{"total":39,"rows":[{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38,"area":null},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21,"area":null},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16,"area":null},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2408.05446","title":"Ensemble everything everywhere: Multi-scale aggregation for adversarial robustness","created":"2024-08-08","cited_by_count":12,"area":null},{"id":"2510.27172","title":"Adaptive Defense against Harmful Fine-Tuning for Large Language Models via Bayesian Data Scheduler","created":"2025-10-31","cited_by_count":12,"area":null},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9,"area":null},{"id":"2402.01879","title":"$\\sigma$-zero: Gradient-based Optimization of $\\ell_0$-norm Adversarial Examples","created":"2024-02-02","cited_by_count":7,"area":null},{"id":"2310.04285","title":"Assessing Robustness via Score-Based Adversarial Image Generation","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2311.05565","title":"High-Performance Transformers for Table Structure Recognition Need Early Convolutions","created":"2023-11-09","cited_by_count":4,"area":null},{"id":"2402.07183","title":"A Random Ensemble of Encrypted Vision Transformers for Adversarially Robust Defense","created":"2024-02-11","cited_by_count":3,"area":null},{"id":"2404.16956","title":"A Notion of Uniqueness for the Adversarial Bayes Classifier","created":"2024-04-25","cited_by_count":3,"area":null},{"id":"2406.19622","title":"Data-Driven Lipschitz Continuity: A Cost-Effective Approach to Improve Adversarial Robustness","created":"2024-06-28","cited_by_count":3,"area":null},{"id":"2411.15210","title":"Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks","created":"2024-11-20","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2406.13283","title":"Large-Scale Dataset Pruning in Adversarial Training through Data Importance Extrapolation","created":"2024-06-19","cited_by_count":2,"area":null},{"id":"2408.10204","title":"Criticality Leveraged Adversarial Training (CLAT) for Boosted Performance via Parameter Efficiency","created":"2024-08-19","cited_by_count":2,"area":null},{"id":"2410.21952","title":"On the Robustness of Adversarial Training Against Uncertainty Attacks","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2412.20987","title":"RobustBlack: Challenging Black-Box Adversarial Attacks on State-of-the-Art Defenses","created":"2024-12-30","cited_by_count":2,"area":null},{"id":"2505.22486","title":"Understanding Adversarial Training with Energy-based Models","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2310.11890","title":"IRAD: Implicit Representation-driven Image Resampling against Adversarial Attacks","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2402.06827","title":"RAMP: Boosting Adversarial Robustness Against Multiple $l_p$ Perturbations for Universal Robustness","created":"2024-02-09","cited_by_count":1,"area":null},{"id":"2405.15971","title":"Robust width: A lightweight and certifiable adversarial defense","created":"2024-05-24","cited_by_count":1,"area":null},{"id":"2410.03000","title":"Towards Generalized Certified Robustness with Multi-Norm Training","created":"2024-10-03","cited_by_count":1,"area":null},{"id":"2601.17536","title":"OTI: A Model-free and Visually Interpretable Measure of Image Attackability","created":"2026-01-24","cited_by_count":1,"area":null},{"id":"2603.03507","title":"Solving adversarial examples requires solving exponential misalignment","created":"2026-03-03","cited_by_count":1,"area":null},{"id":"2604.22853","title":"FastAT Benchmark: A Comprehensive Framework for Fair Evaluation of Fast Adversarial Training Methods","created":"2026-04-22","cited_by_count":1,"area":null},{"id":"2404.06313","title":"On adversarial training and the 1 Nearest Neighbor classifier","created":"2024-04-09","cited_by_count":0,"area":null},{"id":"2408.03972","title":"Enhancing Output Diversity Improves Conjugate Gradient-based Adversarial Attacks","created":"2024-08-07","cited_by_count":0,"area":null},{"id":"2409.04819","title":"Top-GAP: Integrating Size Priors in CNNs for more Interpretability, Robustness, and Bias Mitigation","created":"2024-09-07","cited_by_count":0,"area":null},{"id":"2502.17972","title":"Model-Free Adversarial Purification via Coarse-To-Fine Tensor Network Representation","created":"2025-02-25","cited_by_count":0,"area":null},{"id":"2504.16474","title":"Seeking Flat Minima over Diverse Surrogates for Improved Adversarial Transferability: A Theoretical Framework and Algorithmic Instantiation","created":"2025-04-23","cited_by_count":0,"area":null},{"id":"2511.11993","title":"Dynamic Parameter Optimization for Highly Transferable Transformation-Based Attacks","created":"2025-11-15","cited_by_count":0,"area":null},{"id":"2603.25244","title":"Fast Preemptive Robustification: High-Frequency Response Anti-Aligns Shared Vulnerability","created":"2026-03-26","cited_by_count":0,"area":null},{"id":"2603.25517","title":"NERO-Net: A Neuroevolutionary Approach for the Design of Adversarially Robust CNNs","created":"2026-03-26","cited_by_count":0,"area":null},{"id":"2606.22516","title":"The Scissors Effect: When Resize-Based Input Diversity Helps or Hurts Transfer Attacks","created":"2026-06-21","cited_by_count":0,"area":null},{"id":"2607.12545","title":"VanillaBench: The Hidden Accuracy Cost of Adversarial Robustness","created":"2026-07-14","cited_by_count":0,"area":null}],"next_cursor":null}