{"list":"other","total":112,"rows":[{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1405.0312","title":"Microsoft COCO: Common Objects in Context","created":"2014-05-01","cited_by_count":17608},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1708.07747","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","created":"2017-08-25","cited_by_count":4349},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1704.08847","title":"Parseval Networks: Improving Robustness to Adversarial Examples","created":"2017-04-28","cited_by_count":293},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"2105.07581","title":"Vision Transformers are Robust Learners","created":"2021-05-17","cited_by_count":207},{"id":"1807.07769","title":"Physical Adversarial Examples for Object Detectors","created":"2018-07-20","cited_by_count":163},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1910.14667","title":"Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors","created":"2019-10-31","cited_by_count":155},{"id":"2304.01852","title":"Summary of ChatGPT-Related Research and Perspective Towards the Future of Large Language Models","created":"2023-04-04","cited_by_count":154},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"1802.07856","title":"xView: Objects in Context in Overhead Imagery","created":"2018-02-22","cited_by_count":146},{"id":"2103.01050","title":"Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical World","created":"2021-03-01","cited_by_count":127},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"1908.01763","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","created":"2019-08-02","cited_by_count":122},{"id":"1801.02608","title":"LaVAN: Localized and Visible Adversarial Noise","created":"2018-01-08","cited_by_count":113},{"id":"1811.12673","title":"ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples","created":"2018-11-30","cited_by_count":105},{"id":"2203.03818","title":"Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon","created":"2022-03-08","cited_by_count":101},{"id":"1803.05787","title":"Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples","created":"2018-03-14","cited_by_count":99},{"id":"2203.03373","title":"Adversarial Texture for Fooling Person Detectors in the Physical World","created":"2022-03-07","cited_by_count":96},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"1906.11897","title":"On Physical Adversarial Patches for Object Detection","created":"2019-06-20","cited_by_count":93},{"id":"1909.04326","title":"Universal Physical Camouflage Attacks on Object Detectors","created":"2019-09-10","cited_by_count":91},{"id":"1807.01216","title":"Local Gradients Smoothing: Defense against localized adversarial attacks","created":"2018-07-03","cited_by_count":87},{"id":"1704.00103","title":"SafetyNet: Detecting and Rejecting Adversarial Examples Robustly","created":"2017-04-01","cited_by_count":76},{"id":"2103.06504","title":"Adversarial Laser Beam: Effective Physical-World Attack to DNNs in a Blink","created":"2021-03-11","cited_by_count":75},{"id":"2109.07193","title":"FCA: Learning a 3D Full-coverage Vehicle Camouflage for Multi-view Physical Adversarial Attack","created":"2021-09-15","cited_by_count":74},{"id":"1907.04449","title":"PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving","created":"2019-07-09","cited_by_count":72},{"id":"2007.00753","title":"Opportunities and Challenges in Deep Learning Adversarial Robustness: A Survey","created":"2020-07-01","cited_by_count":72},{"id":"1904.00759","title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","created":"2019-03-21","cited_by_count":70},{"id":"2112.04532","title":"Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection","created":"2021-12-08","cited_by_count":67},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65},{"id":"2012.12528","title":"The Translucent Patch: A Physical and Universal Attack on Object Detectors","created":"2020-12-23","cited_by_count":62},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59},{"id":"2008.01919","title":"Adv-watermark: A Novel Watermark Perturbation for Adversarial Examples","created":"2020-08-05","cited_by_count":56},{"id":"1802.06430","title":"DARTS: Deceiving Autonomous Cars with Toxic Signs","created":"2018-02-18","cited_by_count":54},{"id":"2101.08154","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","created":"2021-01-20","cited_by_count":51},{"id":"2007.04137","title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations","created":"2020-07-08","cited_by_count":50},{"id":"2210.03895","title":"ViewFool: Evaluating the Robustness of Visual Recognition to Adversarial Viewpoints","created":"2022-10-08","cited_by_count":48},{"id":"1905.11468","title":"Scaleable input gradient regularization for adversarial robustness","created":"2019-05-27","cited_by_count":47},{"id":"2108.06247","title":"Optical Adversarial Attack","created":"2021-08-13","cited_by_count":43},{"id":"1803.00404","title":"Deep Defense: Training DNNs with Improved Adversarial Robustness","created":"2018-02-23","cited_by_count":42},{"id":"2205.05909","title":"Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real World","created":"2022-05-12","cited_by_count":42},{"id":"1904.08554","title":"Gotta Catch 'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks","created":"2019-04-18","cited_by_count":40},{"id":"2011.13375","title":"Invisible Perturbations: Physical Adversarial Examples Exploiting the Rolling Shutter Effect","created":"2020-11-26","cited_by_count":40},{"id":"2305.11618","title":"DAP: A Dynamic Adversarial Patch for Evading Person Detectors","created":"2023-05-19","cited_by_count":40},{"id":"2303.13868","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","created":"2023-03-24","cited_by_count":39},{"id":"2007.16118","title":"Physical Adversarial Attack on Vehicle Detector in the Carla Simulator","created":"2020-07-31","cited_by_count":38},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36},{"id":"2304.10029","title":"Jedi: Entropy-based Localization and Removal of Adversarial Patches","created":"2023-04-20","cited_by_count":35},{"id":"1912.08166","title":"APRICOT: A Dataset of Physical Adversarial Attacks on Object Detection","created":"2019-12-17","cited_by_count":31},{"id":"2207.01795","title":"PatchZero: Defending against Adversarial Patch Attacks by Detecting and Zeroing the Patch","created":"2022-07-05","cited_by_count":30},{"id":"2102.02956","title":"DetectorGuard: Provably Securing Object Detectors against Localized Patch Hiding Attacks","created":"2021-02-05","cited_by_count":29},{"id":"2104.12609","title":"PatchGuard++: Efficient Provable Attack Detection against Adversarial Patches","created":"2021-04-26","cited_by_count":29},{"id":"2110.03605","title":"Robust Feature-Level Adversaries are Interpretability Tools","created":"2021-10-07","cited_by_count":27},{"id":"2212.05709","title":"HOTCOLD Block: Fooling Thermal Infrared Detectors with a Novel Wearable Design","created":"2022-12-12","cited_by_count":27},{"id":"1804.03648","title":"DeepMarks: A Digital Fingerprinting Framework for Deep Neural Networks","created":"2018-04-10","cited_by_count":26},{"id":"1904.00344","title":"BlackMarks: Blackbox Multibit Watermarking for Deep Neural Networks","created":"2019-03-31","cited_by_count":26},{"id":"2010.14974","title":"Object Hider: Adversarial Patch Attack Against Object Detectors","created":"2020-10-28","cited_by_count":23},{"id":"2202.01811","title":"ObjectSeeker: Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking","created":"2022-02-03","cited_by_count":22},{"id":"2401.00148","title":"TPatch: A Triggered Physical Adversarial Patch","created":"2023-12-30","cited_by_count":22},{"id":"2010.13070","title":"Dynamic Adversarial Patch for Evading Object Detection Models","created":"2020-10-25","cited_by_count":20},{"id":"2308.06173","title":"Physical Adversarial Attacks For Camera-based Smart Systems: Current Trends, Categorization, Applications, Research Challenges, and Future Outlook","created":"2023-08-11","cited_by_count":20},{"id":"2101.11453","title":"Meta Adversarial Training against Universal Patches","created":"2021-01-27","cited_by_count":19},{"id":"2111.04266","title":"Generative Dynamic Patch Attack","created":"2021-11-08","cited_by_count":19},{"id":"2012.05858","title":"SPAA: Stealthy Projector-based Adversarial Attacks on Deep Image Classifiers","created":"2020-12-10","cited_by_count":17},{"id":"2109.00124","title":"Learning Coated Adversarial Camouflages for Object Detectors","created":"2021-09-01","cited_by_count":17},{"id":"1804.00750","title":"DeepSigns: A Generic Watermarking Framework for IP Protection of Deep Learning Models","created":"2018-04-02","cited_by_count":16},{"id":"2208.09801","title":"PointDP: Diffusion-driven Purification against Adversarial Attacks on 3D Point Cloud Recognition","created":"2022-08-21","cited_by_count":16},{"id":"2102.03728","title":"Adversarial Imaging Pipelines","created":"2021-02-07","cited_by_count":15},{"id":"1801.02780","title":"Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos","created":"2018-01-09","cited_by_count":14},{"id":"2108.05075","title":"Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networks","created":"2021-08-11","cited_by_count":13},{"id":"2006.07700","title":"Defensive Approximation: Securing CNNs using Approximate Computing","created":"2020-06-13","cited_by_count":12},{"id":"2303.01734","title":"AdvART: Adversarial Art for Camouflaged Object Detection Attacks","created":"2023-03-03","cited_by_count":12},{"id":"2308.03108","title":"SAAM: Stealthy Adversarial Attack on Monocular Depth Estimation","created":"2023-08-06","cited_by_count":12},{"id":"2209.02430","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","created":"2022-09-02","cited_by_count":11},{"id":"2009.09205","title":"Adversarial Rain Attack and Defensive Deraining for DNN Perception","created":"2020-09-19","cited_by_count":10},{"id":"1810.10337","title":"Projecting Trouble: Light Based Adversarial Attacks on Deep Learning Classifiers","created":"2018-10-16","cited_by_count":9},{"id":"2205.13807","title":"fakeWeather: Adversarial Attacks for Deep Neural Networks Emulating Weather Conditions on the Camera Lens of Autonomous Systems","created":"2022-05-27","cited_by_count":8},{"id":"2303.01338","title":"AdvRain: Adversarial Raindrops to Attack Camera-based Smart Vision Systems","created":"2023-03-02","cited_by_count":8},{"id":"2405.06278","title":"Exploring the Interplay of Interpretability and Robustness in Deep Neural Networks: A Saliency-guided Approach","created":"2024-05-10","cited_by_count":7}],"next_cursor":"100"}