{"list":"other","total":53,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1411.4038","title":"Fully Convolutional Networks for Semantic Segmentation","created":"2014-11-14","cited_by_count":4859},{"id":"1606.00915","title":"DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFs","created":"2016-06-02","cited_by_count":3241},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1612.01105","title":"Pyramid Scene Parsing Network","created":"2016-12-04","cited_by_count":2479},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1412.7062","title":"Semantic Image Segmentation with Deep Convolutional Nets and Fully Connected CRFs","created":"2014-12-22","cited_by_count":554},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1703.08603","title":"Adversarial Examples for Semantic Segmentation and Object Detection","created":"2017-03-24","cited_by_count":275},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1712.02328","title":"Generative Adversarial Perturbations","created":"2017-12-06","cited_by_count":153},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"1711.09856","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","created":"2017-11-27","cited_by_count":126},{"id":"1811.09600","title":"Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses","created":"2018-11-23","cited_by_count":109},{"id":"1811.12641","title":"Transferable Adversarial Attacks for Image and Video Object Detection","created":"2018-11-30","cited_by_count":109},{"id":"2104.11892","title":"A Survey of Modern Deep Learning based Object Detection Models","created":"2021-04-24","cited_by_count":98},{"id":"1704.05712","title":"Universal Adversarial Perturbations Against Semantic Image Segmentation","created":"2017-04-19","cited_by_count":92},{"id":"1801.08092","title":"Generalizable Data-free Objective for Crafting Universal Adversarial Perturbations","created":"2018-01-24","cited_by_count":88},{"id":"2207.12391","title":"SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness","created":"2022-07-25","cited_by_count":74},{"id":"1707.08945","title":"Robust Physical-World Attacks on Deep Learning Models","created":"2017-07-27","cited_by_count":72},{"id":"1707.05572","title":"Fast Feature Fool: A data independent approach to universal adversarial perturbations","created":"2017-07-18","cited_by_count":66},{"id":"1703.09387","title":"Adversarial Transformation Networks: Learning to Generate Adversarial Examples","created":"2017-03-28","cited_by_count":62},{"id":"2004.14861","title":"Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability","created":"2020-04-29","cited_by_count":57},{"id":"2108.06179","title":"Evaluating the Robustness of Semantic Segmentation for Autonomous Driving against Real-World Adversarial Patch Attacks","created":"2021-08-13","cited_by_count":55},{"id":"1712.03390","title":"NAG: Network for Adversary Generation","created":"2017-12-09","cited_by_count":51},{"id":"2004.12519","title":"Transferable Perturbations of Deep Feature Distributions","created":"2020-04-27","cited_by_count":51},{"id":"2102.12827","title":"Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints","created":"2021-02-25","cited_by_count":50},{"id":"1712.02494","title":"Adversarial Examples that Fool Detectors","created":"2017-12-07","cited_by_count":40},{"id":"1810.05162","title":"Characterizing Adversarial Examples Based on Spatial Consistency Information for Semantic Segmentation","created":"2018-10-11","cited_by_count":40},{"id":"1703.01101","title":"Adversarial Examples for Semantic Image Segmentation","created":"2017-03-03","cited_by_count":33},{"id":"2201.01850","title":"On the Real-World Adversarial Robustness of Real-Time Semantic Segmentation Models for Autonomous Driving","created":"2022-01-05","cited_by_count":30},{"id":"2011.11857","title":"Augmented Lagrangian Adversarial Attacks","created":"2020-11-24","cited_by_count":28},{"id":"1809.05962","title":"Robust Adversarial Perturbation on Deep Proposal-based Models","created":"2018-09-16","cited_by_count":26},{"id":"1907.13124","title":"Impact of Adversarial Examples on Deep Learning Models for Biomedical Image Segmentation","created":"2019-07-30","cited_by_count":26},{"id":"1904.00979","title":"Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses","created":"2019-04-01","cited_by_count":23},{"id":"2206.07179","title":"Proximal Splitting Adversarial Attacks for Semantic Segmentation","created":"2022-06-14","cited_by_count":23},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8},{"id":"2004.04320","title":"TOG: Targeted Adversarial Objectness Gradient Attacks on Real-time Object Detection Systems","created":"2020-04-09","cited_by_count":7},{"id":"2003.04367","title":"Category-wise Attack: Transferable Adversarial Examples for Anchor Free Object Detection","created":"2020-02-10","cited_by_count":5}],"next_cursor":null}