{"list":"other","total":51,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1905.11946","title":"EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks","created":"2019-05-28","cited_by_count":6442},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"2012.12877","title":"Training data-efficient image transformers & distillation through attention","created":"2020-12-23","cited_by_count":4586},{"id":"2201.03545","title":"A ConvNet for the 2020s","created":"2022-01-10","cited_by_count":3579},{"id":"1610.02357","title":"Xception: Deep Learning with Depthwise Separable Convolutions","created":"2016-10-07","cited_by_count":2332},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1602.07261","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","created":"2016-02-23","cited_by_count":1512},{"id":"1811.12231","title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","created":"2018-11-29","cited_by_count":1432},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"2103.00112","title":"Transformer in Transformer","created":"2021-02-27","cited_by_count":633},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"2104.13840","title":"Twins: Revisiting the Design of Spatial Attention in Vision Transformers","created":"2021-04-28","cited_by_count":565},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"2204.01697","title":"MaxViT: Multi-Axis Vision Transformer","created":"2022-04-04","cited_by_count":476},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"2103.16302","title":"Rethinking Spatial Dimensions of Vision Transformers","created":"2021-03-30","cited_by_count":361},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130},{"id":"2101.05022","title":"Re-labeling ImageNet: from Single to Multi-Labels, from Global to Localized Labels","created":"2021-01-13","cited_by_count":118},{"id":"2012.11207","title":"On Success and Simplicity: A Second Look at Transferable Targeted Attacks","created":"2020-12-21","cited_by_count":89},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62},{"id":"2007.06189","title":"Understanding Adversarial Examples from the Mutual Influence of Images and Perturbations","created":"2020-07-13","cited_by_count":59},{"id":"2004.14861","title":"Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability","created":"2020-04-29","cited_by_count":57},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50},{"id":"2112.06011","title":"Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting","created":"2021-12-11","cited_by_count":37},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35},{"id":"2209.03716","title":"Enhancing the Self-Universality for Transferable Targeted Attacks","created":"2022-09-08","cited_by_count":30},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23},{"id":"2111.13844","title":"Adaptive Image Transformations for Transfer-based Adversarial Attack","created":"2021-11-27","cited_by_count":22},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18},{"id":"2402.03951","title":"Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping","created":"2024-02-06","cited_by_count":18},{"id":"2305.14846","title":"Introducing Competition to Boost the Transferability of Targeted Adversarial Examples through Clean Feature Mixup","created":"2023-05-24","cited_by_count":17},{"id":"2212.09035","title":"Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks","created":"2022-12-18","cited_by_count":14},{"id":"2007.14672","title":"Stylized Adversarial Defense","created":"2020-07-29","cited_by_count":5}],"next_cursor":null}