{"list":"other","total":73,"rows":[{"id":"2105.05233","title":"Diffusion Models Beat GANs on Image Synthesis","created":"2021-05-11","cited_by_count":8255},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2108.07258","title":"On the Opportunities and Risks of Foundation Models","created":"2021-08-16","cited_by_count":4033},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1803.03635","title":"The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networks","created":"2018-03-09","cited_by_count":2262},{"id":"1606.04080","title":"Matching Networks for One Shot Learning","created":"2016-06-13","cited_by_count":2255},{"id":"1506.02626","title":"Learning both Weights and Connections for Efficient Neural Networks","created":"2015-06-08","cited_by_count":2031},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1608.03981","title":"Beyond a Gaussian Denoiser: Residual Learning of Deep CNN for Image Denoising","created":"2016-08-13","cited_by_count":1358},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1912.11035","title":"CNN-generated images are surprisingly easy to spot... for now","created":"2019-12-23","cited_by_count":847},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2003.08685","title":"Leveraging Frequency Analysis for Deep Fake Image Recognition","created":"2020-03-19","cited_by_count":504},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1902.05300","title":"On instabilities of deep learning in image reconstruction - Does AI come at a cost?","created":"2019-02-14","cited_by_count":212},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"2006.06224","title":"A Primer on Zeroth-Order Optimization in Signal Processing and Machine Learning","created":"2020-06-11","cited_by_count":162},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"2010.13337","title":"Robust Pre-Training by Adversarial Contrastive Learning","created":"2020-10-26","cited_by_count":144},{"id":"1911.06465","title":"Fourier Spectrum Discrepancies in Deep Network Generated Images","created":"2019-11-15","cited_by_count":139},{"id":"2004.00543","title":"Physically Realizable Adversarial Examples for LiDAR Object Detection","created":"2020-04-01","cited_by_count":137},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134},{"id":"2011.14779","title":"Data-Free Model Extraction","created":"2020-11-30","cited_by_count":124},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2005.03161","title":"MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation","created":"2020-05-06","cited_by_count":99},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"2006.14536","title":"Smooth Adversarial Training","created":"2020-06-25","cited_by_count":89},{"id":"2004.10448","title":"DeepFake Detection by Analyzing Convolutional Traces","created":"2020-04-22","cited_by_count":81},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76},{"id":"1904.00759","title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","created":"2019-03-21","cited_by_count":70},{"id":"1808.01664","title":"Structured Adversarial Attack: Towards General Implementation and Better Interpretability","created":"2018-08-05","cited_by_count":64},{"id":"2106.07873","title":"Reverse Engineering of Generative Models: Inferring Model Hyperparameters from Generated Images","created":"2021-06-15","cited_by_count":58},{"id":"2107.00166","title":"Sanity Checks for Lottery Tickets: Does Your Winning Ticket Really Win the Jackpot?","created":"2021-07-01","cited_by_count":52},{"id":"1906.03499","title":"ML-LOO: Detecting Adversarial Examples with Feature Attribution","created":"2019-06-08","cited_by_count":48},{"id":"1905.11468","title":"Scaleable input gradient regularization for adversarial robustness","created":"2019-05-27","cited_by_count":47},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39},{"id":"2209.14262","title":"A Survey on Physical Adversarial Attack in Computer Vision","created":"2022-09-28","cited_by_count":25},{"id":"2002.11821","title":"Improving Robustness of Deep-Learning-Based Image Reconstruction","created":"2020-02-26","cited_by_count":23},{"id":"1904.02057","title":"Interpreting Adversarial Examples by Activation Promotion and Suppression","created":"2019-04-03","cited_by_count":17},{"id":"2203.14145","title":"Reverse Engineering of Imperceptible Adversarial Image Perturbations","created":"2022-03-26","cited_by_count":17},{"id":"1910.11099","title":"Adversarial T-shirt! Evading Person Detectors in A Physical World","created":"2019-10-18","cited_by_count":13},{"id":"2006.10013","title":"Adversarial Examples Detection and Analysis with Layer-wise Autoencoders","created":"2020-06-17","cited_by_count":9},{"id":"2206.06257","title":"Distributed Adversarial Training to Robustify Deep Neural Networks at Scale","created":"2022-06-13","cited_by_count":9},{"id":"2105.00433","title":"Who's Afraid of Adversarial Transferability?","created":"2021-05-02","cited_by_count":6},{"id":"2102.01208","title":"Fast Training of Provably Robust Neural Networks by SingleProp","created":"2021-02-01","cited_by_count":5},{"id":"2103.11002","title":"Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptions","created":"2021-03-19","cited_by_count":4},{"id":"2110.06802","title":"Identification of Attack-Specific Signatures in Adversarial Examples","created":"2021-10-13","cited_by_count":4},{"id":"2203.04886","title":"Reverse Engineering $\\ell_p$ attacks: A block-sparse optimization approach with recovery guarantees","created":"2022-03-09","cited_by_count":4},{"id":"2301.13869","title":"Reverse engineering adversarial attacks with fingerprints from adversarial examples","created":"2023-01-31","cited_by_count":4},{"id":"2205.09586","title":"On Trace of PGD-Like Adversarial Attacks","created":"2022-05-19","cited_by_count":2},{"id":"2302.14059","title":"Scalable Attribution of Adversarial Attacks via Multi-Task Learning","created":"2023-02-25","cited_by_count":2}],"next_cursor":null}