{"list":"other","total":109,"rows":[{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1610.02136","title":"A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networks","created":"2016-10-07","cited_by_count":2385},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1706.02690","title":"Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networks","created":"2017-06-08","cited_by_count":1328},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1402.1869","title":"On the Number of Linear Regions of Deep Neural Networks","created":"2014-02-08","cited_by_count":381},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1705.06640","title":"DeepXplore: Automated Whitebox Testing of Deep Learning Systems","created":"2017-05-18","cited_by_count":311},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1610.06940","title":"Safety Verification of Deep Neural Networks","created":"2016-10-21","cited_by_count":263},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"1708.08559","title":"DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars","created":"2017-08-28","cited_by_count":251},{"id":"1705.01320","title":"Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks","created":"2017-05-03","cited_by_count":242},{"id":"2404.03027","title":"JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks","created":"2024-04-03","cited_by_count":230},{"id":"1906.10742","title":"Machine Learning Testing: Survey, Landscapes and Horizons","created":"2019-06-19","cited_by_count":218},{"id":"1906.06316","title":"Towards Stable and Efficient Training of Verifiably Robust Neural Networks","created":"2019-06-14","cited_by_count":205},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"1804.10829","title":"Formal Security Analysis of Neural Networks using Symbolic Intervals","created":"2018-04-28","cited_by_count":185},{"id":"1801.10578","title":"Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach","created":"2018-01-31","cited_by_count":182},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1811.01057","title":"Semidefinite relaxations for certifying robustness to adversarial examples","created":"2018-11-02","cited_by_count":179},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1809.08098","title":"Efficient Formal Safety Analysis of Neural Networks","created":"2018-09-19","cited_by_count":165},{"id":"2105.12806","title":"A Universal Law of Robustness via Isoperimetry","created":"2021-05-26","cited_by_count":151},{"id":"1803.07519","title":"DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems","created":"2018-03-20","cited_by_count":147},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"1811.11553","title":"Strike (with) a Pose: Neural Networks Are Easily Fooled by Strange Poses of Familiar Objects","created":"2018-11-28","cited_by_count":143},{"id":"1706.07351","title":"An approach to reachability analysis for feed-forward ReLU neural networks","created":"2017-06-22","cited_by_count":127},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"1808.08444","title":"Guiding Deep Learning System Testing using Surprise Adequacy","created":"2018-08-25","cited_by_count":124},{"id":"2102.08452","title":"Globally-Robust Neural Networks","created":"2021-02-16","cited_by_count":108},{"id":"1705.01040","title":"Maximum Resilience of Artificial Neural Networks","created":"2017-04-28","cited_by_count":97},{"id":"1804.00097","title":"Adversarial Attacks and Defences Competition","created":"2018-03-31","cited_by_count":96},{"id":"1805.02242","title":"Reachability Analysis of Deep Neural Networks with Provable Guarantees","created":"2018-05-06","cited_by_count":93},{"id":"1906.07927","title":"SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editing","created":"2019-06-19","cited_by_count":93},{"id":"1605.07262","title":"Measuring Neural Net Robustness with Constraints","created":"2016-05-24","cited_by_count":90},{"id":"2004.08688","title":"Lipschitz constant estimation of Neural Networks via sparse polynomial optimization","created":"2020-04-18","cited_by_count":87},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85},{"id":"1708.03322","title":"Output Reachable Set Estimation and Verification for Multi-Layer Neural Networks","created":"2017-08-09","cited_by_count":80},{"id":"1709.06662","title":"Verifying Properties of Binarized Deep Neural Networks","created":"2017-09-19","cited_by_count":79},{"id":"1502.02590","title":"Analysis of classifiers' robustness to adversarial perturbations","created":"2015-02-09","cited_by_count":76},{"id":"1802.06816","title":"Shield: Fast, Practical Defense and Vaccination for Deep Learning using JPEG Compression","created":"2018-02-19","cited_by_count":74},{"id":"1711.07183","title":"Adversarial Attacks Beyond the Image Space","created":"2017-11-20","cited_by_count":67},{"id":"1906.10395","title":"Quantitative Verification of Neural Networks And its Security Applications","created":"2019-06-25","cited_by_count":56},{"id":"1811.07209","title":"A Statistical Approach to Assessing Neural Network Robustness","created":"2018-11-17","cited_by_count":54},{"id":"1912.09899","title":"Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing","created":"2019-12-20","cited_by_count":54},{"id":"1707.05373","title":"Houdini: Fooling Deep Structured Prediction Models","created":"2017-07-17","cited_by_count":50},{"id":"1811.12395","title":"CNN-Cert: An Efficient Framework for Certifying Robustness of Convolutional Neural Networks","created":"2018-11-29","cited_by_count":50},{"id":"1710.07859","title":"Feature-Guided Black-Box Safety Testing of Deep Neural Networks","created":"2017-10-21","cited_by_count":49},{"id":"2004.10281","title":"Probabilistic Safety for Bayesian Neural Networks","created":"2020-04-21","cited_by_count":42},{"id":"1905.11213","title":"Provable robustness against all adversarial $l_p$-perturbations for $p\\geq 1$","created":"2019-05-27","cited_by_count":39},{"id":"1902.05983","title":"Robustness of Neural Networks: A Probabilistic and Practical Approach","created":"2019-02-15","cited_by_count":38},{"id":"1803.04792","title":"Testing Deep Neural Networks","created":"2018-03-10","cited_by_count":36},{"id":"1903.01980","title":"Statistical Guarantees for the Robustness of Bayesian Neural Networks","created":"2019-03-05","cited_by_count":35},{"id":"1902.01148","title":"Theoretical evidence for adversarial robustness through randomization","created":"2019-02-04","cited_by_count":33},{"id":"2002.06864","title":"Scalable Quantitative Verification For Deep Neural Networks","created":"2020-02-17","cited_by_count":31},{"id":"2002.03421","title":"Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing","created":"2020-02-09","cited_by_count":29},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29},{"id":"2203.04412","title":"ImageNet-Patch: A Dataset for Benchmarking Machine Learning Robustness against Adversarial Patches","created":"2022-03-07","cited_by_count":27},{"id":"1709.02802","title":"Towards Proving the Adversarial Robustness of Deep Neural Networks","created":"2017-09-08","cited_by_count":26},{"id":"1811.07033","title":"Analyzing Compositionality-Sensitivity of NLI Models","created":"2018-11-16","cited_by_count":26},{"id":"1712.06174","title":"Deep Neural Networks as 0-1 Mixed Integer Linear Programs: A Feasibility Study","created":"2017-12-17","cited_by_count":25},{"id":"1809.06452","title":"Robustness Guarantees for Bayesian Inference with Gaussian Processes","created":"2018-09-17","cited_by_count":23},{"id":"2008.04094","title":"Adversarial Examples on Object Recognition: A Comprehensive Survey","created":"2020-08-07","cited_by_count":23},{"id":"1710.00486","title":"DeepSafe: A Data-driven Approach for Checking Adversarial Robustness in Neural Networks","created":"2017-10-02","cited_by_count":20},{"id":"1707.01159","title":"UPSET and ANGRI : Breaking High Performance Image Classifiers","created":"2017-07-04","cited_by_count":19},{"id":"2102.05351","title":"Quality Assurance for AI-based Systems: Overview and Challenges","created":"2021-02-10","cited_by_count":19},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19},{"id":"1811.10745","title":"ResNets Ensemble via the Feynman-Kac Formalism to Improve Natural and Robust Accuracies","created":"2018-11-26","cited_by_count":18},{"id":"1910.04249","title":"Probabilistic Verification and Reachability Analysis of Neural Networks via Semidefinite Programming","created":"2019-10-09","cited_by_count":15},{"id":"1806.02338","title":"Towards Dependability Metrics for Neural Networks","created":"2018-06-06","cited_by_count":13},{"id":"2401.14412","title":"Harnessing Neuron Stability to Improve DNN Verification","created":"2024-01-19","cited_by_count":13},{"id":"1812.02132","title":"SADA: Semantic Adversarial Diagnostic Attacks for Autonomous Applications","created":"2018-12-05","cited_by_count":12},{"id":"2101.10102","title":"Towards Practical Robustness Analysis for DNNs based on PAC-Model Learning","created":"2021-01-25","cited_by_count":12},{"id":"2212.11138","title":"QVIP: An ILP-based Formal Verification Approach for Quantized Neural Networks","created":"2022-12-10","cited_by_count":12},{"id":"1805.04333","title":"Quantitative Projection Coverage for Testing ML-enabled Autonomous Systems","created":"2018-05-11","cited_by_count":11},{"id":"2110.11088","title":"RoMA: a Method for Neural Network Robustness Measurement and Assessment","created":"2021-10-21","cited_by_count":10},{"id":"2402.19322","title":"Verification of Neural Networks' Global Robustness","created":"2024-02-29","cited_by_count":10},{"id":"1904.04621","title":"Towards Analyzing Semantic Robustness of Deep Neural Networks","created":"2019-04-09","cited_by_count":9}],"next_cursor":"100"}