{"list":"other","total":63,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1411.4038","title":"Fully Convolutional Networks for Semantic Segmentation","created":"2014-11-14","cited_by_count":4859},{"id":"2012.12877","title":"Training data-efficient image transformers & distillation through attention","created":"2020-12-23","cited_by_count":4586},{"id":"1704.04861","title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications","created":"2017-04-17","cited_by_count":3845},{"id":"1606.00915","title":"DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFs","created":"2016-06-02","cited_by_count":3241},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1611.05431","title":"Aggregated Residual Transformations for Deep Neural Networks","created":"2016-11-16","cited_by_count":2546},{"id":"1703.06868","title":"Arbitrary Style Transfer in Real-time with Adaptive Instance Normalization","created":"2017-03-20","cited_by_count":2010},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1811.12231","title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","created":"2018-11-29","cited_by_count":1432},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1907.11922","title":"MaskGAN: Towards Diverse and Interactive Facial Image Manipulation","created":"2019-07-27","cited_by_count":628},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"2202.11094","title":"GroupViT: Semantic Segmentation Emerges from Text Supervision","created":"2022-02-22","cited_by_count":531},{"id":"1812.02713","title":"PartNet: A Large-scale Benchmark for Fine-grained and Hierarchical Part-level 3D Object Understanding","created":"2018-12-06","cited_by_count":526},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1810.02338","title":"Neural-Symbolic VQA: Disentangling Reasoning from Vision and Language Understanding","created":"2018-10-04","cited_by_count":304},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1406.2031","title":"Detect What You Can: Detecting and Representing Objects using Holistic Models and Body Parts","created":"2014-06-08","cited_by_count":232},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1903.12394","title":"Informed Machine Learning -- A Taxonomy and Survey of Integrating Knowledge into Learning Systems","created":"2019-03-29","cited_by_count":205},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194},{"id":"1711.09856","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","created":"2017-11-27","cited_by_count":126},{"id":"1703.05446","title":"Look into Person: Self-supervised Structure-sensitive Learning and A New Benchmark for Human Parsing","created":"2017-03-16","cited_by_count":109},{"id":"2112.00933","title":"PartImageNet: A Large, High-Quality Dataset of Parts","created":"2021-12-02","cited_by_count":107},{"id":"1905.01298","title":"SCOPS: Self-Supervised Co-Part Segmentation","created":"2019-05-03","cited_by_count":100},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"1901.04684","title":"The Limitations of Adversarial Training and the Blind-Spot Attack","created":"2019-01-15","cited_by_count":63},{"id":"2101.08154","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","created":"2021-01-20","cited_by_count":51},{"id":"1810.05162","title":"Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation","created":"2018-10-11","cited_by_count":40},{"id":"1703.01101","title":"Adversarial Examples for Semantic Image Segmentation","created":"2017-03-03","cited_by_count":33},{"id":"1809.04120","title":"Humans can decipher adversarial images","created":"2018-09-11","cited_by_count":31},{"id":"2105.12405","title":"Unsupervised Part Segmentation through Disentangling Appearance and Shape","created":"2021-05-26","cited_by_count":29},{"id":"2007.09073","title":"GMNet: Graph Matching Network for Large Scale Part Semantic Segmentation in the Wild","created":"2020-07-17","cited_by_count":25},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25},{"id":"2106.06235","title":"Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attacks","created":"2021-06-11","cited_by_count":24},{"id":"2112.01036","title":"GANSeg: Learning to Segment by Unsupervised Hierarchical Image Generation","created":"2021-12-02","cited_by_count":19},{"id":"1802.09308","title":"Max-Mahalanobis Linear Discriminant Analysis Networks","created":"2018-02-26","cited_by_count":18},{"id":"2103.15459","title":"Capsule Network is Not More Robust than Convolutional Network","created":"2021-03-29","cited_by_count":12},{"id":"1906.03612","title":"On the Vulnerability of Capsule Networks to Adversarial Attacks","created":"2019-06-09","cited_by_count":11},{"id":"2209.09117","title":"Part-Based Models Improve Adversarial Robustness","created":"2022-09-15","cited_by_count":11},{"id":"2102.11731","title":"Rethinking Natural Adversarial Examples for Classification Models","created":"2021-02-23","cited_by_count":9},{"id":"2102.08747","title":"Learning Visual Models using a Knowledge Graph as a Trainer","created":"2021-02-17","cited_by_count":8},{"id":"2103.15307","title":"Onfocus Detection: Identifying Individual-Camera Eye Contact from Unconstrained Images","created":"2021-03-29","cited_by_count":6}],"next_cursor":null}