","cited_by_count":40},{"id":"2111.15121","title":"Pyramid Adversarial Training Improves ViT Performance","created":"2021-11-30","cited_by_count":39},{"id":"1809.04098","title":"On the Structural Sensitivity of Deep Convolutional Networks to the Directions of Fourier Basis Functions","created":"2018-09-11","cited_by_count":32},{"id":"2001.06057","title":"A simple way to make neural networks robust against diverse image corruptions","created":"2020-01-16","cited_by_count":30},{"id":"2007.09271","title":"OnlineAugment: Online Data Augmentation with Less Domain Knowledge","created":"2020-07-17","cited_by_count":28},{"id":"2010.09624","title":"Optimism in the Face of Adversity: Understanding and Improving Deep Learning through Adversarial Robustness","created":"2020-10-19","cited_by_count":28},{"id":"2111.00861","title":"A Frequency Perspective of Adversarial Robustness","created":"2021-10-26","cited_by_count":28},{"id":"1903.10826","title":"A geometry-inspired decision-based attack","created":"2019-03-26","cited_by_count":22},{"id":"1906.00945","title":"Adversarial Robustness as a Prior for Learned Representations","created":"2019-06-03","cited_by_count":20},{"id":"2007.10115","title":"Towards robust sensing for Autonomous Vehicles: An adversarial perspective","created":"2020-07-14","cited_by_count":7},{"id":"1307.8242","title":"Sparse Packetized Predictive Control for Networked Control over Erasure Channels","created":"2013-07-31","cited_by_count":2},{"id":"2107.11671","title":"Adversarial training may be a double-edged sword","created":"2021-07-24","cited_by_count":1},{"id":"2203.04027","title":"Data augmentation with mixtures of max-entropy transformations for filling-level classification","created":"2022-03-08","cited_by_count":1}],"next_cursor":null}