{"list":"other","total":67,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1604.01685","title":"The Cityscapes Dataset for Semantic Urban Scene Understanding","created":"2016-04-06","cited_by_count":4444},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1612.01105","title":"Pyramid Scene Parsing Network","created":"2016-12-04","cited_by_count":2479},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1608.05442","title":"Semantic Understanding of Scenes through the ADE20K Dataset","created":"2016-08-18","cited_by_count":1069},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1909.05207","title":"Introduction to Online Convex Optimization","created":"2019-09-07","cited_by_count":803},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1705.01320","title":"Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks","created":"2017-05-03","cited_by_count":242},{"id":"1904.04514","title":"High-Resolution Representations for Labeling Pixels and Regions","created":"2019-04-09","cited_by_count":211},{"id":"1801.10578","title":"Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach","created":"2018-01-31","cited_by_count":182},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1811.01057","title":"Semidefinite relaxations for certifying robustness to adversarial examples","created":"2018-11-02","cited_by_count":179},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1712.07897","title":"Non-convex Optimization for Machine Learning","created":"2017-12-21","cited_by_count":133},{"id":"1711.09856","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","created":"2017-11-27","cited_by_count":126},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"2001.02378","title":"MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius","created":"2020-01-08","cited_by_count":114},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108},{"id":"2003.01219","title":"Exactly Computing the Local Lipschitz Constant of ReLU Networks","created":"2020-03-02","cited_by_count":102},{"id":"1705.01040","title":"Maximum Resilience of Artificial Neural Networks","created":"2017-04-28","cited_by_count":97},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"1704.05712","title":"Universal Adversarial Perturbations Against Semantic Image Segmentation","created":"2017-04-19","cited_by_count":92},{"id":"2002.11750","title":"On Certifying Robustness against Backdoor Attacks via Randomized Smoothing","created":"2020-02-26","cited_by_count":77},{"id":"1906.04948","title":"Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers","created":"2019-06-12","cited_by_count":65},{"id":"1607.03084","title":"Kernel-based methods for bandit convex optimization","created":"2016-07-11","cited_by_count":63},{"id":"1911.09272","title":"Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation","created":"2019-11-21","cited_by_count":60},{"id":"2008.10715","title":"Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation","created":"2020-08-24","cited_by_count":57},{"id":"2002.03239","title":"Curse of Dimensionality on Randomized Smoothing for Certifiable Robustness","created":"2020-02-08","cited_by_count":56},{"id":"2008.12952","title":"Efficient Robustness Certificates for Discrete Data: Sparsity-Aware Randomized Smoothing for Graphs, Images and More","created":"2020-08-29","cited_by_count":56},{"id":"1912.09899","title":"Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing","created":"2019-12-20","cited_by_count":54},{"id":"2002.12463","title":"Certified Defense to Image Transformations via Randomized Smoothing","created":"2020-02-27","cited_by_count":51},{"id":"1707.05373","title":"Houdini: Fooling Deep Structured Prediction Models","created":"2017-07-17","cited_by_count":50},{"id":"2002.12398","title":"TSS: Transformation-Specific Smoothing for Robustness Certification","created":"2020-02-27","cited_by_count":49},{"id":"2007.03730","title":"Detection as Regression: Certified Object Detection by Median Smoothing","created":"2020-07-07","cited_by_count":47},{"id":"1810.05162","title":"Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation","created":"2018-10-11","cited_by_count":40},{"id":"2003.06555","title":"Dynamic Divide-and-Conquer Adversarial Training for Robust Semantic Segmentation","created":"2020-03-14","cited_by_count":38},{"id":"2010.06651","title":"Higher-Order Certification for Randomized Smoothing","created":"2020-10-13","cited_by_count":37},{"id":"2107.00228","title":"Scalable Certified Segmentation via Randomized Smoothing","created":"2021-07-01","cited_by_count":35},{"id":"1703.01101","title":"Adversarial Examples for Semantic Image Segmentation","created":"2017-03-03","cited_by_count":33},{"id":"1904.09412","title":"Cubic LSTMs for Video Prediction","created":"2019-04-20","cited_by_count":32},{"id":"2002.03421","title":"Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing","created":"2020-02-09","cited_by_count":29},{"id":"1907.13124","title":"Impact of Adversarial Examples on Deep Learning Models for Biomedical Image Segmentation","created":"2019-07-30","cited_by_count":26},{"id":"1603.04350","title":"An optimal algorithm for bandit convex optimization","created":"2016-03-14","cited_by_count":20},{"id":"2011.07633","title":"Almost Tight L0-norm Certified Robustness of Top-k Predictions against Adversarial Perturbations","created":"2020-11-15","cited_by_count":16},{"id":"2303.06199","title":"Turning Strengths into Weaknesses: A Certified Robustness Inspired Attack Framework against Graph Neural Networks","created":"2023-03-10","cited_by_count":11},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10},{"id":"2205.03546","title":"Bandits for Structure Perturbation-based Black-box Attacks to Graph Neural Networks with Theoretical Guarantees","created":"2022-05-07","cited_by_count":9}],"next_cursor":null}