{"list":"other","total":52,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1710.11063","title":"Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networks","created":"2017-10-30","cited_by_count":939},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1905.13736","title":"Unlabeled Data Improves Adversarial Robustness","created":"2019-05-31","cited_by_count":416},{"id":"2006.09994","title":"Noise or Signal: The Role of Image Backgrounds in Object Recognition","created":"2020-06-17","cited_by_count":343},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1912.04488","title":"SOLO: Segmenting Objects by Locations","created":"2019-12-10","cited_by_count":289},{"id":"1612.07828","title":"Learning from Simulated and Unsupervised Images through Adversarial Training","created":"2016-12-22","cited_by_count":288},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"2303.01870","title":"Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models","created":"2023-03-03","cited_by_count":79},{"id":"1802.08686","title":"Adversarial vulnerability for any classifier","created":"2018-02-23","cited_by_count":78},{"id":"2210.07540","title":"When Adversarial Training Meets Vision Transformers: Recipes from Training to Architecture","created":"2022-10-14","cited_by_count":64},{"id":"2011.14969","title":"Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses","created":"2020-11-30","cited_by_count":62},{"id":"2303.14460","title":"CFA: Class-wise Calibrated Fair Adversarial Training","created":"2023-03-25","cited_by_count":53},{"id":"2012.12235","title":"Unadversarial Examples: Designing Objects for Robust Vision","created":"2020-12-22","cited_by_count":45},{"id":"2401.04727","title":"Revisiting Adversarial Training at Scale","created":"2024-01-09","cited_by_count":33},{"id":"1812.00552","title":"Universal Perturbation Attack Against Image Retrieval","created":"2018-12-03","cited_by_count":32},{"id":"1906.03563","title":"Adversarial Attack Generation Empowered by Min-Max Optimization","created":"2019-06-09","cited_by_count":32},{"id":"2309.13190","title":"Spatial-frequency channels, shape bias, and adversarial robustness","created":"2023-09-22","cited_by_count":28},{"id":"2302.04025","title":"WAT: Improve the Worst-class Robustness in Adversarial Training","created":"2023-02-08","cited_by_count":27},{"id":"2206.02417","title":"Fast Adversarial Training with Adaptive Step Size","created":"2022-06-06","cited_by_count":25},{"id":"2510.06751","title":"OBS-Diff: Accurate Pruning For Diffusion Models in One-Shot","created":"2025-10-08","cited_by_count":19},{"id":"2303.13846","title":"Feature Separation and Recalibration for Adversarial Robustness","created":"2023-03-24","cited_by_count":16},{"id":"2201.03121","title":"Information-Theoretic Bias Reduction via Causal View of Spurious Correlation","created":"2022-01-10","cited_by_count":15},{"id":"2505.18582","title":"On Denoising Walking Videos for Gait Recognition","created":"2025-05-24","cited_by_count":14},{"id":"2405.00256","title":"ASAM: Boosting Segment Anything Model with Adversarial Tuning","created":"2024-05-01","cited_by_count":12},{"id":"2403.09101","title":"Soften to Defend: Towards Adversarial Robustness via Self-Guided Label Refinement","created":"2024-03-14","cited_by_count":9},{"id":"2305.08950","title":"Causal Analysis for Robust Interpretability of Neural Networks","created":"2023-05-15","cited_by_count":8},{"id":"2605.10977","title":"PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks","created":"2026-05-09","cited_by_count":7},{"id":"2408.06079","title":"Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment","created":"2024-08-12","cited_by_count":5},{"id":"2109.00678","title":"Regional Adversarial Training for Better Robust Generalization","created":"2021-09-02","cited_by_count":4},{"id":"2605.30010","title":"EarlyTom: Early Token Compression Completes Fast Video Understanding","created":"2026-05-28","cited_by_count":4},{"id":"2407.04016","title":"Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness","created":"2024-07-04","cited_by_count":3},{"id":"2602.11715","title":"DICE: Diffusion Large Language Models Excel at Generating CUDA Kernels","created":"2026-02-12","cited_by_count":3},{"id":"2509.25082","title":"MANI-Pure: Magnitude-Adaptive Noise Injection for Adversarial Purification","created":"2025-09-29","cited_by_count":1}],"next_cursor":null}