{"list":"other","total":54,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1611.01144","title":"Categorical Reparameterization with Gumbel-Softmax","created":"2016-11-03","cited_by_count":2739},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1905.13545","title":"High Frequency Component Helps Explain the Generalization of Convolutional Neural Networks","created":"2019-05-28","cited_by_count":310},{"id":"1906.08988","title":"A Fourier Perspective on Model Robustness in Computer Vision","created":"2019-06-21","cited_by_count":288},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"2103.12376","title":"Generalizing Face Forgery Detection with High-frequency Features","created":"2021-03-23","cited_by_count":262},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1905.07259","title":"Texture Fields: Learning Texture Representations in Function Space","created":"2019-05-17","cited_by_count":210},{"id":"2203.12208","title":"Self-supervised Learning of Adversarial Example: Towards Good Generalizations for Deepfake Detection","created":"2022-03-23","cited_by_count":173},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130},{"id":"1803.05787","title":"Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples","created":"2018-03-14","cited_by_count":99},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95},{"id":"2011.11164","title":"Learnable Boundary Guided Adversarial Training","created":"2020-11-23","cited_by_count":93},{"id":"2104.06728","title":"Adversarial Sticker: A Stealthy Attack Method in the Physical World","created":"2021-04-14","cited_by_count":93},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"1911.10695","title":"When NAS Meets Robustness: In Search of Robust Architectures against Adversarial Attacks","created":"2019-11-25","cited_by_count":87},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79},{"id":"2203.05151","title":"Frequency-driven Imperceptible Adversarial Attack on Semantic Similarity","created":"2022-03-10","cited_by_count":77},{"id":"2204.00993","title":"Improving Vision Transformers by Revisiting High-frequency Components","created":"2022-04-03","cited_by_count":76},{"id":"2210.07540","title":"When Adversarial Training Meets Vision Transformers: Recipes from Training to Architecture","created":"2022-10-14","cited_by_count":64},{"id":"2303.14460","title":"CFA: Class-wise Calibrated Fair Adversarial Training","created":"2023-03-25","cited_by_count":53},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42},{"id":"1703.09471","title":"Adversarial Image Perturbation for Privacy Protection -- A Game Theory Perspective","created":"2017-03-28","cited_by_count":38},{"id":"2202.07728","title":"Don't Lie to Me! Robust and Efficient Explainability with Verified Perturbation Analysis","created":"2022-02-15","cited_by_count":38},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28},{"id":"2207.08734","title":"Temporal Lift Pooling for Continuous Sign Language Recognition","created":"2022-07-18","cited_by_count":26},{"id":"2203.09910","title":"Fourier Document Restoration for Robust Document Dewarping and Recognition","created":"2022-03-18","cited_by_count":23},{"id":"2007.03838","title":"Making Adversarial Examples More Transferable and Indistinguishable","created":"2020-07-08","cited_by_count":19},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16},{"id":"2307.09763","title":"Towards Building More Robust Models with Frequency Bias","created":"2023-07-19","cited_by_count":12},{"id":"2307.11823","title":"HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustness","created":"2023-07-21","cited_by_count":12},{"id":"2005.02552","title":"Enhancing Intrinsic Adversarial Robustness via Feature Pyramid Decoder","created":"2020-05-06","cited_by_count":10},{"id":"2303.11625","title":"Information-containing Adversarial Perturbation for Combating Facial Manipulation Systems","created":"2023-03-21","cited_by_count":9},{"id":"2403.09101","title":"Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinement","created":"2024-03-14","cited_by_count":9},{"id":"2404.15587","title":"Security Analysis of WiFi-based Sensing Systems: Threats from Perturbation Attacks","created":"2024-04-24","cited_by_count":6},{"id":"2309.03665","title":"How adversarial attacks can disrupt seemingly stable accurate classifiers","created":"2023-09-07","cited_by_count":4},{"id":"2308.04061","title":"Enhancing Adversarial Robustness in Low-Label Regime via Adaptively Weighted Regularization and Knowledge Distillation","created":"2023-08-08","cited_by_count":3}],"next_cursor":null}