{"list":"other","total":207,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"2006.11239","title":"Denoising Diffusion Probabilistic Models","created":"2020-06-19","cited_by_count":21076},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1812.04948","title":"A Style-Based Generator Architecture for Generative Adversarial Networks","created":"2018-12-12","cited_by_count":6013},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1608.03983","title":"SGDR: Stochastic Gradient Descent with Warm Restarts","created":"2016-08-13","cited_by_count":5045},{"id":"2012.12877","title":"Training data-efficient image transformers & distillation through attention","created":"2020-12-23","cited_by_count":4586},{"id":"2201.03545","title":"A ConvNet for the 2020s","created":"2022-01-10","cited_by_count":3579},{"id":"1606.08415","title":"Gaussian Error Linear Units (GELUs)","created":"2016-06-27","cited_by_count":3502},{"id":"2012.09841","title":"Taming Transformers for High-Resolution Image Synthesis","created":"2020-12-17","cited_by_count":3253},{"id":"2206.00364","title":"Elucidating the Design Space of Diffusion-Based Generative Models","created":"2022-06-01","cited_by_count":3045},{"id":"1505.07818","title":"Domain-Adversarial Training of Neural Networks","created":"2015-05-28","cited_by_count":3044},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1606.09282","title":"Learning without Forgetting","created":"2016-06-29","cited_by_count":2496},{"id":"1909.13719","title":"RandAugment: Practical automated data augmentation with a reduced search space","created":"2019-09-30","cited_by_count":2269},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"2006.05525","title":"Knowledge Distillation: A Survey","created":"2020-06-09","cited_by_count":1603},{"id":"1403.6652","title":"DeepWalk: Online Learning of Social Representations","created":"2014-03-26","cited_by_count":1547},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1602.07261","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","created":"2016-02-23","cited_by_count":1512},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1708.04896","title":"Random Erasing Data Augmentation","created":"2017-08-16","cited_by_count":1239},{"id":"1511.07289","title":"Fast and Accurate Deep Network Learning by Exponential Linear Units (ELUs)","created":"2015-11-23","cited_by_count":1070},{"id":"1704.03976","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","created":"2017-04-13","cited_by_count":920},{"id":"1904.05068","title":"Relational Knowledge Distillation","created":"2019-04-10","cited_by_count":889},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1805.09501","title":"AutoAugment: Learning Augmentation Policies from Data","created":"2018-05-24","cited_by_count":730},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2304.14108","title":"DataComp: In search of the next generation of multimodal datasets","created":"2023-04-27","cited_by_count":644},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1506.01186","title":"Cyclical Learning Rates for Training Neural Networks","created":"2015-06-03","cited_by_count":629},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1805.06725","title":"GANomaly: Semi-Supervised Anomaly Detection via Adversarial Training","created":"2018-05-17","cited_by_count":409},{"id":"2312.02696","title":"Analyzing and Improving the Training Dynamics of Diffusion Models","created":"2023-12-05","cited_by_count":402},{"id":"2106.14881","title":"Early Convolutions Help Transformers See Better","created":"2021-06-28","cited_by_count":396},{"id":"1910.01348","title":"On the Efficacy of Knowledge Distillation","created":"2019-10-03","cited_by_count":381},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"2006.06195","title":"Large-Scale Adversarial Training for Vision-and-Language Representation Learning","created":"2020-06-11","cited_by_count":327},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"2007.08432","title":"Data Poisoning Attacks Against Federated Learning Systems","created":"2020-07-16","cited_by_count":275},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"1806.05500","title":"Statistical Aspects of Wasserstein Distances","created":"2018-06-14","cited_by_count":203},{"id":"2111.05464","title":"Are Transformers More Robust Than CNNs?","created":"2021-11-10","cited_by_count":187},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"2306.07691","title":"StyleTTS 2: Towards Human-Level Text-to-Speech through Style Diffusion and Adversarial Training with Large Speech Language Models","created":"2023-06-13","cited_by_count":152},{"id":"2010.06121","title":"To be Robust or to be Fair: Towards Fairness in Adversarial Training","created":"2020-10-13","cited_by_count":137},{"id":"1906.06032","title":"Adversarial Training Can Hurt Generalization","created":"2019-06-14","cited_by_count":132},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130},{"id":"1905.09747","title":"Adversarially Robust Distillation","created":"2019-05-23","cited_by_count":125},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113},{"id":"2004.08994","title":"Adversarial Training for Large Neural Language Models","created":"2020-04-20","cited_by_count":111},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95},{"id":"1902.08226","title":"Graph Adversarial Training: Dynamically Regularizing Based on Graph Structure","created":"2019-02-20","cited_by_count":93},{"id":"2011.11164","title":"Learnable Boundary Guided Adversarial Training","created":"2020-11-23","cited_by_count":93},{"id":"1805.04807","title":"Curriculum Adversarial Training","created":"2018-05-13","cited_by_count":89},{"id":"2006.14536","title":"Smooth Adversarial Training","created":"2020-06-25","cited_by_count":89},{"id":"2101.08692","title":"Characterizing signal propagation to close the performance gap in unnormalized ResNets","created":"2021-01-21","cited_by_count":88},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"1705.09783","title":"Good Semi-supervised Learning that Requires a Bad GAN","created":"2017-05-27","cited_by_count":86},{"id":"2008.12328","title":"A Background-Agnostic Framework with Adversarial Training for Abnormal Event Detection in Video","created":"2020-08-27","cited_by_count":86},{"id":"2206.08213","title":"A Closer Look at Smoothness in Domain Adversarial Training","created":"2022-06-16","cited_by_count":85},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85},{"id":"1901.01250","title":"Learning Graph Embedding with Adversarial Training Methods","created":"2019-01-04","cited_by_count":84},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"2108.07969","title":"Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Better","created":"2021-08-18","cited_by_count":79},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79},{"id":"2010.01799","title":"Understanding Catastrophic Overfitting in Single-step Adversarial Training","created":"2020-10-05","cited_by_count":76},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76},{"id":"2103.02325","title":"On the effectiveness of adversarial training against common corruptions","created":"2021-03-03","cited_by_count":71},{"id":"1905.08232","title":"Adversarially robust transfer learning","created":"2019-05-20","cited_by_count":67},{"id":"2209.07399","title":"A Light Recipe to Train Robust Vision Transformers","created":"2022-09-15","cited_by_count":64},{"id":"2210.07540","title":"When Adversarial Training Meets Vision Transformers: Recipes from Training to Architecture","created":"2022-10-14","cited_by_count":64},{"id":"1901.04684","title":"The Limitations of Adversarial Training and the Blind-Spot Attack","created":"2019-01-15","cited_by_count":63},{"id":"2011.14969","title":"Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2020-11-30","cited_by_count":62},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62},{"id":"2205.01663","title":"Adversarial Training for High-Stakes Reliability","created":"2022-05-03","cited_by_count":60},{"id":"2006.08403","title":"On the Loss Landscape of Adversarial Training: Identifying Challenges and How to Overcome Them","created":"2020-06-15","cited_by_count":59},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59},{"id":"1912.11969","title":"Efficient Adversarial Training with Transferable Adversarial Examples","created":"2019-12-27","cited_by_count":56},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53},{"id":"2109.08266","title":"Hard to Forget: Poisoning Attacks on Certified Machine Unlearning","created":"2021-09-17","cited_by_count":52},{"id":"1906.03805","title":"Improving Neural Language Modeling via Adversarial Training","created":"2019-06-10","cited_by_count":49}],"next_cursor":"100"}