{"list":"other","total":59,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"2211.09527","title":"Ignore Previous Prompt: Attack Techniques For Language Models","created":"2022-11-17","cited_by_count":832},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"1801.01944","title":"Audio Adversarial Examples: Targeted Attacks on Speech-to-Text","created":"2018-01-05","cited_by_count":274},{"id":"1703.06748","title":"Tactics of Adversarial Attack on Deep Reinforcement Learning Agents","created":"2017-03-08","cited_by_count":166},{"id":"2105.12806","title":"A Universal Law of Robustness via Isoperimetry","created":"2021-05-26","cited_by_count":151},{"id":"2006.14536","title":"Smooth Adversarial Training","created":"2020-06-25","cited_by_count":89},{"id":"1902.04217","title":"VC Classes are Adversarially Robustly Learnable, but Only Improperly","created":"2019-02-12","cited_by_count":83},{"id":"1905.09797","title":"Interpreting Adversarially Trained Convolutional Neural Networks","created":"2019-05-23","cited_by_count":75},{"id":"1507.00473","title":"The Optimal Sample Complexity of PAC Learning","created":"2015-07-02","cited_by_count":72},{"id":"1607.04311","title":"Defensive Distillation is Not Robust to Adversarial Examples","created":"2016-07-14","cited_by_count":60},{"id":"2009.14444","title":"A law of robustness for two-layers neural networks","created":"2020-09-30","cited_by_count":55},{"id":"2005.11818","title":"Proper Learning, Helly Number, and an Optimal SVM Bound","created":"2020-05-24","cited_by_count":53},{"id":"1503.06960","title":"Sample compression schemes for VC classes","created":"2015-03-24","cited_by_count":47},{"id":"1711.08478","title":"MagNet and \"Efficient Defenses Against Adversarial Attacks\" are Not Robust to Adversarial Examples","created":"2017-11-22","cited_by_count":46},{"id":"1910.08640","title":"Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?","created":"2019-10-18","cited_by_count":43},{"id":"1804.03286","title":"On the Robustness of the CVPR 2018 White-Box Adversarial Example Defenses","created":"2018-04-10","cited_by_count":40},{"id":"2212.02264","title":"Bagging is an Optimal PAC Learner","created":"2022-12-05","cited_by_count":34},{"id":"1906.09855","title":"Universal Bayes consistency in metric spaces","created":"2019-06-24","cited_by_count":33},{"id":"2304.09167","title":"Optimal PAC Bounds Without Uniform Convergence","created":"2023-04-18","cited_by_count":33},{"id":"2010.12039","title":"Reducing Adversarially Robust Learning to Non-Robust PAC Learning","created":"2020-10-22","cited_by_count":28},{"id":"2003.05669","title":"ARAE: Adversarially Robust Training of Autoencoders Improves Novelty Detection","created":"2020-03-12","cited_by_count":27},{"id":"2111.04746","title":"Realizable Learning is All You Need","created":"2021-11-08","cited_by_count":25},{"id":"2102.02145","title":"Adversarially Robust Learning with Unknown Perturbation Sets","created":"2021-02-03","cited_by_count":24},{"id":"2209.07369","title":"Adversarially Robust Learning: A Generic Minimax Optimal Learner and Characterization","created":"2022-09-15","cited_by_count":17},{"id":"1805.12487","title":"Sequential Attacks on Agents for Long-Term Adversarial Goals","created":"2018-05-31","cited_by_count":16},{"id":"2202.05420","title":"A Characterization of Semi-Supervised Adversarially-Robust PAC Learnability","created":"2022-02-11","cited_by_count":13},{"id":"2407.19777","title":"Revisiting Agnostic PAC Learning","created":"2024-07-29","cited_by_count":11},{"id":"2110.10602","title":"Transductive Robust Learning Guarantees","created":"2021-10-20","cited_by_count":10},{"id":"2203.00849","title":"Adversarially Robust Learning with Tolerance","created":"2022-03-02","cited_by_count":9},{"id":"2206.12977","title":"Adversarially Robust PAC Learnability of Real-Valued Functions","created":"2022-06-26","cited_by_count":8},{"id":"1902.02322","title":"Is AmI (Attacks Meet Interpretability) Robust to Adversarial Examples?","created":"2019-02-06","cited_by_count":7},{"id":"2301.09627","title":"The Impossibility of Parallelizing Boosting","created":"2023-01-23","cited_by_count":7},{"id":"2108.10037","title":"Primal and Dual Combinatorial Dimensions","created":"2021-08-23","cited_by_count":6},{"id":"2210.00635","title":"Robust Empirical Risk Minimization with Tolerance","created":"2022-10-02","cited_by_count":6},{"id":"2410.16201","title":"Theoretical Limitations of Ensembles in the Age of Overparameterization","created":"2024-10-21","cited_by_count":6},{"id":"2211.05656","title":"On Proper Learnability between Average- and Worst-case Robustness","created":"2022-11-10","cited_by_count":5},{"id":"2502.09496","title":"On Agnostic PAC Learning in the Small Error Regime","created":"2025-02-13","cited_by_count":5},{"id":"2606.13614","title":"Majority-of-Three is Optimal","created":"2026-06-11","cited_by_count":4},{"id":"2309.03354","title":"Ensemble linear interpolators: The role of ensembling","created":"2023-09-06","cited_by_count":3},{"id":"2502.07232","title":"Simplifying Adversarially Robust PAC Learning with Tolerance","created":"2025-02-11","cited_by_count":3},{"id":"2410.13012","title":"Sample Compression Scheme Reductions","created":"2024-10-16","cited_by_count":2},{"id":"2608.06363","title":"An Optimal Agnostic PAC Algorithm","created":"2026-08-06","cited_by_count":2},{"id":"2602.20971","title":"Does Order Matter : Connecting The Law of Robustness to Robust Generalization","created":"2026-02-24","cited_by_count":1},{"id":"2608.13514","title":"Bagging Robustly Learns VC Classes with Linear Sample Complexity","created":"2026-08-13","cited_by_count":1}],"next_cursor":null}