{"list":"other","total":95,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.03983","title":"SGDR: Stochastic Gradient Descent with Warm Restarts","created":"2016-08-13","cited_by_count":5045},{"id":"1606.08415","title":"Gaussian Error Linear Units (GELUs)","created":"2016-06-27","cited_by_count":3502},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1409.3215","title":"Sequence to Sequence Learning with Neural Networks","created":"2014-09-10","cited_by_count":2986},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1803.05407","title":"Averaging Weights Leads to Wider Optima and Better Generalization","created":"2018-03-14","cited_by_count":1209},{"id":"1805.07836","title":"Generalized Cross Entropy Loss for Training Deep Neural Networks with Noisy Labels","created":"2018-05-20","cited_by_count":997},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1712.09482","title":"Robust Loss Functions under Label Noise for Deep Neural Networks","created":"2017-12-27","cited_by_count":443},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"2105.12806","title":"A Universal Law of Robustness via Isoperimetry","created":"2021-05-26","cited_by_count":151},{"id":"1907.02610","title":"Adversarial Robustness through Local Linearization","created":"2019-07-04","cited_by_count":146},{"id":"1810.11914","title":"Rademacher Complexity for Adversarially Robust Generalization","created":"2018-10-29","cited_by_count":132},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130},{"id":"1905.09747","title":"Adversarially Robust Distillation","created":"2019-05-23","cited_by_count":125},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"1805.04807","title":"Curriculum Adversarial Training","created":"2018-05-13","cited_by_count":89},{"id":"1911.10695","title":"When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks","created":"2019-11-25","cited_by_count":87},{"id":"1902.04217","title":"VC Classes are Adversarially Robustly Learnable, but Only Improperly","created":"2019-02-12","cited_by_count":83},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"1906.00555","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","created":"2019-06-03","cited_by_count":76},{"id":"2003.02484","title":"Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization","created":"2020-03-05","cited_by_count":73},{"id":"2009.14720","title":"DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles","created":"2020-09-30","cited_by_count":73},{"id":"2002.06789","title":"CAT: Customized Adversarial Training for Improved Robustness","created":"2020-02-17","cited_by_count":61},{"id":"1810.00740","title":"Improving the Generalization of Adversarial Training with Domain Adaptation","created":"2018-10-01","cited_by_count":48},{"id":"2004.13617","title":"Adversarial Learning Guarantees for Linear Hypotheses and Neural Networks","created":"2020-04-28","cited_by_count":47},{"id":"2104.09658","title":"Calibration and Consistency of Adversarial Surrogate Losses","created":"2021-04-19","cited_by_count":47},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39},{"id":"2005.13748","title":"Calibrated Surrogate Losses for Adversarially Robust Classification","created":"2020-05-28","cited_by_count":36},{"id":"1605.07588","title":"A Consistent Regularization Approach for Structured Prediction","created":"2016-05-24","cited_by_count":33},{"id":"2210.00960","title":"Stability Analysis and Generalization Bounds of Adversarial Training","created":"2022-10-03","cited_by_count":30},{"id":"2302.02334","title":"Revisiting Discriminative vs. Generative Classifiers: Theory and Implications","created":"2023-02-05","cited_by_count":29},{"id":"2006.16384","title":"Sharp Statistical Guarantees for Adversarially Robust Gaussian Classification","created":"2020-06-29","cited_by_count":28},{"id":"2010.12039","title":"Reducing Adversarially Robust Learning to Non-Robust PAC Learning","created":"2020-10-22","cited_by_count":28},{"id":"2104.03863","title":"A single gradient step finds adversarial examples on random two-layers neural networks","created":"2021-04-08","cited_by_count":26},{"id":"2105.01550","title":"A Finer Calibration Analysis for Adversarial Robustness","created":"2021-05-04","cited_by_count":26},{"id":"2106.12611","title":"Adversarial Examples in Multi-Layer Random ReLU Networks","created":"2021-06-23","cited_by_count":26},{"id":"2112.01694","title":"On the Existence of the Adversarial Bayes Classifier (Extended Version)","created":"2021-12-03","cited_by_count":25},{"id":"1408.2327","title":"On the Consistency of Ordinal Regression Methods","created":"2014-08-11","cited_by_count":24},{"id":"2102.02145","title":"Adversarially Robust Learning with Unknown Perturbation Sets","created":"2021-02-03","cited_by_count":24},{"id":"1703.02403","title":"On Structured Prediction Theory with Calibrated Convex Surrogate Losses","created":"2017-03-07","cited_by_count":23},{"id":"1810.02180","title":"Improved Generalization Bounds for Adversarially Robust Learning","created":"2018-10-04","cited_by_count":22},{"id":"2005.07652","title":"Efficiently Learning Adversarially Robust Halfspaces with Noise","created":"2020-05-15","cited_by_count":22},{"id":"2012.10278","title":"Adversarially Robust Estimate and Risk Analysis in Linear Regression","created":"2020-12-18","cited_by_count":22},{"id":"1408.2764","title":"Convex Calibration Dimension for Multiclass Loss Matrices","created":"2014-08-12","cited_by_count":21},{"id":"1907.07330","title":"An Embedding Framework for Consistent Polyhedral Surrogates","created":"2019-07-17","cited_by_count":21},{"id":"1910.11369","title":"Structured Prediction with Projection Oracles","created":"2019-10-24","cited_by_count":21},{"id":"2009.07801","title":"Convex Calibrated Surrogates for the Multi-Label F-Measure","created":"2020-09-16","cited_by_count":18},{"id":"2007.15220","title":"The Complexity of Adversarially Robust Proper Learning of Halfspaces with Agnostic Noise","created":"2020-07-30","cited_by_count":15},{"id":"2110.14031","title":"Surrogate Regret Bounds for Polyhedral Losses","created":"2021-10-26","cited_by_count":15},{"id":"1911.04681","title":"On Robustness to Adversarial Examples and Polynomial Optimization","created":"2019-11-12","cited_by_count":14},{"id":"2206.14707","title":"An Embedding Framework for the Design and Analysis of Consistent Polyhedral Surrogates","created":"2022-06-29","cited_by_count":14},{"id":"1609.06385","title":"Multiclass Classification Calibration Functions","created":"2016-09-20","cited_by_count":13},{"id":"2006.16520","title":"Black-box Certification and Learning under Adversarial Perturbations","created":"2020-06-30","cited_by_count":13},{"id":"2102.11069","title":"A PAC-Bayes Analysis of Adversarial Robustness","created":"2021-02-19","cited_by_count":13},{"id":"2202.05420","title":"A Characterization of Semi-Supervised Adversarially-Robust PAC Learnability","created":"2022-02-11","cited_by_count":13},{"id":"1907.09061","title":"Understanding Adversarial Robustness Through Loss Landscape Geometries","created":"2019-07-22","cited_by_count":12},{"id":"2205.10022","title":"Towards Consistency in Adversarial Classification","created":"2022-05-20","cited_by_count":12},{"id":"1810.00144","title":"Interpreting Adversarial Robustness: A View from Decision Surface in Input Space","created":"2018-09-29","cited_by_count":10},{"id":"1811.06418","title":"Adversarial Examples from Cryptographic Pseudo-Random Generators","created":"2018-11-15","cited_by_count":10},{"id":"2110.10602","title":"Transductive Robust Learning Guarantees","created":"2021-10-20","cited_by_count":10},{"id":"2006.07346","title":"Weston-Watkins Hinge Loss and Ordered Partitions","created":"2020-06-12","cited_by_count":9},{"id":"2107.04401","title":"Improving Model Robustness with Latent Distribution Locally and Globally","created":"2021-07-08","cited_by_count":9},{"id":"2207.08873","title":"Consistent Polyhedral Surrogates for Top-$k$ Classification and Variants","created":"2022-07-18","cited_by_count":8},{"id":"1505.04137","title":"Consistent Algorithms for Multiclass Classification with a Reject Option","created":"2015-05-15","cited_by_count":7},{"id":"1803.05814","title":"Theory and Algorithms for Forecasting Time Series","created":"2018-03-15","cited_by_count":7},{"id":"2104.00322","title":"Domain Invariant Adversarial Learning","created":"2021-04-01","cited_by_count":7},{"id":"2203.08645","title":"The Structured Abstain Problem and the Lov\\'asz Hinge","created":"2022-03-16","cited_by_count":7},{"id":"2302.07321","title":"On Classification-Calibration of Gamma-Phi Losses","created":"2023-02-14","cited_by_count":6}],"next_cursor":null}