{"list":"other","total":60,"rows":[{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1506.02142","title":"Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learning","created":"2015-06-06","cited_by_count":4448},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1512.04150","title":"Learning Deep Features for Discriminative Localization","created":"2015-12-14","cited_by_count":2436},{"id":"1703.04977","title":"What Uncertainties Do We Need in Bayesian Deep Learning for Computer Vision?","created":"2017-03-15","cited_by_count":2352},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1706.03825","title":"SmoothGrad: removing noise by adding noise","created":"2017-06-12","cited_by_count":1109},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1710.10547","title":"Interpretation of Neural Networks is Fragile","created":"2017-10-29","cited_by_count":444},{"id":"1805.10965","title":"Lipschitz regularity of deep neural networks: analysis and efficient estimation","created":"2018-05-28","cited_by_count":415},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"2010.01736","title":"Geometry-aware Instance-reweighted Adversarial Training","created":"2020-10-05","cited_by_count":198},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"1907.10456","title":"Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systems","created":"2019-07-24","cited_by_count":153},{"id":"1412.5068","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","created":"2014-12-11","cited_by_count":146},{"id":"2112.08304","title":"On the Convergence and Robustness of Adversarial Training","created":"2021-12-15","cited_by_count":130},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1812.03789","title":"Abstracting Causal Models","created":"2018-12-10","cited_by_count":107},{"id":"1910.12336","title":"CXPlain: Causal Explanations for Model Interpretation under Uncertainty","created":"2019-10-27","cited_by_count":98},{"id":"1612.07767","title":"Adversarial Examples Detection in Deep Networks with Convolutional Filter Statistics","created":"2016-12-22","cited_by_count":77},{"id":"2103.08307","title":"Improving Adversarial Robustness via Channel-wise Activation Suppressing","created":"2021-03-11","cited_by_count":76},{"id":"1902.04818","title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples","created":"2019-02-13","cited_by_count":75},{"id":"1801.08926","title":"Deflecting Adversarial Attacks with Pixel Deflection","created":"2018-01-26","cited_by_count":71},{"id":"2010.04055","title":"A Unified Approach to Interpreting and Boosting Adversarial Transferability","created":"2020-10-08","cited_by_count":71},{"id":"2103.04244","title":"Counterfactuals and Causability in Explainable Artificial Intelligence: Theory, Algorithms, and Applications","created":"2021-03-07","cited_by_count":59},{"id":"1707.06728","title":"Efficient Defenses Against Adversarial Attacks","created":"2017-07-21","cited_by_count":53},{"id":"1910.07629","title":"A New Defense Against Adversarial Images: Turning a Weakness into a Strength","created":"2019-10-16","cited_by_count":49},{"id":"2306.06123","title":"Adversarial attacks and defenses in explainable artificial intelligence: A survey","created":"2023-06-06","cited_by_count":48},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44},{"id":"2106.06196","title":"CausalAdv: Adversarial Robustness through the Lens of Causality","created":"2021-06-11","cited_by_count":37},{"id":"1905.02161","title":"Batch Normalization is a Cause of Adversarial Vulnerability","created":"2019-05-06","cited_by_count":29},{"id":"1705.07819","title":"Regularizing deep networks using efficient layerwise adversarial training","created":"2017-05-22","cited_by_count":24},{"id":"1811.04376","title":"Explaining Deep Learning Models using Causal Inference","created":"2018-11-11","cited_by_count":18},{"id":"1904.02057","title":"Interpreting Adversarial Examples by Activation Promotion and Suppression","created":"2019-04-03","cited_by_count":17},{"id":"2106.09534","title":"Adversarial Visual Robustness by Causal Intervention","created":"2021-06-17","cited_by_count":13},{"id":"1809.08516","title":"Adversarial Defense via Data Dependent Activation Function and Total Variation Minimization","created":"2018-09-23","cited_by_count":9},{"id":"2402.18370","title":"Adversarial Example Soups: Improving Transferability and Stealthiness for Free","created":"2024-02-27","cited_by_count":6}],"next_cursor":null}