{"total":85,"rows":[{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79,"area":null},{"id":"2501.18841","title":"Trading Inference-Time Compute for Adversarial Robustness","created":"2025-01-31","cited_by_count":61,"area":"lr"},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33,"area":null},{"id":"2408.00315","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","created":"2024-08-01","cited_by_count":24,"area":"diffusion"},{"id":"2305.06024","title":"A Survey on the Robustness of Computer Vision Models against Common Corruptions","created":"2023-05-10","cited_by_count":21,"area":null},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21,"area":null},{"id":"2404.01509","title":"Can Biases in ImageNet Models Explain Generalization?","created":"2024-04-01","cited_by_count":20,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2502.18176","title":"CLIPure: Purification in Latent Space via CLIP for Adversarially Robust Zero-Shot Classification","created":"2025-02-25","cited_by_count":13,"area":null},{"id":"2305.17438","title":"On the Importance of Backbone to the Adversarial Robustness of Object Detectors","created":"2023-05-27","cited_by_count":12,"area":null},{"id":"2306.12941","title":"Towards Reliable Evaluation and Fast Training of Robust Semantic Segmentation Models","created":"2023-06-22","cited_by_count":12,"area":null},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12,"area":"mllm"},{"id":"2412.02837","title":"$\\texttt{BATCLIP}$: Bimodal Online Test-Time Adaptation for CLIP","created":"2024-12-03","cited_by_count":11,"area":null},{"id":"2312.05716","title":"Initialization Matters for Adversarial Transfer Learning","created":"2023-12-10","cited_by_count":10,"area":null},{"id":"2503.09124","title":"AdvAD: Exploring Non-Parametric Diffusion for Imperceptible Adversarial Attacks","created":"2025-03-12","cited_by_count":8,"area":null},{"id":"2405.16181","title":"Boosting Adversarial Transferability with Low-Cost Optimization via Maximin Expected Flatness","created":"2024-05-25","cited_by_count":7,"area":null},{"id":"2407.10918","title":"PartImageNet++ Dataset: Scaling up Part-based Models for Robust Recognition","created":"2024-07-15","cited_by_count":7,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2409.20139","title":"Characterizing Model Robustness via Natural Input Gradients","created":"2024-09-30","cited_by_count":6,"area":null},{"id":"2410.15042","title":"Adversarial Training: A Survey","created":"2024-10-19","cited_by_count":6,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2310.12793","title":"OODRobustBench: a Benchmark and Large-Scale Analysis of Adversarial Robustness under Distribution Shift","created":"2023-10-19","cited_by_count":4,"area":null},{"id":"2402.17390","title":"Robustness-Congruent Adversarial Training for Secure Machine Learning Model Updates","created":"2024-02-27","cited_by_count":4,"area":null},{"id":"2410.12607","title":"Low-Rank Adversarial PGD Attack","created":"2024-10-16","cited_by_count":4,"area":null},{"id":"2307.11334","title":"Improving Transferability of Adversarial Examples via Bayesian Attacks","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2404.08285","title":"A Survey of Neural Network Robustness Assessment in Image Recognition","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2411.15210","title":"Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks","created":"2024-11-20","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2505.14042","title":"Adversarially Pretrained Transformers May Be Universally Robust In-Context Learners","created":"2025-05-20","cited_by_count":3,"area":null},{"id":"2507.09111","title":"RoHOI: Robustness Benchmark for Human-Object Interaction Detection","created":"2025-07-12","cited_by_count":3,"area":null},{"id":"2604.11962","title":"The Linear Centroids Hypothesis: Features as Directions Learned by Local Experts","created":"2026-04-13","cited_by_count":3,"area":null},{"id":"2309.01620","title":"Hindering Adversarial Attacks with Multiple Encrypted Patch Embeddings","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2402.19401","title":"Assessing Visually-Continuous Corruption Robustness of Neural Networks Relative to Human Performance","created":"2024-02-29","cited_by_count":2,"area":null},{"id":"2406.15104","title":"Deciphering the Definition of Adversarial Robustness for post-hoc OOD Detectors","created":"2024-06-21","cited_by_count":2,"area":null},{"id":"2407.11537","title":"AEMIM: Adversarial Examples Meet Masked Image Modeling","created":"2024-07-16","cited_by_count":2,"area":null},{"id":"2410.21952","title":"On the Robustness of Adversarial Training Against Uncertainty Attacks","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2412.10353","title":"Robust image classification with multi-modal large language models","created":"2024-12-13","cited_by_count":2,"area":"mllm"},{"id":"2412.11145","title":"The Superalignment of Superhuman Intelligence with Large Language Models","created":"2024-12-15","cited_by_count":2,"area":"mllm"},{"id":"2412.20987","title":"RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2503.19347","title":"Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent","created":"2025-03-25","cited_by_count":2,"area":null},{"id":"2508.16225","title":"An Investigation of Visual Foundation Models Robustness","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2508.17680","title":"Robustness Feature Adapter for Efficient Adversarial Training","created":"2025-08-25","cited_by_count":2,"area":null},{"id":"2308.04137","title":"A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifiers","created":"2023-08-08","cited_by_count":1,"area":null},{"id":"2311.16577","title":"Efficient Key-Based Adversarial Defense for ImageNet by Using Pre-trained Model","created":"2023-11-28","cited_by_count":1,"area":null},{"id":"2401.06637","title":"Adversarial Examples are Misaligned in Diffusion Model Manifolds","created":"2024-01-12","cited_by_count":1,"area":"diffusion"},{"id":"2405.15971","title":"Robust width: A lightweight and certifiable adversarial defense","created":"2024-05-24","cited_by_count":1,"area":null},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2411.16326","title":"Brain-like emergent properties in deep networks: impact of network architecture, datasets and training","created":"2024-11-25","cited_by_count":1,"area":null},{"id":"2502.20861","title":"MESC-3D:Mining Effective Semantic Cues for 3D Reconstruction from a Single Image","created":"2025-02-28","cited_by_count":1,"area":null},{"id":"2503.17110","title":"Beyond Accuracy: What Matters in Designing Well-Behaved Image Classification Models?","created":"2025-03-21","cited_by_count":1,"area":null},{"id":"2504.05830","title":"Human Activity Recognition using RGB-Event based Sensors: A Multi-modal Heat Conduction Model and A Benchmark Dataset","created":"2025-04-08","cited_by_count":1,"area":null},{"id":"2505.07005","title":"Explainable AI the Latest Advancements and New Trends","created":"2025-05-11","cited_by_count":1,"area":null},{"id":"2509.14633","title":"CUFG: Curriculum Unlearning Guided by the Forgetting Gradient","created":"2025-09-18","cited_by_count":1,"area":"safety"},{"id":"2510.16637","title":"A Versatile Framework for Designing Group-Sparse Adversarial Attacks","created":"2025-10-18","cited_by_count":1,"area":null},{"id":"2511.01724","title":"PRBench: A Standardized Probabilistic Robustness Benchmark","created":"2025-11-03","cited_by_count":1,"area":null},{"id":"2601.17536","title":"OTI: A Model-free and Visually Interpretable Measure of Image Attackability","created":"2026-01-24","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2603.26984","title":"A Provable Energy-Guided Test-Time Defense Boosting Adversarial Robustness of Large Vision-Language Models","created":"2026-03-27","cited_by_count":1,"area":"mllm"},{"id":"2407.08806","title":"HO-FMN: Hyperparameter Optimization for Fast Minimum-Norm Attacks","created":"2024-07-11","cited_by_count":0,"area":null},{"id":"2408.03972","title":"Enhancing Output Diversity Improves Conjugate Gradient-based Adversarial Attacks","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2501.18098","title":"Disentangling Safe and Unsafe Corruptions via Anisotropy and Locality","created":"2025-01-30","cited_by_count":0,"area":null},{"id":"2504.05483","title":"Secure Diagnostics: Adversarial Robustness Meets Clinical Interpretability","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2504.17655","title":"Aerial Image Classification in Scarce and Unconstrained Environments via Conformal Prediction","created":"2025-04-24","cited_by_count":0,"area":null},{"id":"2506.17040","title":"Stretching Beyond the Obvious: A Gradient-Free Framework to Unveil the Hidden Landscape of Visual Invariance","created":"2025-06-20","cited_by_count":0,"area":null},{"id":"2508.05489","title":"Keep It Real: Challenges in Attacking Compression-Based Adversarial Purification","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2509.02476","title":"Perturbing the Derivative: Wild Refitting for Model-Free Evaluation of Machine Learning Models under Bregman Losses","created":"2025-09-02","cited_by_count":0,"area":null},{"id":"2509.23325","title":"Robust Fine-Tuning from Non-Robust Pretrained Models: Mitigating Suboptimal Transfer With Epsilon-Scheduling","created":"2025-09-27","cited_by_count":0,"area":null},{"id":"2510.10000","title":"Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networks","created":"2025-10-11","cited_by_count":0,"area":null},{"id":"2510.18591","title":"Robustness Verification of Graph Neural Networks Via Lightweight Satisfiability Testing","created":"2025-10-21","cited_by_count":0,"area":null},{"id":"2511.09088","title":"Improving Sustainability of Adversarial Examples in Class-Incremental Learning","created":"2025-11-12","cited_by_count":0,"area":null},{"id":"2511.11993","title":"Dynamic Parameter Optimization for Highly Transferable Transformation-Based Attacks","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2512.02062","title":"Superpixel Attack: Enhancing Black-box Adversarial Attack with Image-driven Division Areas","created":"2025-11-29","cited_by_count":0,"area":null},{"id":"2512.03014","title":"Instant Video Models: Universal Adapters for Stabilizing Image-Based Networks","created":"2025-12-02","cited_by_count":0,"area":null},{"id":"2601.01454","title":"PartImageNet++ Dataset: Enhancing Visual Models with High-Quality Part Annotations","created":"2026-01-04","cited_by_count":0,"area":null},{"id":"2604.24993","title":"Laplace-Bridged Randomized Smoothing for Fast Certified Robustness","created":"2026-04-27","cited_by_count":0,"area":null},{"id":"2605.11203","title":"How Far Does a Shared Linear Map Go? Probing Feature-Space Manipulability for Image Editing","created":"2026-05-11","cited_by_count":0,"area":null},{"id":"2606.02876","title":"RRISE: Robust Radius Inference via a Surrogate Estimator","created":"2026-06-01","cited_by_count":0,"area":null},{"id":"2606.03713","title":"Investigating Adversarial Robustness of Multi-modal Large Language Models","created":"2026-06-02","cited_by_count":0,"area":"mllm"},{"id":"2606.22516","title":"The Scissors Effect: When Resize-Based Input Diversity Helps or Hurts Transfer Attacks","created":"2026-06-21","cited_by_count":0,"area":null},{"id":"2608.04442","title":"Robustness Emerges Early in Training Dynamics, but Is Not Preserved","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.29005","title":"A Degradation-Tolerance Benchmark for Camera-Only End-to-End Driving","created":"2026-08-29","cited_by_count":0,"area":"driving"}],"next_cursor":null}