{"total":170,"rows":[{"id":"2403.14608","title":"Parameter-Efficient Fine-Tuning for Large Models: A Comprehensive Survey","created":"2024-03-21","cited_by_count":656,"area":null},{"id":"2111.01007","title":"Projected GANs Converge Faster","created":"2021-11-01","cited_by_count":208,"area":null},{"id":"2104.06820","title":"Few-shot Image Generation via Cross-domain Correspondence","created":"2021-04-13","cited_by_count":207,"area":null},{"id":"2310.06816","title":"Text Embeddings Reveal (Almost) As Much As Text","created":"2023-10-10","cited_by_count":192,"area":null},{"id":"2306.13092","title":"Squeeze, Recover and Relabel: Dataset Condensation at ImageNet Scale From A New Perspective","created":"2023-06-22","cited_by_count":138,"area":null},{"id":"2110.04301","title":"Salient ImageNet: How to discover spurious features in Deep Learning?","created":"2021-10-08","cited_by_count":114,"area":null},{"id":"2212.06727","title":"What do Vision Transformers Learn? A Visual Exploration","created":"2022-12-13","cited_by_count":76,"area":null},{"id":"2311.13647","title":"Language Model Inversion","created":"2023-11-22","cited_by_count":68,"area":null},{"id":"2201.12179","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","created":"2022-01-28","cited_by_count":60,"area":null},{"id":"2203.02194","title":"Rethinking Reconstruction Autoencoder-Based Out-of-Distribution Detection","created":"2022-03-04","cited_by_count":59,"area":null},{"id":"2104.12669","title":"Exploiting Explanations for Model Inversion Attacks","created":"2021-04-26","cited_by_count":49,"area":null},{"id":"2203.12979","title":"Is Geometry Enough for Matching in Visual Localization?","created":"2022-03-24","cited_by_count":48,"area":null},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2205.11506","title":"Orchestra: Unsupervised Federated Learning via Globally Consistent Clustering","created":"2022-05-23","cited_by_count":45,"area":null},{"id":"2405.15012","title":"Extracting Prompts by Inverting LLM Outputs","created":"2024-05-23","cited_by_count":41,"area":null},{"id":"2403.09539","title":"Logits of API-Protected LLMs Leak Proprietary Information","created":"2024-03-14","cited_by_count":40,"area":null},{"id":"2105.06625","title":"Biometrics: Trust, but Verify","created":"2021-05-14","cited_by_count":39,"area":null},{"id":"2111.06206","title":"Defining and Quantifying the Emergence of Sparse Concepts in DNNs","created":"2021-11-11","cited_by_count":36,"area":null},{"id":"2205.04007","title":"ResSFL: A Resistance Transfer Framework for Defending Model Inversion Attack in Split Federated Learning","created":"2022-05-09","cited_by_count":36,"area":null},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34,"area":null},{"id":"2110.02951","title":"Video Autoencoder: self-supervised disentanglement of static 3D structure and motion","created":"2021-10-06","cited_by_count":34,"area":null},{"id":"2207.09679","title":"Explaining Deepfake Detection by Analysing Image Matching","created":"2022-07-20","cited_by_count":34,"area":null},{"id":"2103.14441","title":"Visual Explanations from Spiking Neural Networks using Interspike Intervals","created":"2021-03-26","cited_by_count":27,"area":null},{"id":"2302.13080","title":"Does a Neural Network Really Encode Symbolic Concepts?","created":"2023-02-25","cited_by_count":27,"area":null},{"id":"2101.00440","title":"Refining activation downsampling with SoftPool","created":"2021-01-02","cited_by_count":26,"area":null},{"id":"2406.10280","title":"Transferable Embedding Inversion Attack: Uncovering Privacy Risks in Text Embeddings without Model Queries","created":"2024-06-12","cited_by_count":25,"area":null},{"id":"2305.05391","title":"Privacy-preserving Adversarial Facial Features","created":"2023-05-08","cited_by_count":24,"area":null},{"id":"2403.12457","title":"Privacy-Preserving Face Recognition Using Trainable Feature Subtraction","created":"2024-03-19","cited_by_count":24,"area":null},{"id":"2112.12785","title":"NinjaDesc: Content-Concealing Visual Descriptors via Adversarial Learning","created":"2021-12-23","cited_by_count":21,"area":null},{"id":"2307.10655","title":"A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency","created":"2023-07-20","cited_by_count":21,"area":null},{"id":"2203.17008","title":"It's All In the Teacher: Zero-Shot Quantization Brought Closer to the Teacher","created":"2022-03-31","cited_by_count":20,"area":null},{"id":"2312.02021","title":"Strong but simple: A Baseline for Domain Generalized Dense Perception by CLIP-based Transfer Learning","created":"2023-12-04","cited_by_count":20,"area":"mllm"},{"id":"2103.05086","title":"How Privacy-Preserving are Line Clouds? Recovering Scene Details from 3D Lines","created":"2021-03-08","cited_by_count":19,"area":null},{"id":"2108.04603","title":"Relation-aware Compositional Zero-shot Learning for Attribute-Object Pair Recognition","created":"2021-08-10","cited_by_count":19,"area":null},{"id":"2208.08741","title":"Quantifying the Knowledge in a DNN to Explain Knowledge Distillation for Classification","created":"2022-08-18","cited_by_count":19,"area":"distill"},{"id":"2108.10744","title":"Interpretable deep-learning models to help achieve the Sustainable Development Goals","created":"2021-08-24","cited_by_count":18,"area":null},{"id":"2201.12961","title":"Plug-In Inversion: Model-Agnostic Inversion for Vision with Data Augmentations","created":"2022-01-31","cited_by_count":18,"area":null},{"id":"2301.02437","title":"Valid P-Value for Deep Learning-Driven Salient Region","created":"2023-01-06","cited_by_count":17,"area":null},{"id":"2306.12547","title":"DGC-GNN: Leveraging Geometry and Color Cues for Visual Descriptor-Free 2D-3D Matching","created":"2023-06-21","cited_by_count":17,"area":null},{"id":"2106.10938","title":"A Game-Theoretic Taxonomy of Visual Concepts in DNNs","created":"2021-06-21","cited_by_count":16,"area":null},{"id":"2109.14274","title":"Designing Counterfactual Generators using Deep Model Inversion","created":"2021-09-29","cited_by_count":15,"area":null},{"id":"2203.15566","title":"Core Risk Minimization using Salient ImageNet","created":"2022-03-28","cited_by_count":15,"area":null},{"id":"2103.01096","title":"Counterfactual Explanations for Oblique Decision Trees: Exact, Efficient Algorithms","created":"2021-03-01","cited_by_count":14,"area":null},{"id":"2210.12945","title":"Revisiting Sparse Convolutional Model for Visual Recognition","created":"2022-10-24","cited_by_count":14,"area":null},{"id":"2305.04146","title":"Bounding the Invertibility of Privacy-preserving Instance Encoding using Fisher Information","created":"2023-05-06","cited_by_count":13,"area":null},{"id":"2403.02580","title":"What do we learn from inverting CLIP models?","created":"2024-03-05","cited_by_count":13,"area":null},{"id":"2111.03549","title":"Interpreting Representation Quality of DNNs for 3D Point Cloud Processing","created":"2021-11-05","cited_by_count":12,"area":null},{"id":"2111.06934","title":"Contrastive Feature Loss for Image Prediction","created":"2021-11-12","cited_by_count":12,"area":null},{"id":"2103.07470","title":"Understanding Invariance via Feedforward Inversion of Discriminatively Trained Classifiers","created":"2021-03-15","cited_by_count":11,"area":null},{"id":"2112.06511","title":"Ex-Model: Continual Learning from a Stream of Trained Models","created":"2021-12-13","cited_by_count":11,"area":null},{"id":"2206.11939","title":"Measuring Representational Robustness of Neural Networks Through Shared Invariances","created":"2022-06-23","cited_by_count":11,"area":null},{"id":"2312.15603","title":"A Split-and-Privatize Framework for Large Language Model Fine-Tuning","created":"2023-12-25","cited_by_count":11,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2105.03812","title":"Analysis and Mitigations of Reverse Engineering Attacks on Local Feature Descriptors","created":"2021-05-09","cited_by_count":10,"area":null},{"id":"2105.10719","title":"Can We Faithfully Represent Masked States to Compute Shapley Values on a DNN?","created":"2021-05-22","cited_by_count":10,"area":null},{"id":"2308.11223","title":"LDP-Feat: Image Features with Local Differential Privacy","created":"2023-08-22","cited_by_count":10,"area":null},{"id":"2502.15435","title":"Single-pass Detection of Jailbreaking Input in Large Language Models","created":"2025-02-21","cited_by_count":10,"area":"alignment"},{"id":"2110.09006","title":"Natural Image Reconstruction from fMRI using Deep Learning: A Survey","created":"2021-10-18","cited_by_count":9,"area":null},{"id":"2208.09500","title":"Causality-Inspired Taxonomy for Explainable Artificial Intelligence","created":"2022-08-19","cited_by_count":9,"area":null},{"id":"2506.17090","title":"Better Language Model Inversion by Compactly Representing Next-Token Distributions","created":"2025-06-20","cited_by_count":9,"area":null},{"id":"2107.06304","title":"Privacy Vulnerability of Split Computing to Data-Free Model Inversion Attacks","created":"2021-07-13","cited_by_count":8,"area":null},{"id":"2205.13921","title":"Federated Semi-Supervised Learning with Prototypical Networks","created":"2022-05-27","cited_by_count":8,"area":null},{"id":"2311.17524","title":"Improving Feature Stability during Upsampling -- Spectral Artifacts and the Importance of Spatial Context","created":"2023-11-29","cited_by_count":8,"area":null},{"id":"2102.05110","title":"Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifiers","created":"2021-02-09","cited_by_count":7,"area":null},{"id":"2111.03505","title":"Visualizing the Emergence of Intermediate Visual Patterns in DNNs","created":"2021-11-05","cited_by_count":7,"area":null},{"id":"2305.04603","title":"Privacy-Preserving Representations are not Enough -- Recovering Scene Content from Camera Poses","created":"2023-05-08","cited_by_count":7,"area":null},{"id":"2408.06395","title":"Fast John Ellipsoid Computation with Differential Privacy Optimization","created":"2024-08-12","cited_by_count":7,"area":null},{"id":"2106.06927","title":"Inverting Adversarially Robust Networks for Image Synthesis","created":"2021-06-13","cited_by_count":6,"area":null},{"id":"2106.14290","title":"Darker than Black-Box: Face Reconstruction from Similarity Queries","created":"2021-06-27","cited_by_count":6,"area":null},{"id":"2201.09205","title":"Deeply Explain CNN via Hierarchical Decomposition","created":"2022-01-23","cited_by_count":6,"area":null},{"id":"2310.09838","title":"Explaining How a Neural Network Play the Go Game and Let People Learn","created":"2023-10-15","cited_by_count":6,"area":null},{"id":"2404.00673","title":"A Survey of Privacy-Preserving Model Explanations: Privacy Risks, Attacks, and Countermeasures","created":"2024-03-31","cited_by_count":6,"area":null},{"id":"2409.11536","title":"Obfuscation Based Privacy Preserving Representations are Recoverable Using Neighborhood Information","created":"2024-09-17","cited_by_count":6,"area":null},{"id":"2507.07700","title":"Rethinking the Privacy of Text Embeddings: A Reproducibility Study of \"Text Embeddings Reveal (Almost) As Much As Text\"","created":"2025-07-10","cited_by_count":6,"area":null},{"id":"2107.05122","title":"Interpretable Deep Feature Propagation for Early Action Recognition","created":"2021-07-11","cited_by_count":5,"area":null},{"id":"2410.21637","title":"Mitigating Paraphrase Attacks on Machine-Text Detectors via Paraphrase Inversion","created":"2024-10-29","cited_by_count":5,"area":null},{"id":"2412.10448","title":"Unlocking Visual Secrets: Inverting Features with Diffusion Priors for Image Reconstruction","created":"2024-12-11","cited_by_count":5,"area":"diffusion"},{"id":"2105.07754","title":"A Fusion-Denoising Attack on InstaHide with Data Augmentation","created":"2021-05-17","cited_by_count":4,"area":null},{"id":"2203.06555","title":"Label-only Model Inversion Attack: The Attack that Requires the Least Information","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2208.04369","title":"Understanding Weight Similarity of Neural Networks via Chain Normalization Rule and Hypothesis-Training-Testing","created":"2022-08-08","cited_by_count":4,"area":null},{"id":"2209.04920","title":"Vec2Face-v2: Unveil Human Faces from their Blackbox Features via Attention-based Network in Face Recognition","created":"2022-09-11","cited_by_count":4,"area":null},{"id":"2106.05037","title":"Exploiting auto-encoders and segmentation methods for middle-level explanations of image classification systems","created":"2021-06-09","cited_by_count":3,"area":null},{"id":"2209.10119","title":"Measuring and Controlling Split Layer Privacy Leakage Using Fisher Information","created":"2022-09-21","cited_by_count":3,"area":null},{"id":"2211.09859","title":"Data-Centric Debugging: mitigating model failures via targeted data collection","created":"2022-11-17","cited_by_count":3,"area":null},{"id":"2211.11950","title":"UpCycling: Semi-supervised 3D Object Detection without Sharing Raw-level Unlabeled Scenes","created":"2022-11-22","cited_by_count":3,"area":null},{"id":"2303.06314","title":"Stabilizing and Improving Federated Learning with Non-IID Data and Client Dropout","created":"2023-03-11","cited_by_count":3,"area":null},{"id":"2312.02327","title":"FLea: Addressing Data Scarcity and Label Skew in Federated Learning via Privacy-preserving Feature Augmentation","created":"2023-12-04","cited_by_count":3,"area":null},{"id":"2406.11667","title":"Is Efficient PAC Learning Possible with an Oracle That Responds 'Yes' or 'No'?","created":"2024-06-17","cited_by_count":3,"area":null},{"id":"2407.05607","title":"Weakly Supervised Test-Time Domain Adaptation for Object Detection","created":"2024-07-08","cited_by_count":3,"area":null},{"id":"2104.02922","title":"Sparse Oblique Decision Trees: A Tool to Understand and Manipulate Neural Net Features","created":"2021-04-07","cited_by_count":2,"area":null},{"id":"2104.14383","title":"Privacy-Preserving Federated Learning on Partitioned Attributes","created":"2021-04-29","cited_by_count":2,"area":null},{"id":"2105.07054","title":"Face Attributes as Cues for Deep Face Recognition Understanding","created":"2021-05-14","cited_by_count":2,"area":null},{"id":"2106.13933","title":"Inverting and Understanding Object Detectors","created":"2021-06-26","cited_by_count":2,"area":null},{"id":"2106.14577","title":"Privacy-Preserving Image Acquisition Using Trainable Optical Kernel","created":"2021-06-28","cited_by_count":2,"area":null},{"id":"2205.01940","title":"Towards Theoretical Analysis of Transformation Complexity of ReLU DNNs","created":"2022-05-04","cited_by_count":2,"area":null},{"id":"2206.03391","title":"Data Stealing Attack on Medical Images: Is it Safe to Export Networks from Data Lakes?","created":"2022-06-07","cited_by_count":2,"area":null},{"id":"2207.02179","title":"Activation Template Matching Loss for Explainable Face Recognition","created":"2022-07-05","cited_by_count":2,"area":null},{"id":"2211.05766","title":"Heterogeneous Randomized Response for Differential Privacy in Graph Neural Networks","created":"2022-11-10","cited_by_count":2,"area":null},{"id":"2302.02181","title":"Model Stitching and Visualization How GAN Generators can Invert Networks in Real-Time","created":"2023-02-04","cited_by_count":2,"area":null}],"next_cursor":"100"}