{"list":"other","total":51,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2201.03545","title":"A ConvNet for the 2020s","created":"2022-01-10","cited_by_count":3579},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1604.07316","title":"End to End Learning for Self-Driving Cars","created":"2016-04-25","cited_by_count":1009},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1504.00702","title":"End-to-End Training of Deep Visuomotor Policies","created":"2015-04-02","cited_by_count":875},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1702.02284","title":"Adversarial Attacks on Neural Network Policies","created":"2017-02-08","cited_by_count":320},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1906.04893","title":"Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networks","created":"2019-06-12","cited_by_count":293},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95},{"id":"2010.04925","title":"Regularizing Neural Networks via Adversarial Model Perturbation","created":"2020-10-10","cited_by_count":78},{"id":"2111.01124","title":"When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?","created":"2021-11-01","cited_by_count":77},{"id":"1912.11969","title":"Efficient Adversarial Training with Transferable Adversarial Examples","created":"2019-12-27","cited_by_count":56},{"id":"1612.01051","title":"SqueezeDet: Unified, Small, Low Power Fully Convolutional Neural Networks for Real-Time Object Detection for Autonomous Driving","created":"2016-12-04","cited_by_count":55},{"id":"1910.08051","title":"Instance adaptive adversarial training: Improved accuracy tradeoffs in neural nets","created":"2019-10-17","cited_by_count":55},{"id":"1906.06784","title":"Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Too Much Accuracy","created":"2019-06-16","cited_by_count":49},{"id":"2002.10025","title":"Triple Wins: Boosting Accuracy, Robustness and Efficiency Together by Enabling Input-Adaptive Inference","created":"2020-02-24","cited_by_count":45},{"id":"2106.09292","title":"CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothing","created":"2021-06-17","cited_by_count":42},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40},{"id":"1905.12105","title":"Certifiably Robust Interpretation in Deep Learning","created":"2019-05-28","cited_by_count":35},{"id":"2201.01965","title":"Efficient Global Optimization of Two-Layer ReLU Networks: Quadratic-Time Algorithms and Adversarial Training","created":"2022-01-06","cited_by_count":15},{"id":"2004.00570","title":"Tightened Convex Relaxations for Neural Network Robustness Certification","created":"2020-04-01","cited_by_count":14},{"id":"2309.13794","title":"Projected Randomized Smoothing for Certified Adversarial Robustness","created":"2023-09-25","cited_by_count":11},{"id":"2010.01171","title":"Data-Driven Certification of Neural Networks with Random Input Noise","created":"2020-10-02","cited_by_count":8},{"id":"2010.08603","title":"A Sequential Framework Towards an Exact SDP Verification of Neural Networks","created":"2020-10-16","cited_by_count":6},{"id":"2105.12237","title":"Practical Convex Formulation of Robust One-hidden-layer Neural Network Training","created":"2021-05-25","cited_by_count":4},{"id":"2208.08697","title":"Resisting Adversarial Attacks in Deep Neural Networks using Diverse Decision Boundaries","created":"2022-08-18","cited_by_count":4}],"next_cursor":null}