{"list":"other","total":57,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1409.0473","title":"Neural Machine Translation by Jointly Learning to Align and Translate","created":"2014-09-01","cited_by_count":4548},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1806.09055","title":"DARTS: Differentiable Architecture Search","created":"2018-06-24","cited_by_count":1798},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1611.01578","title":"Neural Architecture Search with Reinforcement Learning","created":"2016-11-05","cited_by_count":1499},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1707.07012","title":"Learning Transferable Architectures for Scalable Image Recognition","created":"2017-07-21","cited_by_count":1101},{"id":"1802.01548","title":"Regularized Evolution for Image Classifier Architecture Search","created":"2018-02-05","cited_by_count":909},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1802.03268","title":"Efficient Neural Architecture Search via Parameter Sharing","created":"2018-02-09","cited_by_count":837},{"id":"1810.04650","title":"Multi-Task Learning as Multi-Objective Optimization","created":"2018-10-10","cited_by_count":821},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1610.01145","title":"Error bounds for approximations with deep ReLU networks","created":"2016-10-03","cited_by_count":574},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1703.01041","title":"Large-Scale Evolution of Image Classifiers","created":"2017-03-03","cited_by_count":348},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1704.08847","title":"Parseval Networks: Improving Robustness to Adversarial Examples","created":"2017-04-28","cited_by_count":293},{"id":"1907.05737","title":"PC-DARTS: Partial Channel Connections for Memory-Efficient Architecture Search","created":"2019-07-12","cited_by_count":265},{"id":"1511.05641","title":"Net2Net: Accelerating Learning via Knowledge Transfer","created":"2015-11-18","cited_by_count":250},{"id":"1904.12760","title":"Progressive Differentiable Architecture Search: Bridging the Depth Gap between Search and Evaluation","created":"2019-04-29","cited_by_count":230},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"1708.05344","title":"SMASH: One-Shot Model Architecture Search through HyperNetworks","created":"2017-08-17","cited_by_count":202},{"id":"2101.08134","title":"Zero-Cost Proxies for Lightweight NAS","created":"2021-01-20","cited_by_count":199},{"id":"1608.00853","title":"A study of the effect of JPG compression on adversarial images","created":"2016-08-02","cited_by_count":197},{"id":"1711.00436","title":"Hierarchical Representations for Efficient Architecture Search","created":"2017-11-01","cited_by_count":191},{"id":"1909.09656","title":"Understanding and Robustifying Differentiable Architecture Search","created":"2019-09-20","cited_by_count":178},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"2007.08668","title":"BRP-NAS: Prediction-based NAS using GCNs","created":"2020-07-16","cited_by_count":111},{"id":"1911.10695","title":"When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks","created":"2019-11-25","cited_by_count":87},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74},{"id":"1603.01670","title":"Network Morphism","created":"2016-03-05","cited_by_count":65},{"id":"2001.01233","title":"EcoNAS: Finding Proxies for Economical Neural Architecture Search","created":"2020-01-05","cited_by_count":61},{"id":"2008.03064","title":"Evaluating Efficient Performance Estimators of Neural Architectures","created":"2020-08-07","cited_by_count":55},{"id":"2103.05471","title":"Contrastive Neural Architecture Search with Neural Architecture Comparators","created":"2021-03-08","cited_by_count":34},{"id":"1906.03787","title":"Intriguing properties of adversarial training at scale","created":"2019-06-10","cited_by_count":33},{"id":"2111.13293","title":"KNAS: Green Neural Architecture Search","created":"2021-11-26","cited_by_count":33},{"id":"2005.06821","title":"A Semi-Supervised Assessor of Neural Architectures","created":"2020-05-14","cited_by_count":28},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28},{"id":"2012.06122","title":"DSRNA: Differentiable Search of Robust Neural Architectures","created":"2020-12-11","cited_by_count":27},{"id":"2007.08428","title":"On Adversarial Robustness: A Neural Architecture Search perspective","created":"2020-07-16","cited_by_count":22},{"id":"2009.00902","title":"Adversarially Robust Neural Architectures","created":"2020-09-02","cited_by_count":22},{"id":"2008.00698","title":"Anti-Bandit Neural Architecture Search for Model Defense","created":"2020-08-03","cited_by_count":16},{"id":"2108.06885","title":"Neural Architecture Dilation for Adversarial Robustness","created":"2021-08-16","cited_by_count":13}],"next_cursor":null}