{"list":"other","total":63,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1505.04597","title":"U-Net: Convolutional Networks for Biomedical Image Segmentation","created":"2015-05-18","cited_by_count":19713},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1604.01685","title":"The Cityscapes Dataset for Semantic Urban Scene Understanding","created":"2016-04-06","cited_by_count":4444},{"id":"1512.02325","title":"SSD: Single Shot MultiBox Detector","created":"2015-12-08","cited_by_count":3130},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1603.08155","title":"Perceptual Losses for Real-Time Style Transfer and Super-Resolution","created":"2016-03-27","cited_by_count":2694},{"id":"1612.01105","title":"Pyramid Scene Parsing Network","created":"2016-12-04","cited_by_count":2479},{"id":"1706.05587","title":"Rethinking Atrous Convolution for Semantic Image Segmentation","created":"2017-06-17","cited_by_count":2161},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1711.11585","title":"High-Resolution Image Synthesis and Semantic Manipulation with Conditional GANs","created":"2017-11-30","cited_by_count":1179},{"id":"1611.04076","title":"Least Squares Generative Adversarial Networks","created":"2016-11-13","cited_by_count":1001},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"2006.04924","title":"A Self-supervised Approach for Adversarial Robustness","created":"2020-06-08","cited_by_count":180},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"1711.07767","title":"Receptive Field Block Net for Accurate and Fast Object Detection","created":"2017-11-21","cited_by_count":141},{"id":"1711.09856","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","created":"2017-11-27","cited_by_count":126},{"id":"1811.12641","title":"Transferable Adversarial Attacks for Image and Video Object Detection","created":"2018-11-30","cited_by_count":109},{"id":"1803.05787","title":"Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples","created":"2018-03-14","cited_by_count":99},{"id":"1704.05712","title":"Universal Adversarial Perturbations Against Semantic Image Segmentation","created":"2017-04-19","cited_by_count":92},{"id":"1907.04449","title":"PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving","created":"2019-07-09","cited_by_count":72},{"id":"1801.08926","title":"Deflecting Adversarial Attacks with Pixel Deflection","created":"2018-01-26","cited_by_count":71},{"id":"2003.06468","title":"GeoDA: a geometric framework for black-box adversarial attacks","created":"2020-03-13","cited_by_count":66},{"id":"1901.01677","title":"Image Super-Resolution as a Defense Against Adversarial Attacks","created":"2019-01-07","cited_by_count":65},{"id":"1707.05474","title":"APE-GAN: Adversarial Perturbation Elimination with GAN","created":"2017-07-18","cited_by_count":57},{"id":"1904.08489","title":"Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifiers","created":"2019-04-17","cited_by_count":57},{"id":"1904.00887","title":"Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks","created":"2019-04-01","cited_by_count":56},{"id":"1909.04385","title":"FDA: Feature Disruptive Attack","created":"2019-09-10","cited_by_count":56},{"id":"1907.10310","title":"Towards Adversarially Robust Object Detection","created":"2019-07-24","cited_by_count":55},{"id":"1810.00740","title":"Improving the Generalization of Adversarial Training with Domain Adaptation","created":"2018-10-01","cited_by_count":48},{"id":"1911.11616","title":"Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction","created":"2019-11-22","cited_by_count":47},{"id":"1712.02494","title":"Adversarial Examples that Fool Detectors","created":"2017-12-07","cited_by_count":40},{"id":"1804.03286","title":"On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses","created":"2018-04-10","cited_by_count":40},{"id":"2003.06555","title":"Dynamic Divide-and-Conquer Adversarial Training for Robust Semantic Segmentation","created":"2020-03-14","cited_by_count":38},{"id":"1904.01160","title":"Curls & Whey: Boosting Black-Box Adversarial Attacks","created":"2019-04-02","cited_by_count":37},{"id":"1809.05962","title":"Robust Adversarial Perturbation on Deep Proposal-based Models","created":"2018-09-16","cited_by_count":26},{"id":"2005.03837","title":"Projection & Probability-Driven Black-Box Attack","created":"2020-05-08","cited_by_count":19},{"id":"2005.02552","title":"Enhancing Intrinsic Adversarial Robustness via Feature Pyramid Decoder","created":"2020-05-06","cited_by_count":10},{"id":"2107.06501","title":"AdvFilter: Predictive Perturbation-aware Filtering against Adversarial Attack via Multi-domain Learning","created":"2021-07-14","cited_by_count":9},{"id":"2005.04564","title":"Class-Aware Domain Adaptation for Improving Adversarial Robustness","created":"2020-05-10","cited_by_count":1}],"next_cursor":null}