{"list":"other","total":62,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1502.03167","title":"Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift","created":"2015-02-11","cited_by_count":7005},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1308.3432","title":"Estimating or Propagating Gradients Through Stochastic Neurons for Conditional Computation","created":"2013-08-15","cited_by_count":2079},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1901.09948","title":"Surrogate Gradient Learning in Spiking Neural Networks","created":"2019-01-28","cited_by_count":626},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1706.02609","title":"Spatio-Temporal Backpropagation for Training High-performance Spiking Neural Networks","created":"2017-06-08","cited_by_count":406},{"id":"2102.04159","title":"Deep Residual Learning in Spiking Neural Networks","created":"2021-02-08","cited_by_count":331},{"id":"1704.08847","title":"Parseval Networks: Improving Robustness to Adversarial Examples","created":"2017-04-28","cited_by_count":293},{"id":"2011.05280","title":"Going Deeper With Directly-Trained Larger Spiking Neural Networks","created":"2020-10-29","cited_by_count":278},{"id":"1810.08646","title":"SLAYER: Spike Layer Error Reassignment in Time","created":"2018-09-05","cited_by_count":266},{"id":"1802.02627","title":"Going Deeper in Spiking Neural Networks: VGG and Residual Architectures","created":"2018-02-07","cited_by_count":245},{"id":"1809.05793","title":"Direct Training for Spiking Neural Networks: Faster, Larger, Better","created":"2018-09-16","cited_by_count":233},{"id":"1906.06316","title":"Towards Stable and Efficient Training of Verifiably Robust Neural Networks","created":"2019-06-14","cited_by_count":205},{"id":"2202.11946","title":"Temporal Efficient Training of Spiking Neural Network via Gradient Re-weighting","created":"2022-02-24","cited_by_count":198},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194},{"id":"1803.09574","title":"Long short-term memory and learning-to-learn in networks of spiking neurons","created":"2018-03-26","cited_by_count":181},{"id":"2010.01950","title":"Torchattacks: A PyTorch Repository for Adversarial Attacks","created":"2020-09-24","cited_by_count":158},{"id":"2003.01811","title":"RMP-SNN: Residual Membrane Potential Neuron for Enabling Deeper High-Accuracy and Low-Latency Spiking Neural Network","created":"2020-02-25","cited_by_count":145},{"id":"2005.01807","title":"Enabling Deep Spiking Neural Networks with Hybrid Conversion and Spike Timing Dependent Backpropagation","created":"2020-05-04","cited_by_count":144},{"id":"1903.06379","title":"Enabling Spike-based Backpropagation for Training Deep Neural Network Architectures","created":"2019-03-15","cited_by_count":123},{"id":"2303.04347","title":"Optimal ANN-SNN Conversion for High-accuracy and Ultra-low-latency Spiking Neural Networks","created":"2023-03-08","cited_by_count":122},{"id":"2106.06984","title":"A Free Lunch From ANN: Towards Efficient, Accurate Spiking Neural Networks Calibration","created":"2021-06-13","cited_by_count":117},{"id":"2010.01729","title":"Revisiting Batch Normalization for Training Low-latency Deep Spiking Neural Networks from Scratch","created":"2020-10-05","cited_by_count":80},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71},{"id":"2110.11417","title":"HIRE-SNN: Harnessing the Inherent Robustness of Energy-Efficient Deep Spiking Neural Networks by Training with Crafted Input Noise","created":"2021-10-06","cited_by_count":65},{"id":"2011.06176","title":"LIAF-Net: Leaky Integrate and Analog Fire Network for Lightweight and Efficient Spatiotemporal Information Processing","created":"2020-11-12","cited_by_count":56},{"id":"2003.10399","title":"Inherent Adversarial Robustness of Deep Spiking Neural Networks: Effects of Discrete Input Encoding and Non-Linear Activations","created":"2020-03-23","cited_by_count":48},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42},{"id":"1709.00609","title":"Security Evaluation of Pattern Classifiers under Attack","created":"2017-09-02","cited_by_count":39},{"id":"2002.10064","title":"Exploring the Connection Between Binary and Spiking Neural Networks","created":"2020-02-24","cited_by_count":38},{"id":"1905.02704","title":"A Comprehensive Analysis on Adversarial Robustness of Spiking Neural Networks","created":"2019-05-07","cited_by_count":36},{"id":"2010.03316","title":"Batch Normalization Increases Adversarial Vulnerability and Decreases Adversarial Transferability: A Non-Robust Feature Perspective","created":"2020-10-07","cited_by_count":35},{"id":"1612.04052","title":"Theory and Tools for the Conversion of Analog to Spiking Convolutional Neural Networks","created":"2016-12-13","cited_by_count":31},{"id":"2001.01587","title":"Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient","created":"2020-01-01","cited_by_count":31},{"id":"2012.05321","title":"Securing Deep Spiking Neural Networks against Adversarial Attacks through Inherent Structural Parameters","created":"2020-12-09","cited_by_count":27},{"id":"2103.14441","title":"Visual Explanations from Spiking Neural Networks using Interspike Intervals","created":"2021-03-26","cited_by_count":27},{"id":"2202.03133","title":"Rate Coding or Direct Coding: Which One is Better for Accurate, Robust, and Energy-efficient Spiking Neural Networks?","created":"2022-01-31","cited_by_count":25},{"id":"2207.01156","title":"Removing Batch Normalization Boosts Adversarial Training","created":"2022-07-04","cited_by_count":24},{"id":"2106.09947","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples","created":"2021-06-18","cited_by_count":23},{"id":"2107.00415","title":"DVS-Attacks: Adversarial Attacks on Dynamic Vision Sensors for Spiking Neural Networks","created":"2021-07-01","cited_by_count":21},{"id":"2104.03414","title":"PrivateSNN: Privacy-Preserving Spiking Neural Networks","created":"2021-04-07","cited_by_count":15},{"id":"2110.02929","title":"Adversarial Attacks on Spiking Convolutional Neural Networks for Event-based Vision","created":"2021-10-06","cited_by_count":14},{"id":"2209.03358","title":"Attacking the Spike: On the Transferability and Security of Spiking Neural Networks to Adversarial Examples","created":"2022-09-07","cited_by_count":13},{"id":"2205.01625","title":"Toward Robust Spiking Neural Network Against Adversarial Perturbation","created":"2022-04-12","cited_by_count":12},{"id":"2304.13098","title":"Uncovering the Representation of Spiking Neural Networks Trained with Surrogate Gradient","created":"2023-04-25","cited_by_count":11},{"id":"1704.01547","title":"Comment on \"Biologically inspired protection of deep networks from adversarial attacks\"","created":"2017-04-05","cited_by_count":3}],"next_cursor":null}