{"list":"other","total":53,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1506.01497","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","created":"2015-06-04","cited_by_count":9639},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1506.02640","title":"You Only Look Once: Unified, Real-Time Object Detection","created":"2015-06-08","cited_by_count":4852},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1904.00760","title":"Approximating CNNs with Bag-of-local-Features models works surprisingly well on ImageNet","created":"2019-03-20","cited_by_count":260},{"id":"1910.02190","title":"Kornia: an Open Source Differentiable Computer Vision Library for PyTorch","created":"2019-10-05","cited_by_count":232},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1910.14667","title":"Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors","created":"2019-10-31","cited_by_count":155},{"id":"1907.06826","title":"Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving","created":"2019-07-16","cited_by_count":152},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"1801.02608","title":"LaVAN: Localized and Visible Adversarial Noise","created":"2018-01-08","cited_by_count":113},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111},{"id":"2003.06693","title":"Certified Defenses for Adversarial Patches","created":"2020-03-14","cited_by_count":101},{"id":"2106.09249","title":"Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks","created":"2021-06-17","cited_by_count":101},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93},{"id":"1909.09552","title":"Defending Against Physically Realizable Attacks on Image Classification","created":"2019-09-20","cited_by_count":66},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65},{"id":"2005.02313","title":"Adversarial Training against Location-Optimized Adversarial Patches","created":"2020-05-05","cited_by_count":50},{"id":"2012.12235","title":"Unadversarial Examples: Designing Objects for Robust Vision","created":"2020-12-22","cited_by_count":45},{"id":"2110.07719","title":"Certified Patch Robustness via Smoothed Vision Transformers","created":"2021-10-11","cited_by_count":45},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44},{"id":"2203.08519","title":"Towards Practical Certifiable Patch Defense with Vision Transformer","created":"2022-03-16","cited_by_count":44},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41},{"id":"2004.13799","title":"Minority Reports Defense: Defending Against Adversarial Patches","created":"2020-04-28","cited_by_count":36},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36},{"id":"2104.12609","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","created":"2021-04-26","cited_by_count":29},{"id":"2302.01404","title":"Provably Bounding Neural Network Preimages","created":"2023-02-02","cited_by_count":29},{"id":"2201.06192","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","created":"2022-01-17","cited_by_count":27},{"id":"2102.04154","title":"Efficient Certified Defenses Against Patch Attacks on Image Classifiers","created":"2021-02-08","cited_by_count":24},{"id":"2102.11860","title":"Automated Discovery of Adaptive Attacks on Adversarial Defenses","created":"2021-02-23","cited_by_count":22},{"id":"2204.06213","title":"Defensive Patches for Robust Recognition in the Physical World","created":"2022-04-13","cited_by_count":20},{"id":"2106.15202","title":"Inconspicuous Adversarial Patches for Fooling Image Recognition Systems on Mobile Devices","created":"2021-06-29","cited_by_count":18},{"id":"2110.14120","title":"ScaleCert: Scalable Certified Defense against Adversarial Patches with Sparse Superficial Layers","created":"2021-10-27","cited_by_count":15},{"id":"2305.14188","title":"The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attacks","created":"2023-05-23","cited_by_count":15},{"id":"2310.13076","title":"PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses","created":"2023-10-19","cited_by_count":11},{"id":"2002.08859","title":"A Bayes-Optimal View on Adversarial Examples","created":"2020-02-20","cited_by_count":8}],"next_cursor":null}