{"list":"other","total":131,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1604.01685","title":"The Cityscapes Dataset for Semantic Urban Scene Understanding","created":"2016-04-06","cited_by_count":4444},{"id":"1708.07747","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","created":"2017-08-25","cited_by_count":4349},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1506.03365","title":"LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loop","created":"2015-06-10","cited_by_count":1355},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1705.02315","title":"ChestX-ray8: Hospital-scale Chest X-ray Database and Benchmarks on Weakly-Supervised Classification and Localization of Common Thorax Diseases","created":"2017-05-05","cited_by_count":972},{"id":"1801.09414","title":"CosFace: Large Margin Cosine Loss for Deep Face Recognition","created":"2018-01-29","cited_by_count":971},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1804.08328","title":"Taskonomy: Disentangling Task Transfer Learning","created":"2018-04-23","cited_by_count":634},{"id":"2007.08199","title":"Learning from Noisy Labels with Deep Neural Networks: A Survey","created":"2020-07-16","cited_by_count":582},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1710.10547","title":"Interpretation of Neural Networks is Fragile","created":"2017-10-29","cited_by_count":444},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2104.08894","title":"The Intrinsic Dimension of Images and Its Impact on Learning","created":"2021-04-18","cited_by_count":315},{"id":"1804.04368","title":"Regularisation of Neural Networks by Enforcing Lipschitz Continuity","created":"2018-04-12","cited_by_count":314},{"id":"1905.13545","title":"High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks","created":"2019-05-28","cited_by_count":310},{"id":"2105.11120","title":"A Fourier-based Framework for Domain Generalization","created":"2021-05-24","cited_by_count":290},{"id":"1906.08988","title":"A Fourier Perspective on Model Robustness in Computer Vision","created":"2019-06-21","cited_by_count":288},{"id":"1905.12784","title":"Intrinsic dimension of data representations in deep neural networks","created":"2019-05-29","cited_by_count":282},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1807.01069","title":"Adversarial Robustness Toolbox v1.0.0","created":"2018-07-03","cited_by_count":215},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2302.12095","title":"On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspective","created":"2023-02-22","cited_by_count":211},{"id":"1906.04214","title":"Topology Attack and Defense for Graph Neural Networks: An Optimization Perspective","created":"2019-06-10","cited_by_count":196},{"id":"2012.10544","title":"Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses","created":"2020-12-18","cited_by_count":180},{"id":"1812.10528","title":"Adversarial Attack and Defense on Graph Data: A Survey","created":"2018-12-26","cited_by_count":167},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"1907.10456","title":"Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems","created":"2019-07-24","cited_by_count":153},{"id":"1810.11914","title":"Rademacher Complexity for Adversarially Robust Generalization","created":"2018-10-29","cited_by_count":132},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"2107.03158","title":"A Survey on Data Augmentation for Text Classification","created":"2021-07-07","cited_by_count":111},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"2102.11273","title":"On Interaction Between Augmentations and Corruptions in Natural Corruption Robustness","created":"2021-02-22","cited_by_count":97},{"id":"2011.12562","title":"Delving Deep into Label Smoothing","created":"2020-11-25","cited_by_count":94},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"1412.0623","title":"Material Recognition in the Wild with the Materials in Context Database","created":"2014-12-01","cited_by_count":79},{"id":"1802.08686","title":"Adversarial vulnerability for any classifier","created":"2018-02-23","cited_by_count":78},{"id":"2002.10477","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","created":"2020-02-24","cited_by_count":77},{"id":"2205.13775","title":"A Survey on Long-Tailed Visual Recognition","created":"2022-05-27","cited_by_count":75},{"id":"2003.02484","title":"Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization","created":"2020-03-05","cited_by_count":73},{"id":"2006.04062","title":"Consistency Regularization for Certified Robustness of Smoothed Classifiers","created":"2020-06-07","cited_by_count":73},{"id":"2108.08487","title":"Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain","created":"2021-08-19","cited_by_count":71},{"id":"1608.07690","title":"A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples","created":"2016-08-27","cited_by_count":70},{"id":"1808.03591","title":"How Complex is your classification problem? A survey on measuring classification complexity","created":"2018-08-10","cited_by_count":66},{"id":"1811.00401","title":"Excessive Invariance Causes Adversarial Vulnerability","created":"2018-11-01","cited_by_count":66},{"id":"1906.04948","title":"Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers","created":"2019-06-12","cited_by_count":65},{"id":"1901.04684","title":"The Limitations of Adversarial Training and the Blind-Spot Attack","created":"2019-01-15","cited_by_count":63},{"id":"2009.03728","title":"Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspective","created":"2020-09-08","cited_by_count":59},{"id":"1802.09653","title":"On the Suitability of $L_p$-norms for Creating and Preventing Adversarial Examples","created":"2018-02-27","cited_by_count":58},{"id":"1807.06732","title":"Motivating the Rules of the Game for Adversarial Example Research","created":"2018-07-18","cited_by_count":57},{"id":"1904.00887","title":"Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks","created":"2019-04-01","cited_by_count":56},{"id":"2002.03239","title":"Curse of Dimensionality on Randomized Smoothing for Certifiable Robustness","created":"2020-02-08","cited_by_count":56},{"id":"1909.12272","title":"Lower Bounds on Adversarial Robustness from Optimal Transport","created":"2019-09-26","cited_by_count":53},{"id":"1704.08996","title":"Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection","created":"2017-04-28","cited_by_count":52},{"id":"2104.02703","title":"Adversarial Robustness under Long-Tailed Distribution","created":"2021-04-06","cited_by_count":50},{"id":"1905.13021","title":"Robustness to Adversarial Perturbations in Learning from Incomplete Data","created":"2019-05-24","cited_by_count":49},{"id":"2002.04359","title":"Robustness of Bayesian Neural Networks to Gradient-Based Attacks","created":"2020-02-11","cited_by_count":48},{"id":"1905.09957","title":"Robust Attribution Regularization","created":"2019-05-23","cited_by_count":47},{"id":"1809.03063","title":"The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure","created":"2018-09-09","cited_by_count":46},{"id":"1812.07478","title":"Multi-objective Evolutionary Federated Learning","created":"2018-12-18","cited_by_count":42},{"id":"2007.04028","title":"How benign is benign overfitting?","created":"2020-07-08","cited_by_count":40},{"id":"1706.03922","title":"Analyzing the Robustness of Nearest Neighbors to Adversarial Examples","created":"2017-06-13","cited_by_count":36},{"id":"1904.12052","title":"Data Poisoning Attack against Knowledge Graph Embedding","created":"2019-04-26","cited_by_count":36},{"id":"1912.02794","title":"Adversarial Risk via Optimal Transport and Optimal Couplings","created":"2019-12-05","cited_by_count":36},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36},{"id":"2002.03517","title":"Random Smoothing Might be Unable to Certify $\\ell_\\infty$ Robustness for High-Dimensional Images","created":"2020-02-10","cited_by_count":35},{"id":"1810.12272","title":"Adversarial Risk and Robustness: General Definitions and Implications for the Uniform Distribution","created":"2018-10-29","cited_by_count":32},{"id":"1901.10861","title":"A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distance","created":"2019-01-30","cited_by_count":32},{"id":"1910.14147","title":"A Unified Framework for Data Poisoning Attack to Graph-based Semi-supervised Learning","created":"2019-10-30","cited_by_count":31},{"id":"2002.06349","title":"Hold me tight! Influence of discriminative features on deep network boundaries","created":"2020-02-15","cited_by_count":31},{"id":"2006.16384","title":"Sharp Statistical Guarantees for Adversarially Robust Gaussian Classification","created":"2020-06-29","cited_by_count":28},{"id":"2201.08956","title":"The Many Faces of Adversarial Risk","created":"2022-01-22","cited_by_count":28},{"id":"1806.00081","title":"Resisting Adversarial Attacks using Gaussian Mixture Variational Autoencoders","created":"2018-05-31","cited_by_count":26},{"id":"1806.01471","title":"PAC-learning in the presence of evasion adversaries","created":"2018-06-05","cited_by_count":23},{"id":"1909.05822","title":"On the Hardness of Robust Classification","created":"2019-09-12","cited_by_count":23},{"id":"2008.04094","title":"Adversarial Examples on Object Recognition: A Comprehensive Survey","created":"2020-08-07","cited_by_count":23},{"id":"2205.13863","title":"Why Robust Generalization in Deep Learning is Difficult: Perspective of Expressive Power","created":"2022-05-27","cited_by_count":23},{"id":"2004.05465","title":"Robust Large-Margin Learning in Hyperbolic Space","created":"2020-04-11","cited_by_count":21},{"id":"1902.08336","title":"On the Sensitivity of Adversarial Robustness to Input Data Distributions","created":"2019-02-22","cited_by_count":20},{"id":"2102.03482","title":"Understanding the Interaction of Adversarial Training with Noisy Labels","created":"2021-02-06","cited_by_count":19},{"id":"1708.08327","title":"Improving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features","created":"2017-08-28","cited_by_count":18},{"id":"1802.09308","title":"Max-Mahalanobis Linear Discriminant Analysis Networks","created":"2018-02-26","cited_by_count":18}],"next_cursor":"100"}