{"list":"other","total":52,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1709.01507","title":"Squeeze-and-Excitation Networks","created":"2017-09-05","cited_by_count":4789},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1411.1784","title":"Conditional Generative Adversarial Nets","created":"2014-11-06","cited_by_count":2162},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1807.03039","title":"Glow: Generative Flow with Invertible 1x1 Convolutions","created":"2018-07-09","cited_by_count":1545},{"id":"1602.07261","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","created":"2016-02-23","cited_by_count":1512},{"id":"1807.11164","title":"ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Design","created":"2018-07-30","cited_by_count":1136},{"id":"1410.8516","title":"NICE: Non-linear Independent Components Estimation","created":"2014-10-30","cited_by_count":1058},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1712.02328","title":"Generative Adversarial Perturbations","created":"2017-12-06","cited_by_count":153},{"id":"1907.02392","title":"Guided Image Generation with Conditional Invertible Neural Networks","created":"2019-07-04","cited_by_count":147},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"1911.07140","title":"Black-Box Adversarial Attack with Transferable Model-based Embedding","created":"2019-11-17","cited_by_count":57},{"id":"1912.07009","title":"C-Flow: Conditional Generative Flow Models for Images and 3D Point Clouds","created":"2019-12-15","cited_by_count":50},{"id":"1711.05929","title":"Defense against Universal Adversarial Perturbations","created":"2017-11-16","cited_by_count":48},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38},{"id":"1905.13288","title":"Structured Output Learning with Conditional Generative Flows","created":"2019-05-30","cited_by_count":37},{"id":"2007.07435","title":"AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows","created":"2020-07-15","cited_by_count":36},{"id":"2308.03163","title":"CGBA: Curvature-aware Geometric Black-box Attack","created":"2023-08-06","cited_by_count":21},{"id":"1904.01782","title":"Conditional Adversarial Generative Flow for Controllable Image Synthesis","created":"2019-04-03","cited_by_count":19},{"id":"1905.09591","title":"A Direct Approach to Robust Deep Learning Using Adversarial Networks","created":"2019-05-23","cited_by_count":18},{"id":"2002.07891","title":"Towards Query-Efficient Black-Box Adversary with Zeroth-Order Natural Gradient Descent","created":"2020-02-18","cited_by_count":18},{"id":"2006.03214","title":"Defense for Black-box Attacks on Anti-spoofing Models by Self-Supervised Learning","created":"2020-06-05","cited_by_count":12},{"id":"2111.07492","title":"Finding Optimal Tangent Points for Reducing Distortions of Hard-label Attacks","created":"2021-11-15","cited_by_count":11},{"id":"2105.00113","title":"IPatch: A Remote Adversarial Patch","created":"2021-04-30","cited_by_count":7},{"id":"2012.06024","title":"Robustness and Transferability of Universal Attacks on Compressed Models","created":"2020-12-10","cited_by_count":4},{"id":"2304.10088","title":"Towards the Universal Defense for Query-Based Audio Adversarial Attacks","created":"2023-04-20","cited_by_count":2}],"next_cursor":null}