{"list":"other","total":55,"rows":[{"id":"2006.11239","title":"Denoising Diffusion Probabilistic Models","created":"2020-06-19","cited_by_count":21076},{"id":"2112.10752","title":"High-Resolution Image Synthesis with Latent Diffusion Models","created":"2021-12-20","cited_by_count":18863},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1612.00796","title":"Overcoming catastrophic forgetting in neural networks","created":"2016-12-02","cited_by_count":4787},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"2302.00487","title":"A Comprehensive Survey of Continual Learning: Theory, Method and Application","created":"2023-01-31","cited_by_count":872},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"2208.05117","title":"NOTE: Robust Continual Test-time Adaptation Against Temporal Correlation","created":"2022-08-10","cited_by_count":151},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"2006.12655","title":"Perceptual Adversarial Robustness: Defense Against Unseen Threat Models","created":"2020-06-22","cited_by_count":137},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113},{"id":"2003.06693","title":"Certified Defenses for Adversarial Patches","created":"2020-03-14","cited_by_count":101},{"id":"1902.07906","title":"Wasserstein Adversarial Examples via Projected Sinkhorn Iterations","created":"2019-02-21","cited_by_count":89},{"id":"1909.04068","title":"Adversarial Robustness Against the Union of Multiple Perturbation Models","created":"2019-09-09","cited_by_count":88},{"id":"1906.00001","title":"Functional Adversarial Attacks","created":"2019-05-29","cited_by_count":82},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65},{"id":"2403.12171","title":"EasyJailbreak: A Unified Framework for Jailbreaking Large Language Models","created":"2024-03-18","cited_by_count":60},{"id":"2007.08450","title":"Learning perturbation sets for robust machine learning","created":"2020-07-16","cited_by_count":48},{"id":"2002.09169","title":"Black-Box Certification with Randomized Smoothing: A Functional Optimization Based Framework","created":"2020-02-21","cited_by_count":46},{"id":"1910.09338","title":"An Alternative Surrogate Loss for PGD-based Adversarial Testing","created":"2019-10-21","cited_by_count":45},{"id":"2009.02470","title":"Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks","created":"2020-09-05","cited_by_count":45},{"id":"1905.11213","title":"Provable robustness against all adversarial $l_p$-perturbations for $p\\geq 1$","created":"2019-05-27","cited_by_count":39},{"id":"2002.11565","title":"Randomization matters. How to defend against strong adversarial attacks","created":"2020-02-26","cited_by_count":37},{"id":"2201.08956","title":"The Many Faces of Adversarial Risk","created":"2022-01-22","cited_by_count":28},{"id":"2307.15157","title":"R-LPIPS: An Adversarially Robust Perceptual Similarity Metric","created":"2023-07-27","cited_by_count":28},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26},{"id":"2008.02883","title":"Stronger and Faster Wasserstein Adversarial Attacks","created":"2020-08-06","cited_by_count":25},{"id":"2102.02145","title":"Adversarially Robust Learning with Unknown Perturbation Sets","created":"2021-02-03","cited_by_count":24},{"id":"2105.12508","title":"Adversarial Robustness against Multiple and Single $l_p$-Threat Models via Quick Fine-Tuning of Robust Classifiers","created":"2021-05-26","cited_by_count":23},{"id":"2102.06905","title":"Mixed Nash Equilibria in the Adversarial Examples Game","created":"2021-02-13","cited_by_count":22},{"id":"2305.06716","title":"Distracting Downpour: Adversarial Weather Attacks for Motion Estimation","created":"2023-05-11","cited_by_count":15},{"id":"2207.11177","title":"Provable Defense Against Geometric Transformations","created":"2022-07-22","cited_by_count":14},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12},{"id":"1609.00804","title":"Randomized Prediction Games for Adversarial Machine Learning","created":"2016-09-03","cited_by_count":11},{"id":"2204.13779","title":"Formulating Robustness Against Unforeseen Attacks","created":"2022-04-28","cited_by_count":8},{"id":"2210.12606","title":"Nash Equilibria and Pitfalls of Adversarial Training in Adversarial Robustness Games","created":"2022-10-23","cited_by_count":8},{"id":"2207.07797","title":"CARBEN: Composite Adversarial Robustness Benchmark","created":"2022-07-16","cited_by_count":5}],"next_cursor":null}