{"list":"other","total":69,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1804.04368","title":"Regularisation of Neural Networks by Enforcing Lipschitz Continuity","created":"2018-04-12","cited_by_count":314},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1909.08072","title":"Adversarial Attacks and Defenses in Images, Graphs and Text: A Review","created":"2019-09-17","cited_by_count":237},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1811.05381","title":"Sorting out Lipschitz function approximation","created":"2018-11-13","cited_by_count":213},{"id":"1802.04034","title":"Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks","created":"2018-02-12","cited_by_count":195},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1907.10456","title":"Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems","created":"2019-07-24","cited_by_count":153},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"2004.00543","title":"Physically Realizable Adversarial Examples for LiDAR Object Detection","created":"2020-04-01","cited_by_count":137},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"2009.04131","title":"SoK: Certified Robustness for Deep Neural Networks","created":"2020-09-09","cited_by_count":105},{"id":"1705.01040","title":"Maximum Resilience of Artificial Neural Networks","created":"2017-04-28","cited_by_count":97},{"id":"1704.05712","title":"Universal Adversarial Perturbations Against Semantic Image Segmentation","created":"2017-04-19","cited_by_count":92},{"id":"1804.00499","title":"Semantic Adversarial Examples","created":"2018-03-16","cited_by_count":86},{"id":"1801.00349","title":"A General Framework for Adversarial Examples with Objectives","created":"2017-12-31","cited_by_count":84},{"id":"2006.04062","title":"Consistency Regularization for Certified Robustness of Smoothed Classifiers","created":"2020-06-07","cited_by_count":73},{"id":"1904.08489","title":"Semantic Adversarial Attacks: Parametric Transformations That Fool Deep Classifiers","created":"2019-04-17","cited_by_count":57},{"id":"2002.12463","title":"Certified Defense to Image Transformations via Randomized Smoothing","created":"2020-02-27","cited_by_count":51},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51},{"id":"2002.12398","title":"TSS: Transformation-Specific Smoothing for Robustness Certification","created":"2020-02-27","cited_by_count":49},{"id":"2101.06784","title":"Exploring Adversarial Robustness of Multi-Sensor Perception Systems in Self Driving","created":"2021-01-17","cited_by_count":45},{"id":"2004.10281","title":"Probabilistic Safety for Bayesian Neural Networks","created":"2020-04-21","cited_by_count":42},{"id":"2006.00731","title":"Second-Order Provable Defenses against Adversarial Attacks","created":"2020-06-01","cited_by_count":40},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39},{"id":"1912.01667","title":"A Survey of Black-Box Adversarial Attacks on Computer Vision Models","created":"2019-12-03","cited_by_count":37},{"id":"2010.06651","title":"Higher-Order Certification for Randomized Smoothing","created":"2020-10-13","cited_by_count":37},{"id":"1910.07067","title":"On adversarial patches: real-world attack on ArcFace-100 face recognition system","created":"2019-10-15","cited_by_count":35},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26},{"id":"2206.04310","title":"GSmooth: Certified Robustness against Semantic Transformations via Generalized Randomized Smoothing","created":"2022-06-09","cited_by_count":23},{"id":"1712.01785","title":"Towards Practical Verification of Machine Learning: The Case of Computer Vision Systems","created":"2017-12-05","cited_by_count":19},{"id":"2109.10696","title":"CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networks","created":"2021-09-22","cited_by_count":19},{"id":"1805.12302","title":"Adversarial Attacks on Face Detectors using Neural Net based Constrained Optimization","created":"2018-05-31","cited_by_count":18},{"id":"2003.08937","title":"Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates","created":"2020-03-19","cited_by_count":18},{"id":"2107.00996","title":"DeformRS: Certifying Input Deformations with Randomized Smoothing","created":"2021-07-02","cited_by_count":17},{"id":"1904.07370","title":"Are Self-Driving Cars Secure? Evasion Attacks against Deep Neural Networks for Steering Angle Prediction","created":"2019-04-15","cited_by_count":16},{"id":"1910.06261","title":"Real-world adversarial attack on MTCNN face detection system","created":"2019-10-14","cited_by_count":14},{"id":"2112.03000","title":"Sequential Randomized Smoothing for Adversarially Robust Speech Recognition","created":"2021-11-05","cited_by_count":13},{"id":"2010.10549","title":"Tight Second-Order Certificates for Randomized Smoothing","created":"2020-10-20","cited_by_count":10},{"id":"2106.14432","title":"Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations","created":"2021-06-28","cited_by_count":6},{"id":"1912.09533","title":"Towards Verifying Robustness of Neural Networks Against Semantic Perturbations","created":"2019-12-19","cited_by_count":3}],"next_cursor":null}