{"list":"other","total":53,"rows":[{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1912.04958","title":"Analyzing and Improving the Image Quality of StyleGAN","created":"2019-12-03","cited_by_count":3588},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1603.08155","title":"Perceptual Losses for Real-Time Style Transfer and Super-Resolution","created":"2016-03-27","cited_by_count":2694},{"id":"1609.04802","title":"Photo-Realistic Single Image Super-Resolution Using a Generative Adversarial Network","created":"2016-09-15","cited_by_count":1908},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1506.02025","title":"Spatial Transformer Networks","created":"2015-06-05","cited_by_count":1429},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"2004.07728","title":"Image Quality Assessment: Unifying Structure and Texture Similarity","created":"2020-04-16","cited_by_count":811},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1709.05424","title":"NIMA: Neural Image Assessment","created":"2017-09-15","cited_by_count":389},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1609.03552","title":"Generative Visual Manipulation on the Natural Image Manifold","created":"2016-09-12","cited_by_count":348},{"id":"2003.05534","title":"Softmax Splatting for Video Frame Interpolation","created":"2020-03-11","cited_by_count":279},{"id":"1612.01697","title":"Deep Neural Networks for No-Reference and Full-Reference Image Quality Assessment","created":"2016-12-06","cited_by_count":225},{"id":"1602.02644","title":"Generating Images with Perceptual Similarity Metrics based on Deep Networks","created":"2016-02-08","cited_by_count":222},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"1612.07919","title":"EnhanceNet: Single Image Super-Resolution Through Automated Texture Synthesis","created":"2016-12-23","cited_by_count":178},{"id":"2007.12142","title":"PIPAL: a Large-Scale Image Quality Assessment Dataset for Perceptual Image Restoration","created":"2020-07-23","cited_by_count":178},{"id":"1806.02067","title":"PieAPP: Perceptual Image-Error Assessment through Pairwise Preference","created":"2018-06-06","cited_by_count":160},{"id":"1704.03453","title":"The Space of Transferable Adversarial Examples","created":"2017-04-11","cited_by_count":158},{"id":"1907.10823","title":"Enhancing Adversarial Example Transferability with an Intermediate Level Attack","created":"2019-07-23","cited_by_count":140},{"id":"2006.12655","title":"Perceptual Adversarial Robustness: Defense Against Unseen Threat Models","created":"2020-06-22","cited_by_count":137},{"id":"1805.07894","title":"Constructing Unrestricted Adversarial Examples with Generative Models","created":"2018-05-21","cited_by_count":135},{"id":"1902.07906","title":"Wasserstein Adversarial Examples via Projected Sinkhorn Iterations","created":"2019-02-21","cited_by_count":89},{"id":"1911.10891","title":"ColorFool: Semantic Adversarial Colorization","created":"2019-11-25","cited_by_count":89},{"id":"1804.00499","title":"Semantic Adversarial Examples","created":"2018-03-16","cited_by_count":86},{"id":"1904.06347","title":"Unrestricted Adversarial Examples via Semantic Manipulation","created":"2019-04-12","cited_by_count":84},{"id":"1906.00001","title":"Functional Adversarial Attacks","created":"2019-05-29","cited_by_count":82},{"id":"1711.07183","title":"Adversarial Attacks Beyond the Image Space","created":"2017-11-20","cited_by_count":67},{"id":"1901.04684","title":"The Limitations of Adversarial Training and the Blind-Spot Attack","created":"2019-01-15","cited_by_count":63},{"id":"2010.02432","title":"A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inference","created":"2020-10-06","cited_by_count":61},{"id":"1906.03973","title":"E-LPIPS: Robust Perceptual Image Similarity via Random Transformation Ensembles","created":"2019-06-10","cited_by_count":45},{"id":"2207.13686","title":"Shift-tolerant Perceptual Similarity Metric","created":"2022-07-27","cited_by_count":44},{"id":"2006.15057","title":"A Loss Function for Generative Neural Networks Based on Watson's Perceptual Model","created":"2020-06-26","cited_by_count":39},{"id":"2007.07435","title":"AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows","created":"2020-07-15","cited_by_count":36},{"id":"2008.08847","title":"Yet Another Intermediate-Level Attack","created":"2020-08-20","cited_by_count":35},{"id":"2110.08521","title":"Locally Adaptive Structure and Texture Similarity for Image Quality Assessment","created":"2021-10-16","cited_by_count":32},{"id":"2210.00933","title":"Perceptual Attacks of No-Reference Image Quality Models with Human-in-the-Loop","created":"2022-10-03","cited_by_count":30},{"id":"2006.06752","title":"An Unsupervised Information-Theoretic Perceptual Quality Metric","created":"2020-06-11","cited_by_count":28},{"id":"2005.01056","title":"NTIRE 2020 Challenge on Perceptual Extreme Super-Resolution: Methods and Results","created":"2020-05-03","cited_by_count":19},{"id":"2107.01396","title":"Demiguise Attack: Crafting Invisible Semantic Adversarial Perturbations with Perceptual Similarity","created":"2021-07-03","cited_by_count":18},{"id":"2205.04264","title":"SwinIQA: Learned Swin Distance for Compressed Image Quality Assessment","created":"2022-05-09","cited_by_count":14},{"id":"2009.12987","title":"AIM 2020 Challenge on Video Temporal Super-Resolution","created":"2020-09-28","cited_by_count":5}],"next_cursor":null}