{"list":"other","total":59,"rows":[{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"2103.06624","title":"Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verification","created":"2021-03-11","cited_by_count":228},{"id":"1801.02612","title":"Spatially Transformed Adversarial Examples","created":"2018-01-08","cited_by_count":195},{"id":"1802.04034","title":"Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networks","created":"2018-02-12","cited_by_count":195},{"id":"1705.08475","title":"Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation","created":"2017-05-23","cited_by_count":185},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1910.14667","title":"Making an Invisibility Cloak: Real World Adversarial Attacks on Object Detectors","created":"2019-10-31","cited_by_count":155},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1902.08722","title":"A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networks","created":"2019-02-23","cited_by_count":125},{"id":"2002.05646","title":"Adversarial Machine Learning -- Industry Perspectives","created":"2020-02-04","cited_by_count":122},{"id":"2003.06693","title":"Certified Defenses for Adversarial Patches","created":"2020-03-14","cited_by_count":101},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"1710.10686","title":"Regularization for Deep Learning: A Taxonomy","created":"2017-10-29","cited_by_count":91},{"id":"1807.06732","title":"Motivating the Rules of the Game for Adversarial Example Research","created":"2018-07-18","cited_by_count":57},{"id":"1910.12908","title":"Certified Adversarial Robustness for Deep Reinforcement Learning","created":"2019-10-28","cited_by_count":47},{"id":"1711.08478","title":"MagNet and \"Efficient Defenses Against Adversarial Attacks\" are Not Robust to Adversarial Examples","created":"2017-11-22","cited_by_count":46},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40},{"id":"2212.10376","title":"The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results","created":"2022-12-20","cited_by_count":39},{"id":"2312.16760","title":"The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Results","created":"2023-12-28","cited_by_count":38},{"id":"2203.08398","title":"COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks","created":"2022-03-16","cited_by_count":26},{"id":"1901.10265","title":"Implicit Diversity in Image Summarization","created":"2019-01-29","cited_by_count":18},{"id":"1808.05770","title":"Reinforcement Learning for Autonomous Defence in Software-Defined Networking","created":"2018-08-17","cited_by_count":17},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17},{"id":"2104.00447","title":"Towards Evaluating and Training Verifiably Robust Neural Networks","created":"2021-04-01","cited_by_count":15},{"id":"2210.06077","title":"Double Bubble, Toil and Trouble: Enhancing Certified Robustness through Transitivity","created":"2022-10-12","cited_by_count":15},{"id":"2002.05648","title":"Politics of Adversarial Machine Learning","created":"2020-02-01","cited_by_count":12},{"id":"1809.07802","title":"Playing the Game of Universal Adversarial Perturbations","created":"2018-09-20","cited_by_count":9},{"id":"2003.13922","title":"Towards Effective Differential Privacy Communication for Users' Data Sharing Decision and Comprehension","created":"2020-03-31","cited_by_count":9},{"id":"1709.05396","title":"Differential Privacy on Finite Computers","created":"2017-09-15","cited_by_count":8},{"id":"2112.05307","title":"Are We There Yet? Timing and Floating-Point Attacks on Differential Privacy Systems","created":"2021-12-10","cited_by_count":8},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7},{"id":"2212.11746","title":"Certified Policy Smoothing for Cooperative Multi-Agent Reinforcement Learning","created":"2022-12-22","cited_by_count":7},{"id":"1802.06627","title":"Robustness of Rotation-Equivariant Networks to Adversarial Perturbations","created":"2018-02-19","cited_by_count":6},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6},{"id":"2404.18791","title":"Certification of Speaker Recognition Models to Additive Perturbations","created":"2024-04-29","cited_by_count":6},{"id":"2205.10159","title":"Getting a-Round Guarantees: Floating-Point Attacks on Certified Robustness","created":"2022-05-20","cited_by_count":5},{"id":"2401.17628","title":"Elephants Do Not Forget: Differential Privacy with State Continuity for Privacy Budget","created":"2024-01-31","cited_by_count":5},{"id":"2505.19532","title":"Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning","created":"2025-05-26","cited_by_count":5},{"id":"2302.04379","title":"Et Tu Certifications: Robustness Certificates Yield Better Adversarial Examples","created":"2023-02-09","cited_by_count":4},{"id":"2309.11005","title":"It's Simplex! Disaggregating Measures to Improve Certified Robustness","created":"2023-09-20","cited_by_count":4},{"id":"2505.20621","title":"Multi-level Certified Defense Against Poisoning Attacks in Offline Reinforcement Learning","created":"2025-05-27","cited_by_count":3}],"next_cursor":null}