{"list":"other","total":103,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"2012.12877","title":"Training data-efficient image transformers & distillation through attention","created":"2020-12-23","cited_by_count":4586},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1512.04150","title":"Learning Deep Features for Discriminative Localization","created":"2015-12-14","cited_by_count":2436},{"id":"1610.02136","title":"A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networks","created":"2016-10-07","cited_by_count":2385},{"id":"1311.3618","title":"Describing Textures in the Wild","created":"2013-11-14","cited_by_count":2125},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"2105.01601","title":"MLP-Mixer: An all-MLP Architecture for Vision","created":"2021-05-04","cited_by_count":1446},{"id":"1907.07174","title":"Natural Adversarial Examples","created":"2019-07-16","cited_by_count":1408},{"id":"1706.02690","title":"Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networks","created":"2017-06-08","cited_by_count":1328},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"2010.03759","title":"Energy-based Out-of-distribution Detection","created":"2020-10-08","cited_by_count":1299},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"2003.13678","title":"Designing Network Design Spaces","created":"2020-03-30","cited_by_count":960},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"2110.11334","title":"Generalized Out-of-Distribution Detection: A Survey","created":"2021-10-21","cited_by_count":802},{"id":"1912.11370","title":"Big Transfer (BiT): General Visual Representation Learning","created":"2019-12-24","cited_by_count":769},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"2104.10972","title":"ImageNet-21K Pretraining for the Masses","created":"2021-04-22","cited_by_count":613},{"id":"2204.06507","title":"Out-of-Distribution Detection with Deep Nearest Neighbors","created":"2022-04-13","cited_by_count":600},{"id":"1910.01279","title":"Score-CAM: Score-Weighted Visual Explanations for Convolutional Neural Networks","created":"2019-10-03","cited_by_count":582},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"2101.03697","title":"RepVGG: Making VGG-style ConvNets Great Again","created":"2021-01-11","cited_by_count":522},{"id":"2111.12797","title":"ReAct: Out-of-distribution Detection With Rectified Activations","created":"2021-11-24","cited_by_count":486},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476},{"id":"1911.11132","title":"Scaling Out-of-Distribution Detection for Real-World Settings","created":"2019-11-25","cited_by_count":465},{"id":"2007.00644","title":"Measuring Robustness to Natural Distribution Shifts in Image Classification","created":"2020-07-01","cited_by_count":454},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"2203.10807","title":"ViM: Out-Of-Distribution with Virtual-logit Matching","created":"2022-03-21","cited_by_count":405},{"id":"2110.06207","title":"Open-Set Recognition: a Good Closed-Set Classifier is All You Need?","created":"2021-10-12","cited_by_count":353},{"id":"2110.00218","title":"On the Importance of Gradients for Detecting Distributional Shifts in the Wild","created":"2021-10-01","cited_by_count":339},{"id":"2210.07242","title":"OpenOOD: Benchmarking Generalized Out-of-Distribution Detection","created":"2022-10-13","cited_by_count":268},{"id":"2105.01879","title":"MOS: Towards Scaling Out-of-distribution Detection for Large Semantic Space","created":"2021-05-05","cited_by_count":233},{"id":"2111.07624","title":"Attention Mechanisms in Computer Vision: A Survey","created":"2021-11-15","cited_by_count":232},{"id":"2209.09858","title":"Extremely Simple Activation Shaping for Out-of-Distribution Detection","created":"2022-09-20","cited_by_count":212},{"id":"1906.06423","title":"Fixing the train-test resolution discrepancy","created":"2019-06-14","cited_by_count":209},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"2106.09022","title":"A Simple Fix to Mahalanobis Distance for Improving Near-OOD Detection","created":"2021-06-16","cited_by_count":207},{"id":"2306.09301","title":"OpenOOD v1.5: Enhanced Benchmark for Out-of-Distribution Detection","created":"2023-06-15","cited_by_count":179},{"id":"2104.02610","title":"On the Robustness of Vision Transformers to Adversarial Examples","created":"2021-03-31","cited_by_count":167},{"id":"1611.07450","title":"Grad-CAM: Why did you say that?","created":"2016-11-22","cited_by_count":161},{"id":"2110.14051","title":"A Unified Survey on Anomaly, Novelty, Open-Set, and Out-of-Distribution Detection: Solutions and Future Challenges","created":"2021-10-26","cited_by_count":154},{"id":"2306.00826","title":"In or Out? Fixing ImageNet Out-of-Distribution Detection Evaluation","created":"2023-06-01","cited_by_count":134},{"id":"2310.19775","title":"Explainable Artificial Intelligence (XAI) 2.0: A Manifesto of Open Challenges and Interdisciplinary Research Directions","created":"2023-10-30","cited_by_count":125},{"id":"2003.13630","title":"TResNet: High Performance GPU-Dedicated Architecture","created":"2020-03-30","cited_by_count":119},{"id":"2006.15207","title":"ATOM: Robustifying Out-of-distribution Detection Using Outlier Mining","created":"2020-06-26","cited_by_count":116},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"2310.00227","title":"Scaling for Training Time and Post-hoc Out-of-distribution Detection Enhancement","created":"2023-09-30","cited_by_count":77},{"id":"2303.09051","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","created":"2023-03-16","cited_by_count":65},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64},{"id":"2309.14888","title":"Nearest Neighbor Guidance for Out-of-Distribution Detection","created":"2023-09-26","cited_by_count":64},{"id":"2204.05306","title":"Full-Spectrum Out-of-Distribution Detection","created":"2022-04-11","cited_by_count":63},{"id":"2003.09711","title":"Robust Out-of-distribution Detection for Neural Networks","created":"2020-03-21","cited_by_count":57},{"id":"2310.15171","title":"RoboDepth: Robust Out-of-Distribution Depth Estimation under Corruptions","created":"2023-10-23","cited_by_count":49},{"id":"2107.11630","title":"Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them","created":"2021-07-24","cited_by_count":48},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44},{"id":"2006.03089","title":"Towards Understanding Fast Adversarial Training","created":"2020-06-04","cited_by_count":33},{"id":"2208.13930","title":"SAFE: Sensitivity-Aware Features for Out-of-Distribution Object Detection","created":"2022-08-29","cited_by_count":33},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30},{"id":"2003.00402","title":"Why is the Mahalanobis Distance Effective for Anomaly Detection?","created":"2020-03-01","cited_by_count":28},{"id":"2009.00814","title":"Open-set Adversarial Defense","created":"2020-09-02","cited_by_count":27},{"id":"2007.06381","title":"A simple defense against adversarial attacks on heatmap explanations","created":"2020-07-13","cited_by_count":23},{"id":"2405.08816","title":"The RoboDrive Challenge: Drive Anytime Anywhere in Any Condition","created":"2024-05-14","cited_by_count":23},{"id":"2310.01755","title":"ImageNet-OOD: Deciphering Modern Out-of-Distribution Detection Algorithms","created":"2023-10-03","cited_by_count":22},{"id":"2202.05953","title":"Open-set Adversarial Defense with Clean-Adversarial Mutual Learning","created":"2022-02-12","cited_by_count":21},{"id":"2312.16979","title":"BlackboxBench: A Comprehensive Benchmark of Black-box Adversarial Attacks","created":"2023-12-28","cited_by_count":21},{"id":"2209.15246","title":"Your Out-of-Distribution Detection Method is Not Robust!","created":"2022-09-30","cited_by_count":16},{"id":"2402.02263","title":"MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers","created":"2024-02-03","cited_by_count":16},{"id":"2309.01488","title":"On the use of Mahalanobis distance for out-of-distribution detection with neural networks for medical imaging","created":"2023-09-04","cited_by_count":15},{"id":"2401.16352","title":"Adversarial Training on Purification (AToP): Advancing Both Robustness and Generalization","created":"2024-01-29","cited_by_count":15},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14},{"id":"2404.01775","title":"A noisy elephant in the room: Is your out-of-distribution detector robust to label noise?","created":"2024-04-02","cited_by_count":13},{"id":"2010.08852","title":"Weight-Covariance Alignment for Adversarially Robust Neural Networks","created":"2020-10-17","cited_by_count":9},{"id":"2204.05427","title":"Generalizing Adversarial Explanations with Grad-CAM","created":"2022-04-11","cited_by_count":9},{"id":"2007.04391","title":"A Critical Evaluation of Open-World Machine Learning","created":"2020-07-08","cited_by_count":6},{"id":"2209.15042","title":"Generalizability of Adversarial Robustness Under Distribution Shifts","created":"2022-09-29","cited_by_count":6},{"id":"2404.05219","title":"Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Survey","created":"2024-04-08","cited_by_count":6},{"id":"1905.01726","title":"Better the Devil you Know: An Analysis of Evasion Attacks using Out-of-Distribution Adversarial Examples","created":"2019-05-05","cited_by_count":5},{"id":"2212.06776","title":"Unfolding Local Growth Rate Estimates for (Almost) Perfect Adversarial Detection","created":"2022-12-13","cited_by_count":5},{"id":"1811.09831","title":"Attention, Please! Adversarial Defense via Activation Rectification and Preservation","created":"2018-11-24","cited_by_count":4},{"id":"2309.10586","title":"Adversarial Attacks Against Uncertainty Quantification","created":"2023-09-19","cited_by_count":4},{"id":"2209.08763","title":"Decentralized Vehicle Coordination: The Berkeley DeepDrive Drone Dataset and Consensus-Based Models","created":"2022-09-19","cited_by_count":3}],"next_cursor":"100"}