{"list":"other","total":59,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1907.02893","title":"Invariant Risk Minimization","created":"2019-07-05","cited_by_count":1854},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"2010.01412","title":"Sharpness-Aware Minimization for Efficiently Improving Generalization","created":"2020-10-03","cited_by_count":1417},{"id":"2012.07421","title":"WILDS: A Benchmark of in-the-Wild Distribution Shifts","created":"2020-12-14","cited_by_count":1375},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"2006.09994","title":"Noise or Signal: The Role of Image Backgrounds in Object Recognition","created":"2020-06-17","cited_by_count":343},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2005.04345","title":"An Investigation of Why Overparameterization Exacerbates Spurious Correlations","created":"2020-05-09","cited_by_count":310},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"2011.12945","title":"No Subclass Left Behind: Fine-Grained Robustness in Coarse-Grained Classification Problems","created":"2020-11-25","cited_by_count":209},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"2008.04859","title":"BREEDS: Benchmarks for Subpopulation Shift","created":"2020-08-11","cited_by_count":155},{"id":"2006.12655","title":"Perceptual Adversarial Robustness: Defense Against Unseen Threat Models","created":"2020-06-22","cited_by_count":137},{"id":"1908.02729","title":"Robust Learning with Jacobian Regularization","created":"2019-08-07","cited_by_count":129},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111},{"id":"2102.11436","title":"Model-Based Domain Generalization","created":"2021-02-23","cited_by_count":104},{"id":"2002.10477","title":"Precise Tradeoffs in Adversarial Training for Linear Regression","created":"2020-02-24","cited_by_count":77},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76},{"id":"2003.02484","title":"Adversarial Vertex Mixup: Toward Better Adversarially Robust Generalization","created":"2020-03-05","cited_by_count":73},{"id":"1511.03034","title":"Learning with a Strong Adversary","created":"2015-11-10","cited_by_count":68},{"id":"2207.09944","title":"Probable Domain Generalization via Quantile Risk Minimization","created":"2022-07-20","cited_by_count":66},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55},{"id":"2206.08675","title":"Understanding Robust Overfitting of Adversarial Training and Beyond","created":"2022-06-17","cited_by_count":51},{"id":"2104.09658","title":"Calibration and Consistency of Adversarial Surrogate Losses","created":"2021-04-19","cited_by_count":47},{"id":"1910.09338","title":"An Alternative Surrogate Loss for PGD-based Adversarial Testing","created":"2019-10-21","cited_by_count":45},{"id":"1912.10185","title":"Jacobian Adversarially Regularized Networks for Robustness","created":"2019-12-21","cited_by_count":40},{"id":"2006.05161","title":"Provable tradeoffs in adversarially robust classification","created":"2020-06-09","cited_by_count":40},{"id":"2110.15767","title":"Adversarial Robustness with Semi-Infinite Constrained Learning","created":"2021-10-29","cited_by_count":39},{"id":"2202.01136","title":"Probabilistically Robust Learning: Balancing Average- and Worst-case Performance","created":"2022-02-02","cited_by_count":37},{"id":"2005.13748","title":"Calibrated Surrogate Losses for Adversarially Robust Classification","created":"2020-05-28","cited_by_count":36},{"id":"2212.11005","title":"Revisiting Residual Networks for Adversarial Robustness: An Architectural Perspective","created":"2022-12-21","cited_by_count":28},{"id":"1810.12042","title":"Logit Pairing Methods Can Fool Gradient-Based Attacks","created":"2018-10-29","cited_by_count":27},{"id":"2002.04725","title":"More Data Can Expand the Generalization Gap Between Adversarially Robust and Standard Models","created":"2020-02-11","cited_by_count":27},{"id":"2006.05620","title":"Exploring the Vulnerability of Deep Neural Networks: A Study of Parameter Corruption","created":"2020-06-10","cited_by_count":26},{"id":"2106.02078","title":"Improving Neural Network Robustness via Persistency of Excitation","created":"2021-06-03","cited_by_count":14},{"id":"2203.09739","title":"Do Deep Networks Transfer Invariances Across Classes?","created":"2022-03-18","cited_by_count":12},{"id":"2205.10022","title":"Towards Consistency in Adversarial Classification","created":"2022-05-20","cited_by_count":12},{"id":"1903.11359","title":"Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attacks","created":"2019-03-27","cited_by_count":11},{"id":"2305.09956","title":"The Adversarial Consistency of Surrogate Risks for Binary Classification","created":"2023-05-17","cited_by_count":6},{"id":"1606.09202","title":"Tighter bounds lead to improved classifiers","created":"2016-06-29","cited_by_count":3}],"next_cursor":null}