{"list":"other","total":65,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2102.05918","title":"Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervision","created":"2021-02-11","cited_by_count":3864},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1311.3618","title":"Describing Textures in the Wild","created":"2013-11-14","cited_by_count":2125},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1709.00029","title":"EuroSAT: A Novel Dataset and Deep Learning Benchmark for Land Use and Land Cover Classification","created":"2017-08-31","cited_by_count":1496},{"id":"2203.05482","title":"Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference time","created":"2022-03-10","cited_by_count":1396},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1803.05407","title":"Averaging Weights Leads to Wider Optima and Better Generalization","created":"2018-03-14","cited_by_count":1209},{"id":"2212.04089","title":"Editing Models with Task Arithmetic","created":"2022-12-08","cited_by_count":1120},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"2306.01708","title":"TIES-Merging: Resolving Interference When Merging Models","created":"2023-06-02","cited_by_count":818},{"id":"1703.00121","title":"Remote Sensing Image Scene Classification: Benchmark and State of the Art","created":"2017-03-01","cited_by_count":797},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1912.05671","title":"Linear Mode Connectivity and the Lottery Ticket Hypothesis","created":"2019-12-11","cited_by_count":637},{"id":"2111.09832","title":"Merging Models with Fisher-Weighted Averaging","created":"2021-11-18","cited_by_count":621},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"2212.09849","title":"Dataless Knowledge Fusion by Merging Weights of Language Models","created":"2022-12-19","cited_by_count":387},{"id":"2008.11687","title":"What is being transferred in transfer learning?","created":"2020-08-26","cited_by_count":368},{"id":"2307.13269","title":"LoraHub: Efficient Cross-Task Generalization via Dynamic LoRA Composition","created":"2023-07-25","cited_by_count":364},{"id":"1708.02072","title":"Measuring Catastrophic Forgetting in Neural Networks","created":"2017-08-07","cited_by_count":360},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"2408.07666","title":"Model Merging in LLMs, MLLMs, and Beyond: Methods, Theories, Applications and Opportunities","created":"2024-08-14","cited_by_count":254},{"id":"2310.02575","title":"AdaMerging: Adaptive Model Merging for Multi-Task Learning","created":"2023-10-04","cited_by_count":252},{"id":"2306.04488","title":"Rewarded soups: towards Pareto-optimal alignment by interpolating weights fine-tuned on diverse rewards","created":"2023-06-07","cited_by_count":243},{"id":"2208.05592","title":"Patching open-vocabulary models by interpolating weights","created":"2022-08-10","cited_by_count":190},{"id":"1704.03453","title":"The Space of Transferable Adversarial Examples","created":"2017-04-11","cited_by_count":158},{"id":"2306.14870","title":"Composing Parameter-Efficient Modules with Arithmetic Operations","created":"2023-06-26","cited_by_count":156},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"2402.02705","title":"Representation Surgery for Multi-Task Model Merging","created":"2024-02-05","cited_by_count":96},{"id":"1901.09981","title":"Improving Adversarial Robustness of Ensembles with Diversity Training","created":"2019-01-28","cited_by_count":69},{"id":"2002.03239","title":"Curse of Dimensionality on Randomized Smoothing for Certifiable Robustness","created":"2020-02-08","cited_by_count":56},{"id":"2307.08286","title":"Going Beyond Linear Mode Connectivity: The Layerwise Linear Feature Connectivity","created":"2023-07-17","cited_by_count":50},{"id":"2310.17626","title":"A Survey on Transferability of Adversarial Examples across Deep Neural Networks","created":"2023-10-26","cited_by_count":44},{"id":"2104.00671","title":"TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothness","created":"2021-04-01","cited_by_count":38},{"id":"2002.03517","title":"Random Smoothing Might be Unable to Certify $\\ell_\\infty$ Robustness for High-Dimensional Images","created":"2020-02-10","cited_by_count":35},{"id":"2408.07362","title":"BadMerging: Backdoor Attacks Against Model Merging","created":"2024-08-14","cited_by_count":34},{"id":"2402.03660","title":"On the Emergence of Cross-Task Linearity in the Pretraining-Finetuning Paradigm","created":"2024-02-06","cited_by_count":26},{"id":"2402.19334","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","created":"2024-02-29","cited_by_count":26},{"id":"2302.10164","title":"Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts","created":"2023-02-20","cited_by_count":23},{"id":"2112.14337","title":"Closer Look at the Transferability of Adversarial Examples: How They Fool Different Models Differently","created":"2021-12-29","cited_by_count":22},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17},{"id":"2110.15053","title":"Adversarial Robustness in Multi-Task Learning: Promises and Illusions","created":"2021-10-26","cited_by_count":17},{"id":"2403.06952","title":"SELMA: Learning and Merging Skill-Specific Text-to-Image Experts with Auto-Generated Data","created":"2024-03-11","cited_by_count":14},{"id":"2412.19512","title":"Safeguard Fine-Tuned LLMs Through Pre- and Post-Tuning Model Merging","created":"2024-12-27","cited_by_count":11},{"id":"2503.07661","title":"Disrupting Model Merging: A Parameter-Level Defense Without Sacrificing Accuracy","created":"2025-03-08","cited_by_count":11},{"id":"2404.09977","title":"MaxFusion: Plug&Play Multi-Modal Generation in Text-to-Image Diffusion Models","created":"2024-04-15","cited_by_count":9},{"id":"2411.09263","title":"Rethinking Weight-Averaged Model-merging","created":"2024-11-14","cited_by_count":8},{"id":"2505.23561","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","created":"2025-05-29","cited_by_count":7},{"id":"2502.15434","title":"Mixup Model Merge: Enhancing Model Merging Performance through Randomized Linear Interpolation","created":"2025-02-21","cited_by_count":2}],"next_cursor":null}