{"list":"other","total":140,"rows":[{"id":"1706.03762","title":"Attention Is All You Need","created":"2017-06-12","cited_by_count":60361},{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1506.01497","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","created":"2015-06-04","cited_by_count":9639},{"id":"2005.12872","title":"End-to-End Object Detection with Transformers","created":"2020-05-26","cited_by_count":7414},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1703.06870","title":"Mask R-CNN","created":"2017-03-20","cited_by_count":7277},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1612.03144","title":"Feature Pyramid Networks for Object Detection","created":"2016-12-09","cited_by_count":5036},{"id":"1411.4038","title":"Fully Convolutional Networks for Semantic Segmentation","created":"2014-11-14","cited_by_count":4859},{"id":"1506.02640","title":"You Only Look Once: Unified, Real-Time Object Detection","created":"2015-06-08","cited_by_count":4852},{"id":"1611.07004","title":"Image-to-Image Translation with Conditional Adversarial Networks","created":"2016-11-21","cited_by_count":4527},{"id":"1512.02325","title":"SSD: Single Shot MultiBox Detector","created":"2015-12-08","cited_by_count":3130},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"2105.15203","title":"SegFormer: Simple and Efficient Design for Semantic Segmentation with Transformers","created":"2021-05-31","cited_by_count":2940},{"id":"1804.02767","title":"YOLOv3: An Incremental Improvement","created":"2018-04-08","cited_by_count":2659},{"id":"1912.04838","title":"Scalability in Perception for Autonomous Driving: Waymo Open Dataset","created":"2019-12-10","cited_by_count":2451},{"id":"1711.03938","title":"CARLA: An Open Urban Driving Simulator","created":"2017-11-10","cited_by_count":2449},{"id":"2005.08100","title":"Conformer: Convolution-augmented Transformer for Speech Recognition","created":"2020-05-16","cited_by_count":1863},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1506.02025","title":"Spatial Transformer Networks","created":"2015-06-05","cited_by_count":1429},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1911.09070","title":"EfficientDet: Scalable and Efficient Object Detection","created":"2019-11-20","cited_by_count":1020},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1705.05065","title":"AirSim: High-Fidelity Visual and Physical Simulation for Autonomous Vehicles","created":"2017-05-15","cited_by_count":523},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1512.02595","title":"Deep Speech 2: End-to-End Speech Recognition in English and Mandarin","created":"2015-12-08","cited_by_count":451},{"id":"1711.07566","title":"Neural 3D Mesh Renderer","created":"2017-11-20","cited_by_count":437},{"id":"1412.0035","title":"Understanding Deep Image Representations by Inverting Them","created":"2014-11-26","cited_by_count":403},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1910.14667","title":"Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors","created":"2019-10-31","cited_by_count":155},{"id":"1907.06826","title":"Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving","created":"2019-07-16","cited_by_count":152},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"1811.11553","title":"Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects","created":"2018-11-28","cited_by_count":143},{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127},{"id":"1711.09856","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","created":"2017-11-27","cited_by_count":126},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"2203.03818","title":"Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon","created":"2022-03-08","cited_by_count":101},{"id":"2203.03373","title":"Adversarial Texture for Fooling Person Detectors in the Physical World","created":"2022-03-07","cited_by_count":96},{"id":"1909.05040","title":"Sparse and Imperceivable Adversarial Attacks","created":"2019-09-11","cited_by_count":95},{"id":"1811.02248","title":"SparseFool: a few pixels make a big difference","created":"2018-11-06","cited_by_count":94},{"id":"1906.11897","title":"On Physical Adversarial Patches for Object Detection","created":"2019-06-20","cited_by_count":93},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93},{"id":"1704.05712","title":"Universal Adversarial Perturbations Against Semantic Image Segmentation","created":"2017-04-19","cited_by_count":92},{"id":"1909.04326","title":"Universal Physical Camouflage Attacks on Object Detectors","created":"2019-09-10","cited_by_count":91},{"id":"2012.11207","title":"On Success and Simplicity: A Second Look at Transferable Targeted Attacks","created":"2020-12-21","cited_by_count":89},{"id":"1801.00349","title":"A General Framework for Adversarial Examples with Objectives","created":"2017-12-31","cited_by_count":84},{"id":"1805.11090","title":"GenAttack: Practical Black-box Attacks with Gradient-Free Optimization","created":"2018-05-28","cited_by_count":82},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75},{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74},{"id":"1907.04449","title":"PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving","created":"2019-07-09","cited_by_count":72},{"id":"1711.07183","title":"Adversarial Attacks Beyond the Image Space","created":"2017-11-20","cited_by_count":67},{"id":"2009.06701","title":"Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack","created":"2020-09-14","cited_by_count":64},{"id":"1809.04790","title":"Adversarial Examples: Opportunities and Challenges","created":"2018-09-13","cited_by_count":63},{"id":"2012.12528","title":"The Translucent Patch: A Physical and Universal Attack on Object Detectors","created":"2020-12-23","cited_by_count":62},{"id":"2009.03728","title":"Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspective","created":"2020-09-08","cited_by_count":59},{"id":"1911.07140","title":"Black-Box Adversarial Attack with Transferable Model-based Embedding","created":"2019-11-17","cited_by_count":57},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57},{"id":"2108.06179","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","created":"2021-08-13","cited_by_count":55},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52},{"id":"2101.08154","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","created":"2021-01-20","cited_by_count":51},{"id":"2203.09831","title":"DTA: Physical Camouflage Attacks using Differentiable Transformation Network","created":"2022-03-18","cited_by_count":51},{"id":"2007.04137","title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations","created":"2020-07-08","cited_by_count":50},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50},{"id":"2012.12235","title":"Unadversarial Examples: Designing Objects for Robust Vision","created":"2020-12-22","cited_by_count":45},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43},{"id":"2205.05909","title":"Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real World","created":"2022-05-12","cited_by_count":42},{"id":"1712.02494","title":"Adversarial Examples that Fool Detectors","created":"2017-12-07","cited_by_count":40},{"id":"2003.11145","title":"Adversarial Light Projection Attacks on Face Recognition Systems: A Feasibility Study","created":"2020-03-24","cited_by_count":40},{"id":"2011.13375","title":"Invisible Perturbations: Physical Adversarial Examples Exploiting the Rolling Shutter Effect","created":"2020-11-26","cited_by_count":40},{"id":"1707.07397","title":"Synthesizing Robust Adversarial Examples","created":"2017-07-24","cited_by_count":39},{"id":"2007.16118","title":"Physical Adversarial Attack on Vehicle Detector in the Carla Simulator","created":"2020-07-31","cited_by_count":38},{"id":"2010.13773","title":"GreedyFool: Distortion-Aware Sparse Adversarial Attack","created":"2020-10-26","cited_by_count":37},{"id":"1911.05268","title":"Adversarial Examples in Modern Machine Learning: A Review","created":"2019-11-13","cited_by_count":36},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36},{"id":"1908.09327","title":"advPattern: Physical-World Attacks on Deep Person Re-Identification via Adversarially Transformable Patterns","created":"2019-08-25","cited_by_count":35},{"id":"1910.07067","title":"On adversarial patches: real-world attack on ArcFace-100 face recognition system","created":"2019-10-15","cited_by_count":35},{"id":"2108.11765","title":"Physical Adversarial Attacks on an Aerial Imagery Object Detector","created":"2021-08-26","cited_by_count":35},{"id":"1904.11042","title":"Physical Adversarial Textures that Fool Visual Object Tracking","created":"2019-04-24","cited_by_count":31},{"id":"1912.08166","title":"APRICOT: A Dataset of Physical Adversarial Attacks on Object Detection","created":"2019-12-17","cited_by_count":31}],"next_cursor":"100"}