{"list":"other","total":74,"rows":[{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"1405.0312","title":"Microsoft COCO: Common Objects in Context","created":"2014-05-01","cited_by_count":17608},{"id":"2304.08485","title":"Visual Instruction Tuning","created":"2023-04-17","cited_by_count":7869},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1612.00837","title":"Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answering","created":"2016-12-02","cited_by_count":2516},{"id":"2308.12966","title":"Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyond","created":"2023-08-24","cited_by_count":2224},{"id":"1311.3618","title":"Describing Textures in the Wild","created":"2013-11-14","cited_by_count":2125},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1306.5151","title":"Fine-Grained Visual Classification of Aircraft","created":"2013-06-21","cited_by_count":1726},{"id":"1904.08920","title":"Towards VQA Models That Can Read","created":"2019-04-18","cited_by_count":1718},{"id":"1709.00029","title":"EuroSAT: A Novel Dataset and Deep Learning Benchmark for Land Use and Land Cover Classification","created":"2017-08-31","cited_by_count":1496},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"2010.03759","title":"Energy-based Out-of-distribution Detection","created":"2020-10-08","cited_by_count":1299},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"2212.07143","title":"Reproducible scaling laws for contrastive language-image learning","created":"2022-12-14","cited_by_count":1173},{"id":"1905.13549","title":"Learning Robust Global Representations by Penalizing Local Predictive Power","created":"2019-05-29","cited_by_count":1013},{"id":"1912.02781","title":"AugMix: A Simple Data Processing Method to Improve Robustness and Uncertainty","created":"2019-12-05","cited_by_count":901},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"2308.01390","title":"OpenFlamingo: An Open-Source Framework for Training Large Autoregressive Vision-Language Models","created":"2023-08-02","cited_by_count":565},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1806.03962","title":"Rotation Equivariant CNNs for Digital Pathology","created":"2018-06-08","cited_by_count":422},{"id":"1912.03263","title":"Your Classifier is Secretly an Energy Based Model and You Should Treat it Like One","created":"2019-12-06","cited_by_count":405},{"id":"2209.07511","title":"Test-Time Prompt Tuning for Zero-Shot Generalization in Vision-Language Models","created":"2022-09-15","cited_by_count":382},{"id":"2407.04620","title":"Learning to (Learn at Test Time): RNNs with Expressive Hidden States","created":"2024-07-05","cited_by_count":355},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"2306.15447","title":"Are aligned neural networks adversarially aligned?","created":"2023-06-26","cited_by_count":315},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"2209.07522","title":"Test-Time Training with Masked Autoencoders","created":"2022-09-15","cited_by_count":212},{"id":"1602.03264","title":"A Theory of Generative ConvNet","created":"2016-02-10","cited_by_count":174},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"2308.10741","title":"On the Adversarial Robustness of Multi-Modal Foundation Models","created":"2023-08-21","cited_by_count":145},{"id":"2106.06041","title":"Adversarial purification with Score-based generative models","created":"2021-06-11","cited_by_count":134},{"id":"2205.14969","title":"Guided Diffusion Model for Adversarial Purification","created":"2022-05-30","cited_by_count":92},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85},{"id":"2403.14119","title":"C-TPT: Calibrated Test-Time Prompt Tuning for Vision-Language Models via Text Feature Dispersion","created":"2024-03-21","cited_by_count":83},{"id":"1805.10204","title":"Adversarial examples from computational constraints","created":"2018-05-25","cited_by_count":80},{"id":"2405.02266","title":"On the test-time zero-shot generalization of vision-language models: Do we really need prompt learning?","created":"2024-05-03","cited_by_count":67},{"id":"2202.13711","title":"Evaluating the Adversarial Robustness of Adaptive Test-time Defenses","created":"2022-02-28","cited_by_count":64},{"id":"2005.13525","title":"Stochastic Security: Adversarial Defense Using Long-Run Dynamics of Energy-Based Models","created":"2020-05-27","cited_by_count":58},{"id":"2106.10151","title":"The Dimpled Manifold Model of Adversarial Examples in Machine Learning","created":"2021-06-18","cited_by_count":41},{"id":"2012.04351","title":"Data-Dependent Randomized Smoothing","created":"2020-12-08","cited_by_count":37},{"id":"1901.10861","title":"A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distance","created":"2019-01-30","cited_by_count":32},{"id":"2106.04938","title":"Attacking Adversarial Attacks as A Defense","created":"2021-06-09","cited_by_count":32},{"id":"2103.14347","title":"Combating Adversaries with Anti-Adversaries","created":"2021-03-26","cited_by_count":27},{"id":"2107.14110","title":"Enhancing Adversarial Robustness via Test-time Transformation Ensembling","created":"2021-07-29","cited_by_count":27},{"id":"2202.04347","title":"Gradient Methods Provably Converge to Non-Robust Networks","created":"2022-02-09","cited_by_count":27},{"id":"2104.03863","title":"A single gradient step finds adversarial examples on random two-layers neural networks","created":"2021-04-08","cited_by_count":26},{"id":"2106.12611","title":"Adversarial Examples in Multi-Layer Random ReLU Networks","created":"2021-06-23","cited_by_count":26},{"id":"2108.09093","title":"Towards Understanding the Generative Capability of Adversarially Robust Classifiers","created":"2021-08-20","cited_by_count":26},{"id":"2303.01456","title":"The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networks","created":"2023-03-02","cited_by_count":23},{"id":"2503.03613","title":"CLIP is Strong Enough to Fight Back: Test-time Counterattacks towards Zero-shot Adversarial Robustness of CLIP","created":"2025-03-05","cited_by_count":23},{"id":"2209.07959","title":"Towards Bridging the Performance Gaps of Joint Energy-based Models","created":"2022-09-16","cited_by_count":15},{"id":"2203.13455","title":"A Unified Contrastive Energy-based Model for Understanding the Generative Ability of Adversarial Training","created":"2022-03-25","cited_by_count":13},{"id":"2203.17209","title":"Adversarial Examples in Random Neural Networks with General Activations","created":"2022-03-31","cited_by_count":13},{"id":"2012.06568","title":"Learning Energy-Based Models With Adversarial Training","created":"2020-12-11","cited_by_count":9},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9},{"id":"2407.06315","title":"Shedding More Light on Robust Classifiers under the lens of Energy-based Models","created":"2024-07-08","cited_by_count":9},{"id":"2209.11549","title":"MAGIC: Mask-Guided Image Synthesis by Inverting a Quasi-Robust Classifier","created":"2022-09-23","cited_by_count":6},{"id":"2303.04343","title":"M-EBM: Towards Understanding the Manifolds of Energy-Based Models","created":"2023-03-08","cited_by_count":6},{"id":"2410.04201","title":"IT$^3$: Idempotent Test-Time Training","created":"2024-10-05","cited_by_count":6},{"id":"2303.15409","title":"Class-Conditioned Transformation for Enhanced Robust Image Classification","created":"2023-03-27","cited_by_count":5},{"id":"2405.15942","title":"Can Implicit Bias Imply Adversarial Robustness?","created":"2024-05-24","cited_by_count":5},{"id":"2307.11672","title":"Robust Feature Inference: A Test-time Defense Strategy using Spectral Projections","created":"2023-07-21","cited_by_count":3},{"id":"2409.15190","title":"Interpretability-Guided Test-Time Adversarial Defense","created":"2024-09-23","cited_by_count":3},{"id":"2503.10191","title":"Robustness Tokens: Towards Adversarial Robustness of Transformers","created":"2025-03-13","cited_by_count":2},{"id":"2505.22486","title":"Understanding Adversarial Training with Energy-based Models","created":"2025-05-28","cited_by_count":2},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2},{"id":"2407.02240","title":"MALT Powers Up Adversarial Attacks","created":"2024-07-02","cited_by_count":1}],"next_cursor":null}