{"list":"other","total":65,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1505.04597","title":"U-Net: Convolutional Networks for Biomedical Image Segmentation","created":"2015-05-18","cited_by_count":19713},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1506.01497","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","created":"2015-06-04","cited_by_count":9639},{"id":"1911.05722","title":"Momentum Contrast for Unsupervised Visual Representation Learning","created":"2019-11-13","cited_by_count":7513},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1703.06870","title":"Mask R-CNN","created":"2017-03-20","cited_by_count":7277},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1411.4038","title":"Fully Convolutional Networks for Semantic Segmentation","created":"2014-11-14","cited_by_count":4859},{"id":"1506.02640","title":"You Only Look Once: Unified, Real-Time Object Detection","created":"2015-06-08","cited_by_count":4852},{"id":"1709.01507","title":"Squeeze-and-Excitation Networks","created":"2017-09-05","cited_by_count":4789},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1503.03832","title":"FaceNet: A Unified Embedding for Face Recognition and Clustering","created":"2015-03-12","cited_by_count":2849},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1801.09414","title":"CosFace: Large Margin Cosine Loss for Deep Face Recognition","created":"2018-01-29","cited_by_count":971},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1704.08063","title":"SphereFace: Deep Hypersphere Embedding for Face Recognition","created":"2017-04-26","cited_by_count":737},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1512.00596","title":"The MegaFace Benchmark: 1 Million Faces for Recognition at Scale","created":"2015-12-02","cited_by_count":200},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127},{"id":"1511.02683","title":"A Light CNN for Deep Face Representation with Noisy Labels","created":"2015-11-09","cited_by_count":126},{"id":"1811.09310","title":"Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack","created":"2018-11-22","cited_by_count":125},{"id":"1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","created":"2017-05-08","cited_by_count":87},{"id":"2004.05790","title":"Towards Transferable Adversarial Attack against Deep Face Recognition","created":"2020-04-13","cited_by_count":80},{"id":"1709.05583","title":"Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification","created":"2017-09-17","cited_by_count":56},{"id":"1904.00887","title":"Adversarial Defense by Restricting the Hidden Space of Deep Neural Networks","created":"2019-04-01","cited_by_count":56},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55},{"id":"2303.15754","title":"Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization","created":"2023-03-28","cited_by_count":42},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34},{"id":"2303.15818","title":"Towards Effective Adversarial Textured 3D Meshes on Physical Face Recognition","created":"2023-03-28","cited_by_count":33},{"id":"1812.00037","title":"Adversarial Defense by Stratified Convolutional Sparse Coding","created":"2018-11-30","cited_by_count":31},{"id":"1909.09481","title":"Adversarial Learning with Margin-based Triplet Embedding Regularization","created":"2019-09-20","cited_by_count":29},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28},{"id":"2202.04235","title":"Towards Compositional Adversarial Robustness: Generalizing Adversarial Training to Composite Semantic Perturbations","created":"2022-02-09","cited_by_count":26},{"id":"2212.10230","title":"A Comprehensive Study of the Robustness for LiDAR-based 3D Object Detectors against Adversarial Attacks","created":"2022-12-20","cited_by_count":22},{"id":"2202.05953","title":"Open-set Adversarial Defense with Clean-Adversarial Mutual Learning","created":"2022-02-12","cited_by_count":21},{"id":"1705.03387","title":"Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN","created":"2017-05-09","cited_by_count":20},{"id":"2011.14427","title":"Architectural Adversarial Robustness: The Case for Deep Pursuit","created":"2020-11-29","cited_by_count":18},{"id":"2104.09197","title":"Removing Adversarial Noise in Class Activation Feature Space","created":"2021-04-19","cited_by_count":18},{"id":"2303.11135","title":"TWINS: A Fine-Tuning Framework for Improved Transferability of Adversarial Robustness and Generalization","created":"2023-03-20","cited_by_count":18},{"id":"1903.09799","title":"Improving Adversarial Robustness via Guided Complement Entropy","created":"2019-03-23","cited_by_count":15},{"id":"1708.02582","title":"Cascade Adversarial Machine Learning Regularized with a Unified Embedding","created":"2017-08-08","cited_by_count":13},{"id":"1802.06806","title":"Divide, Denoise, and Defend against Adversarial Attacks","created":"2018-02-19","cited_by_count":12},{"id":"1811.11080","title":"MobiFace: A Lightweight Deep Learning Face Recognition on Mobile Devices","created":"2018-11-27","cited_by_count":12},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11},{"id":"2304.11579","title":"StyLess: Boosting the Transferability of Adversarial Examples","created":"2023-04-23","cited_by_count":11},{"id":"2209.05785","title":"Adversarial Coreset Selection for Efficient Robust Training","created":"2022-09-13","cited_by_count":9},{"id":"2207.06035","title":"Perturbation Inactivation Based Adversarial Defense for Face Recognition","created":"2022-07-13","cited_by_count":5},{"id":"2307.14617","title":"Multiscale Dynamic Graph Representation for Biometric Recognition with Occlusions","created":"2023-07-27","cited_by_count":3}],"next_cursor":null}