{"list":"other","total":58,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"2303.08774","title":"GPT-4 Technical Report","created":"2023-03-15","cited_by_count":18396},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1502.03167","title":"Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift","created":"2015-02-11","cited_by_count":7005},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2106.01946","title":"Convex optimization","created":"2021-06-03","cited_by_count":2515},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1707.08819","title":"A Downsampled Variant of ImageNet as an Alternative to the CIFAR datasets","created":"2017-07-27","cited_by_count":377},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1705.01320","title":"Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks","created":"2017-05-03","cited_by_count":242},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1906.06316","title":"Towards Stable and Efficient Training of Verifiably Robust Neural Networks","created":"2019-06-14","cited_by_count":205},{"id":"2011.13824","title":"Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifiers","created":"2020-11-27","cited_by_count":187},{"id":"1811.01057","title":"Semidefinite relaxations for certifying robustness to adversarial examples","created":"2018-11-02","cited_by_count":179},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1909.06588","title":"Branch and Bound for Piecewise Linear Neural Network Verification","created":"2019-09-14","cited_by_count":138},{"id":"1706.07351","title":"An approach to reachability analysis for feed-forward ReLU neural networks","created":"2017-06-22","cited_by_count":127},{"id":"1811.08359","title":"Strong mixed-integer programming formulations for trained neural networks","created":"2018-11-20","cited_by_count":115},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108},{"id":"2104.07167","title":"Orthogonalizing Convolutional Layers with the Cayley Transform","created":"2021-04-14","cited_by_count":105},{"id":"2208.05740","title":"General Cutting Planes for Bound-Propagation-Based Neural Network Verification","created":"2022-08-11","cited_by_count":103},{"id":"2205.00263","title":"Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Bound","created":"2022-04-30","cited_by_count":92},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79},{"id":"2103.03638","title":"PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximations","created":"2021-03-05","cited_by_count":77},{"id":"2109.00498","title":"The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Results","created":"2021-08-31","cited_by_count":71},{"id":"1809.03008","title":"Training for Faster Adversarial Robustness Verification via Inducing ReLU Stability","created":"2018-09-09","cited_by_count":67},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67},{"id":"2201.04122","title":"In Defense of the Unitary Scalarization for Deep Multi-Task Learning","created":"2022-01-11","cited_by_count":67},{"id":"2010.11645","title":"Enabling certification of verification-agnostic networks via memory-efficient semidefinite programming","created":"2020-10-22","cited_by_count":66},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65},{"id":"2209.11379","title":"Do Current Multi-Task Optimization Methods in Deep Learning Even Help?","created":"2022-09-23","cited_by_count":60},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51},{"id":"2006.14076","title":"The Convex Relaxation Barrier, Revisited: Tightened Single-Neuron Relaxations for Neural Network Verification","created":"2020-06-24","cited_by_count":50},{"id":"2108.04062","title":"Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100","created":"2021-08-05","cited_by_count":47},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46},{"id":"2104.06718","title":"Improved Branch and Bound for Neural Network Verification via Lagrangian Decomposition","created":"2021-04-14","cited_by_count":44},{"id":"2102.05363","title":"Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neurons","created":"2021-02-10","cited_by_count":40},{"id":"2002.10410","title":"Lagrangian Decomposition for Neural Network Verification","created":"2020-02-24","cited_by_count":35},{"id":"2210.11620","title":"LOT: Layer-wise Orthogonal Training on Improving $\\ell_2$ Certified Robustness","created":"2022-10-20","cited_by_count":33},{"id":"2110.06850","title":"Boosting the Certified Robustness of L-infinity Distance Nets","created":"2021-10-13","cited_by_count":24},{"id":"2206.14772","title":"IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound","created":"2022-06-29","cited_by_count":21},{"id":"2008.06081","title":"Adversarial Training and Provable Robustness: A Tale of Two Objectives","created":"2020-08-13","cited_by_count":12},{"id":"2102.06700","title":"On the Paradox of Certified Training","created":"2021-02-12","cited_by_count":12},{"id":"2305.04574","title":"TAPS: Connecting Certified and Adversarial Training","created":"2023-05-08","cited_by_count":11},{"id":"2101.05844","title":"Scaling the Convex Barrier with Sparse Dual Algorithms","created":"2021-01-14","cited_by_count":10},{"id":"2211.08453","title":"Improved techniques for deterministic l2 robustness","created":"2022-11-15","cited_by_count":9},{"id":"2107.10302","title":"Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks","created":"2021-07-11","cited_by_count":5},{"id":"2203.08961","title":"On the Convergence of Certified Robust Training with Interval Bound Propagation","created":"2022-03-16","cited_by_count":5}],"next_cursor":null}