{"list":"other","total":52,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1506.02640","title":"You Only Look Once: Unified, Real-Time Object Detection","created":"2015-06-08","cited_by_count":4852},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1611.01144","title":"Categorical Reparameterization with Gumbel-Softmax","created":"2016-11-03","cited_by_count":2739},{"id":"1505.00468","title":"VQA: Visual Question Answering","created":"2015-05-03","cited_by_count":2506},{"id":"1805.01978","title":"Unsupervised Feature Learning via Non-Parametric Instance-level Discrimination","created":"2018-05-05","cited_by_count":1845},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"2011.11164","title":"Learnable Boundary Guided Adversarial Training","created":"2020-11-23","cited_by_count":93},{"id":"1805.04807","title":"Curriculum Adversarial Training","created":"2018-05-13","cited_by_count":89},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"1904.11567","title":"Unsupervised Deep Learning by Neighbourhood Discovery","created":"2019-04-25","cited_by_count":78},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76},{"id":"2203.14675","title":"Part-based Pseudo Label Refinement for Unsupervised Person Re-identification","created":"2022-03-28","cited_by_count":59},{"id":"1904.00887","title":"Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks","created":"2019-04-01","cited_by_count":56},{"id":"1905.10510","title":"Enhancing Adversarial Defense by k-Winners-Take-All","created":"2019-05-25","cited_by_count":51},{"id":"2003.08866","title":"Spatially Adaptive Inference with Stochastic Feature Sampling and Interpolation","created":"2020-03-19","cited_by_count":51},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42},{"id":"2203.09678","title":"Self-Ensemble Adversarial Training for Improved Robustness","created":"2022-03-18","cited_by_count":38},{"id":"2010.03316","title":"Batch Normalization Increases Adversarial Vulnerability and Decreases Adversarial Transferability: A Non-Robust Feature Perspective","created":"2020-10-07","cited_by_count":35},{"id":"1905.02161","title":"Batch Normalization is a Cause of Adversarial Vulnerability","created":"2019-05-06","cited_by_count":29},{"id":"1912.02184","title":"Towards Robust Image Classification Using Sequential Attention Models","created":"2019-12-04","cited_by_count":27},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24},{"id":"2102.05311","title":"CIFS: Improving Adversarial Robustness of CNNs via Channel-wise Importance-based Feature Selection","created":"2021-02-10","cited_by_count":21},{"id":"1904.02057","title":"Interpreting Adversarial Examples by Activation Promotion and Suppression","created":"2019-04-03","cited_by_count":17},{"id":"1703.05393","title":"Convolutional Low-Resolution Fine-Grained Classification","created":"2017-03-15","cited_by_count":10},{"id":"2208.05650","title":"Diverse Generative Perturbations on Attention Space for Transferable Adversarial Attacks","created":"2022-08-11","cited_by_count":7}],"next_cursor":null}