{"list":"other","total":51,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1709.01507","title":"Squeeze-and-Excitation Networks","created":"2017-09-05","cited_by_count":4789},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"2110.14795","title":"MedMNIST v2 -- A large-scale lightweight benchmark for 2D and 3D biomedical image classification","created":"2021-10-27","cited_by_count":690},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1905.00877","title":"You Only Propagate Once: Accelerating Adversarial Training via Maximal Principle","created":"2019-05-02","cited_by_count":183},{"id":"1811.09716","title":"Robustness via curvature regularization, and vice versa","created":"2018-11-23","cited_by_count":175},{"id":"1812.02637","title":"MMA Training: Direct Input Space Margin Maximization through Adversarial Training","created":"2018-12-06","cited_by_count":172},{"id":"2103.15670","title":"On the Adversarial Robustness of Vision Transformers","created":"2021-03-29","cited_by_count":106},{"id":"1608.08967","title":"Robustness of classifiers: from adversarial to random noise","created":"2016-08-31","cited_by_count":88},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"2010.01799","title":"Understanding Catastrophic Overfitting in Single-step Adversarial Training","created":"2020-10-05","cited_by_count":76},{"id":"2112.12376","title":"Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimization","created":"2021-12-23","cited_by_count":76},{"id":"2011.14969","title":"Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2020-11-30","cited_by_count":62},{"id":"1912.11969","title":"Efficient Adversarial Training with Transferable Adversarial Examples","created":"2019-12-27","cited_by_count":56},{"id":"2202.01181","title":"Make Some Noise: Reliable and Efficient Single-Step Adversarial Training","created":"2022-02-02","cited_by_count":43},{"id":"2004.08628","title":"Single-step Adversarial training with Dropout Scheduling","created":"2020-04-18","cited_by_count":41},{"id":"2006.00731","title":"Second-Order Provable Defenses against Adversarial Attacks","created":"2020-06-01","cited_by_count":40},{"id":"2207.08859","title":"Prior-Guided Adversarial Initialization for Fast Adversarial Training","created":"2022-07-18","cited_by_count":35},{"id":"2304.00202","title":"Improving Fast Adversarial Training with Prior-Guided Knowledge","created":"2023-04-01","cited_by_count":35},{"id":"2006.03089","title":"Towards Understanding Fast Adversarial Training","created":"2020-06-04","cited_by_count":33},{"id":"2207.10498","title":"Towards Efficient Adversarial Training on Vision Transformers","created":"2022-07-21","cited_by_count":30},{"id":"2206.02417","title":"Fast Adversarial Training with Adaptive Step Size","created":"2022-06-06","cited_by_count":25},{"id":"2110.01858","title":"KKT Conditions, First-Order and Second-Order Optimization, and Distributed Optimization: Tutorial and Survey","created":"2021-10-05","cited_by_count":16},{"id":"2103.15476","title":"ZeroGrad : Mitigating and Explaining Catastrophic Overfitting in FGSM Adversarial Training","created":"2021-03-29","cited_by_count":15},{"id":"2407.12443","title":"Preventing Catastrophic Overfitting in Fast Adversarial Training: A Bi-level Optimization Perspective","created":"2024-07-17","cited_by_count":13},{"id":"2105.02942","title":"Understanding Catastrophic Overfitting in Adversarial Training","created":"2021-05-06","cited_by_count":12},{"id":"2404.08154","title":"Eliminating Catastrophic Overfitting Via Abnormal Adversarial Examples Regularization","created":"2024-04-11","cited_by_count":12},{"id":"2405.16262","title":"Layer-Aware Analysis of Catastrophic Overfitting: Revealing the Pseudo-Robust Shortcut Dependency","created":"2024-05-25","cited_by_count":10},{"id":"2401.11618","title":"Efficient local linearity regularization to overcome catastrophic overfitting","created":"2024-01-21","cited_by_count":8},{"id":"2009.04923","title":"Second Order Optimization for Adversarial Robustness and Interpretability","created":"2020-09-10","cited_by_count":7},{"id":"1705.09552","title":"Classification regions of deep neural networks","created":"2017-05-26","cited_by_count":4},{"id":"2004.01832","title":"SOAR: Second-Order Adversarial Regularization","created":"2020-04-04","cited_by_count":4},{"id":"2002.10097","title":"Towards Rapid and Robust Adversarial Training with One-Step Attacks","created":"2020-02-24","cited_by_count":3},{"id":"2207.01396","title":"Hessian-Free Second-Order Adversarial Examples for Adversarial Learning","created":"2022-07-04","cited_by_count":3},{"id":"2108.13239","title":"Adaptive perturbation adversarial training: based on reinforcement learning","created":"2021-08-30","cited_by_count":2},{"id":"2310.18975","title":"Blacksmith: Fast Adversarial Training of Vision Transformers via a Mixture of Single-step and Multi-step Methods","created":"2023-10-29","cited_by_count":1},{"id":"2604.22853","title":"FastAT Benchmark: A Comprehensive Framework for Fair Evaluation of Fast Adversarial Training Methods","created":"2026-04-22","cited_by_count":1}],"next_cursor":null}