{"total":52,"rows":[{"id":"2301.05815","title":"First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)","created":"2023-01-14","cited_by_count":58,"area":null},{"id":"2306.10426","title":"Understanding Certified Training with Interval Bound Propagation","created":"2023-06-17","cited_by_count":26,"area":null},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23,"area":null},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18,"area":"safety"},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14,"area":null},{"id":"2410.16281","title":"Verification of Neural Control Barrier Functions with Symbolic Derivative Bounds Propagation","created":"2024-10-04","cited_by_count":12,"area":null},{"id":"2501.05867","title":"Neural Network Verification is a Programming Language Challenge","created":"2025-01-10","cited_by_count":12,"area":null},{"id":"2305.04574","title":"TAPS: Connecting Certified and Adversarial Training","created":"2023-05-08","cited_by_count":11,"area":null},{"id":"2510.11709","title":"Adversarial Attacks Leverage Interference Between Features in Superposition","created":"2025-10-13","cited_by_count":8,"area":null},{"id":"2405.11547","title":"Certified Robust Accuracy of Neural Networks Are Bounded due to Bayes Errors","created":"2024-05-19","cited_by_count":7,"area":null},{"id":"2406.13433","title":"Certification for Differentially Private Prediction in Gradient-Based Training","created":"2024-06-19","cited_by_count":7,"area":null},{"id":"2401.14961","title":"Set-Based Training for Neural Network Verification","created":"2024-01-26","cited_by_count":6,"area":null},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2305.13508","title":"DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagation","created":"2023-05-22","cited_by_count":5,"area":null},{"id":"2405.13922","title":"Towards Certification of Uncertainty Calibration under Adversarial Attacks","created":"2024-05-22","cited_by_count":5,"area":null},{"id":"2505.15174","title":"Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss","created":"2025-05-21","cited_by_count":5,"area":null},{"id":"2403.07095","title":"Gaussian Loss Smoothing Enables Certified Training with Tight Convex Relaxations","created":"2024-03-11","cited_by_count":4,"area":null},{"id":"2602.16944","title":"Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming","created":"2026-02-18","cited_by_count":4,"area":"safety"},{"id":"2211.16187","title":"Quantization-aware Interval Bound Propagation for Training Certifiably Robust Quantized Neural Networks","created":"2022-11-29","cited_by_count":3,"area":null},{"id":"2303.05246","title":"Efficient Certified Training and Robustness Verification of Neural ODEs","created":"2023-03-09","cited_by_count":3,"area":null},{"id":"2305.03626","title":"Verifiable Learning for Robust Tree Ensembles","created":"2023-05-05","cited_by_count":3,"area":null},{"id":"2310.03166","title":"Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors","created":"2023-10-04","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2410.01617","title":"On Using Certified Training towards Empirical Robustness","created":"2024-10-02","cited_by_count":3,"area":null},{"id":"2411.18235","title":"Certified Training with Branch-and-Bound for Lyapunov-stable Neural Control","created":"2024-11-27","cited_by_count":3,"area":null},{"id":"2309.00879","title":"Towards Certified Probabilistic Robustness with High Accuracy","created":"2023-09-02","cited_by_count":2,"area":null},{"id":"2405.14923","title":"How Does Bayes Error Limit Probabilistic Robust Accuracy","created":"2024-05-23","cited_by_count":2,"area":null},{"id":"2410.06816","title":"Expressiveness of Multi-Neuron Convex Relaxations in Neural Network Certification","created":"2024-10-09","cited_by_count":2,"area":null},{"id":"2501.13782","title":"Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systems","created":"2025-01-23","cited_by_count":2,"area":null},{"id":"2512.05439","title":"BEAVER: An Efficient Deterministic LLM Verifier","created":"2025-12-05","cited_by_count":2,"area":null},{"id":"2306.06995","title":"How robust accuracy suffers from certified training with convex relaxations","created":"2023-06-12","cited_by_count":1,"area":null},{"id":"2402.05675","title":"Is Adversarial Training with Compressed Datasets Effective?","created":"2024-02-08","cited_by_count":1,"area":null},{"id":"2404.16457","title":"Towards Precise Observations of Neural Model Robustness in Classification","created":"2024-04-25","cited_by_count":1,"area":null},{"id":"2405.09176","title":"Cross-Input Certified Training for Universal Perturbations","created":"2024-05-15","cited_by_count":1,"area":null},{"id":"2410.03000","title":"Towards Generalized Certified Robustness with Multi-Norm Training","created":"2024-10-03","cited_by_count":1,"area":null},{"id":"2410.06895","title":"Average Certified Radius is a Poor Metric for Randomized Smoothing","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2410.20432","title":"Integrating uncertainty quantification into randomized smoothing based robustness guarantees","created":"2024-10-27","cited_by_count":1,"area":null},{"id":"2502.03274","title":"A Scalable Approach to Probabilistic Neuro-Symbolic Robustness Verification","created":"2025-02-05","cited_by_count":1,"area":"lr"},{"id":"2512.20755","title":"Bridging Efficiency and Safety: Formal Verification of Neural Networks with Early Exits","created":"2025-12-23","cited_by_count":1,"area":"inference"},{"id":"2602.02626","title":"Learning Better Certified Models from Empirically-Robust Teachers","created":"2026-02-02","cited_by_count":1,"area":"distill"},{"id":"2307.13078","title":"Adaptive Certified Training: Towards Better Accuracy-Robustness Tradeoffs","created":"2023-07-24","cited_by_count":0,"area":null},{"id":"2404.01642","title":"Patch Synthesis for Property Repair of Deep Neural Networks","created":"2024-04-02","cited_by_count":0,"area":null},{"id":"2504.11831","title":"Support is All You Need for Certified VAE Training","created":"2025-04-16","cited_by_count":0,"area":null},{"id":"2506.11992","title":"Compression Aware Certified Training","created":"2025-06-13","cited_by_count":0,"area":null},{"id":"2512.01782","title":"Dual Randomized Smoothing: Beyond Global Noise Variance","created":"2025-12-01","cited_by_count":0,"area":null},{"id":"2601.13303","title":"On the Extreme Variance of Certified Local Robustness Across Model Seeds","created":"2026-01-19","cited_by_count":0,"area":null},{"id":"2606.02134","title":"Rethinking Evaluation Paradigms in IBP-based Certified Training","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.09746","title":"Hybrid Robustness Verification for Spatio-Temporal Neural Networks","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.31653","title":"Improving Certified Robustness via Adversarial Distillation","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2607.18195","title":"Certified Training for Convolutional Perturbations","created":"2026-07-20","cited_by_count":0,"area":null},{"id":"2608.19351","title":"Uncovering the Limits of Proof Sharing for Neural Networks","created":"2026-08-19","cited_by_count":0,"area":null},{"id":"2610.15359","title":"Adversarial Detection for Pre-trained Classifiers via Lipschitz-Margin Analysis with Certification","created":"2026-10-11","cited_by_count":0,"area":null}],"next_cursor":null}