{"list":"other","total":58,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1505.07818","title":"Domain-Adversarial Training of Neural Networks","created":"2015-05-28","cited_by_count":3044},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1602.07261","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","created":"2016-02-23","cited_by_count":1512},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"2103.03097","title":"Generalizing to Unseen Domains: A Survey on Domain Generalization","created":"2021-03-02","cited_by_count":766},{"id":"2103.02503","title":"Domain Generalization: A Survey","created":"2021-03-03","cited_by_count":764},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1711.01558","title":"Wasserstein Auto-Encoders","created":"2017-11-05","cited_by_count":373},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"2003.13216","title":"Learning to Learn Single Domain Generalization","created":"2020-03-30","cited_by_count":296},{"id":"1905.01270","title":"DRIT++: Diverse Image-to-Image Translation via Disentangled Representations","created":"2019-05-02","cited_by_count":244},{"id":"1803.06373","title":"Adversarial Logit Pairing","created":"2018-03-16","cited_by_count":224},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"2008.12839","title":"Learning to Balance Specificity and Invariance for In and Out of Domain Generalization","created":"2020-08-28","cited_by_count":128},{"id":"1905.09747","title":"Adversarially Robust Distillation","created":"2019-05-23","cited_by_count":125},{"id":"1905.10427","title":"DIVA: Domain Invariant Variational Autoencoders","created":"2019-05-24","cited_by_count":115},{"id":"1904.12347","title":"Domain Agnostic Learning with Disentangled Representations","created":"2019-04-28","cited_by_count":108},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95},{"id":"2004.01959","title":"Cross-domain Face Presentation Attack Detection via Multi-domain Disentangled Representation Learning","created":"2020-04-04","cited_by_count":93},{"id":"2011.11164","title":"Learnable Boundary Guided Adversarial Training","created":"2020-11-23","cited_by_count":93},{"id":"1909.04326","title":"Universal Physical Camouflage Attacks on Object Detectors","created":"2019-09-10","cited_by_count":91},{"id":"1909.00900","title":"Metric Learning for Adversarial Robustness","created":"2019-09-03","cited_by_count":77},{"id":"2106.04928","title":"Reliable Adversarial Distillation with Unreliable Teachers","created":"2021-06-09","cited_by_count":56},{"id":"1811.10716","title":"Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attacks","created":"2018-11-26","cited_by_count":48},{"id":"1711.09115","title":"Geometric robustness of deep networks: analysis and improvement","created":"2017-11-24","cited_by_count":45},{"id":"2206.00388","title":"Transfer without Forgetting","created":"2022-06-01","cited_by_count":44},{"id":"2203.06020","title":"Enhancing Adversarial Training with Second-Order Statistics of Weights","created":"2022-03-11","cited_by_count":42},{"id":"2103.13447","title":"DRANet: Disentangling Representation and Adaptation Networks for Unsupervised Cross-Domain Adaptation","created":"2021-03-24","cited_by_count":37},{"id":"2204.02735","title":"Distilling Robust and Non-Robust Features in Adversarial Examples by Information Bottleneck","created":"2022-04-06","cited_by_count":30},{"id":"1909.09481","title":"Adversarial Learning with Margin-based Triplet Embedding Regularization","created":"2019-09-20","cited_by_count":29},{"id":"2010.01278","title":"Efficient Robust Training via Backward Smoothing","created":"2020-10-03","cited_by_count":29},{"id":"1507.06535","title":"Manitest: Are classifiers really invariant?","created":"2015-07-23","cited_by_count":27},{"id":"2106.05036","title":"Towards Defending against Adversarial Examples via Attack-Invariant Features","created":"2021-06-09","cited_by_count":25},{"id":"2106.02734","title":"Revisiting Hilbert-Schmidt Information Bottleneck for Adversarial Robustness","created":"2021-06-04","cited_by_count":20},{"id":"1901.01107","title":"Adversarial CAPTCHAs","created":"2019-01-04","cited_by_count":16},{"id":"2006.04621","title":"Adversarial Feature Desensitization","created":"2020-06-08","cited_by_count":12},{"id":"2008.11401","title":"Point Adversarial Self Mining: A Simple Method for Facial Expression Recognition","created":"2020-08-26","cited_by_count":11},{"id":"1905.03434","title":"ROSA: Robust Salient Object Detection against Adversarial Attacks","created":"2019-05-09","cited_by_count":10},{"id":"2108.06017","title":"AGKD-BML: Defense Against Adversarial Attack by Attention Guided Knowledge Distillation and Bi-directional Metric Learning","created":"2021-08-13","cited_by_count":10},{"id":"2205.11156","title":"Squeeze Training for Adversarial Robustness","created":"2022-05-23","cited_by_count":10},{"id":"2306.17431","title":"Defense against Adversarial Cloud Attack on Remote Sensing Salient Object Detection","created":"2023-06-30","cited_by_count":8},{"id":"2308.16454","title":"Adversarial Finetuning with Latent Representation Constraint to Mitigate Accuracy-Robustness Tradeoff","created":"2023-08-31","cited_by_count":7},{"id":"2101.12372","title":"Adversarial Learning with Cost-Sensitive Classes","created":"2021-01-29","cited_by_count":6}],"next_cursor":null}