{"list":"other","total":56,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2307.09288","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","created":"2023-07-18","cited_by_count":13028},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2305.14314","title":"QLoRA: Efficient Finetuning of Quantized LLMs","created":"2023-05-23","cited_by_count":3418},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"2010.01412","title":"Sharpness-Aware Minimization for Efficiently Improving Generalization","created":"2020-10-03","cited_by_count":1417},{"id":"1609.04836","title":"On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minima","created":"2016-09-15","cited_by_count":1352},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"2004.09984","title":"BERT-ATTACK: Adversarial Attack Against BERT Using BERT","created":"2020-04-21","cited_by_count":491},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1703.04933","title":"Sharp Minima Can Generalize For Deep Nets","created":"2017-03-15","cited_by_count":466},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1805.10965","title":"Lipschitz regularity of deep neural networks: analysis and efficient estimation","created":"2018-05-28","cited_by_count":415},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1804.04368","title":"Regularisation of Neural Networks by Enforcing Lipschitz Continuity","created":"2018-04-12","cited_by_count":314},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1802.04034","title":"Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks","created":"2018-02-12","cited_by_count":195},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1711.01530","title":"Fisher-Rao Metric, Geometry, and Complexity of Neural Networks","created":"2017-11-05","cited_by_count":100},{"id":"1805.04807","title":"Curriculum Adversarial Training","created":"2018-05-13","cited_by_count":89},{"id":"2001.00939","title":"Relative Flatness and Generalization","created":"2020-01-03","cited_by_count":88},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"2303.03169","title":"A Unified Algebraic Perspective on Lipschitz Neural Networks","created":"2023-03-06","cited_by_count":60},{"id":"1901.04653","title":"Normalized Flat Minima: Exploring Scale Invariant Definition of Flat Minima for Neural Networks using PAC-Bayesian Analysis","created":"2019-01-15","cited_by_count":59},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57},{"id":"2103.01208","title":"Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers","created":"2021-03-01","cited_by_count":51},{"id":"1910.07629","title":"A New Defense Against Adversarial Images: Turning a Weakness into a Strength","created":"2019-10-16","cited_by_count":49},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48},{"id":"2207.13129","title":"LGV: Boosting Adversarial Example Transferability from Large Geometric Vicinity","created":"2022-07-26","cited_by_count":39},{"id":"1804.07729","title":"ADef: an Iterative Algorithm to Construct Adversarial Deformations","created":"2018-04-20","cited_by_count":38},{"id":"1905.05186","title":"Harnessing the Vulnerability of Latent Layers in Adversarially Trained Models","created":"2019-05-13","cited_by_count":26},{"id":"2307.06966","title":"Layer-wise Linear Mode Connectivity","created":"2023-07-13","cited_by_count":22},{"id":"1911.04636","title":"Robust Design of Deep Neural Networks against Adversarial Attacks based on Lyapunov Theory","created":"2019-11-12","cited_by_count":13},{"id":"1809.07802","title":"Playing the Game of Universal Adversarial Perturbations","created":"2018-09-20","cited_by_count":9},{"id":"1910.12165","title":"Adversarial Defense via Local Flatness Regularization","created":"2019-10-27","cited_by_count":9},{"id":"2009.08435","title":"Large Norms of CNN Layers Do Not Hurt Adversarial Robustness","created":"2020-09-17","cited_by_count":7},{"id":"1911.06587","title":"Learning To Characterize Adversarial Subspaces","created":"2019-11-15","cited_by_count":5},{"id":"2204.12393","title":"On Fragile Features and Batch Normalization in Adversarial Training","created":"2022-04-26","cited_by_count":4}],"next_cursor":null}