{"total":117,"rows":[{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2106.07873","title":"Reverse Engineering of Generative Models: Inferring Model Hyperparameters from Generated Images","created":"2021-06-15","cited_by_count":58,"area":null},{"id":"2111.09571","title":"Person Re-identification Method Based on Color Attack and Joint Defence","created":"2021-11-18","cited_by_count":56,"area":null},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53,"area":null},{"id":"2207.09239","title":"Assaying Out-Of-Distribution Generalization in Transfer Learning","created":"2022-07-19","cited_by_count":53,"area":null},{"id":"2312.11536","title":"Fast Decision Boundary based Out-of-Distribution Detector","created":"2023-12-15","cited_by_count":49,"area":null},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45,"area":null},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38,"area":null},{"id":"2201.02873","title":"LoMar: A Local Defense Against Poisoning Attack on Federated Learning","created":"2022-01-08","cited_by_count":31,"area":null},{"id":"2105.14173","title":"FoveaTer: Foveated Transformer for Image Classification","created":"2021-05-29","cited_by_count":28,"area":null},{"id":"2308.08162","title":"Interpretability Benchmark for Evaluating Spatial Misalignment of Prototypical Parts Explanations","created":"2023-08-16","cited_by_count":27,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2206.07144","title":"Efficiently Training Low-Curvature Neural Networks","created":"2022-06-14","cited_by_count":19,"area":null},{"id":"2112.12310","title":"Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art","created":"2021-12-23","cited_by_count":18,"area":null},{"id":"2207.11727","title":"Can we achieve robustness from data alone?","created":"2022-07-24","cited_by_count":16,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2103.14332","title":"Building Reliable Explanations of Unreliable Neural Networks: Locally Smoothing Perspective of Model Interpretation","created":"2021-03-26","cited_by_count":12,"area":null},{"id":"2204.08624","title":"Topology and geometry of data manifold in deep learning","created":"2022-04-19","cited_by_count":12,"area":null},{"id":"2205.04533","title":"How Does Frequency Bias Affect the Robustness of Neural Image Classifiers against Common Corruption and Adversarial Perturbations?","created":"2022-05-09","cited_by_count":11,"area":null},{"id":"2111.08785","title":"Detecting AutoAttack Perturbations in the Frequency Domain","created":"2021-11-16","cited_by_count":10,"area":null},{"id":"2104.12426","title":"Launching Adversarial Attacks against Network Intrusion Detection Systems for IoT","created":"2021-04-26","cited_by_count":9,"area":null},{"id":"2201.05647","title":"Tools and Practices for Responsible AI Engineering","created":"2022-01-14","cited_by_count":9,"area":null},{"id":"2103.10133","title":"Evaluating Document Coherence Modelling","created":"2021-03-18","cited_by_count":8,"area":null},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2110.11950","title":"Adversarial robustness for latent models: Revisiting the robust-standard accuracies tradeoff","created":"2021-10-22","cited_by_count":8,"area":null},{"id":"2102.05241","title":"Detecting Localized Adversarial Examples: A Generic Approach using Critical Region Analysis","created":"2021-02-10","cited_by_count":7,"area":null},{"id":"2102.07140","title":"Perceptually Constrained Adversarial Attacks","created":"2021-02-14","cited_by_count":7,"area":null},{"id":"2107.09546","title":"Responsible and Regulatory Conform Machine Learning for Medicine: A Survey of Challenges and Solutions","created":"2021-07-20","cited_by_count":7,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2207.04307","title":"Adversarial Framework with Certified Robustness for Time-Series Domain via Statistical Features","created":"2022-07-09","cited_by_count":7,"area":null},{"id":"2210.17376","title":"SoK: Modeling Explainability in Security Analytics for Interpretability, Trustworthiness, and Usability","created":"2022-10-31","cited_by_count":7,"area":null},{"id":"2406.13762","title":"Unveiling the Hidden Structure of Self-Attention via Kernel Principal Component Analysis","created":"2024-06-19","cited_by_count":7,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2303.13401","title":"Optimization and Optimizers for Adversarial Robustness","created":"2023-03-23","cited_by_count":6,"area":null},{"id":"2311.01323","title":"Towards Evaluating Transfer-based Attacks Systematically, Practically, and Fairly","created":"2023-11-02","cited_by_count":6,"area":null},{"id":"2101.10865","title":"On managing vulnerabilities in AI/ML systems","created":"2021-01-22","cited_by_count":5,"area":null},{"id":"2103.00381","title":"Adversarial Information Bottleneck","created":"2021-02-28","cited_by_count":5,"area":null},{"id":"2205.02414","title":"Subverting Fair Image Search with Generative Adversarial Perturbations","created":"2022-05-05","cited_by_count":5,"area":null},{"id":"2207.04308","title":"Dynamic Time Warping based Adversarial Framework for Time-Series Domain","created":"2022-07-09","cited_by_count":5,"area":null},{"id":"2208.11264","title":"Towards an Awareness of Time Series Anomaly Detection Models' Adversarial Vulnerability","created":"2022-08-24","cited_by_count":5,"area":null},{"id":"2103.10031","title":"Robust Vision-Based Cheat Detection in Competitive Gaming","created":"2021-03-18","cited_by_count":4,"area":null},{"id":"2103.11002","title":"Attribution of Gradient Based Adversarial Attacks for Reverse Engineering of Deceptions","created":"2021-03-19","cited_by_count":4,"area":null},{"id":"2206.12364","title":"On Certifying and Improving Generalization to Unseen Domains","created":"2022-06-24","cited_by_count":4,"area":null},{"id":"2103.11526","title":"ExAD: An Ensemble Approach for Explanation-based Adversarial Detection","created":"2021-03-22","cited_by_count":3,"area":null},{"id":"2104.12069","title":"Making Generated Images Hard To Spot: A Transferable Attack On Synthetic Image Detectors","created":"2021-04-25","cited_by_count":3,"area":null},{"id":"2112.07400","title":"Robustifying automatic speech recognition by extracting slowly varying features","created":"2021-12-14","cited_by_count":3,"area":null},{"id":"2211.12314","title":"Attacking Image Splicing Detection and Localization Algorithms Using Synthetic Traces","created":"2022-11-22","cited_by_count":3,"area":null},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2308.14916","title":"RecRec: Algorithmic Recourse for Recommender Systems","created":"2023-08-28","cited_by_count":3,"area":null},{"id":"2403.14641","title":"Testing autonomous vehicles and AI: perspectives and challenges from cybersecurity, transparency, robustness and fairness","created":"2024-02-21","cited_by_count":3,"area":null},{"id":"2506.02032","title":"Towards Secure MLOps: Surveying Attacks, Mitigation Strategies, and Research Challenges","created":"2025-05-30","cited_by_count":3,"area":null},{"id":"2101.02899","title":"Adversarial Attack Attribution: Discovering Attributable Signals in Adversarial ML Attacks","created":"2021-01-08","cited_by_count":2,"area":null},{"id":"2101.09324","title":"Generating Black-Box Adversarial Examples in Sparse Domain","created":"2021-01-22","cited_by_count":2,"area":null},{"id":"2101.12097","title":"Adversarial Machine Learning Attacks on Condition-Based Maintenance Capabilities","created":"2021-01-28","cited_by_count":2,"area":null},{"id":"2105.12427","title":"Deep Repulsive Prototypes for Adversarial Robustness","created":"2021-05-26","cited_by_count":2,"area":null},{"id":"2109.12459","title":"Two Souls in an Adversarial Image: Towards Universal Adversarial Example Detection using Multi-view Inconsistency","created":"2021-09-25","cited_by_count":2,"area":null},{"id":"2202.01117","title":"An Eye for an Eye: Defending against Gradient-based Attacks with Gradients","created":"2022-02-02","cited_by_count":2,"area":null},{"id":"2202.02595","title":"Memory Defense: More Robust Classification via a Memory-Masking Autoencoder","created":"2022-02-05","cited_by_count":2,"area":null},{"id":"2202.12139","title":"Testing Deep Learning Models: A First Comparative Study of Multiple Testing Techniques","created":"2022-02-24","cited_by_count":2,"area":null},{"id":"2204.02485","title":"Training-Free Robust Multimodal Learning via Sample-Wise Jacobian Regularization","created":"2022-04-05","cited_by_count":2,"area":null},{"id":"2206.03717","title":"LADDER: Latent Boundary-guided Adversarial Training","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2302.14059","title":"Scalable Attribution of Adversarial Attacks via Multi-Task Learning","created":"2023-02-25","cited_by_count":2,"area":null},{"id":"2304.12486","title":"Evaluating Adversarial Robustness on Document Image Classification","created":"2023-04-24","cited_by_count":2,"area":null},{"id":"2406.03117","title":"VQUNet: Vector Quantization U-Net for Defending Adversarial Atacks by Regularizing Unwanted Noise","created":"2024-06-05","cited_by_count":2,"area":null},{"id":"2407.08839","title":"A Survey on the Application of Generative Adversarial Networks in Cybersecurity: Prospective, Direction and Open Research Scopes","created":"2024-07-11","cited_by_count":2,"area":null},{"id":"2503.13419","title":"Securing Virtual Reality Experiences: Unveiling and Tackling Cybersickness Attacks with Explainable AI","created":"2025-03-17","cited_by_count":2,"area":null},{"id":"2512.12002","title":"Adversarial Attacks Against Deep Learning-Based Radio Frequency Fingerprint Identification","created":"2025-12-12","cited_by_count":2,"area":null},{"id":"2106.00512","title":"The Care Label Concept: A Certification Suite for Trustworthy and Resource-Aware Machine Learning","created":"2021-06-01","cited_by_count":1,"area":null},{"id":"2204.08977","title":"Disappeared Command: Spoofing Attack On Automatic Speech Recognition Systems with Sound Masking","created":"2022-04-19","cited_by_count":1,"area":null},{"id":"2204.10839","title":"How Sampling Impacts the Robustness of Stochastic Neural Networks","created":"2022-04-22","cited_by_count":1,"area":null},{"id":"2206.03225","title":"The Different Faces of AI Ethics Across the World: A Principle-Implementation Gap Analysis","created":"2022-05-12","cited_by_count":1,"area":null},{"id":"2207.03689","title":"Guiding the retraining of convolutional neural networks against adversarial inputs","created":"2022-07-08","cited_by_count":1,"area":null},{"id":"2207.04305","title":"Training Robust Deep Models for Time-Series Domain: Novel Algorithms and Theoretical Analysis","created":"2022-07-09","cited_by_count":1,"area":null},{"id":"2210.12952","title":"Ares: A System-Oriented Wargame Framework for Adversarial ML","created":"2022-10-24","cited_by_count":1,"area":null},{"id":"2308.03363","title":"A reading survey on adversarial machine learning: Adversarial attacks and their understanding","created":"2023-08-07","cited_by_count":1,"area":null},{"id":"2311.14005","title":"When Side-Channel Attacks Break the Black-Box Property of Embedded Artificial Intelligence","created":"2023-11-23","cited_by_count":1,"area":null},{"id":"2407.20281","title":"NeuSemSlice: Towards Effective DNN Model Maintenance via Neuron-level Semantic Slicing","created":"2024-07-26","cited_by_count":1,"area":null},{"id":"2408.01977","title":"Label Augmentation for Neural Networks Robustness","created":"2024-08-04","cited_by_count":1,"area":null},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2509.12386","title":"Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks","created":"2025-09-15","cited_by_count":1,"area":null},{"id":"2511.01724","title":"PRBench: A Standardized Probabilistic Robustness Benchmark","created":"2025-11-03","cited_by_count":1,"area":null},{"id":"2102.04836","title":"Target Training Does Adversarial Training Without Adversarial Samples","created":"2021-02-09","cited_by_count":0,"area":null},{"id":"2104.10076","title":"MixDefense: A Defense-in-Depth Framework for Adversarial Example Detection Based on Statistical and Semantic Analysis","created":"2021-04-20","cited_by_count":0,"area":null},{"id":"2105.14116","title":"Visualizing Representations of Adversarially Perturbed Inputs","created":"2021-05-28","cited_by_count":0,"area":null},{"id":"2110.08447","title":"TESDA: Transform Enabled Statistical Detection of Attacks in Deep Neural Networks","created":"2021-10-16","cited_by_count":0,"area":null},{"id":"2111.07035","title":"Measuring the Contribution of Multiple Model Representations in Detecting Adversarial Instances","created":"2021-11-13","cited_by_count":0,"area":null},{"id":"2203.02121","title":"Adversarial Patterns: Building Robust Android Malware Classifiers","created":"2022-03-04","cited_by_count":0,"area":null},{"id":"2203.10290","title":"Adversarial Defense via Image Denoising with Chaotic Encryption","created":"2022-03-19","cited_by_count":0,"area":null},{"id":"2206.07406","title":"Hardening DNNs against Transfer Attacks during Network Compression using Greedy Adversarial Pruning","created":"2022-06-15","cited_by_count":0,"area":null},{"id":"2208.02310","title":"Design of secure and robust cognitive system for malware detection","created":"2022-08-03","cited_by_count":0,"area":null},{"id":"2209.00943","title":"Tweaking Metasploit to Evade Encrypted C2 Traffic Detection","created":"2022-09-02","cited_by_count":0,"area":null},{"id":"2211.03714","title":"Deviations in Representations Induced by Adversarial Attacks","created":"2022-11-07","cited_by_count":0,"area":null},{"id":"2211.04973","title":"Accelerating Adversarial Perturbation by 50% with Semi-backward Propagation","created":"2022-11-09","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2306.08336","title":"Global-Local Processing in Convolutional Neural Networks","created":"2023-06-14","cited_by_count":0,"area":null},{"id":"2306.17323","title":"Scaling Model Checking for DNN Analysis via State-Space Reduction and Input Segmentation (Extended Version)","created":"2023-06-29","cited_by_count":0,"area":null},{"id":"2309.10916","title":"What Learned Representations and Influence Functions Can Tell Us About Adversarial Examples","created":"2023-09-19","cited_by_count":0,"area":null},{"id":"2309.17048","title":"On Continuity of Robust and Accurate Classifiers","created":"2023-09-29","cited_by_count":0,"area":null},{"id":"2311.08265","title":"On The Relationship Between Universal Adversarial Attacks And Sparse Representations","created":"2023-11-14","cited_by_count":0,"area":null}],"next_cursor":"100"}