{"list":"other","total":53,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1706.08947","title":"Exploring Generalization in Deep Learning","created":"2017-06-27","cited_by_count":600},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"2006.07710","title":"The Pitfalls of Simplicity Bias in Neural Networks","created":"2020-06-13","cited_by_count":351},{"id":"1906.05890","title":"Gradient Descent Maximizes the Margin of Homogeneous Neural Networks","created":"2019-06-13","cited_by_count":320},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1905.13545","title":"High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks","created":"2019-05-28","cited_by_count":310},{"id":"1801.01944","title":"Audio Adversarial Examples: Targeted Attacks on Speech-to-Text","created":"2018-01-05","cited_by_count":274},{"id":"2002.04486","title":"Implicit Bias of Gradient Descent for Wide Two-layer Neural Networks Trained with the Logistic Loss","created":"2020-02-11","cited_by_count":268},{"id":"2006.06657","title":"Directional convergence and alignment in deep learning","created":"2020-06-11","cited_by_count":178},{"id":"1910.14667","title":"Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors","created":"2019-10-31","cited_by_count":155},{"id":"2105.12806","title":"A Universal Law of Robustness via Isoperimetry","created":"2021-05-26","cited_by_count":151},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"2005.10190","title":"Feature Purification: How Adversarial Training Performs Robust Deep Learning","created":"2020-05-20","cited_by_count":107},{"id":"2202.06526","title":"Benign Overfitting in Two-layer Convolutional Neural Networks","created":"2022-02-14","cited_by_count":91},{"id":"2208.12591","title":"On the Implicit Bias in Deep-Learning Algorithms","created":"2022-08-26","cited_by_count":86},{"id":"2110.13905","title":"Gradient Descent on Two-layer Nets: Margin Maximization and Simplicity Bias","created":"2021-10-26","cited_by_count":83},{"id":"2004.12019","title":"Finite-sample Analysis of Interpolating Linear Classifiers in the Overparameterized Regime","created":"2020-04-25","cited_by_count":81},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"1802.08686","title":"Adversarial vulnerability for any classifier","created":"2018-02-23","cited_by_count":78},{"id":"2202.05928","title":"Benign Overfitting without Linearity: Neural Network Classifiers Trained by Gradient Descent for Noisy Linear Data","created":"2022-02-11","cited_by_count":74},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59},{"id":"2006.14599","title":"The Surprising Simplicity of the Early-Time Learning Dynamics of Neural Networks","created":"2020-06-25","cited_by_count":58},{"id":"2009.14444","title":"A law of robustness for two-layers neural networks","created":"2020-09-30","cited_by_count":55},{"id":"2210.07082","title":"Implicit Bias in Leaky ReLU Networks Trained on High-Dimensional Data","created":"2022-10-13","cited_by_count":46},{"id":"1811.00525","title":"On the Geometry of Adversarial Examples","created":"2018-11-01","cited_by_count":43},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41},{"id":"2110.02732","title":"On Margin Maximization in Linear and ReLU Networks","created":"2021-10-06","cited_by_count":34},{"id":"1901.10861","title":"A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distance","created":"2019-01-30","cited_by_count":32},{"id":"1911.01544","title":"The generalization error of max-margin linear classifiers: Benign overfitting and high dimensional asymptotics in the overparametrized regime","created":"2019-11-05","cited_by_count":28},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27},{"id":"2104.03863","title":"A single gradient step finds adversarial examples on random two-layers neural networks","created":"2021-04-08","cited_by_count":26},{"id":"2106.12611","title":"Adversarial Examples in Multi-Layer Random ReLU Networks","created":"2021-06-23","cited_by_count":26},{"id":"2210.03820","title":"The Asymmetric Maximum Margin Bias of Quasi-Homogeneous Neural Networks","created":"2022-10-07","cited_by_count":25},{"id":"2205.09072","title":"On the Effective Number of Linear Regions in Shallow Univariate ReLU Networks: Convergence Guarantees and Implicit Bias","created":"2022-05-18","cited_by_count":21},{"id":"2101.02533","title":"Towards Understanding Learning in Neural Networks with Linear Teachers","created":"2021-01-07","cited_by_count":19},{"id":"2103.02695","title":"Shift Invariance Can Reduce Adversarial Robustness","created":"2021-03-03","cited_by_count":16},{"id":"2203.17209","title":"Adversarial Examples in Random Neural Networks with General Activations","created":"2022-03-31","cited_by_count":13},{"id":"2203.11864","title":"On the (Non-)Robustness of Two-Layer Neural Networks in Different Learning Regimes","created":"2022-03-22","cited_by_count":11},{"id":"2207.00411","title":"Adversarial Robustness is at Odds with Lazy Training","created":"2022-06-18","cited_by_count":6}],"next_cursor":null}