{"list":"other","total":53,"rows":[{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1606.08415","title":"Gaussian Error Linear Units (GELUs)","created":"2016-06-27","cited_by_count":3502},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1903.12261","title":"Benchmarking Neural Network Robustness to Common Corruptions and Perturbations","created":"2019-03-28","cited_by_count":2877},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"2012.07421","title":"WILDS: A Benchmark of in-the-Wild Distribution Shifts","created":"2020-12-14","cited_by_count":1375},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1906.02530","title":"Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shift","created":"2019-06-06","cited_by_count":1287},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1702.03118","title":"Sigmoid-Weighted Linear Units for Neural Network Function Approximation in Reinforcement Learning","created":"2017-02-10","cited_by_count":950},{"id":"2002.04745","title":"On Layer Normalization in the Transformer Architecture","created":"2020-02-12","cited_by_count":922},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"2007.00644","title":"Measuring Robustness to Natural Distribution Shifts in Image Classification","created":"2020-07-01","cited_by_count":454},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1805.10965","title":"Lipschitz regularity of deep neural networks: analysis and efficient estimation","created":"2018-05-28","cited_by_count":415},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1505.05116","title":"Data-driven Distributionally Robust Optimization Using the Wasserstein Metric: Performance Guarantees and Tractable Reformulations","created":"2015-05-19","cited_by_count":291},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"1705.01320","title":"Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks","created":"2017-05-03","cited_by_count":242},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"1604.02199","title":"Distributionally Robust Stochastic Optimization with Wasserstein Distance","created":"2016-04-08","cited_by_count":185},{"id":"2006.04710","title":"The Lipschitz Constant of Self-Attention","created":"2020-06-08","cited_by_count":174},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"1908.08729","title":"Wasserstein Distributionally Robust Optimization: Theory and Applications in Machine Learning","created":"2019-08-23","cited_by_count":170},{"id":"2104.09425","title":"Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?","created":"2021-04-19","cited_by_count":113},{"id":"1811.09600","title":"Decoupling Direction and Norm for Efficient Gradient-Based L2 Adversarial Attacks and Defenses","created":"2018-11-23","cited_by_count":109},{"id":"2003.01219","title":"Exactly Computing the Local Lipschitz Constant of ReLU Networks","created":"2020-03-02","cited_by_count":102},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79},{"id":"2305.13948","title":"Decoupled Kullback-Leibler Divergence Loss","created":"2023-05-23","cited_by_count":58},{"id":"2210.07394","title":"Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation","created":"2022-10-13","cited_by_count":45},{"id":"2203.05154","title":"Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack","created":"2022-03-10","cited_by_count":44},{"id":"2312.14820","title":"How Smooth Is Attention?","created":"2023-12-22","cited_by_count":44},{"id":"2210.15318","title":"Efficient and Effective Augmentation Strategy for Adversarial Training","created":"2022-10-27","cited_by_count":43},{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38},{"id":"2302.03015","title":"Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustness","created":"2023-02-06","cited_by_count":36},{"id":"2406.05927","title":"MeanSparse: Post-Training Robustness Enhancement Through Mean-Centered Feature Sparsification","created":"2024-06-09","cited_by_count":21},{"id":"2306.09844","title":"Wasserstein distributional robustness of neural networks","created":"2023-06-16","cited_by_count":16},{"id":"2312.04960","title":"MIMIR: Masked Image Modeling for Mutual Information-based Adversarial Robustness","created":"2023-12-08","cited_by_count":12},{"id":"1903.11359","title":"Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attacks","created":"2019-03-27","cited_by_count":11},{"id":"1811.11493","title":"A randomized gradient-free attack on ReLU networks","created":"2018-11-28","cited_by_count":8},{"id":"2402.03942","title":"Wasserstein distributionally robust optimization and its tractable regularization formulations","created":"2024-02-06","cited_by_count":5}],"next_cursor":null}