{"list":"other","total":78,"rows":[{"id":"2005.14165","title":"Language Models are Few-Shot Learners","created":"2020-05-28","cited_by_count":32419},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1806.07572","title":"Neural Tangent Kernel: Convergence and Generalization in Neural Networks","created":"2018-06-20","cited_by_count":2621},{"id":"2006.10739","title":"Fourier Features Let Networks Learn High Frequency Functions in Low Dimensional Domains","created":"2020-06-18","cited_by_count":2200},{"id":"1806.09055","title":"DARTS: Differentiable Architecture Search","created":"2018-06-24","cited_by_count":1798},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1611.01578","title":"Neural Architecture Search with Reinforcement Learning","created":"2016-11-05","cited_by_count":1499},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1707.07012","title":"Learning Transferable Architectures for Scalable Image Recognition","created":"2017-07-21","cited_by_count":1101},{"id":"1802.01548","title":"Regularized Evolution for Image Classifier Architecture Search","created":"2018-02-05","cited_by_count":909},{"id":"1811.03962","title":"A Convergence Theory for Deep Learning via Over-Parameterization","created":"2018-11-09","cited_by_count":787},{"id":"1902.06720","title":"Wide Neural Networks of Any Depth Evolve as Linear Models Under Gradient Descent","created":"2019-02-18","cited_by_count":738},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1812.07956","title":"On Lazy Training in Differentiable Programming","created":"2018-12-19","cited_by_count":675},{"id":"1810.02054","title":"Gradient Descent Provably Optimizes Over-parameterized Neural Networks","created":"2018-10-04","cited_by_count":659},{"id":"1811.03804","title":"Gradient Descent Finds Global Minima of Deep Neural Networks","created":"2018-11-09","cited_by_count":574},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"2001.00326","title":"NAS-Bench-201: Extending the Scope of Reproducible Neural Architecture Search","created":"2020-01-02","cited_by_count":416},{"id":"1707.08819","title":"A Downsampled Variant of ImageNet as an Alternative to the CIFAR datasets","created":"2017-07-27","cited_by_count":377},{"id":"1703.01041","title":"Large-Scale Evolution of Image Classifiers","created":"2017-03-03","cited_by_count":348},{"id":"1902.09635","title":"NAS-Bench-101: Towards Reproducible Neural Architecture Search","created":"2019-02-25","cited_by_count":344},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1704.08847","title":"Parseval Networks: Improving Robustness to Adversarial Examples","created":"2017-04-28","cited_by_count":293},{"id":"1611.02167","title":"Designing Neural Network Architectures using Reinforcement Learning","created":"2016-11-07","cited_by_count":279},{"id":"1902.07638","title":"Random Search and Reproducibility for Neural Architecture Search","created":"2019-02-20","cited_by_count":254},{"id":"2006.04647","title":"Neural Architecture Search without Training","created":"2020-06-08","cited_by_count":244},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1905.13210","title":"Generalization Bounds of Stochastic Gradient Descent for Wide and Deep Neural Networks","created":"2019-05-30","cited_by_count":222},{"id":"2011.14522","title":"Feature Learning in Infinite-Width Neural Networks","created":"2020-11-30","cited_by_count":190},{"id":"1909.09656","title":"Understanding and Robustifying Differentiable Architecture Search","created":"2019-09-20","cited_by_count":178},{"id":"1905.12173","title":"On the Inductive Bias of Neural Tangent Kernels","created":"2019-05-29","cited_by_count":177},{"id":"1912.01198","title":"Towards Understanding the Spectral Bias of Deep Learning","created":"2019-12-03","cited_by_count":174},{"id":"2102.11535","title":"Neural Architecture Search on ImageNet in Four GPU Hours: A Theoretically Inspired Perspective","created":"2021-02-23","cited_by_count":169},{"id":"1905.13192","title":"Graph Neural Tangent Kernel: Fusing Graph Neural Networks with Graph Kernels","created":"2019-05-30","cited_by_count":161},{"id":"2301.08727","title":"Neural Architecture Search: Insights from 1000 Papers","created":"2023-01-20","cited_by_count":139},{"id":"1811.09310","title":"Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack","created":"2018-11-22","cited_by_count":125},{"id":"2108.04392","title":"Rethinking Architecture Selection in Differentiable NAS","created":"2021-08-10","cited_by_count":92},{"id":"1910.01663","title":"Harnessing the Power of Infinitely Wide Deep Nets on Small-data Tasks","created":"2019-10-03","cited_by_count":87},{"id":"1911.10695","title":"When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks","created":"2019-11-25","cited_by_count":87},{"id":"2110.03825","title":"Exploring Architectural Ingredients of Adversarially Robust Deep Neural Networks","created":"2021-10-07","cited_by_count":74},{"id":"2008.09777","title":"Surrogate NAS Benchmarks: Going Beyond the Limited Search Spaces of Tabular NAS Benchmarks","created":"2020-08-22","cited_by_count":67},{"id":"2002.07867","title":"Global Convergence of Deep Networks with One Wide Layer Followed by Pyramidal Topology","created":"2020-02-18","cited_by_count":66},{"id":"2203.01665","title":"$\\beta$-DARTS: Beta-Decay Regularization for Differentiable Architecture Search","created":"2022-03-03","cited_by_count":64},{"id":"2002.06262","title":"Why Do Deep Residual Networks Generalize Better than Deep Feedforward Networks? -- A Neural Tangent Kernel Perspective","created":"2020-02-14","cited_by_count":60},{"id":"2006.07116","title":"NAS-Bench-NLP: Neural Architecture Search Benchmark for Natural Language Processing","created":"2020-06-12","cited_by_count":60},{"id":"1704.00764","title":"A Genetic Programming Approach to Designing Convolutional Neural Network Architectures","created":"2017-04-03","cited_by_count":59},{"id":"1906.07916","title":"Convergence of Adversarial Training in Overparametrized Neural Networks","created":"2019-06-19","cited_by_count":58},{"id":"2105.11871","title":"TransNAS-Bench-101: Improving Transferability and Generalizability of Cross-Task Neural Architecture Search","created":"2021-05-25","cited_by_count":58},{"id":"1905.10510","title":"Enhancing Adversarial Defense by k-Winners-Take-All","created":"2019-05-25","cited_by_count":51},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43},{"id":"2011.03083","title":"A Tunable Robust Pruning Framework Through Dynamic Network Rewiring of DNNs","created":"2020-11-03","cited_by_count":37},{"id":"2002.06668","title":"Over-parameterized Adversarial Training: An Analysis Overcoming the Curse of Dimensionality","created":"2020-02-16","cited_by_count":36},{"id":"2111.13293","title":"KNAS: Green Neural Architecture Search","created":"2021-11-26","cited_by_count":33},{"id":"2110.05668","title":"NAS-Bench-360: Benchmarking Neural Architecture Search on Diverse Tasks","created":"2021-10-12","cited_by_count":32},{"id":"2108.01289","title":"AdvRush: Searching for Adversarially Robust Neural Architectures","created":"2021-08-03","cited_by_count":28},{"id":"2109.00817","title":"NASI: Label- and Data-agnostic Neural Architecture Search at Initialization","created":"2021-09-02","cited_by_count":28},{"id":"2212.11005","title":"Revisiting Residual Networks for Adversarial Robustness: An Architectural Perspective","created":"2022-12-21","cited_by_count":28},{"id":"2012.06122","title":"DSRNA: Differentiable Search of Robust Neural Architectures","created":"2020-12-11","cited_by_count":27},{"id":"2005.02960","title":"Exploring the Loss Landscape in Neural Architecture Search","created":"2020-05-06","cited_by_count":20},{"id":"2202.13473","title":"The Spectral Bias of Polynomial Neural Networks","created":"2022-02-27","cited_by_count":19},{"id":"2203.14577","title":"Demystifying the Neural Tangent Kernel from a Practical Perspective: Can it be trusted for Neural Architecture Search without training?","created":"2022-03-28","cited_by_count":18},{"id":"2209.07263","title":"Robustness in deep learning: The good (width), the bad (depth), and the ugly (initialization)","created":"2022-09-15","cited_by_count":18},{"id":"2108.00131","title":"Simple, Fast, and Flexible Framework for Matrix Completion with Infinite Width Neural Networks","created":"2021-07-31","cited_by_count":17},{"id":"2306.06712","title":"Neural Architecture Design and Robustness: A Dataset","created":"2023-06-11","cited_by_count":15},{"id":"2104.14132","title":"Generalization Guarantees for Neural Architecture Search with Train-Validation Split","created":"2021-04-29","cited_by_count":14},{"id":"2209.07238","title":"Generalization Properties of NAS under Activation and Skip Connection Search","created":"2022-09-15","cited_by_count":14},{"id":"2110.10165","title":"NAS-HPO-Bench-II: A Benchmark Dataset on Joint Optimization of Convolutional Neural Network Architecture and Training Hyperparameters","created":"2021-10-19","cited_by_count":9},{"id":"2211.08008","title":"MORA: Improving Ensemble Robustness Evaluation with Model-Reweighing Attack","created":"2022-11-15","cited_by_count":7},{"id":"2203.08961","title":"On the Convergence of Certified Robust Training with Interval Bound Propagation","created":"2022-03-16","cited_by_count":5}],"next_cursor":null}