{"list":"other","total":93,"rows":[{"id":"2203.02155","title":"Training language models to follow instructions with human feedback","created":"2022-03-04","cited_by_count":15971},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2205.11916","title":"Large Language Models are Zero-Shot Reasoners","created":"2022-05-24","cited_by_count":4374},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1909.08593","title":"Fine-Tuning Language Models from Human Preferences","created":"2019-09-18","cited_by_count":2150},{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1912.02781","title":"AugMix: A Simple Data Processing Method to Improve Robustness and Uncertainty","created":"2019-12-05","cited_by_count":901},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"2008.02275","title":"Aligning AI With Shared Human Values","created":"2020-08-05","cited_by_count":723},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1706.08947","title":"Exploring Generalization in Deep Learning","created":"2017-06-27","cited_by_count":600},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1811.00995","title":"Invertible Residual Networks","created":"2018-11-02","cited_by_count":365},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"2306.15447","title":"Are aligned neural networks adversarially aligned?","created":"2023-06-26","cited_by_count":315},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"2109.13916","title":"Unsolved Problems in ML Safety","created":"2021-09-28","cited_by_count":292},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"2103.06624","title":"Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verification","created":"2021-03-11","cited_by_count":228},{"id":"2306.12001","title":"An Overview of Catastrophic AI Risks","created":"2023-06-21","cited_by_count":222},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"2006.04924","title":"A Self-supervised Approach for Adversarial Robustness","created":"2020-06-08","cited_by_count":180},{"id":"2006.04710","title":"The Lipschitz Constant of Self-Attention","created":"2020-06-08","cited_by_count":174},{"id":"1809.08098","title":"Efficient Formal Safety Analysis of Neural Networks","created":"2018-09-19","cited_by_count":165},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1909.06588","title":"Branch and Bound for Piecewise Linear Neural Network Verification","created":"2019-09-14","cited_by_count":138},{"id":"2206.10550","title":"(Certified!!) Adversarial Robustness for Free!","created":"2022-06-21","cited_by_count":132},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"1902.08722","title":"A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks","created":"2019-02-23","cited_by_count":125},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108},{"id":"2009.04131","title":"SoK: Certified Robustness for Deep Neural Networks","created":"2020-09-09","cited_by_count":105},{"id":"2104.07167","title":"Orthogonalizing Convolutional Layers with the Cayley Transform","created":"2021-04-14","cited_by_count":105},{"id":"1903.01287","title":"Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programming","created":"2019-03-04","cited_by_count":101},{"id":"1905.04172","title":"On the Connection Between Adversarial Robustness and Saliency Map Interpretability","created":"2019-05-10","cited_by_count":80},{"id":"1909.00900","title":"Metric Learning for Adversarial Robustness","created":"2019-09-03","cited_by_count":77},{"id":"1502.02590","title":"Analysis of classifiers' robustness to adversarial perturbations","created":"2015-02-09","cited_by_count":76},{"id":"2109.00498","title":"The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Results","created":"2021-08-31","cited_by_count":71},{"id":"2105.11417","title":"Skew Orthogonal Convolutions","created":"2021-05-24","cited_by_count":67},{"id":"2010.11645","title":"Enabling certification of verification-agnostic networks via memory-efficient semidefinite programming","created":"2020-10-22","cited_by_count":66},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64},{"id":"2303.03169","title":"A Unified Algebraic Perspective on Lipschitz Neural Networks","created":"2023-03-06","cited_by_count":60},{"id":"2301.05815","title":"First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)","created":"2023-01-14","cited_by_count":58},{"id":"1807.06732","title":"Motivating the Rules of the Game for Adversarial Example Research","created":"2018-07-18","cited_by_count":57},{"id":"2009.14444","title":"A law of robustness for two-layers neural networks","created":"2020-09-30","cited_by_count":55},{"id":"2111.09277","title":"SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Robustness","created":"2021-11-17","cited_by_count":49},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48},{"id":"2009.02470","title":"Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks","created":"2020-09-05","cited_by_count":45},{"id":"2103.03344","title":"WaveGuard: Understanding and Mitigating Audio Adversarial Examples","created":"2021-03-04","cited_by_count":40},{"id":"2106.10189","title":"Adversarial Training Helps Transfer Learning via Better Representations","created":"2021-06-18","cited_by_count":36},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26},{"id":"2206.04310","title":"GSmooth: Certified Robustness against Semantic Transformations via Generalized Randomized Smoothing","created":"2022-06-09","cited_by_count":23},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23},{"id":"2103.11257","title":"Robust Models Are More Interpretable Because Attributions Look Normal","created":"2021-03-20","cited_by_count":21},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21},{"id":"2302.04634","title":"Closed-loop Analysis of Vision-based Autonomous Systems: A Case Study","created":"2023-02-06","cited_by_count":18},{"id":"2206.03669","title":"Toward Certified Robustness Against Real-World Distribution Shifts","created":"2022-06-08","cited_by_count":16},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15},{"id":"1811.03194","title":"AdVersarial: Perceptual Ad Blocking meets Adversarial Machine Learning","created":"2018-11-08","cited_by_count":14},{"id":"2206.01367","title":"Adversarial Unlearning: Reducing Confidence Along Adversarial Directions","created":"2022-06-03","cited_by_count":14},{"id":"2207.11177","title":"Provable Defense Against Geometric Transformations","created":"2022-07-22","cited_by_count":14},{"id":"2301.12549","title":"Unlocking Deterministic Robustness Certification on ImageNet","created":"2023-01-29","cited_by_count":13},{"id":"2203.03888","title":"ART-Point: Improving Rotation Robustness of Point Cloud Classifiers via Adversarial Rotation","created":"2022-03-08","cited_by_count":12},{"id":"2203.01439","title":"Enhancing Adversarial Robustness for Deep Metric Learning","created":"2022-03-02","cited_by_count":10},{"id":"2303.12669","title":"An Extended Study of Human-like Behavior under Adversarial Training","created":"2023-03-22","cited_by_count":9},{"id":"2305.10388","title":"Raising the Bar for Certified Adversarial Robustness with Diffusion Models","created":"2023-05-17","cited_by_count":7},{"id":"1802.06627","title":"Robustness of Rotation-Equivariant Networks to Adversarial Perturbations","created":"2018-02-19","cited_by_count":6},{"id":"2008.03364","title":"Improving the Speed and Quality of GAN by Adversarial Training","created":"2020-08-07","cited_by_count":6},{"id":"1906.00628","title":"Fast and Stable Interval Bounds Propagation for Training Verifiably Robust Models","created":"2019-06-03","cited_by_count":5},{"id":"2202.03360","title":"Discrete-Event Controller Synthesis for Autonomous Systems with Deep-Learning Perception Components","created":"2022-02-07","cited_by_count":5},{"id":"2306.01271","title":"On the Clean Generalization and Robust Overfitting in Adversarial Training from Two Theoretical Views: Representation Complexity and Training Dynamics","created":"2023-06-02","cited_by_count":5},{"id":"2301.08842","title":"Limitations of Piecewise Linearity for Efficient Robustness Certification","created":"2023-01-21","cited_by_count":4},{"id":"2310.02513","title":"A Recipe for Improved Certifiable Robustness","created":"2023-10-04","cited_by_count":4}],"next_cursor":null}