{"list":"other","total":120,"rows":[{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1610.02136","title":"A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networks","created":"2016-10-07","cited_by_count":2385},{"id":"1905.02244","title":"Searching for MobileNetV3","created":"2019-05-06","cited_by_count":1994},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1706.03825","title":"SmoothGrad: removing noise by adding noise","created":"2017-06-12","cited_by_count":1109},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1806.02371","title":"Adversarial Attack on Graph Structured Data","created":"2018-06-06","cited_by_count":301},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"2004.11138","title":"The Creation and Detection of Deepfakes: A Survey","created":"2020-04-23","cited_by_count":247},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1901.08150","title":"Hypergraph Convolution and Hypergraph Attention","created":"2019-01-23","cited_by_count":228},{"id":"1608.00853","title":"A study of the effect of JPG compression on adversarial images","created":"2016-08-02","cited_by_count":197},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1901.04407","title":"Self-Driving Cars: A Survey","created":"2019-01-14","cited_by_count":148},{"id":"1412.5068","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","created":"2014-12-11","cited_by_count":146},{"id":"2006.15429","title":"Understanding Gradient Clipping in Private SGD: A Geometric Perspective","created":"2020-06-27","cited_by_count":142},{"id":"1808.01688","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","created":"2018-08-05","cited_by_count":135},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1811.09310","title":"Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack","created":"2018-11-22","cited_by_count":125},{"id":"1803.05787","title":"Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples","created":"2018-03-14","cited_by_count":99},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"1902.08226","title":"Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure","created":"2019-02-20","cited_by_count":93},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93},{"id":"1605.07262","title":"Measuring Neural Net Robustness with Constraints","created":"2016-05-24","cited_by_count":90},{"id":"2004.15015","title":"Imitation Attacks and Defenses for Black-box Machine Translation Systems","created":"2020-04-30","cited_by_count":81},{"id":"1905.04172","title":"On the Connection Between Adversarial Robustness and Saliency Map Interpretability","created":"2019-05-10","cited_by_count":80},{"id":"2004.00622","title":"Evading Deepfake-Image Detectors with White- and Black-Box Attacks","created":"2020-04-01","cited_by_count":80},{"id":"2004.05790","title":"Towards Transferable Adversarial Attack against Deep Face Recognition","created":"2020-04-13","cited_by_count":80},{"id":"2108.07969","title":"Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better","created":"2021-08-18","cited_by_count":79},{"id":"1909.00900","title":"Metric Learning for Adversarial Robustness","created":"2019-09-03","cited_by_count":77},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71},{"id":"1909.09034","title":"Training Robust Deep Neural Networks via Adversarial Noise Propagation","created":"2019-09-19","cited_by_count":62},{"id":"1707.05474","title":"APE-GAN: Adversarial Perturbation Elimination with GAN","created":"2017-07-18","cited_by_count":57},{"id":"2207.04718","title":"Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patches","created":"2022-07-11","cited_by_count":57},{"id":"1912.11969","title":"Efficient Adversarial Training with Transferable Adversarial Examples","created":"2019-12-27","cited_by_count":56},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56},{"id":"2004.13825","title":"Scalable Attack on Graph Data by Injecting Vicious Nodes","created":"2020-04-22","cited_by_count":50},{"id":"1811.10716","title":"Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attacks","created":"2018-11-26","cited_by_count":48},{"id":"2001.06325","title":"Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet","created":"2020-01-16","cited_by_count":45},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44},{"id":"2112.04840","title":"Knowledge Distillation for Object Detection via Rank Mimicking and Prediction-guided Feature Imitation","created":"2021-12-09","cited_by_count":40},{"id":"2009.03488","title":"Adversarial Attack on Large Scale Graph","created":"2020-09-08","cited_by_count":39},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38},{"id":"2103.09776","title":"ALADIN: All Layer Adaptive Instance Normalization for Fine-grained Style Similarity","created":"2021-03-17","cited_by_count":34},{"id":"1904.01209","title":"Fence GAN: Towards Better Anomaly Detection","created":"2019-04-02","cited_by_count":32},{"id":"2107.13335","title":"WaveCNet: Wavelet Integrated CNNs to Suppress Aliasing Effect for Noise-Robust Image Classification","created":"2021-07-28","cited_by_count":29},{"id":"2005.05321","title":"Channel-Aware Adversarial Attacks Against Deep Learning-Based Wireless Signal Classifiers","created":"2020-05-11","cited_by_count":28},{"id":"2103.11576","title":"Grey-box Adversarial Attack And Defence For Sentiment Classification","created":"2021-03-22","cited_by_count":28},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28},{"id":"2006.06520","title":"Achieving robustness in classification using optimal transport with hinge regularization","created":"2020-06-11","cited_by_count":27},{"id":"2005.07519","title":"Evaluating and Improving Adversarial Robustness of Machine Learning-Based Network Intrusion Detectors","created":"2020-05-15","cited_by_count":26},{"id":"1903.08778","title":"Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes","created":"2019-03-20","cited_by_count":25},{"id":"2103.14938","title":"IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Tracking","created":"2021-03-27","cited_by_count":25},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25},{"id":"2104.09284","title":"LAFEAT: Piercing Through Adversarial Defenses with Latent Features","created":"2021-04-19","cited_by_count":24},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24},{"id":"2207.08089","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","created":"2022-07-17","cited_by_count":24},{"id":"2103.10919","title":"Robustness via Cross-Domain Ensembles","created":"2021-03-19","cited_by_count":23},{"id":"2006.07421","title":"Defending against GAN-based Deepfake Attacks via Transformation-aware Adversarial Faces","created":"2020-06-12","cited_by_count":21},{"id":"2106.15739","title":"On the Periodic Behavior of Neural Network Training with Batch Normalization and Weight Decay","created":"2021-06-29","cited_by_count":20},{"id":"2109.02765","title":"Robustness and Generalization via Generative Adversarial Training","created":"2021-09-06","cited_by_count":20},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17},{"id":"1912.07748","title":"MimicGAN: Robust Projection onto Image Manifolds with Corruption Mimicking","created":"2019-12-16","cited_by_count":16},{"id":"2001.11704","title":"Boosting Simple Learners","created":"2020-01-31","cited_by_count":16},{"id":"2105.06725","title":"Meta-Inductive Node Classification across Graphs","created":"2021-05-14","cited_by_count":16},{"id":"2106.03785","title":"Generative Adversarial Networks: A Survey Towards Private and Secure Applications","created":"2021-06-07","cited_by_count":15},{"id":"2107.04228","title":"Activated Gradients for Deep Neural Networks","created":"2021-07-09","cited_by_count":14},{"id":"2010.07849","title":"A Hamiltonian Monte Carlo Method for Probabilistic Adversarial Attack and Learning","created":"2020-10-15","cited_by_count":13},{"id":"2002.09565","title":"Adversarial Attacks on Machine Learning Systems for High-Frequency Trading","created":"2020-02-21","cited_by_count":11},{"id":"2003.01261","title":"Adversarial Network Traffic: Towards Evaluating the Robustness of Deep Learning-Based Network Traffic Classification","created":"2020-03-03","cited_by_count":11},{"id":"2103.02152","title":"Group-wise Inhibition based Feature Regularization for Robust Classification","created":"2021-03-03","cited_by_count":11},{"id":"1905.03434","title":"ROSA: Robust Salient Object Detection against Adversarial Attacks","created":"2019-05-09","cited_by_count":10},{"id":"1906.07407","title":"TitAnt: Online Real-time Transaction Fraud Detection in Ant Financial","created":"2019-06-18","cited_by_count":10},{"id":"2105.12419","title":"Adversarial Attack Framework on Graph Embedding Models with Limited Knowledge","created":"2021-05-26","cited_by_count":10},{"id":"2108.06017","title":"AGKD-BML: Defense Against Adversarial Attack by Attention Guided Knowledge Distillation and Bi-directional Metric Learning","created":"2021-08-13","cited_by_count":10},{"id":"2208.05514","title":"Are Gradients on Graph Structure Reliable in Gray-box Attacks?","created":"2022-08-07","cited_by_count":10},{"id":"2002.09632","title":"Using Single-Step Adversarial Training to Defend Iterative Adversarial Examples","created":"2020-02-22","cited_by_count":9},{"id":"2110.04488","title":"Demystifying the Transferability of Adversarial Attacks in Computer Networks","created":"2021-10-09","cited_by_count":9},{"id":"2203.10723","title":"An Intermediate-level Attack Framework on The Basis of Linear Regression","created":"2022-03-21","cited_by_count":9},{"id":"2002.09576","title":"UnMask: Adversarial Detection and Defense Through Robust Feature Alignment","created":"2020-02-21","cited_by_count":8},{"id":"2009.06589","title":"Robust Deep Learning Ensemble against Deception","created":"2020-09-14","cited_by_count":8},{"id":"2104.03494","title":"A Deep Ensemble-based Wireless Receiver Architecture for Mitigating Adversarial Attacks in Automatic Modulation Classification","created":"2021-04-08","cited_by_count":8},{"id":"2201.04011","title":"Similarity-based Gray-box Adversarial Attack Against Deep Face Recognition","created":"2022-01-11","cited_by_count":8}],"next_cursor":"100"}