{"list":"other","total":53,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1706.04599","title":"On Calibration of Modern Neural Networks","created":"2017-06-14","cited_by_count":4960},{"id":"1506.02142","title":"Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learning","created":"2015-06-06","cited_by_count":4448},{"id":"1612.01474","title":"Simple and Scalable Predictive Uncertainty Estimation using Deep Ensembles","created":"2016-12-05","cited_by_count":3926},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1907.02893","title":"Invariant Risk Minimization","created":"2019-07-05","cited_by_count":1854},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.10811","title":"Do ImageNet Classifiers Generalize to ImageNet?","created":"2019-02-13","cited_by_count":1515},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1607.01719","title":"Deep CORAL: Correlation Alignment for Deep Domain Adaptation","created":"2016-07-06","cited_by_count":1200},{"id":"1906.07413","title":"Learning Imbalanced Datasets with Label-Distribution-Aware Margin Loss","created":"2019-06-18","cited_by_count":989},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1902.02476","title":"A Simple Baseline for Bayesian Uncertainty in Deep Learning","created":"2019-02-07","cited_by_count":560},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1802.03916","title":"Detecting and Correcting for Label Shift with Black Box Predictors","created":"2018-02-12","cited_by_count":366},{"id":"1810.08750","title":"Learning Models with Uniform Performance via Distributionally Robust Optimization","created":"2018-10-20","cited_by_count":335},{"id":"1904.05801","title":"Bridging Theory and Algorithm for Domain Adaptation","created":"2019-04-11","cited_by_count":332},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"2010.05761","title":"The Risks of Invariant Risk Minimization","created":"2020-10-12","cited_by_count":262},{"id":"2107.04649","title":"Accuracy on the Line: On the Strong Correlation Between Out-of-Distribution and In-Distribution Generalization","created":"2021-07-09","cited_by_count":249},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"1902.04217","title":"VC Classes are Adversarially Robustly Learnable, but Only Improperly","created":"2019-02-12","cited_by_count":83},{"id":"2002.10477","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","created":"2020-02-24","cited_by_count":77},{"id":"1905.08232","title":"Adversarially robust transfer learning","created":"2019-05-20","cited_by_count":67},{"id":"2002.04747","title":"On the Value of Target Data in Transfer Learning","created":"2020-02-12","cited_by_count":65},{"id":"1906.10075","title":"Distribution-Independent PAC Learning of Halfspaces with Massart Noise","created":"2019-06-24","cited_by_count":54},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52},{"id":"1505.05800","title":"Complexity Theoretic Limitations on Learning Halfspaces","created":"2015-05-21","cited_by_count":50},{"id":"2007.05145","title":"Beyond Perturbations: Learning Guarantees with Arbitrary Adversarial Test Examples","created":"2020-07-10","cited_by_count":44},{"id":"1503.03594","title":"Efficient Learning of Linear Separators under Bounded Noise","created":"2015-03-12","cited_by_count":36},{"id":"1903.10586","title":"Defending against Whitebox Adversarial Attacks via Randomized Discretization","created":"2019-03-25","cited_by_count":29},{"id":"1703.03478","title":"Online Learning with Abstention","created":"2017-03-09","cited_by_count":28},{"id":"2010.12039","title":"Reducing Adversarially Robust Learning to Non-Robust PAC Learning","created":"2020-10-22","cited_by_count":28},{"id":"2102.02145","title":"Adversarially Robust Learning with Unknown Perturbation Sets","created":"2021-02-03","cited_by_count":24},{"id":"1909.05822","title":"On the Hardness of Robust Classification","created":"2019-09-12","cited_by_count":23},{"id":"2102.00451","title":"Exponential Savings in Agnostic Active Learning through Abstention","created":"2021-01-31","cited_by_count":23},{"id":"2203.04160","title":"Robustly-reliable learners under poisoning attacks","created":"2022-03-08","cited_by_count":20},{"id":"2001.05497","title":"Noise-tolerant, Reliable Active Classification with Comparison Queries","created":"2020-01-15","cited_by_count":17},{"id":"2209.07369","title":"Adversarially Robust Learning: A Generic Minimax Optimal Learner and Characterization","created":"2022-09-15","cited_by_count":17},{"id":"2008.06242","title":"On Localized Discrepancy for Domain Adaptation","created":"2020-08-14","cited_by_count":14},{"id":"1610.09730","title":"Active Learning from Imperfect Labelers","created":"2016-10-30","cited_by_count":13},{"id":"2010.05080","title":"Noise in Classification","created":"2020-10-10","cited_by_count":11},{"id":"2210.12606","title":"Nash Equilibria and Pitfalls of Adversarial Training in Adversarial Robustness Games","created":"2022-10-23","cited_by_count":8},{"id":"2302.12351","title":"On the Hardness of Robustness Transfer: A Perspective from Rademacher Complexity over Symmetric Difference Hypothesis Space","created":"2023-02-23","cited_by_count":2}],"next_cursor":null}