{"list":"other","total":55,"rows":[{"id":"2006.11239","title":"Denoising Diffusion Probabilistic Models","created":"2020-06-19","cited_by_count":21076},{"id":"2112.10752","title":"High-Resolution Image Synthesis with Latent Diffusion Models","created":"2021-12-20","cited_by_count":18863},{"id":"2010.02502","title":"Denoising Diffusion Implicit Models","created":"2020-10-06","cited_by_count":9781},{"id":"2105.05233","title":"Diffusion Models Beat GANs on Image Synthesis","created":"2021-05-11","cited_by_count":8255},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1503.03585","title":"Deep Unsupervised Learning using Nonequilibrium Thermodynamics","created":"2015-03-12","cited_by_count":7058},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2102.09672","title":"Improved Denoising Diffusion Probabilistic Models","created":"2021-02-18","cited_by_count":3761},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"2211.09794","title":"Null-text Inversion for Editing Real Images using Guided Diffusion Models","created":"2022-11-17","cited_by_count":1179},{"id":"2209.00796","title":"Diffusion Models: A Comprehensive Survey of Methods and Applications","created":"2022-09-02","cited_by_count":1114},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2210.11427","title":"DiffEdit: Diffusion-based semantic image editing with mask guidance","created":"2022-10-20","cited_by_count":647},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"2303.09295","title":"DIRE for Diffusion-Generated Image Detection","created":"2023-03-16","cited_by_count":390},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244},{"id":"2103.01946","title":"Fixing Data Augmentation to Improve Adversarial Robustness","created":"2021-03-02","cited_by_count":204},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"2006.12655","title":"Perceptual Adversarial Robustness: Defense Against Unseen Threat Models","created":"2020-06-22","cited_by_count":137},{"id":"2210.14571","title":"Towards the Detection of Diffusion Model Deepfakes","created":"2022-10-26","cited_by_count":111},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64},{"id":"2103.14222","title":"Adversarial Attacks are Reversible with Natural Supervision","created":"2021-03-26","cited_by_count":47},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42},{"id":"2210.06284","title":"Visual Prompting for Adversarial Robustness","created":"2022-10-12","cited_by_count":34},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32},{"id":"2103.03000","title":"SpectralDefense: Detecting Adversarial Attacks on CNNs in the Fourier Domain","created":"2021-03-04","cited_by_count":30},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30},{"id":"2107.06456","title":"AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense","created":"2021-07-14","cited_by_count":10},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10},{"id":"2303.15109","title":"Improving the Transferability of Adversarial Examples via Direction Tuning","created":"2023-03-27","cited_by_count":9},{"id":"1803.09638","title":"On the Limitation of Local Intrinsic Dimensionality for Characterizing the Subspaces of Adversarial Examples","created":"2018-03-26","cited_by_count":6},{"id":"2212.06776","title":"Unfolding Local Growth Rate Estimates for (Almost) Perfect Adversarial Detection","created":"2022-12-13","cited_by_count":5},{"id":"1805.10652","title":"Defending Against Adversarial Attacks by Leveraging an Entire GAN","created":"2018-05-27","cited_by_count":4}],"next_cursor":null}