{"list":"other","total":51,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1807.03039","title":"Glow: Generative Flow with Invertible 1x1 Convolutions","created":"2018-07-09","cited_by_count":1545},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1506.02025","title":"Spatial Transformer Networks","created":"2015-06-05","cited_by_count":1429},{"id":"1807.11164","title":"ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Design","created":"2018-07-30","cited_by_count":1136},{"id":"1602.07360","title":"SqueezeNet: AlexNet-level accuracy with 50x fewer parameters and <0.5MB model size","created":"2016-02-24","cited_by_count":1060},{"id":"2004.07728","title":"Image Quality Assessment: Unifying Structure and Texture Similarity","created":"2020-04-16","cited_by_count":811},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1909.08072","title":"Adversarial Attacks and Defenses in Images, Graphs and Text: A Review","created":"2019-09-17","cited_by_count":237},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111},{"id":"2005.14137","title":"QEBA: Query-Efficient Boundary-Based Blackbox Attack","created":"2020-05-28","cited_by_count":104},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"2011.11164","title":"Learnable Boundary Guided Adversarial Training","created":"2020-11-23","cited_by_count":93},{"id":"2006.12834","title":"Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks","created":"2020-06-23","cited_by_count":65},{"id":"2108.09034","title":"AdvDrop: Adversarial Attack to DNNs by Dropping Information","created":"2021-08-20","cited_by_count":56},{"id":"2210.15318","title":"Efficient and Effective Augmentation Strategy for Adversarial Training","created":"2022-10-27","cited_by_count":43},{"id":"2203.06560","title":"Query-Efficient Black-box Adversarial Attacks Guided by a Transfer-based Prior","created":"2022-03-13","cited_by_count":38},{"id":"2007.07435","title":"AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows","created":"2020-07-15","cited_by_count":36},{"id":"1908.07000","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","created":"2019-08-19","cited_by_count":33},{"id":"2301.00364","title":"Generalizable Black-Box Adversarial Attack with Meta Learning","created":"2023-01-01","cited_by_count":29},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27},{"id":"2002.07891","title":"Towards Query-Efficient Black-Box Adversary with Zeroth-Order Natural Gradient Descent","created":"2020-02-18","cited_by_count":18},{"id":"2010.07788","title":"Generalizing Universal Adversarial Attacks Beyond Additive Perturbations","created":"2020-10-15","cited_by_count":17},{"id":"1901.05602","title":"Learning Generalizable and Identity-Discriminative Representations for Face Anti-Spoofing","created":"2019-01-17","cited_by_count":16},{"id":"2007.07097","title":"Pasadena: Perceptually Aware and Stealthy Adversarial Denoise Attack","created":"2020-07-14","cited_by_count":14},{"id":"2310.07492","title":"Boosting Black-box Attack to Deep Neural Networks with Conditional Diffusion Models","created":"2023-10-11","cited_by_count":12},{"id":"2309.13857","title":"Adversarial Attacks on Video Object Segmentation with Hard Region Discovery","created":"2023-09-25","cited_by_count":9},{"id":"2108.02502","title":"Imperceptible Adversarial Examples by Spatial Chroma-Shift","created":"2021-08-05","cited_by_count":7},{"id":"1712.08713","title":"Query-limited Black-box Attacks to Classifiers","created":"2017-12-23","cited_by_count":4},{"id":"2310.09795","title":"AFLOW: Developing Adversarial Examples under Extremely Noise-limited Settings","created":"2023-10-15","cited_by_count":4},{"id":"2212.01628","title":"Bridging Component Learning with Degradation Modelling for Blind Image Super-Resolution","created":"2022-12-03","cited_by_count":1}],"next_cursor":null}