{"list":"other","total":72,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1706.04599","title":"On Calibration of Modern Neural Networks","created":"2017-06-14","cited_by_count":4960},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1612.01474","title":"Simple and Scalable Predictive Uncertainty Estimation using Deep Ensembles","created":"2016-12-05","cited_by_count":3926},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1606.06565","title":"Concrete Problems in AI Safety","created":"2016-06-21","cited_by_count":1642},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1906.02530","title":"Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shift","created":"2019-06-06","cited_by_count":1287},{"id":"1906.02629","title":"When Does Label Smoothing Help?","created":"2019-06-06","cited_by_count":988},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1901.09960","title":"Using Pre-Training Can Improve Model Robustness and Uncertainty","created":"2019-01-28","cited_by_count":373},{"id":"1812.05720","title":"Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problem","created":"2018-12-13","cited_by_count":323},{"id":"1412.6596","title":"Training Deep Neural Networks on Noisy Labels with Bootstrapping","created":"2014-12-20","cited_by_count":322},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"1905.11001","title":"On Mixup Training: Improved Calibration and Predictive Uncertainty for Deep Neural Networks","created":"2019-05-27","cited_by_count":305},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"2010.01736","title":"Geometry-aware Instance-reweighted Adversarial Training","created":"2020-10-05","cited_by_count":198},{"id":"1910.04851","title":"Addressing Failure Prediction by Learning Model Confidence","created":"2019-10-01","cited_by_count":186},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"2002.10319","title":"Self-Adaptive Training: beyond Empirical Risk Minimization","created":"2020-02-24","cited_by_count":126},{"id":"2007.01458","title":"Confidence-Aware Learning for Deep Neural Networks","created":"2020-07-03","cited_by_count":113},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113},{"id":"1811.09600","title":"Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses","created":"2018-11-23","cited_by_count":109},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"2011.11164","title":"Learnable Boundary Guided Adversarial Training","created":"2020-11-23","cited_by_count":93},{"id":"1612.07767","title":"Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics","created":"2016-12-22","cited_by_count":77},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74},{"id":"1909.06872","title":"Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors","created":"2019-09-15","cited_by_count":72},{"id":"1906.04933","title":"Non-Parametric Calibration for Classification","created":"2019-06-12","cited_by_count":57},{"id":"1610.01256","title":"On the Safety of Machine Learning: Cyber-Physical Systems, Decision Sciences, and Data Products","created":"2016-10-05","cited_by_count":52},{"id":"1608.00530","title":"Early Methods for Detecting Adversarial Images","created":"2016-08-01","cited_by_count":36},{"id":"2012.10923","title":"Towards Trustworthy Predictions from Deep Neural Networks with Fast Adversarial Calibration","created":"2020-12-20","cited_by_count":34},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30},{"id":"2010.01278","title":"Efficient Robust Training via Backward Smoothing","created":"2020-10-03","cited_by_count":29},{"id":"2204.00491","title":"FrequencyLowCut Pooling -- Plug & Play against Catastrophic Overfitting","created":"2022-04-01","cited_by_count":28},{"id":"2003.09347","title":"SAT: Improving Adversarial Training via Curriculum-Based Loss Smoothing","created":"2020-03-18","cited_by_count":26},{"id":"2006.16375","title":"Improving Calibration through the Relationship with Adversarial Robustness","created":"2020-06-29","cited_by_count":26},{"id":"2110.05626","title":"Parameterizing Activation Functions for Adversarial Robustness","created":"2021-10-11","cited_by_count":22},{"id":"2106.02078","title":"Improving Neural Network Robustness via Persistency of Excitation","created":"2021-06-03","cited_by_count":14},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10},{"id":"1809.10562","title":"Dropout Distillation for Efficiently Estimating Model Confidence","created":"2018-09-27","cited_by_count":9},{"id":"2204.02481","title":"Adversarial Robustness through the Lens of Convolutional Filters","created":"2022-04-05","cited_by_count":9}],"next_cursor":null}