{"total":31,"rows":[{"id":"2310.00116","title":"Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization","created":"2023-09-29","cited_by_count":21,"area":null},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9,"area":null},{"id":"2401.11618","title":"Efficient local linearity regularization to overcome catastrophic overfitting","created":"2024-01-21","cited_by_count":8,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2309.03426","title":"Adapting Static Fairness to Sequential Decision-Making: Bias Mitigation Strategies towards Equal Long-term Benefit Rate","created":"2023-09-07","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2403.11448","title":"Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM","created":"2024-03-18","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2406.05119","title":"Compositional Curvature Bounds for Deep Neural Networks","created":"2024-06-07","cited_by_count":4,"area":null},{"id":"2305.04067","title":"The Best Defense is Attack: Repairing Semantics in Textual Adversarial Examples","created":"2023-05-06","cited_by_count":3,"area":null},{"id":"2310.04539","title":"Generating Less Certain Adversarial Examples Improves Robust Generalization","created":"2023-10-06","cited_by_count":3,"area":null},{"id":"2410.01617","title":"On Using Certified Training towards Empirical Robustness","created":"2024-10-02","cited_by_count":3,"area":null},{"id":"2405.17678","title":"TIMA: Text-Image Mutual Awareness for Balancing Zero-Shot Adversarial Robustness and Generalization Ability","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2410.21952","title":"On the Robustness of Adversarial Training Against Uncertainty Attacks","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2306.01762","title":"Rapid Plug-in Defenders","created":"2023-05-27","cited_by_count":1,"area":null},{"id":"2306.16979","title":"Post-train Black-box Defense via Bayesian Boundary Correction","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2405.14033","title":"Adversarial Training of Two-Layer Polynomial and ReLU Activation Networks via Convex Optimization","created":"2024-05-22","cited_by_count":1,"area":null},{"id":"2406.03143","title":"ZeroPur: Succinct Training-Free Adversarial Purification","created":"2024-06-05","cited_by_count":1,"area":null},{"id":"2307.13078","title":"Adaptive Certified Training: Towards Better Accuracy-Robustness Tradeoffs","created":"2023-07-24","cited_by_count":0,"area":null},{"id":"2310.14561","title":"F$^2$AT: Feature-Focusing Adversarial Training via Disentanglement of Natural and Perturbed Patterns","created":"2023-10-23","cited_by_count":0,"area":null},{"id":"2508.18019","title":"Does simple trump complex? Comparing strategies for adversarial robustness in DNNs","created":"2025-08-25","cited_by_count":0,"area":null},{"id":"2510.10000","title":"Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networks","created":"2025-10-11","cited_by_count":0,"area":null},{"id":"2601.14505","title":"Uncovering and Understanding FPR Manipulation Attack in Industrial IoT Networks","created":"2026-01-20","cited_by_count":0,"area":null},{"id":"2603.06650","title":"Margin-Consistent Deep Subtyping of Invasive Lung Adenocarcinoma via Perturbation Fidelity in Whole-Slide Image Analysis","created":"2026-02-27","cited_by_count":0,"area":null},{"id":"2607.12545","title":"VanillaBench: The Hidden Accuracy Cost of Adversarial Robustness","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2607.19855","title":"Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2610.15359","title":"Adversarial Detection for Pre-trained Classifiers via Lipschitz-Margin Analysis with Certification","created":"2026-10-11","cited_by_count":0,"area":null}],"next_cursor":null}