{"total":21,"rows":[{"id":"2211.16175","title":"Context-Aware Robust Fine-Tuning","created":"2022-11-29","cited_by_count":28,"area":null},{"id":"2405.00256","title":"ASAM: Boosting Segment Anything Model with Adversarial Tuning","created":"2024-05-01","cited_by_count":12,"area":null},{"id":"2310.15444","title":"Fast Propagation is Better: Accelerating Single-Step Adversarial Training via Sampling Subnetworks","created":"2023-10-24","cited_by_count":8,"area":null},{"id":"2306.12610","title":"Revisiting Image Classifier Training for Improved Certified Robust Defense against Adversarial Patches","created":"2023-06-22","cited_by_count":6,"area":null},{"id":"2308.10632","title":"Foundation Model-oriented Robustness: Robust Image Model Evaluation with Pretrained Models","created":"2023-08-21","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2212.09062","title":"Bort: Towards Explainable Neural Networks with Bounded Orthogonal Constraint","created":"2022-12-18","cited_by_count":5,"area":null},{"id":"2307.05610","title":"Substance or Style: What Does Your Image Embedding Know?","created":"2023-07-10","cited_by_count":5,"area":null},{"id":"2510.10693","title":"High-Dimensional Learning Dynamics of Quantized Models with Straight-Through Estimator","created":"2025-10-12","cited_by_count":4,"area":null},{"id":"2311.12800","title":"Understanding Data Augmentation from a Robustness Perspective","created":"2023-09-07","cited_by_count":3,"area":null},{"id":"2401.03844","title":"Fully Attentional Networks with Self-emerging Token Labeling","created":"2024-01-08","cited_by_count":3,"area":null},{"id":"2505.18113","title":"Beyond Discreteness: Sample Complexity Analysis of Straight-Through Estimator for 1-bit Quantization","created":"2025-05-23","cited_by_count":2,"area":null},{"id":"2307.12498","title":"Robust Automatic Speech Recognition via WavAugment Guided Phoneme Adversarial Training","created":"2023-07-24","cited_by_count":1,"area":null},{"id":"2402.11710","title":"A Note on Bias to Complete","created":"2024-02-18","cited_by_count":1,"area":null},{"id":"2506.23532","title":"GViT: Representing Images as Gaussians for Visual Recognition","created":"2025-06-30","cited_by_count":1,"area":null},{"id":"2508.12384","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","created":"2025-08-17","cited_by_count":1,"area":null},{"id":"2312.16339","title":"Universal Pyramid Adversarial Training for Improved ViT Performance","created":"2023-12-26","cited_by_count":0,"area":null},{"id":"2403.10476","title":"Approximate Nullspace Augmented Finetuning for Robust Vision Transformers","created":"2024-03-15","cited_by_count":0,"area":null},{"id":"2503.16975","title":"EasyRobust: A Comprehensive and Easy-to-use Toolkit for Robust and Generalized Vision","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2608.04442","title":"Robustness Emerges Early in Training Dynamics, but Is Not Preserved","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.06712","title":"Suppress and Diversify: Refining Robust Pathways for Corruption Robustness","created":"2026-08-07","cited_by_count":0,"area":null}],"next_cursor":null}