{"total":193,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45,"area":null},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38,"area":null},{"id":"2110.03109","title":"Consistent Counterfactuals for Deep Models","created":"2021-10-06","cited_by_count":37,"area":null},{"id":"2309.13190","title":"Spatial-frequency channels, shape bias, and adversarial robustness","created":"2023-09-22","cited_by_count":28,"area":null},{"id":"2206.03393","title":"Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition","created":"2022-06-07","cited_by_count":23,"area":null},{"id":"2112.01156","title":"A Unified Framework for Adversarial Attack and Defense in Constrained Feature Space","created":"2021-12-02","cited_by_count":22,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2303.01256","title":"Choosing Public Datasets for Private Machine Learning via Gradient Subspace Distance","created":"2023-03-02","cited_by_count":16,"area":null},{"id":"2202.03277","title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2302.06975","title":"A Review of the Role of Causality in Developing Trustworthy AI Systems","created":"2023-02-14","cited_by_count":14,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2304.10819","title":"Auditing and Generating Synthetic Data with Controllable Trust Trade-offs","created":"2023-04-21","cited_by_count":13,"area":null},{"id":"2111.06979","title":"Neural Population Geometry Reveals the Role of Stochasticity in Robust Perception","created":"2021-11-12","cited_by_count":12,"area":null},{"id":"2309.16398","title":"Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey","created":"2023-09-28","cited_by_count":12,"area":null},{"id":"2411.09973","title":"Establishing and Evaluating Trustworthy AI: Overview and Research Challenges","created":"2024-11-15","cited_by_count":12,"area":null},{"id":"2101.10143","title":"Spectral Leakage and Rethinking the Kernel Size in CNNs","created":"2021-01-25","cited_by_count":11,"area":null},{"id":"2206.07953","title":"Analysis and Extensions of Adversarial Training for Video Classification","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2302.08466","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","created":"2023-02-16","cited_by_count":11,"area":null},{"id":"2502.16184","title":"Robustness and Cybersecurity in the EU Artificial Intelligence Act","created":"2025-02-22","cited_by_count":11,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2201.05647","title":"Tools and Practices for Responsible AI Engineering","created":"2022-01-14","cited_by_count":9,"area":null},{"id":"2209.06388","title":"TSFool: Crafting Highly-Imperceptible Adversarial Time Series through Multi-Objective Attack","created":"2022-09-14","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2104.08690","title":"Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems","created":"2021-04-18","cited_by_count":7,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2107.09546","title":"Responsible and Regulatory Conform Machine Learning for Medicine: A Survey of Challenges and Solutions","created":"2021-07-20","cited_by_count":7,"area":null},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2104.09852","title":"Adversarial Training for Deep Learning-based Intrusion Detection Systems","created":"2021-04-20","cited_by_count":6,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2203.04696","title":"Robust Federated Learning Against Adversarial Attacks for Speech Emotion Recognition","created":"2022-03-09","cited_by_count":6,"area":null},{"id":"2305.03173","title":"New Adversarial Image Detection Based on Sentiment Analysis","created":"2023-05-03","cited_by_count":6,"area":null},{"id":"2305.13057","title":"Causality-Aided Trade-off Analysis for Machine Learning Fairness","created":"2023-05-22","cited_by_count":6,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2412.11476","title":"Vertical Federated Unlearning via Backdoor Certification","created":"2024-12-16","cited_by_count":6,"area":null},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2105.06512","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","created":"2021-05-13","cited_by_count":5,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2209.12935","title":"A Comprehensive Review of Trends, Applications and Challenges In Out-of-Distribution Detection","created":"2022-09-26","cited_by_count":5,"area":null},{"id":"2307.01390","title":"Adversarial Learning in Real-World Fraud Detection: Challenges and Perspectives","created":"2023-07-03","cited_by_count":5,"area":null},{"id":"2502.21286","title":"Enabling AutoML for Zero-Touch Network Security: Use-Case Driven Analysis","created":"2025-02-28","cited_by_count":5,"area":null},{"id":"2507.03168","title":"Adopting a human developmental visual diet yields robust, shape-based AI vision","created":"2025-07-03","cited_by_count":5,"area":null},{"id":"2102.12192","title":"Multiplicative Reweighting for Robust Neural Network Optimization","created":"2021-02-24","cited_by_count":4,"area":null},{"id":"2106.11036","title":"Know Your Model (KYM): Increasing Trust in AI and Machine Learning","created":"2021-05-31","cited_by_count":4,"area":null},{"id":"2109.14653","title":"An Empirical Study of Accuracy, Fairness, Explainability, Distributional Robustness, and Adversarial Robustness","created":"2021-09-29","cited_by_count":4,"area":null},{"id":"2205.01040","title":"A Survey on Uncertainty Toolkits for Deep Learning","created":"2022-05-02","cited_by_count":4,"area":null},{"id":"2304.13761","title":"Enhancing Robustness of Gradient-Boosted Decision Trees through One-Hot Encoding and Regularization","created":"2023-04-26","cited_by_count":4,"area":null},{"id":"2308.03243","title":"Unsupervised Adversarial Detection without Extra Model: Training Loss Should Change","created":"2023-08-07","cited_by_count":4,"area":null},{"id":"2401.10657","title":"FIMBA: Evaluating the Robustness of AI in Genomics via Feature Importance Adversarial Attacks","created":"2024-01-19","cited_by_count":4,"area":null},{"id":"2103.03102","title":"Benchmarking Robustness of Deep Learning Classifiers Using Two-Factor Perturbation","created":"2021-03-02","cited_by_count":3,"area":null},{"id":"2109.01766","title":"SEC4SR: A Security Analysis Platform for Speaker Recognition","created":"2021-09-04","cited_by_count":3,"area":null},{"id":"2112.12095","title":"Detect & Reject for Transferability of Black-box Adversarial Attacks Against Network Intrusion Detection Systems","created":"2021-12-22","cited_by_count":3,"area":null},{"id":"2301.01218","title":"Tracing the Origin of Adversarial Attack for Forensic Investigation and Deterrence","created":"2022-12-31","cited_by_count":3,"area":null},{"id":"2304.12829","title":"Improving Robustness Against Adversarial Attacks with Deeply Quantized Neural Networks","created":"2023-04-25","cited_by_count":3,"area":null},{"id":"2306.15790","title":"Probing the Transition to Dataset-Level Privacy in ML Models Using an Output-Specific and Data-Resolved Privacy Profile","created":"2023-06-27","cited_by_count":3,"area":null},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2401.01537","title":"The Art of Deception: Robust Backdoor Attack using Dynamic Stacking of Triggers","created":"2024-01-03","cited_by_count":3,"area":null},{"id":"2403.14641","title":"Testing autonomous vehicles and AI: perspectives and challenges from cybersecurity, transparency, robustness and fairness","created":"2024-02-21","cited_by_count":3,"area":null},{"id":"2404.10789","title":"PASA: Attack Agnostic Unsupervised Adversarial Detection using Prediction & Attribution Sensitivity Analysis","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2506.06381","title":"DURA-CPS: A Multi-Role Orchestrator for Dependability Assurance in LLM-Enabled Cyber-Physical Systems","created":"2025-06-04","cited_by_count":3,"area":null},{"id":"2510.12468","title":"MS-GAGA: Metric-Selective Guided Adversarial Generation Attack","created":"2025-10-14","cited_by_count":3,"area":null},{"id":"2101.12097","title":"Adversarial Machine Learning Attacks on Condition-Based Maintenance Capabilities","created":"2021-01-28","cited_by_count":2,"area":null},{"id":"2105.02595","title":"Scaling up Memory-Efficient Formal Verification Tools for Tree Ensembles","created":"2021-05-06","cited_by_count":2,"area":null},{"id":"2106.05657","title":"Deep neural network loses attention to adversarial images","created":"2021-06-10","cited_by_count":2,"area":null},{"id":"2109.12838","title":"MUTEN: Boosting Gradient-Based Adversarial Attacks via Mutant-Based Ensembles","created":"2021-09-27","cited_by_count":2,"area":null},{"id":"2110.09983","title":"ECG-ATK-GAN: Robustness against Adversarial Attacks on ECGs using Conditional Generative Adversarial Networks","created":"2021-10-17","cited_by_count":2,"area":null},{"id":"2202.01117","title":"An Eye for an Eye: Defending against Gradient-based Attacks with Gradients","created":"2022-02-02","cited_by_count":2,"area":null},{"id":"2203.09289","title":"PiDAn: A Coherence Optimization Approach for Backdoor Attack Detection and Mitigation in Deep Neural Networks","created":"2022-03-17","cited_by_count":2,"area":null},{"id":"2204.00734","title":"SkeleVision: Towards Adversarial Resiliency of Person Tracking with Multi-Task Learning","created":"2022-04-02","cited_by_count":2,"area":null},{"id":"2204.10046","title":"Testing robustness of predictions of trained classifiers against naturally occurring perturbations","created":"2022-04-21","cited_by_count":2,"area":null},{"id":"2205.10457","title":"Robust Sensible Adversarial Learning of Deep Neural Networks for Image Classification","created":"2022-05-20","cited_by_count":2,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2211.03933","title":"A Hypergraph-Based Machine Learning Ensemble Network Intrusion Detection System","created":"2022-11-08","cited_by_count":2,"area":null},{"id":"2302.12538","title":"UnbiasedNets: A Dataset Diversification Framework for Robustness Bias Alleviation in Neural Networks","created":"2023-02-24","cited_by_count":2,"area":null},{"id":"2306.05494","title":"Evasion Adversarial Attacks Remain Impractical Against ML-based Network Intrusion Detection Systems, Especially Dynamic Ones","created":"2023-06-08","cited_by_count":2,"area":null},{"id":"2402.11082","title":"The AI Security Pyramid of Pain","created":"2024-02-16","cited_by_count":2,"area":null},{"id":"2411.02099","title":"Differentially Private Integrated Decision Gradients (IDG-DP) for Radar-based Human Activity Recognition","created":"2024-11-04","cited_by_count":2,"area":null},{"id":"2412.07782","title":"Trustworthy artificial intelligence in the energy sector: Landscape analysis and evaluation framework","created":"2024-11-25","cited_by_count":2,"area":null},{"id":"2501.16490","title":"Towards Robust Stability Prediction in Smart Grids: GAN-based Approach under Data Constraints and Adversarial Challenges","created":"2025-01-27","cited_by_count":2,"area":null},{"id":"2505.01816","title":"Rogue Cell: Adversarial Attack and Defense in Untrusted O-RAN Setup Exploiting the Traffic Steering xApp","created":"2025-05-03","cited_by_count":2,"area":null},{"id":"2507.17725","title":"On the Interaction of Compressibility and Adversarial Robustness","created":"2025-07-23","cited_by_count":2,"area":null},{"id":"2508.14699","title":"Foe for Fraud: Transferable Adversarial Attacks in Credit Card Fraud Detection","created":"2025-08-20","cited_by_count":2,"area":null},{"id":"2509.11332","title":"A five-layer framework for AI governance: integrating regulation, standards, and certification","created":"2025-09-14","cited_by_count":2,"area":null},{"id":"2607.00553","title":"Cross-Domain Generalization Failure in Lightweight Intrusion Detection Models for IIoT Networks","created":"2026-07-01","cited_by_count":2,"area":null},{"id":"2102.09695","title":"Fortify Machine Learning Production Systems: Detect and Classify Adversarial Attacks","created":"2021-02-19","cited_by_count":1,"area":null},{"id":"2103.02718","title":"A Modified Drake Equation for Assessing Adversarial Risk to Machine Learning Models","created":"2021-03-03","cited_by_count":1,"area":null},{"id":"2106.10996","title":"Delving into the pixels of adversarial samples","created":"2021-06-21","cited_by_count":1,"area":null},{"id":"2111.15160","title":"Mitigating Adversarial Attacks by Distributing Different Copies to Different Users","created":"2021-11-30","cited_by_count":1,"area":null},{"id":"2202.08892","title":"Developing Imperceptible Adversarial Patches to Camouflage Military Assets From Computer Vision Enabled Technologies","created":"2022-02-17","cited_by_count":1,"area":null},{"id":"2202.12991","title":"Attacks and Faults Injection in Self-Driving Agents on the Carla Simulator -- Experience Report","created":"2022-02-25","cited_by_count":1,"area":null},{"id":"2204.05764","title":"Examining the Proximity of Adversarial Examples to Class Manifolds in Deep Networks","created":"2022-04-12","cited_by_count":1,"area":null},{"id":"2206.03225","title":"The Different Faces of AI Ethics Across the World: A Principle-Implementation Gap Analysis","created":"2022-05-12","cited_by_count":1,"area":null}],"next_cursor":"100"}