{"list":"other","total":64,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1611.05431","title":"Aggregated Residual Transformations for Deep Neural Networks","created":"2016-11-16","cited_by_count":2546},{"id":"2004.07780","title":"Shortcut Learning in Deep Neural Networks","created":"2020-04-16","cited_by_count":1969},{"id":"1907.02893","title":"Invariant Risk Minimization","created":"2019-07-05","cited_by_count":1854},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1811.12231","title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","created":"2018-11-29","cited_by_count":1432},{"id":"2012.07421","title":"WILDS: A Benchmark of in-the-Wild Distribution Shifts","created":"2020-12-14","cited_by_count":1375},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1911.08731","title":"Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalization","created":"2019-11-20","cited_by_count":1247},{"id":"1707.01083","title":"ShuffleNet: An Extremely Efficient Convolutional Neural Network for Mobile Devices","created":"2017-07-04","cited_by_count":1200},{"id":"1905.13549","title":"Learning Robust Global Representations by Penalizing Local Predictive Power","created":"2019-05-29","cited_by_count":1013},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"2003.00688","title":"Out-of-Distribution Generalization via Risk Extrapolation (REx)","created":"2020-03-02","cited_by_count":742},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1803.09050","title":"Learning to Reweight Examples for Robust Deep Learning","created":"2018-03-24","cited_by_count":675},{"id":"1610.07524","title":"Fair prediction with disparate impact: A study of bias in recidivism prediction instruments","created":"2016-10-24","cited_by_count":672},{"id":"1807.04975","title":"Recognition in Terra Incognita","created":"2018-07-13","cited_by_count":658},{"id":"1501.01332","title":"Causal inference using invariant prediction: identification and confidence intervals","created":"2015-01-06","cited_by_count":536},{"id":"2107.09044","title":"Just Train Twice: Improving Group Robustness without Training Group Information","created":"2021-07-19","cited_by_count":523},{"id":"2204.02937","title":"Last Layer Re-Training is Sufficient for Robustness to Spurious Correlations","created":"2022-04-06","cited_by_count":381},{"id":"1807.00431","title":"Confounding variables can degrade generalization performance of radiological deep learning models","created":"2018-07-02","cited_by_count":379},{"id":"1806.08010","title":"Fairness Without Demographics in Repeated Loss Minimization","created":"2018-06-20","cited_by_count":364},{"id":"2006.07710","title":"The Pitfalls of Simplicity Bias in Neural Networks","created":"2020-06-13","cited_by_count":351},{"id":"2006.09994","title":"Noise or Signal: The Role of Image Backgrounds in Object Recognition","created":"2020-06-17","cited_by_count":343},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"1811.11553","title":"Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects","created":"2018-11-28","cited_by_count":143},{"id":"2006.12655","title":"Perceptual Adversarial Robustness: Defense Against Unseen Threat Models","created":"2020-06-22","cited_by_count":137},{"id":"2110.04301","title":"Salient ImageNet: How to discover spurious features in Deep Learning?","created":"2021-10-08","cited_by_count":114},{"id":"2102.11436","title":"Model-Based Domain Generalization","created":"2021-02-23","cited_by_count":104},{"id":"2007.08558","title":"On Robustness and Transferability of Convolutional Neural Networks","created":"2020-07-16","cited_by_count":98},{"id":"2106.03721","title":"OoD-Bench: Quantifying and Understanding Two Dimensions of Out-of-Distribution Generalization","created":"2021-06-07","cited_by_count":86},{"id":"1906.00001","title":"Functional Adversarial Attacks","created":"2019-05-29","cited_by_count":82},{"id":"2105.04857","title":"Leveraging Sparse Linear Layers for Debuggable Deep Networks","created":"2021-05-11","cited_by_count":82},{"id":"2002.10477","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","created":"2020-02-24","cited_by_count":77},{"id":"2010.12230","title":"Coping with Label Shift via Distributionally Robust Optimisation","created":"2020-10-23","cited_by_count":70},{"id":"2012.01750","title":"Understanding Failures of Deep Networks via Robust Feature Extraction","created":"2020-12-03","cited_by_count":56},{"id":"2201.10766","title":"A Comprehensive Study of Image Classification Model Sensitivity to Foregrounds, Backgrounds, and Visual Attributes","created":"2022-01-26","cited_by_count":56},{"id":"2005.01095","title":"A Causal View on Robustness of Neural Networks","created":"2020-05-03","cited_by_count":53},{"id":"2012.04104","title":"Removing Spurious Features can Hurt Accuracy and Affect Groups Disproportionately","created":"2020-12-07","cited_by_count":52},{"id":"1812.06707","title":"Not Using the Car to See the Sidewalk: Quantifying and Controlling the Effects of Context in Classification and Segmentation","created":"2018-12-17","cited_by_count":49},{"id":"2009.02470","title":"Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks","created":"2020-09-05","cited_by_count":45},{"id":"2006.00731","title":"Second-Order Provable Defenses against Adversarial Attacks","created":"2020-06-01","cited_by_count":40},{"id":"2006.05161","title":"Provable tradeoffs in adversarially robust classification","created":"2020-06-09","cited_by_count":40},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37},{"id":"2102.10867","title":"Linear unit-tests for invariance discovery","created":"2021-02-22","cited_by_count":27},{"id":"2203.15566","title":"Core Risk Minimization using Salient ImageNet","created":"2022-03-28","cited_by_count":15},{"id":"1605.05538","title":"Improving Weakly-Supervised Object Localization By Micro-Annotation","created":"2016-05-18","cited_by_count":11},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11},{"id":"2110.03804","title":"FOCUS: Familiar Objects in Common and Uncommon Settings","created":"2021-10-07","cited_by_count":8},{"id":"2107.00247","title":"The Interplay between Distribution Parameters and the Accuracy-Robustness Tradeoff in Classification","created":"2021-07-01","cited_by_count":1}],"next_cursor":null}