{"list":"other","total":139,"rows":[{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1506.01497","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","created":"2015-06-04","cited_by_count":9639},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1506.02640","title":"You Only Look Once: Unified, Real-Time Object Detection","created":"2015-06-08","cited_by_count":4852},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1503.03832","title":"FaceNet: A Unified Embedding for Face Recognition and Clustering","created":"2015-03-12","cited_by_count":2849},{"id":"1809.11096","title":"Large Scale GAN Training for High Fidelity Natural Image Synthesis","created":"2018-09-28","cited_by_count":2626},{"id":"1711.03938","title":"CARLA: An Open Urban Driving Simulator","created":"2017-11-10","cited_by_count":2449},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"1612.08242","title":"YOLO9000: Better, Faster, Stronger","created":"2016-12-25","cited_by_count":1431},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1612.00603","title":"A Point Set Generation Network for 3D Object Reconstruction from a Single Image","created":"2016-12-02","cited_by_count":979},{"id":"1801.09414","title":"CosFace: Large Margin Cosine Loss for Deep Face Recognition","created":"2018-01-29","cited_by_count":971},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1606.09549","title":"Fully-Convolutional Siamese Networks for Object Tracking","created":"2016-06-30","cited_by_count":568},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1705.05065","title":"AirSim: High-Fidelity Visual and Physical Simulation for Autonomous Vehicles","created":"2017-05-15","cited_by_count":523},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1812.11703","title":"SiamRPN++: Evolution of Siamese Visual Tracking with Very Deep Networks","created":"2018-12-31","cited_by_count":446},{"id":"1907.10326","title":"From Big to Small: Multi-Scale Local Planar Guidance for Monocular Depth Estimation","created":"2019-07-24","cited_by_count":382},{"id":"1711.11543","title":"Embodied Question Answering","created":"2017-11-30","cited_by_count":336},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1812.05050","title":"Fast Online Object Tracking and Segmentation: A Unifying Approach","created":"2018-12-12","cited_by_count":272},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1904.00760","title":"Approximating CNNs with Bag-of-local-Features models works surprisingly well on ImageNet","created":"2019-03-20","cited_by_count":260},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1608.00853","title":"A study of the effect of JPG compression on adversarial images","created":"2016-08-02","cited_by_count":197},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1910.14667","title":"Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors","created":"2019-10-31","cited_by_count":155},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"1907.06826","title":"Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving","created":"2019-07-16","cited_by_count":152},{"id":"1901.04407","title":"Self-Driving Cars: A Survey","created":"2019-01-14","cited_by_count":148},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"2004.00543","title":"Physically Realizable Adversarial Examples for LiDAR Object Detection","created":"2020-04-01","cited_by_count":137},{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1905.09747","title":"Adversarially Robust Distillation","created":"2019-05-23","cited_by_count":125},{"id":"2005.03778","title":"LGSVL Simulator: A High Fidelity Simulator for Autonomous Driving","created":"2020-05-07","cited_by_count":121},{"id":"1801.02608","title":"LaVAN: Localized and Visible Adversarial Noise","created":"2018-01-08","cited_by_count":113},{"id":"1907.12740","title":"Deep Learning in Video Multi-Object Tracking: A Survey","created":"2019-07-18","cited_by_count":107},{"id":"1811.12673","title":"ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples","created":"2018-11-30","cited_by_count":105},{"id":"2003.06693","title":"Certified Defenses for Adversarial Patches","created":"2020-03-14","cited_by_count":101},{"id":"2203.03818","title":"Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon","created":"2022-03-08","cited_by_count":101},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97},{"id":"2203.03373","title":"Adversarial Texture for Fooling Person Detectors in the Physical World","created":"2022-03-07","cited_by_count":96},{"id":"2006.16974","title":"Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures","created":"2020-06-30","cited_by_count":95},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93},{"id":"1909.04326","title":"Universal Physical Camouflage Attacks on Object Detectors","created":"2019-09-10","cited_by_count":91},{"id":"1807.01216","title":"Local Gradients Smoothing: Defense against localized adversarial attacks","created":"2018-07-03","cited_by_count":87},{"id":"1801.00349","title":"A General Framework for Adversarial Examples with Objectives","created":"2017-12-31","cited_by_count":84},{"id":"2203.00867","title":"Incremental Transformer Structure Enhanced Image Inpainting with Masking Positional Encoding","created":"2022-03-02","cited_by_count":83},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80},{"id":"2108.07969","title":"Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better","created":"2021-08-18","cited_by_count":79},{"id":"2201.08970","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","created":"2022-01-22","cited_by_count":79},{"id":"1910.06513","title":"ZO-AdaMM: Zeroth-Order Adaptive Momentum Method for Black-Box Optimization","created":"2019-10-15","cited_by_count":76},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75},{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74},{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74},{"id":"1802.08195","title":"Adversarial Examples that Fool both Computer Vision and Time-Limited Humans","created":"2018-02-22","cited_by_count":73},{"id":"1907.04449","title":"PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving","created":"2019-07-09","cited_by_count":72},{"id":"1909.06872","title":"Detecting Adversarial Samples Using Influence Functions and Nearest Neighbors","created":"2019-09-15","cited_by_count":72},{"id":"1904.00759","title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","created":"2019-03-21","cited_by_count":70},{"id":"1711.07183","title":"Adversarial Attacks Beyond the Image Space","created":"2017-11-20","cited_by_count":67},{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67},{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67},{"id":"1909.09552","title":"Defending Against Physically Realizable Attacks on Image Classification","created":"2019-09-20","cited_by_count":66},{"id":"1808.06586","title":"Learning Monocular Depth by Distilling Cross-domain Stereo Networks","created":"2018-08-20","cited_by_count":64},{"id":"2009.06701","title":"Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack","created":"2020-09-14","cited_by_count":64},{"id":"2012.12528","title":"The Translucent Patch: A Physical and Universal Attack on Object Detectors","created":"2020-12-23","cited_by_count":62},{"id":"2009.03728","title":"Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspective","created":"2020-09-08","cited_by_count":59},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57},{"id":"1810.11181","title":"Neural Modular Control for Embodied Question Answering","created":"2018-10-26","cited_by_count":56},{"id":"2106.04928","title":"Reliable Adversarial Distillation with Unreliable Teachers","created":"2021-06-09","cited_by_count":56},{"id":"1704.04960","title":"Adversarial and Clean Data Are Not Twins","created":"2017-04-17","cited_by_count":52},{"id":"2101.08154","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","created":"2021-01-20","cited_by_count":51},{"id":"2203.09831","title":"DTA: Physical Camouflage Attacks using Differentiable Transformation Network","created":"2022-03-18","cited_by_count":51},{"id":"2005.02313","title":"Adversarial Training against Location-Optimized Adversarial Patches","created":"2020-05-05","cited_by_count":50},{"id":"2007.04137","title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations","created":"2020-07-08","cited_by_count":50},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45},{"id":"2203.08519","title":"Towards Practical Certifiable Patch Defense with Vision Transformer","created":"2022-03-16","cited_by_count":44},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43},{"id":"2205.05909","title":"Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real World","created":"2022-05-12","cited_by_count":42},{"id":"1712.02494","title":"Adversarial Examples that Fool Detectors","created":"2017-12-07","cited_by_count":40},{"id":"2003.11145","title":"Adversarial Light Projection Attacks on Face Recognition Systems: A Feasibility Study","created":"2020-03-24","cited_by_count":40}],"next_cursor":"100"}