{"list":"other","total":188,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1505.04597","title":"U-Net: Convolutional Networks for Biomedical Image Segmentation","created":"2015-05-18","cited_by_count":19713},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1506.01497","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","created":"2015-06-04","cited_by_count":9639},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1703.06870","title":"Mask R-CNN","created":"2017-03-20","cited_by_count":7277},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1512.02325","title":"SSD: Single Shot MultiBox Detector","created":"2015-12-08","cited_by_count":3130},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1804.02767","title":"YOLOv3: An Incremental Improvement","created":"2018-04-08","cited_by_count":2659},{"id":"1611.05431","title":"Aggregated Residual Transformations for Deep Neural Networks","created":"2016-11-16","cited_by_count":2546},{"id":"1905.02244","title":"Searching for MobileNetV3","created":"2019-05-06","cited_by_count":1994},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1902.10811","title":"Do ImageNet Classifiers Generalize to ImageNet?","created":"2019-02-13","cited_by_count":1515},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1811.12231","title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","created":"2018-11-29","cited_by_count":1432},{"id":"1612.08242","title":"YOLO9000: Better, Faster, Stronger","created":"2016-12-25","cited_by_count":1431},{"id":"1907.07174","title":"Natural Adversarial Examples","created":"2019-07-16","cited_by_count":1408},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1807.11164","title":"ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Design","created":"2018-07-30","cited_by_count":1136},{"id":"1905.13549","title":"Learning Robust Global Representations by Penalizing Local Predictive Power","created":"2019-05-29","cited_by_count":1013},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1711.10398","title":"DOTA: A Large-scale Dataset for Object Detection in Aerial Images","created":"2017-11-28","cited_by_count":623},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1912.02424","title":"Bridging the Gap Between Anchor-based and Anchor-free Detection via Adaptive Training Sample Selection","created":"2019-12-05","cited_by_count":540},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"2007.00644","title":"Measuring Robustness to Natural Distribution Shifts in Image Classification","created":"2020-07-01","cited_by_count":454},{"id":"1906.09756","title":"Cascade R-CNN: High Quality Object Detection and Instance Segmentation","created":"2019-06-24","cited_by_count":429},{"id":"2204.00964","title":"AdaFace: Quality Adaptive Margin for Face Recognition","created":"2022-04-03","cited_by_count":391},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"1608.05167","title":"AID: A Benchmark Dataset for Performance Evaluation of Aerial Scene Classification","created":"2016-08-18","cited_by_count":347},{"id":"1909.00133","title":"Object Detection in Optical Remote Sensing Images: A Survey and A New Benchmark","created":"2019-08-31","cited_by_count":340},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"2006.07159","title":"Are we done with ImageNet?","created":"2020-06-12","cited_by_count":333},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"2204.05575","title":"DAIR-V2X: A Large-Scale Dataset for Vehicle-Infrastructure Cooperative 3D Object Detection","created":"2022-04-12","cited_by_count":273},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1904.11490","title":"RepPoints: Point Set Representation for Object Detection","created":"2019-04-25","cited_by_count":264},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"2008.13367","title":"VarifocalNet: An IoU-aware Dense Object Detector","created":"2020-08-31","cited_by_count":231},{"id":"2108.07755","title":"TOOD: Task-aligned One-stage Object Detection","created":"2021-08-17","cited_by_count":218},{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207},{"id":"2012.10544","title":"Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses","created":"2020-12-18","cited_by_count":180},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"1910.14667","title":"Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors","created":"2019-10-31","cited_by_count":155},{"id":"1907.10456","title":"Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems","created":"2019-07-24","cited_by_count":153},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1907.10823","title":"Enhancing Adversarial Example Transferability with an Intermediate Level Attack","created":"2019-07-23","cited_by_count":140},{"id":"1903.00621","title":"Feature Selective Anchor-Free Module for Single-Shot Object Detection","created":"2019-03-02","cited_by_count":139},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"2004.00543","title":"Physically Realizable Adversarial Examples for LiDAR Object Detection","created":"2020-04-01","cited_by_count":137},{"id":"2006.14580","title":"Backdoor Attacks Against Deep Learning Systems in the Physical World","created":"2020-06-25","cited_by_count":134},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128},{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127},{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1806.11146","title":"Adversarial Reprogramming of Neural Networks","created":"2018-06-28","cited_by_count":116},{"id":"2303.11040","title":"Benchmarking Robustness of 3D Object Detection to Common Corruptions in Autonomous Driving","created":"2023-03-20","cited_by_count":114},{"id":"1801.02608","title":"LaVAN: Localized and Visible Adversarial Noise","created":"2018-01-08","cited_by_count":113},{"id":"2106.09249","title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks","created":"2021-06-17","cited_by_count":101},{"id":"2203.03818","title":"Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon","created":"2022-03-08","cited_by_count":101},{"id":"2203.03373","title":"Adversarial Texture for Fooling Person Detectors in the Physical World","created":"2022-03-07","cited_by_count":96},{"id":"2006.16974","title":"Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures","created":"2020-06-30","cited_by_count":95},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93},{"id":"1909.04326","title":"Universal Physical Camouflage Attacks on Object Detectors","created":"2019-09-10","cited_by_count":91},{"id":"1909.02466","title":"FreeAnchor: Learning to Match Anchors for Visual Object Detection","created":"2019-09-05","cited_by_count":90},{"id":"2303.09105","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","created":"2023-03-16","cited_by_count":89},{"id":"1801.08092","title":"Generalizable Data-free Objective for Crafting Universal Adversarial Perturbations","created":"2018-01-24","cited_by_count":88},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85},{"id":"1801.00349","title":"A General Framework for Adversarial Examples with Objectives","created":"2017-12-31","cited_by_count":84},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75}],"next_cursor":"100"}