{"total":162,"rows":[{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38,"area":null},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2305.17476","title":"Toward Understanding Generative Data Augmentation","created":"2023-05-27","cited_by_count":25,"area":null},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21,"area":null},{"id":"2306.09844","title":"Wasserstein distributional robustness of neural networks","created":"2023-06-16","cited_by_count":16,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2306.11035","title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game","created":"2023-06-19","cited_by_count":13,"area":null},{"id":"2403.10073","title":"Revisiting Adversarial Training under Long-Tailed Distributions","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2407.12443","title":"Preventing Catastrophic Overfitting in Fast Adversarial Training: A Bi-level Optimization Perspective","created":"2024-07-17","cited_by_count":13,"area":null},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2410.08503","title":"Adversarial Training Can Provably Improve Robustness: Theoretical Analysis of Feature Learning Process Under Structured Data","created":"2024-10-11","cited_by_count":12,"area":null},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2307.07250","title":"Mitigating Adversarial Vulnerability through Causal Parameter Estimation by Adversarial Double Machine Learning","created":"2023-07-14","cited_by_count":11,"area":null},{"id":"2501.13273","title":"Enhancing Robust Fairness via Confusional Spectral Regularization","created":"2025-01-22","cited_by_count":11,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2303.12669","title":"An Extended Study of Human-like Behavior under Adversarial Training","created":"2023-03-22","cited_by_count":9,"area":null},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9,"area":null},{"id":"2310.18626","title":"Benchmark Generation Framework with Customizable Distortions for Image Classifier Robustness","created":"2023-10-28","cited_by_count":7,"area":null},{"id":"2403.17520","title":"Boosting Adversarial Training via Fisher-Rao Norm-based Regularization","created":"2024-03-26","cited_by_count":7,"area":null},{"id":"2407.10918","title":"PartImageNet++ Dataset: Scaling up Part-based Models for Robust Recognition","created":"2024-07-15","cited_by_count":7,"area":null},{"id":"2306.07197","title":"AROID: Improving Adversarial Robustness Through Online Instance-Wise Data Augmentation","created":"2023-06-12","cited_by_count":6,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2312.03286","title":"Indirect Gradient Matching for Adversarial Robust Distillation","created":"2023-12-06","cited_by_count":6,"area":null},{"id":"2403.11448","title":"Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM","created":"2024-03-18","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2411.02592","title":"Decoupled Data Augmentation for Improving Image Classification","created":"2024-10-29","cited_by_count":6,"area":null},{"id":"2306.09192","title":"DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers","created":"2023-06-15","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2311.17608","title":"Adversarial Robust Memory-Based Continual Learner","created":"2023-11-29","cited_by_count":5,"area":null},{"id":"2402.12187","title":"Adversarial Feature Alignment: Balancing Robustness and Accuracy in Deep Learning via Adversarial Training","created":"2024-02-19","cited_by_count":5,"area":null},{"id":"2406.04981","title":"The Price of Implicit Bias in Adversarially Robust Generalization","created":"2024-06-07","cited_by_count":5,"area":null},{"id":"2408.06079","title":"Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment","created":"2024-08-12","cited_by_count":5,"area":null},{"id":"2410.23142","title":"FAIR-TAT: Improving Model Fairness Using Targeted Adversarial Training","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2505.15174","title":"Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss","created":"2025-05-21","cited_by_count":5,"area":null},{"id":"2310.08177","title":"Improving Fast Minimum-Norm Attacks with Hyperparameter Optimization","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2401.03156","title":"Data-Dependent Stability Analysis of Adversarial Training","created":"2024-01-06","cited_by_count":4,"area":null},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2406.05532","title":"Exploring Adversarial Robustness of Deep State Space Models","created":"2024-06-08","cited_by_count":4,"area":null},{"id":"2410.04577","title":"Robustness Reprogramming for Representation Learning","created":"2024-10-06","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2410.16073","title":"On the Geometry of Regularization in Adversarial Training: High-Dimensional Asymptotics and Generalization Bounds","created":"2024-10-21","cited_by_count":4,"area":null},{"id":"2509.03733","title":"Differentiable Entropy Regularization: A Complexity-Aware Approach for Neural Optimization","created":"2025-09-03","cited_by_count":4,"area":null},{"id":"2305.04067","title":"The Best Defense is Attack: Repairing Semantics in Textual Adversarial Examples","created":"2023-05-06","cited_by_count":3,"area":null},{"id":"2307.11672","title":"Robust Feature Inference: A Test-time Defense Strategy using Spectral Projections","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2310.04539","title":"Generating Less Certain Adversarial Examples Improves Robust Generalization","created":"2023-10-06","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2403.05100","title":"Exploring the Adversarial Frontier: Quantifying Robustness via Adversarial Hypervolume","created":"2024-03-08","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2411.15210","title":"Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks","created":"2024-11-20","cited_by_count":3,"area":null},{"id":"2412.04245","title":"Intriguing Properties of Robust Classification","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2502.20562","title":"LISArD: Learning Image Similarity to Defend Against Gray-box Adversarial Attacks","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2511.09002","title":"Convergence and Stability Analysis of Self-Consuming Generative Models with Heterogeneous Human Curation","created":"2025-11-12","cited_by_count":3,"area":null},{"id":"2307.07167","title":"Vulnerability-Aware Instance Reweighting For Adversarial Training","created":"2023-07-14","cited_by_count":2,"area":null},{"id":"2309.01077","title":"Robust Adversarial Defense by Tensor Factorization","created":"2023-09-03","cited_by_count":2,"area":null},{"id":"2310.09891","title":"Towards Deep Learning Models Resistant to Transfer-based Adversarial Attacks via Data-centric Robust Learning","created":"2023-10-15","cited_by_count":2,"area":null},{"id":"2312.01260","title":"Rethinking PGD Attack: Is Sign Function Necessary?","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2405.16036","title":"Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness","created":"2024-05-25","cited_by_count":2,"area":null},{"id":"2406.12368","title":"MixDiff: Mixing Natural and Synthetic Images for Robust Self-Supervised Representations","created":"2024-06-18","cited_by_count":2,"area":null},{"id":"2406.13283","title":"Large-Scale Dataset Pruning in Adversarial Training through Data Importance Extrapolation","created":"2024-06-19","cited_by_count":2,"area":null},{"id":"2406.15104","title":"Deciphering the Definition of Adversarial Robustness for post-hoc OOD Detectors","created":"2024-06-21","cited_by_count":2,"area":null},{"id":"2409.17589","title":"Improving Fast Adversarial Training via Self-Knowledge Guidance","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2410.12671","title":"New Paradigm of Adversarial Training: Releasing Accuracy-Robustness Trade-Off via Dummy Class","created":"2024-10-16","cited_by_count":2,"area":null},{"id":"2410.21952","title":"On the Robustness of Adversarial Training Against Uncertainty Attacks","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2411.02871","title":"Enhancing Adversarial Robustness via Uncertainty-Aware Distributional Adversarial Training","created":"2024-11-05","cited_by_count":2,"area":null},{"id":"2412.20987","title":"RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2502.09110","title":"Pulling Back the Curtain: Unsupervised Adversarial Detection via Contrastive Auxiliary Networks","created":"2025-02-13","cited_by_count":2,"area":null},{"id":"2503.19347","title":"Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent","created":"2025-03-25","cited_by_count":2,"area":null},{"id":"2504.13548","title":"Beyond One-Hot Labels: Semantic Mixing for Model Calibration","created":"2025-04-18","cited_by_count":2,"area":null},{"id":"2505.22486","title":"Understanding Adversarial Training with Energy-based Models","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2506.09010","title":"Effective Data Pruning through Score Extrapolation","created":"2025-06-10","cited_by_count":2,"area":null},{"id":"2506.12454","title":"On the Existence of Consistent Adversarial Attacks in High-Dimensional Linear Classification","created":"2025-06-14","cited_by_count":2,"area":null},{"id":"2508.13309","title":"DASH: A Meta-Attack Framework for Synthesizing Effective and Stealthy Adversarial Examples","created":"2025-08-18","cited_by_count":2,"area":null},{"id":"2508.17680","title":"Robustness Feature Adapter for Efficient Adversarial Training","created":"2025-08-25","cited_by_count":2,"area":null},{"id":"2306.01762","title":"Rapid Plug-in Defenders","created":"2023-05-27","cited_by_count":1,"area":null},{"id":"2306.12582","title":"Adversarial Training with Generated Data in High-Dimensional Regression: An Asymptotic Study","created":"2023-06-21","cited_by_count":1,"area":null},{"id":"2306.16979","title":"Post-train Black-box Defense via Bayesian Boundary Correction","created":"2023-06-29","cited_by_count":1,"area":null},{"id":"2308.04137","title":"A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifiers","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2309.17348","title":"Intrinsic Biologically Plausible Adversarial Robustness","created":"2023-09-29","cited_by_count":1,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2310.19653","title":"A Note on Generalization in Variational Autoencoders: How Effective Is Synthetic Data & Overparameterization?","created":"2023-10-30","cited_by_count":1,"area":null},{"id":"2311.17607","title":"Topology-preserving Adversarial Training for Alleviating Natural Accuracy Degradation","created":"2023-11-29","cited_by_count":1,"area":null},{"id":"2402.06827","title":"RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations for Universal Robustness","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2405.06298","title":"PUMA: margin-based data pruning","created":"2024-05-10","cited_by_count":1,"area":null},{"id":"2406.03143","title":"ZeroPur: Succinct Training-Free Adversarial Purification","created":"2024-06-05","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2407.08678","title":"How to beat a Bayesian adversary","created":"2024-07-11","cited_by_count":1,"area":null},{"id":"2408.01977","title":"Label Augmentation for Neural Networks Robustness","created":"2024-08-04","cited_by_count":1,"area":null},{"id":"2410.03000","title":"Towards Generalized Certified Robustness with Multi-Norm Training","created":"2024-10-03","cited_by_count":1,"area":null}],"next_cursor":"100"}