{"list":"other","total":64,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2011.13456","title":"Score-Based Generative Modeling through Stochastic Differential Equations","created":"2020-11-26","cited_by_count":9122},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1602.07261","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","created":"2016-02-23","cited_by_count":1512},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244},{"id":"2006.04924","title":"A Self-supervised Approach for Adversarial Robustness","created":"2020-06-08","cited_by_count":180},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127},{"id":"1906.06919","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","created":"2019-06-17","cited_by_count":121},{"id":"1703.10631","title":"Interpretable Learning for Self-Driving Cars by Visualizing Causal Attention","created":"2017-03-30","cited_by_count":107},{"id":"1811.12673","title":"ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples","created":"2018-11-30","cited_by_count":105},{"id":"1803.05787","title":"Feature Distillation: DNN-Oriented JPEG Compression Against Adversarial Examples","created":"2018-03-14","cited_by_count":99},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93},{"id":"1801.08926","title":"Deflecting Adversarial Attacks with Pixel Deflection","created":"2018-01-26","cited_by_count":71},{"id":"2305.16494","title":"Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability","created":"2023-05-25","cited_by_count":66},{"id":"2308.10299","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","created":"2023-08-20","cited_by_count":64},{"id":"2203.08124","title":"Can Neural Nets Learn the Same Model Twice? Investigating Reproducibility and Double Descent from the Decision Boundary Perspective","created":"2022-03-15","cited_by_count":57},{"id":"1909.04385","title":"FDA: Feature Disruptive Attack","created":"2019-09-10","cited_by_count":56},{"id":"2203.16931","title":"Towards Robust Rain Removal Against Adversarial Attacks: A Comprehensive Benchmark Analysis and Beyond","created":"2022-03-31","cited_by_count":48},{"id":"2303.15754","title":"Transferable Adversarial Attacks on Vision Transformers with Token Gradient Regularization","created":"2023-03-28","cited_by_count":42},{"id":"2006.06356","title":"Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factors","created":"2020-06-11","cited_by_count":40},{"id":"2302.14677","title":"Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger","created":"2023-02-28","cited_by_count":40},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35},{"id":"1903.01563","title":"Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications","created":"2019-03-01","cited_by_count":28},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28},{"id":"2405.14077","title":"Learning to Transform Dynamically for Better Adversarial Transferability","created":"2024-05-23","cited_by_count":23},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21},{"id":"2307.00477","title":"Query-Efficient Decision-based Black-Box Patch Attack","created":"2023-07-02","cited_by_count":19},{"id":"2303.03680","title":"Logit Margin Matters: Improving Transferable Targeted Adversarial Attack by Logit Calibration","created":"2023-03-07","cited_by_count":18},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18},{"id":"2112.03492","title":"Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal","created":"2021-12-07","cited_by_count":16},{"id":"2403.14250","title":"Safeguarding Medical Image Segmentation Datasets against Unauthorized Training via Contour- and Texture-Aware Perturbations","created":"2024-03-21","cited_by_count":15},{"id":"2404.09586","title":"Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing","created":"2024-04-15","cited_by_count":15},{"id":"2305.05875","title":"Quantization Aware Attack: Enhancing Transferable Adversarial Attacks by Model Quantization","created":"2023-05-10","cited_by_count":14},{"id":"2406.17349","title":"Semantic Deep Hiding for Robust Unlearnable Examples","created":"2024-06-25","cited_by_count":13},{"id":"2412.07277","title":"Backdoor Attacks against No-Reference Image Quality Assessment Models via a Scalable Trigger","created":"2024-12-10","cited_by_count":12},{"id":"2412.01646","title":"Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior","created":"2024-12-02","cited_by_count":11},{"id":"2403.10076","title":"Benchmarking Adversarial Robustness of Image Shadow Removal with Shadow-adaptive Attacks","created":"2024-03-15","cited_by_count":10},{"id":"2408.08671","title":"Towards Physical World Backdoor Attacks against Skeleton Action Recognition","created":"2024-08-16","cited_by_count":7},{"id":"2503.00383","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","created":"2025-03-01","cited_by_count":6}],"next_cursor":null}