{"list":"other","total":62,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1502.03167","title":"Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift","created":"2015-02-11","cited_by_count":7005},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1704.08847","title":"Parseval Networks: Improving Robustness to Adversarial Examples","created":"2017-04-28","cited_by_count":293},{"id":"1705.01320","title":"Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks","created":"2017-05-03","cited_by_count":242},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1906.06316","title":"Towards Stable and Efficient Training of Verifiably Robust Neural Networks","created":"2019-06-14","cited_by_count":205},{"id":"2011.13824","title":"Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifiers","created":"2020-11-27","cited_by_count":187},{"id":"1909.06588","title":"Branch and Bound for Piecewise Linear Neural Network Verification","created":"2019-09-14","cited_by_count":138},{"id":"1706.07351","title":"An approach to reachability analysis for feed-forward ReLU neural networks","created":"2017-06-22","cited_by_count":127},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"1811.08359","title":"Strong mixed-integer programming formulations for trained neural networks","created":"2018-11-20","cited_by_count":115},{"id":"2208.05740","title":"General Cutting Planes for Bound-Propagation-Based Neural Network Verification","created":"2022-08-11","cited_by_count":103},{"id":"2205.00263","title":"Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Bound","created":"2022-04-30","cited_by_count":92},{"id":"2010.01799","title":"Understanding Catastrophic Overfitting in Single-step Adversarial Training","created":"2020-10-05","cited_by_count":76},{"id":"2111.01395","title":"Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds","created":"2021-11-02","cited_by_count":65},{"id":"2011.14969","title":"Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2020-11-30","cited_by_count":62},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57},{"id":"2210.04871","title":"Certified Training: Small Boxes are All You Need","created":"2022-10-10","cited_by_count":52},{"id":"2210.01787","title":"Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspective","created":"2022-10-04","cited_by_count":51},{"id":"2006.14076","title":"The Convex Relaxation Barrier, Revisited: Tightened Single-Neuron Relaxations for Neural Network Verification","created":"2020-06-24","cited_by_count":50},{"id":"2103.17268","title":"Fast Certified Robust Training with Short Warmup","created":"2021-03-31","cited_by_count":46},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43},{"id":"2004.08628","title":"Single-step Adversarial training with Dropout Scheduling","created":"2020-04-18","cited_by_count":41},{"id":"2111.12229","title":"Subspace Adversarial Training","created":"2021-11-24","cited_by_count":41},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36},{"id":"2002.10410","title":"Lagrangian Decomposition for Neural Network Verification","created":"2020-02-24","cited_by_count":35},{"id":"2210.11620","title":"LOT: Layer-wise Orthogonal Training on Improving $\\ell_2$ Certified Robustness","created":"2022-10-20","cited_by_count":33},{"id":"2104.01575","title":"Reliably fast adversarial training via latent adversarial perturbation","created":"2021-04-04","cited_by_count":29},{"id":"2306.10426","title":"Understanding Certified Training with Interval Bound Propagation","created":"2023-06-17","cited_by_count":26},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23},{"id":"2206.14772","title":"IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound","created":"2022-06-29","cited_by_count":21},{"id":"2310.19360","title":"Balance, Imbalance, and Rebalance: Understanding Robust Overfitting from a Minimax Game Perspective","created":"2023-10-30","cited_by_count":18},{"id":"2012.12368","title":"Understanding and Increasing Efficiency of Frank-Wolfe Adversarial Training","created":"2020-12-22","cited_by_count":14},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14},{"id":"2008.06081","title":"Adversarial Training and Provable Robustness: A Tale of Two Objectives","created":"2020-08-13","cited_by_count":12},{"id":"2102.06700","title":"On the Paradox of Certified Training","created":"2021-02-12","cited_by_count":12},{"id":"2404.08154","title":"Eliminating Catastrophic Overfitting Via Abnormal Adversarial Examples Regularization","created":"2024-04-11","cited_by_count":12},{"id":"2101.05844","title":"Scaling the Convex Barrier with Sparse Dual Algorithms","created":"2021-01-14","cited_by_count":10},{"id":"2405.16262","title":"Layer-Aware Analysis of Catastrophic Overfitting: Revealing the Pseudo-Robust Shortcut Dependency","created":"2024-05-25","cited_by_count":10},{"id":"2401.11618","title":"Efficient local linearity regularization to overcome catastrophic overfitting","created":"2024-01-21","cited_by_count":8},{"id":"2102.01208","title":"Fast Training of Provably Robust Neural Networks by SingleProp","created":"2021-02-01","cited_by_count":5},{"id":"2206.08242","title":"Catastrophic overfitting can be induced with discriminative non-robust features","created":"2022-06-16","cited_by_count":2},{"id":"2306.06995","title":"How robust accuracy suffers from certified training with convex relaxations","created":"2023-06-12","cited_by_count":1}],"next_cursor":null}