{"list":"other","total":63,"rows":[{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"1712.02328","title":"Generative Adversarial Perturbations","created":"2017-12-06","cited_by_count":153},{"id":"1805.07894","title":"Constructing Unrestricted Adversarial Examples with Generative Models","created":"2018-05-21","cited_by_count":135},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79},{"id":"2009.14720","title":"DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles","created":"2020-09-30","cited_by_count":73},{"id":"2305.13948","title":"Decoupled Kullback-Leibler Divergence Loss","created":"2023-05-23","cited_by_count":58},{"id":"2308.16258","title":"Robust Principles: Architectural Design Principles for Adversarially Robust CNNs","created":"2023-08-30","cited_by_count":46},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43},{"id":"1809.08352","title":"Unrestricted Adversarial Examples","created":"2018-09-22","cited_by_count":40},{"id":"1811.00236","title":"Encryption-then-Compression Systems using Grayscale-based Image Encryption for JPEG Images","created":"2018-11-01","cited_by_count":34},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29},{"id":"1710.10733","title":"Attacking the Madry Defense Model with $L_1$-based Adversarial Examples","created":"2017-10-30","cited_by_count":21},{"id":"2301.12554","title":"Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing","created":"2023-01-29","cited_by_count":18},{"id":"2005.07998","title":"Encryption Inspired Adversarial Defense for Visual Classification","created":"2020-05-16","cited_by_count":17},{"id":"2204.07707","title":"Privacy-Preserving Image Classification Using Isotropic Network","created":"2022-04-16","cited_by_count":17},{"id":"2207.08569","title":"Multi-manifold Attention for Vision Transformers","created":"2022-07-18","cited_by_count":12},{"id":"1808.01753","title":"Gray-box Adversarial Training","created":"2018-08-06","cited_by_count":10},{"id":"2012.09384","title":"On the Limitations of Denoising Strategies as Adversarial Defenses","created":"2020-12-17","cited_by_count":9},{"id":"2205.12041","title":"Privacy-Preserving Image Classification Using Vision Transformer","created":"2022-05-24","cited_by_count":9},{"id":"2104.02963","title":"The art of defense: letting networks fool the attacker","created":"2021-04-07","cited_by_count":6},{"id":"1809.01715","title":"Bridging machine learning and cryptography in defence against adversarial attacks","created":"2018-09-05","cited_by_count":5},{"id":"2211.01093","title":"Improving transferability of 3D adversarial attacks with scale and shear transformations","created":"2022-11-02","cited_by_count":5},{"id":"2209.02997","title":"On the Transferability of Adversarial Examples between Encrypted Models","created":"2022-09-07","cited_by_count":4},{"id":"2307.13985","title":"Enhanced Security against Adversarial Examples Using a Random Ensemble of Encrypted Vision Transformer Models","created":"2023-07-26","cited_by_count":4},{"id":"2309.01620","title":"Hindering Adversarial Attacks with Multiple Encrypted Patch Embeddings","created":"2023-09-04","cited_by_count":2},{"id":"2309.02556","title":"Domain Adaptation for Efficiently Fine-tuning Vision Transformer with Encrypted Images","created":"2023-09-05","cited_by_count":1}],"next_cursor":null}