{"total":208,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2305.15241","title":"Robust Classification via a Single Diffusion Model","created":"2023-05-24","cited_by_count":79,"area":"diffusion"},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2305.13948","title":"Decoupled Kullback-Leibler Divergence Loss","created":"2023-05-23","cited_by_count":58,"area":"distill"},{"id":"2403.01849","title":"One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models","created":"2024-03-04","cited_by_count":48,"area":"mllm"},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46,"area":null},{"id":"2407.09499","title":"Self-Consuming Generative Models with Curated Data Provably Optimize Human Preferences","created":"2024-06-12","cited_by_count":39,"area":"alignment"},{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38,"area":null},{"id":"2302.10586","title":"Diffusion Models and Semi-Supervised Learners Benefit Mutually with Few Labels","created":"2023-02-21","cited_by_count":37,"area":"diffusion"},{"id":"2305.13625","title":"DiffProtect: Generate Adversarial Examples with Diffusion Models for Facial Privacy Protection","created":"2023-05-23","cited_by_count":35,"area":"diffusion"},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2405.10529","title":"Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors","created":"2024-05-17","cited_by_count":27,"area":"mllm"},{"id":"2305.17476","title":"Toward Understanding Generative Data Augmentation","created":"2023-05-27","cited_by_count":25,"area":null},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2411.16308","title":"An End-to-End Robust Point Cloud Semantic Segmentation Network with Single-Step Conditional Diffusion Models","created":"2024-11-25","cited_by_count":23,"area":"diffusion"},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21,"area":null},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2303.08500","title":"The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models","created":"2023-03-15","cited_by_count":19,"area":"diffusion"},{"id":"2307.04333","title":"Enhancing Adversarial Robustness via Score-Based Optimization","created":"2023-07-10","cited_by_count":19,"area":"diffusion"},{"id":"2312.04802","title":"MimicDiffusion: Purifying Adversarial Perturbation via Mimicking Clean Diffusion Model","created":"2023-12-08","cited_by_count":18,"area":"diffusion"},{"id":"2306.09844","title":"Wasserstein distributional robustness of neural networks","created":"2023-06-16","cited_by_count":16,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2306.11035","title":"Adversarial Training Should Be Cast as a Non-Zero-Sum Game","created":"2023-06-19","cited_by_count":13,"area":null},{"id":"2403.10073","title":"Revisiting Adversarial Training under Long-Tailed Distributions","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2407.12443","title":"Preventing Catastrophic Overfitting in Fast Adversarial Training: A Bi-level Optimization Perspective","created":"2024-07-17","cited_by_count":13,"area":null},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12,"area":"mllm"},{"id":"2410.08503","title":"Adversarial Training Can Provably Improve Robustness: Theoretical Analysis of Feature Learning Process Under Structured Data","created":"2024-10-11","cited_by_count":12,"area":null},{"id":"2410.12307","title":"DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain","created":"2024-10-16","cited_by_count":12,"area":null},{"id":"2307.07250","title":"Mitigating Adversarial Vulnerability through Causal Parameter Estimation by Adversarial Double Machine Learning","created":"2023-07-14","cited_by_count":11,"area":null},{"id":"2501.13273","title":"Enhancing Robust Fairness via Confusional Spectral Regularization","created":"2025-01-22","cited_by_count":11,"area":null},{"id":"2406.18451","title":"Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers","created":"2024-06-26","cited_by_count":10,"area":null},{"id":"2303.12669","title":"An Extended Study of Human-like Behavior under Adversarial Training","created":"2023-03-22","cited_by_count":9,"area":null},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9,"area":null},{"id":"2403.16067","title":"Adversarial Guided Diffusion Models for Adversarial Purification","created":"2024-03-24","cited_by_count":8,"area":"diffusion"},{"id":"2404.14309","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","created":"2024-04-22","cited_by_count":8,"area":"diffusion"},{"id":"2305.10388","title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models","created":"2023-05-17","cited_by_count":7,"area":"diffusion"},{"id":"2310.18626","title":"Benchmark Generation Framework with Customizable Distortions for Image Classifier Robustness","created":"2023-10-28","cited_by_count":7,"area":null},{"id":"2403.17520","title":"Boosting Adversarial Training via Fisher-Rao Norm-based Regularization","created":"2024-03-26","cited_by_count":7,"area":null},{"id":"2407.10918","title":"PartImageNet++ Dataset: Scaling up Part-based Models for Robust Recognition","created":"2024-07-15","cited_by_count":7,"area":null},{"id":"2409.08255","title":"LoRID: Low-Rank Iterative Diffusion for Adversarial Purification","created":"2024-09-12","cited_by_count":7,"area":"diffusion"},{"id":"2306.07197","title":"AROID: Improving Adversarial Robustness Through Online Instance-Wise Data Augmentation","created":"2023-06-12","cited_by_count":6,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2312.03286","title":"Indirect Gradient Matching for Adversarial Robust Distillation","created":"2023-12-06","cited_by_count":6,"area":null},{"id":"2403.11448","title":"Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM","created":"2024-03-18","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2411.02592","title":"Decoupled Data Augmentation for Improving Image Classification","created":"2024-10-29","cited_by_count":6,"area":null},{"id":"2411.16598","title":"DiffBreak: Is Diffusion-Based Purification Robust?","created":"2024-11-25","cited_by_count":6,"area":"diffusion"},{"id":"2503.08038","title":"Generalized Kullback-Leibler Divergence Loss","created":"2025-03-11","cited_by_count":6,"area":"distill"},{"id":"2306.09192","title":"DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers","created":"2023-06-15","cited_by_count":5,"area":null},{"id":"2310.02480","title":"Splitting the Difference on Adversarial Training","created":"2023-10-03","cited_by_count":5,"area":null},{"id":"2311.17608","title":"Adversarial Robust Memory-Based Continual Learner","created":"2023-11-29","cited_by_count":5,"area":null},{"id":"2402.12187","title":"Adversarial Feature Alignment: Balancing Robustness and Accuracy in Deep Learning via Adversarial Training","created":"2024-02-19","cited_by_count":5,"area":null},{"id":"2406.04981","title":"The Price of Implicit Bias in Adversarially Robust Generalization","created":"2024-06-07","cited_by_count":5,"area":null},{"id":"2407.11121","title":"Towards Adversarially Robust Vision-Language Models: Insights from Design Choices and Prompt Formatting Techniques","created":"2024-07-15","cited_by_count":5,"area":"mllm"},{"id":"2408.05900","title":"Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information","created":"2024-08-12","cited_by_count":5,"area":"diffusion"},{"id":"2408.06079","title":"Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment","created":"2024-08-12","cited_by_count":5,"area":null},{"id":"2410.23142","title":"FAIR-TAT: Improving Model Fairness Using Targeted Adversarial Training","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2505.15174","title":"Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss","created":"2025-05-21","cited_by_count":5,"area":null},{"id":"2510.15975","title":"Generative AI for Biosciences: Emerging Threats and Roadmap to Biosecurity","created":"2025-10-13","cited_by_count":5,"area":"safety"},{"id":"2310.08177","title":"Improving Fast Minimum-Norm Attacks with Hyperparameter Optimization","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2312.09481","title":"Continual Adversarial Defense","created":"2023-12-15","cited_by_count":4,"area":null},{"id":"2401.03156","title":"Data-Dependent Stability Analysis of Adversarial Training","created":"2024-01-06","cited_by_count":4,"area":null},{"id":"2401.12578","title":"ToDA: Target-oriented Diffusion Attacker against Recommendation System","created":"2024-01-23","cited_by_count":4,"area":"diffusion"},{"id":"2405.05075","title":"Sparse-PGD: A Unified Framework for Sparse Adversarial Perturbations Generation","created":"2024-05-08","cited_by_count":4,"area":null},{"id":"2406.05532","title":"Exploring Adversarial Robustness of Deep State Space Models","created":"2024-06-08","cited_by_count":4,"area":null},{"id":"2410.04577","title":"Robustness Reprogramming for Representation Learning","created":"2024-10-06","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2410.16073","title":"On the Geometry of Regularization in Adversarial Training: High-Dimensional Asymptotics and Generalization Bounds","created":"2024-10-21","cited_by_count":4,"area":null},{"id":"2410.23091","title":"CausalDiff: Causality-Inspired Disentanglement via Diffusion Model for Adversarial Defense","created":"2024-10-30","cited_by_count":4,"area":"diffusion"},{"id":"2412.09910","title":"Prompt2Perturb (P2P): Text-Guided Diffusion-Based Adversarial Attacks on Breast Ultrasound Images","created":"2024-12-13","cited_by_count":4,"area":"diffusion"},{"id":"2509.03733","title":"Differentiable Entropy Regularization: A Complexity-Aware Approach for Neural Optimization","created":"2025-09-03","cited_by_count":4,"area":null},{"id":"2302.10688","title":"On Calibrating Diffusion Probabilistic Models","created":"2023-02-21","cited_by_count":3,"area":"diffusion"},{"id":"2305.04067","title":"The Best Defense is Attack: Repairing Semantics in Textual Adversarial Examples","created":"2023-05-06","cited_by_count":3,"area":null},{"id":"2307.11672","title":"Robust Feature Inference: A Test-time Defense Strategy using Spectral Projections","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2310.04539","title":"Generating Less Certain Adversarial Examples Improves Robust Generalization","created":"2023-10-06","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2403.05100","title":"Exploring the Adversarial Frontier: Quantifying Robustness via Adversarial Hypervolume","created":"2024-03-08","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2411.15210","title":"Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks","created":"2024-11-20","cited_by_count":3,"area":null},{"id":"2412.04245","title":"Intriguing Properties of Robust Classification","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2502.17099","title":"Improved Diffusion-based Generative Model with Better Adversarial Robustness","created":"2025-02-24","cited_by_count":3,"area":"diffusion"},{"id":"2502.20562","title":"LISArD: Learning Image Similarity to Defend Against Gray-box Adversarial Attacks","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2511.09002","title":"Convergence and Stability Analysis of Self-Consuming Generative Models with Heterogeneous Human Curation","created":"2025-11-12","cited_by_count":3,"area":null},{"id":"2307.07167","title":"Vulnerability-Aware Instance Reweighting For Adversarial Training","created":"2023-07-14","cited_by_count":2,"area":null},{"id":"2309.01077","title":"Robust Adversarial Defense by Tensor Factorization","created":"2023-09-03","cited_by_count":2,"area":null},{"id":"2310.09891","title":"Towards Deep Learning Models Resistant to Transfer-based Adversarial Attacks via Data-centric Robust Learning","created":"2023-10-15","cited_by_count":2,"area":null},{"id":"2312.01260","title":"Rethinking PGD Attack: Is Sign Function Necessary?","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2405.16036","title":"Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness","created":"2024-05-25","cited_by_count":2,"area":null},{"id":"2406.12368","title":"MixDiff: Mixing Natural and Synthetic Images for Robust Self-Supervised Representations","created":"2024-06-18","cited_by_count":2,"area":null},{"id":"2406.13283","title":"Large-Scale Dataset Pruning in Adversarial Training through Data Importance Extrapolation","created":"2024-06-19","cited_by_count":2,"area":null},{"id":"2406.15104","title":"Deciphering the Definition of Adversarial Robustness for post-hoc OOD Detectors","created":"2024-06-21","cited_by_count":2,"area":null},{"id":"2409.17589","title":"Improving Fast Adversarial Training via Self-Knowledge Guidance","created":"2024-09-26","cited_by_count":2,"area":null}],"next_cursor":"100"}