{"list":"other","total":66,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1705.06950","title":"The Kinetics Human Action Video Dataset","created":"2017-05-19","cited_by_count":1909},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1801.07455","title":"Spatial Temporal Graph Convolutional Networks for Skeleton-Based Action Recognition","created":"2018-01-23","cited_by_count":1209},{"id":"1611.08050","title":"Realtime Multi-Person 2D Pose Estimation using Part Affinity Fields","created":"2016-11-24","cited_by_count":1064},{"id":"1704.03976","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","created":"2017-04-13","cited_by_count":920},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1604.02808","title":"NTU RGB+D: A Large Scale Dataset for 3D Human Activity Analysis","created":"2016-04-11","cited_by_count":686},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"2003.14111","title":"Disentangling and Unifying Graph Convolutions for Skeleton-Based Action Recognition","created":"2020-03-31","cited_by_count":343},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"2107.12213","title":"Channel-wise Topology Refinement Graph Convolution for Skeleton-Based Action Recognition","created":"2021-07-26","cited_by_count":322},{"id":"1907.06987","title":"A Short Note on the Kinetics-700 Human Action Dataset","created":"2019-07-15","cited_by_count":310},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1802.04034","title":"Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks","created":"2018-02-12","cited_by_count":195},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"1812.10528","title":"Adversarial Attack and Defense on Graph Data: A Survey","created":"2018-12-26","cited_by_count":167},{"id":"1704.03453","title":"The Space of Transferable Adversarial Examples","created":"2017-04-11","cited_by_count":158},{"id":"1907.10456","title":"Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems","created":"2019-07-24","cited_by_count":153},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"1607.07043","title":"Spatio-Temporal LSTM with Trust Gates for 3D Human Action Recognition","created":"2016-07-24","cited_by_count":143},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"1808.01688","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","created":"2018-08-05","cited_by_count":135},{"id":"1904.01189","title":"Semantics-Guided Neural Networks for Efficient Skeleton-Based Human Action Recognition","created":"2019-04-02","cited_by_count":135},{"id":"1703.03492","title":"A New Representation of Skeleton Sequences for 3D Action Recognition","created":"2017-03-09","cited_by_count":126},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111},{"id":"2005.14137","title":"QEBA: Query-Efficient Boundary-Based Blackbox Attack","created":"2020-05-28","cited_by_count":104},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"2104.00946","title":"UAV-Human: A Large Benchmark for Human Behavior Understanding with Unmanned Aerial Vehicles","created":"2021-04-02","cited_by_count":96},{"id":"2106.01534","title":"Deconfounded Video Moment Retrieval with Causal Intervention","created":"2021-06-03","cited_by_count":84},{"id":"1904.05181","title":"Black-box Adversarial Attacks on Video Recognition Models","created":"2019-04-10","cited_by_count":58},{"id":"1903.07054","title":"Adversarial Attacks on Deep Neural Networks for Time Series Classification","created":"2019-03-17","cited_by_count":53},{"id":"2002.05907","title":"A Survey on 3D Skeleton-Based Action Recognition Using Learning Method","created":"2020-02-14","cited_by_count":47},{"id":"2210.15318","title":"Efficient and Effective Augmentation Strategy for Adversarial Training","created":"2022-10-27","cited_by_count":43},{"id":"1902.10755","title":"Adversarial Attacks on Time Series","created":"2019-02-27","cited_by_count":40},{"id":"1911.09449","title":"Heuristic Black-box Adversarial Attacks on Video Recognition Models","created":"2019-11-21","cited_by_count":37},{"id":"1908.07214","title":"Spatio-temporal Manifold Learning for Human Motions via Long-horizon Modeling","created":"2019-08-20","cited_by_count":32},{"id":"1909.06500","title":"Adversarial Attack on Skeleton-based Human Action Recognition","created":"2019-09-14","cited_by_count":32},{"id":"2110.01823","title":"Adversarial Attacks on Black Box Video Classifiers: Leveraging the Power of Geometric Transformations","created":"2021-10-05","cited_by_count":28},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26},{"id":"2001.03754","title":"Sparse Black-box Video Attack with Reinforcement Learning","created":"2020-01-11","cited_by_count":24},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24},{"id":"2007.02072","title":"Quo Vadis, Skeleton Action Recognition ?","created":"2020-07-04","cited_by_count":22},{"id":"1904.05005","title":"Person Re-identification with Metric Learning using Privileged Information","created":"2019-04-10","cited_by_count":20},{"id":"2009.05244","title":"Defending Against Multiple and Unforeseen Adversarial Videos","created":"2020-09-11","cited_by_count":19},{"id":"2009.05109","title":"Dynamic Future Net: Diversified Human Motion Generation","created":"2020-08-25","cited_by_count":14},{"id":"2004.00410","title":"Adversarial Attacks on Multivariate Time Series","created":"2020-03-31","cited_by_count":13},{"id":"2005.07151","title":"Towards Understanding the Adversarial Vulnerability of Skeleton-based Action Recognition","created":"2020-05-14","cited_by_count":12},{"id":"2011.14585","title":"Just One Moment: Structural Vulnerability of Deep Action Recognition against One Frame Attack","created":"2020-11-30","cited_by_count":12}],"next_cursor":null}