{"list":"other","total":58,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1803.05407","title":"Averaging Weights Leads to Wider Optima and Better Generalization","created":"2018-03-14","cited_by_count":1209},{"id":"1610.02242","title":"Temporal Ensembling for Semi-Supervised Learning","created":"2016-10-07","cited_by_count":1057},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1606.04586","title":"Regularization With Stochastic Transformations and Perturbations for Deep Semi-Supervised Learning","created":"2016-06-14","cited_by_count":441},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"2010.01736","title":"Geometry-aware Instance-reweighted Adversarial Training","created":"2020-10-05","cited_by_count":198},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"1905.13725","title":"Are Labels Required for Improving Adversarial Robustness?","created":"2019-05-31","cited_by_count":163},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"1906.06032","title":"Adversarial Training Can Hurt Generalization","created":"2019-06-14","cited_by_count":132},{"id":"1906.00555","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","created":"2019-06-03","cited_by_count":76},{"id":"2109.14119","title":"Stochastic Training is Not Necessary for Generalization","created":"2021-09-29","cited_by_count":63},{"id":"2002.06789","title":"CAT: Customized Adversarial Training for Improved Robustness","created":"2020-02-17","cited_by_count":61},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57},{"id":"2106.01606","title":"Exploring Memorization in Adversarial Training","created":"2021-06-03","cited_by_count":55},{"id":"1905.13021","title":"Robustness to Adversarial Perturbations in Learning from Incomplete Data","created":"2019-05-24","cited_by_count":49},{"id":"2010.11828","title":"Once-for-All Adversarial Training: In-Situ Tradeoff between Robustness and Accuracy for Free","created":"2020-10-22","cited_by_count":48},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42},{"id":"2112.05825","title":"Revisiting Consistency Regularization for Semi-Supervised Learning","created":"2021-12-10","cited_by_count":34},{"id":"2310.19360","title":"Balance, Imbalance, and Rebalance: Understanding Robust Overfitting from a Minimax Game Perspective","created":"2023-10-30","cited_by_count":18},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17},{"id":"2308.11443","title":"Revisiting and Exploring Efficient Fast Adversarial Training via LAW: Lipschitz Regularization and Auto Weight Averaging","created":"2023-08-22","cited_by_count":14},{"id":"2209.06388","title":"TSFool: Crafting Highly-Imperceptible Adversarial Time Series through Multi-Objective Attack","created":"2022-09-14","cited_by_count":9},{"id":"2207.10283","title":"One-vs-the-Rest Loss to Focus on Important Samples in Adversarial Training","created":"2022-07-21","cited_by_count":7},{"id":"2305.12118","title":"Annealing Self-Distillation Rectification Improves Adversarial Training","created":"2023-05-20","cited_by_count":7},{"id":"2112.00323","title":"Push Stricter to Decide Better: A Class-Conditional Feature Adaptive Framework for Improving Adversarial Robustness","created":"2021-12-01","cited_by_count":6},{"id":"2401.14948","title":"Conserve-Update-Revise to Cure Generalization and Robustness Trade-off in Adversarial Training","created":"2024-01-26","cited_by_count":6},{"id":"2205.11744","title":"Alleviating Robust Overfitting of Adversarial Training With Consistency Regularization","created":"2022-05-24","cited_by_count":4},{"id":"2508.02186","title":"Failure Cases Are Better Learned But Boundary Says Sorry: Facilitating Smooth Perception Change for Accuracy-Robustness Trade-Off in Adversarial Training","created":"2025-08-04","cited_by_count":3},{"id":"2511.00836","title":"Parameter Interpolation Adversarial Training for Robust Image Classification","created":"2025-11-02","cited_by_count":1}],"next_cursor":null}