{"list":"other","total":116,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1505.04597","title":"U-Net: Convolutional Networks for Biomedical Image Segmentation","created":"2015-05-18","cited_by_count":19713},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1511.00561","title":"SegNet: A Deep Convolutional Encoder-Decoder Architecture for Image Segmentation","created":"2015-11-02","cited_by_count":1487},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1901.07031","title":"CheXpert: A Large Chest Radiograph Dataset with Uncertainty Labels and Expert Comparison","created":"2019-01-21","cited_by_count":1423},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1705.02315","title":"ChestX-ray8: Hospital-scale Chest X-ray Database and Benchmarks on Weakly-Supervised Classification and Localization of Common Thorax Diseases","created":"2017-05-05","cited_by_count":972},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1710.05006","title":"Skin Lesion Analysis Toward Melanoma Detection: A Challenge at the 2017 International Symposium on Biomedical Imaging (ISBI), Hosted by the International Skin Imaging Collaboration (ISIC)","created":"2017-10-13","cited_by_count":549},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1902.06068","title":"Deep Learning for Image Super-resolution: A Survey","created":"2019-02-16","cited_by_count":369},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1901.07441","title":"PadChest: A large chest x-ray image dataset with multi-label annotated reports","created":"2019-01-22","cited_by_count":309},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"2003.13145","title":"Can AI help in screening Viral and COVID-19 pneumonia?","created":"2020-03-29","cited_by_count":200},{"id":"1712.02328","title":"Generative Adversarial Perturbations","created":"2017-12-06","cited_by_count":153},{"id":"1907.10456","title":"Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems","created":"2019-07-24","cited_by_count":153},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134},{"id":"1905.09747","title":"Adversarially Robust Distillation","created":"2019-05-23","cited_by_count":125},{"id":"1906.06919","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","created":"2019-06-17","cited_by_count":121},{"id":"1811.12641","title":"Transferable Adversarial Attacks for Image and Video Object Detection","created":"2018-11-30","cited_by_count":109},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97},{"id":"2108.07969","title":"Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better","created":"2021-08-18","cited_by_count":79},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65},{"id":"1904.05181","title":"Black-box Adversarial Attacks on Video Recognition Models","created":"2019-04-10","cited_by_count":58},{"id":"2106.04928","title":"Reliable Adversarial Distillation with Unreliable Teachers","created":"2021-06-09","cited_by_count":56},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52},{"id":"2206.08675","title":"Understanding Robust Overfitting of Adversarial Training and Beyond","created":"2022-06-17","cited_by_count":51},{"id":"1911.11616","title":"Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction","created":"2019-11-22","cited_by_count":47},{"id":"2006.13322","title":"Realistic Adversarial Data Augmentation for MR Image Segmentation","created":"2020-06-23","cited_by_count":44},{"id":"2006.06356","title":"Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factors","created":"2020-06-11","cited_by_count":40},{"id":"1904.09412","title":"Cubic LSTMs for Video Prediction","created":"2019-04-20","cited_by_count":32},{"id":"2101.03749","title":"Deep Learning-based Face Super-Resolution: A Survey","created":"2021-01-11","cited_by_count":32},{"id":"1808.05537","title":"Distributionally Adversarial Attack","created":"2018-08-16","cited_by_count":26},{"id":"1907.13124","title":"Impact of Adversarial Examples on Deep Learning Models for Biomedical Image Segmentation","created":"2019-07-30","cited_by_count":26},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25},{"id":"2204.12347","title":"Restricted Black-box Adversarial Attack Against DeepFake Face Swapping","created":"2022-04-26","cited_by_count":25},{"id":"2002.11821","title":"Improving Robustness of Deep-Learning-Based Image Reconstruction","created":"2020-02-26","cited_by_count":23},{"id":"2211.00525","title":"The Enemy of My Enemy is My Friend: Exploring Inverse Adversaries for Improving Adversarial Training","created":"2022-11-01","cited_by_count":23},{"id":"2007.05225","title":"Miss the Point: Targeted Adversarial Attack on Multiple Landmark Detection","created":"2020-07-10","cited_by_count":21},{"id":"1908.00706","title":"AdvGAN++ : Harnessing latent layers for adversary generation","created":"2019-08-02","cited_by_count":20},{"id":"2108.03429","title":"Enhancing MR Image Segmentation with Realistic Adversarial Data Augmentation","created":"2021-08-07","cited_by_count":20},{"id":"2106.01544","title":"SSMD: Semi-Supervised Medical Image Detection with Adaptive Consistency and Heterogeneous Perturbation","created":"2021-06-03","cited_by_count":19},{"id":"1706.09634","title":"Weakly-supervised localization of diabetic retinopathy lesions in retinal fundus images","created":"2017-06-29","cited_by_count":18},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18},{"id":"2208.02851","title":"Self-Ensembling Vision Transformer (SEViT) for Robust Medical Image Classification","created":"2022-08-04","cited_by_count":16},{"id":"2103.03438","title":"Towards Evaluating the Robustness of Deep Diagnostic Models by Adversarial Attack","created":"2021-03-05","cited_by_count":15},{"id":"2107.04263","title":"Towards Robust General Medical Image Segmentation","created":"2021-07-09","cited_by_count":14},{"id":"2207.12203","title":"Improving Adversarial Robustness via Mutual Information Estimation","created":"2022-07-25","cited_by_count":13},{"id":"2011.13011","title":"Advancing diagnostic performance and clinical usability of neural networks via adversarial training and dual batch normalization","created":"2020-11-25","cited_by_count":12},{"id":"1903.01015","title":"A Kernelized Manifold Mapping to Diminish the Effect of Adversarial Perturbations","created":"2019-03-03","cited_by_count":11},{"id":"2009.09247","title":"Bias Field Poses a Threat to DNN-based X-Ray Recognition","created":"2020-09-19","cited_by_count":11},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11},{"id":"2208.03161","title":"Adversarial Robustness of MR Image Reconstruction under Realistic Perturbations","created":"2022-08-05","cited_by_count":11},{"id":"2003.03824","title":"No Surprises: Training Robust Lung Nodule Detection for Low-Dose CT Scans by Augmenting with Adversarial Attacks","created":"2020-03-08","cited_by_count":10},{"id":"2007.11259","title":"Adversarial Training Reduces Information and Improves Transferability","created":"2020-07-22","cited_by_count":10},{"id":"2103.05232","title":"Stabilized Medical Image Attacks","created":"2021-03-09","cited_by_count":10},{"id":"2107.04882","title":"Out of Distribution Detection and Adversarial Attacks on Deep Neural Networks for Robust Medical Image Analysis","created":"2021-07-10","cited_by_count":10},{"id":"1807.02905","title":"Vulnerability Analysis of Chest X-Ray Image Classification Against Adversarial Attacks","created":"2018-07-09","cited_by_count":9},{"id":"2005.09147","title":"Increasing-Margin Adversarial (IMA) Training to Improve Adversarial Robustness of Neural Networks","created":"2020-05-19","cited_by_count":9},{"id":"2111.14564","title":"MedRDF: A Robust and Retrain-Less Diagnostic Framework for Medical Pretrained Models Against Adversarial Attack","created":"2021-11-29","cited_by_count":9},{"id":"2012.09501","title":"A Hierarchical Feature Constraint to Camouflage Medical Adversarial Attacks","created":"2020-12-17","cited_by_count":8},{"id":"2109.09901","title":"Modeling Adversarial Noise for Adversarial Training","created":"2021-09-21","cited_by_count":8},{"id":"2105.01959","title":"Attack-agnostic Adversarial Detection on Medical Data Using Explainable Machine Learning","created":"2021-05-05","cited_by_count":7},{"id":"2106.08153","title":"Now You See It, Now You Dont: Adversarial Vulnerabilities in Computational Pathology","created":"2021-06-14","cited_by_count":7},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7},{"id":"2206.12292","title":"InfoAT: Improving Adversarial Training Using the Information Bottleneck Principle","created":"2022-06-23","cited_by_count":7},{"id":"2006.13555","title":"Defending against adversarial attacks on medical imaging AI system, classification or detection?","created":"2020-06-24","cited_by_count":6},{"id":"2108.04345","title":"Explainable AI and susceptibility to adversarial attacks: a case study in classification of breast ultrasound images","created":"2021-08-09","cited_by_count":6},{"id":"2210.03429","title":"Adversarially Robust Prototypical Few-shot Segmentation with Neural-ODEs","created":"2022-10-07","cited_by_count":6},{"id":"2010.16074","title":"Volumetric Medical Image Segmentation: A 3D Deep Coarse-to-fine Framework and Its Adversarial Examples","created":"2020-10-29","cited_by_count":5},{"id":"1911.07731","title":"Multi-modal Deep Guided Filtering for Comprehensible Medical Image Processing","created":"2019-11-18","cited_by_count":4},{"id":"2003.13969","title":"A Thorough Comparison Study on Adversarial Attacks and Defenses for Common Thorax Disease Classification in Chest X-rays","created":"2020-03-31","cited_by_count":4},{"id":"2009.03364","title":"Adversarial attacks on deep learning models for fatty liver disease classification by modification of ultrasound image reconstruction method","created":"2020-09-07","cited_by_count":4},{"id":"2112.08862","title":"Addressing Adversarial Machine Learning Attacks in Smart Healthcare Perspectives","created":"2021-12-16","cited_by_count":4},{"id":"2201.08661","title":"The Security of Deep Learning Defences for Medical Imaging","created":"2022-01-21","cited_by_count":4}],"next_cursor":"100"}