{"list":"other","total":84,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2006.11239","title":"Denoising Diffusion Probabilistic Models","created":"2020-06-19","cited_by_count":21076},{"id":"2112.10752","title":"High-Resolution Image Synthesis with Latent Diffusion Models","created":"2021-12-20","cited_by_count":18863},{"id":"2010.02502","title":"Denoising Diffusion Implicit Models","created":"2020-10-06","cited_by_count":9781},{"id":"2011.13456","title":"Score-Based Generative Modeling through Stochastic Differential Equations","created":"2020-11-26","cited_by_count":9122},{"id":"2105.05233","title":"Diffusion Models Beat GANs on Image Synthesis","created":"2021-05-11","cited_by_count":8255},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1503.03585","title":"Deep Unsupervised Learning using Nonequilibrium Thermodynamics","created":"2015-03-12","cited_by_count":7058},{"id":"2204.06125","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","created":"2022-04-13","cited_by_count":6585},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1907.05600","title":"Generative Modeling by Estimating Gradients of the Data Distribution","created":"2019-07-12","cited_by_count":4101},{"id":"1606.08415","title":"Gaussian Error Linear Units (GELUs)","created":"2016-06-27","cited_by_count":3502},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"2206.00364","title":"Elucidating the Design Space of Diffusion-Based Generative Models","created":"2022-06-01","cited_by_count":3045},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1809.11096","title":"Large Scale GAN Training for High Fidelity Natural Image Synthesis","created":"2018-09-28","cited_by_count":2626},{"id":"1909.13719","title":"RandAugment: Practical automated data augmentation with a reduced search space","created":"2019-09-30","cited_by_count":2269},{"id":"2206.00927","title":"DPM-Solver: A Fast ODE Solver for Diffusion Probabilistic Model Sampling in Around 10 Steps","created":"2022-06-02","cited_by_count":1979},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1706.02677","title":"Accurate, Large Minibatch SGD: Training ImageNet in 1 Hour","created":"2017-06-08","cited_by_count":1492},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1803.05407","title":"Averaging Weights Leads to Wider Optima and Better Generalization","created":"2018-03-14","cited_by_count":1209},{"id":"2107.00630","title":"Variational Diffusion Models","created":"2021-07-01","cited_by_count":1153},{"id":"2006.09011","title":"Improved Techniques for Training Score-Based Generative Models","created":"2020-06-16","cited_by_count":1043},{"id":"1906.02629","title":"When Does Label Smoothing Help?","created":"2019-06-06","cited_by_count":988},{"id":"1812.11118","title":"Reconciling modern machine learning practice and the bias-variance trade-off","created":"2018-12-28","cited_by_count":927},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1901.09960","title":"Using Pre-Training Can Improve Model Robustness and Uncertainty","created":"2019-01-28","cited_by_count":373},{"id":"2201.06503","title":"Analytic-DPM: an Analytic Estimate of the Optimal Reverse Variance in Diffusion Probabilistic Models","created":"2022-01-17","cited_by_count":334},{"id":"1812.05720","title":"Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problem","created":"2018-12-13","cited_by_count":323},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"2006.04924","title":"A Self-supervised Approach for Adversarial Robustness","created":"2020-06-08","cited_by_count":180},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"1906.02337","title":"MNIST-C: A Robustness Benchmark for Computer Vision","created":"2019-06-05","cited_by_count":138},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"1804.00097","title":"Adversarial Attacks and Defences Competition","created":"2018-03-31","cited_by_count":96},{"id":"2110.12976","title":"Stable Neural ODE with Lyapunov-Stable Equilibrium Points for Defending Against Adversarial Attacks","created":"2021-10-25","cited_by_count":91},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79},{"id":"1909.00900","title":"Metric Learning for Adversarial Robustness","created":"2019-09-03","cited_by_count":77},{"id":"1906.00555","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","created":"2019-06-03","cited_by_count":76},{"id":"2206.09682","title":"SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehicles","created":"2022-06-20","cited_by_count":66},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56},{"id":"1905.13021","title":"Robustness to Adversarial Perturbations in Learning from Incomplete Data","created":"2019-05-24","cited_by_count":49},{"id":"2301.09879","title":"Data Augmentation Alone Can Improve Adversarial Training","created":"2023-01-24","cited_by_count":43},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42},{"id":"2004.08628","title":"Single-step Adversarial training with Dropout Scheduling","created":"2020-04-18","cited_by_count":41},{"id":"2006.03089","title":"Towards Understanding Fast Adversarial Training","created":"2020-06-04","cited_by_count":33},{"id":"2203.04412","title":"ImageNet-Patch: A Dataset for Benchmarking Machine Learning Robustness against Adversarial Patches","created":"2022-03-07","cited_by_count":27},{"id":"2302.04025","title":"WAT: Improve the Worst-class Robustness in Adversarial Training","created":"2023-02-08","cited_by_count":27},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21},{"id":"2210.16765","title":"Benchmarking Adversarial Patch Against Aerial Detection","created":"2022-10-30","cited_by_count":21},{"id":"1905.09591","title":"A Direct Approach to Robust Deep Learning Using Adversarial Networks","created":"2019-05-23","cited_by_count":18},{"id":"2212.05680","title":"REAP: A Large-Scale Realistic Adversarial Patch Benchmark","created":"2022-12-12","cited_by_count":18},{"id":"2112.00659","title":"Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselines","created":"2021-12-01","cited_by_count":17},{"id":"1911.06470","title":"Self-supervised Adversarial Training","created":"2019-11-15","cited_by_count":12},{"id":"1808.01976","title":"Adversarial Vision Challenge","created":"2018-08-06","cited_by_count":9},{"id":"2002.09632","title":"Using Single-Step Adversarial Training to Defend Iterative Adversarial Examples","created":"2020-02-22","cited_by_count":9},{"id":"2207.07797","title":"CARBEN: Composite Adversarial Robustness Benchmark","created":"2022-07-16","cited_by_count":5}],"next_cursor":null}