{"total":215,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2207.05521","title":"Federated Unlearning: How to Efficiently Erase a Client in FL?","created":"2022-07-12","cited_by_count":95,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2302.14301","title":"A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking","created":"2023-02-28","cited_by_count":85,"area":null},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79,"area":null},{"id":"2101.08030","title":"Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Data","created":"2021-01-20","cited_by_count":45,"area":null},{"id":"2208.10836","title":"Evaluating Machine Unlearning via Epistemic Uncertainty","created":"2022-08-23","cited_by_count":39,"area":"safety"},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38,"area":null},{"id":"2110.03109","title":"Consistent Counterfactuals for Deep Models","created":"2021-10-06","cited_by_count":37,"area":null},{"id":"2309.13190","title":"Spatial-frequency channels, shape bias, and adversarial robustness","created":"2023-09-22","cited_by_count":28,"area":null},{"id":"2206.03393","title":"Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition","created":"2022-06-07","cited_by_count":23,"area":null},{"id":"2112.01156","title":"A Unified Framework for Adversarial Attack and Defense in Constrained Feature Space","created":"2021-12-02","cited_by_count":22,"area":null},{"id":"2205.13680","title":"Membership Inference Attack Using Self Influence Functions","created":"2022-05-26","cited_by_count":20,"area":"safety"},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17,"area":null},{"id":"2303.01256","title":"Choosing Public Datasets for Private Machine Learning via Gradient Subspace Distance","created":"2023-03-02","cited_by_count":16,"area":null},{"id":"2202.03277","title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2302.06975","title":"A Review of the Role of Causality in Developing Trustworthy AI Systems","created":"2023-02-14","cited_by_count":14,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2304.10819","title":"Auditing and Generating Synthetic Data with Controllable Trust Trade-offs","created":"2023-04-21","cited_by_count":13,"area":null},{"id":"2111.06979","title":"Neural Population Geometry Reveals the Role of Stochasticity in Robust Perception","created":"2021-11-12","cited_by_count":12,"area":null},{"id":"2309.16398","title":"Recent Advances of Differential Privacy in Centralized Deep Learning: A Systematic Survey","created":"2023-09-28","cited_by_count":12,"area":null},{"id":"2411.09973","title":"Establishing and Evaluating Trustworthy AI: Overview and Research Challenges","created":"2024-11-15","cited_by_count":12,"area":null},{"id":"2101.10143","title":"Spectral Leakage and Rethinking the Kernel Size in CNNs","created":"2021-01-25","cited_by_count":11,"area":null},{"id":"2206.07953","title":"Analysis and Extensions of Adversarial Training for Video Classification","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2302.08466","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","created":"2023-02-16","cited_by_count":11,"area":null},{"id":"2502.16184","title":"Robustness and Cybersecurity in the EU Artificial Intelligence Act","created":"2025-02-22","cited_by_count":11,"area":null},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2201.05647","title":"Tools and Practices for Responsible AI Engineering","created":"2022-01-14","cited_by_count":9,"area":null},{"id":"2209.06388","title":"TSFool: Crafting Highly-Imperceptible Adversarial Time Series through Multi-Objective Attack","created":"2022-09-14","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2501.15563","title":"PCAP-Backdoor: Backdoor Poisoning Generator for Network Traffic in CPS/IoT Environments","created":"2025-01-26","cited_by_count":9,"area":"safety"},{"id":"2106.01538","title":"PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack","created":"2021-06-03","cited_by_count":8,"area":null},{"id":"2605.17373","title":"FML-bench: A Controlled Study of AI Research Agent Strategies from the Perspective of Search Dynamics","created":"2026-05-17","cited_by_count":8,"area":"agents"},{"id":"2104.08690","title":"Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems","created":"2021-04-18","cited_by_count":7,"area":null},{"id":"2104.11103","title":"Performance Evaluation of Adversarial Attacks: Discrepancies and Solutions","created":"2021-04-22","cited_by_count":7,"area":null},{"id":"2107.09546","title":"Responsible and Regulatory Conform Machine Learning for Medicine: A Survey of Challenges and Solutions","created":"2021-07-20","cited_by_count":7,"area":null},{"id":"2310.07219","title":"Improved Membership Inference Attacks Against Language Classification Models","created":"2023-10-11","cited_by_count":7,"area":"safety"},{"id":"2408.01978","title":"AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning","created":"2024-08-04","cited_by_count":7,"area":null},{"id":"2104.09852","title":"Adversarial Training for Deep Learning-based Intrusion Detection Systems","created":"2021-04-20","cited_by_count":6,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2203.04696","title":"Robust Federated Learning Against Adversarial Attacks for Speech Emotion Recognition","created":"2022-03-09","cited_by_count":6,"area":null},{"id":"2305.03173","title":"New Adversarial Image Detection Based on Sentiment Analysis","created":"2023-05-03","cited_by_count":6,"area":null},{"id":"2305.13057","title":"Causality-Aided Trade-off Analysis for Machine Learning Fairness","created":"2023-05-22","cited_by_count":6,"area":null},{"id":"2401.10586","title":"PuriDefense: Randomized Local Implicit Adversarial Purification for Defending Black-box Query-based Attacks","created":"2024-01-19","cited_by_count":6,"area":null},{"id":"2412.11476","title":"Vertical Federated Unlearning via Backdoor Certification","created":"2024-12-16","cited_by_count":6,"area":null},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2105.06512","title":"Stochastic-Shield: A Probabilistic Approach Towards Training-Free Adversarial Defense in Quantized CNNs","created":"2021-05-13","cited_by_count":5,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2209.12935","title":"A Comprehensive Review of Trends, Applications and Challenges In Out-of-Distribution Detection","created":"2022-09-26","cited_by_count":5,"area":null},{"id":"2307.01390","title":"Adversarial Learning in Real-World Fraud Detection: Challenges and Perspectives","created":"2023-07-03","cited_by_count":5,"area":null},{"id":"2502.21286","title":"Enabling AutoML for Zero-Touch Network Security: Use-Case Driven Analysis","created":"2025-02-28","cited_by_count":5,"area":null},{"id":"2507.03168","title":"Adopting a human developmental visual diet yields robust, shape-based AI vision","created":"2025-07-03","cited_by_count":5,"area":null},{"id":"2102.12192","title":"Multiplicative Reweighting for Robust Neural Network Optimization","created":"2021-02-24","cited_by_count":4,"area":null},{"id":"2106.11036","title":"Know Your Model (KYM): Increasing Trust in AI and Machine Learning","created":"2021-05-31","cited_by_count":4,"area":null},{"id":"2109.14653","title":"An Empirical Study of Accuracy, Fairness, Explainability, Distributional Robustness, and Adversarial Robustness","created":"2021-09-29","cited_by_count":4,"area":null},{"id":"2205.01040","title":"A Survey on Uncertainty Toolkits for Deep Learning","created":"2022-05-02","cited_by_count":4,"area":null},{"id":"2304.13761","title":"Enhancing Robustness of Gradient-Boosted Decision Trees through One-Hot Encoding and Regularization","created":"2023-04-26","cited_by_count":4,"area":null},{"id":"2308.03243","title":"Unsupervised Adversarial Detection without Extra Model: Training Loss Should Change","created":"2023-08-07","cited_by_count":4,"area":null},{"id":"2401.10657","title":"FIMBA: Evaluating the Robustness of AI in Genomics via Feature Importance Adversarial Attacks","created":"2024-01-19","cited_by_count":4,"area":null},{"id":"2408.03572","title":"2D-OOB: Attributing Data Contribution Through Joint Valuation Framework","created":"2024-08-07","cited_by_count":4,"area":"safety"},{"id":"2510.10472","title":"FML-bench: Benchmarking Machine Learning Agents for Scientific Research","created":"2025-10-12","cited_by_count":4,"area":"agents"},{"id":"2101.00157","title":"Active Learning Under Malicious Mislabeling and Poisoning Attacks","created":"2021-01-01","cited_by_count":3,"area":"safety"},{"id":"2103.03102","title":"Benchmarking Robustness of Deep Learning Classifiers Using Two-Factor Perturbation","created":"2021-03-02","cited_by_count":3,"area":null},{"id":"2109.01766","title":"SEC4SR: A Security Analysis Platform for Speaker Recognition","created":"2021-09-04","cited_by_count":3,"area":null},{"id":"2112.12095","title":"Detect & Reject for Transferability of Black-box Adversarial Attacks Against Network Intrusion Detection Systems","created":"2021-12-22","cited_by_count":3,"area":null},{"id":"2301.01218","title":"Tracing the Origin of Adversarial Attack for Forensic Investigation and Deterrence","created":"2022-12-31","cited_by_count":3,"area":null},{"id":"2304.12829","title":"Improving Robustness Against Adversarial Attacks with Deeply Quantized Neural Networks","created":"2023-04-25","cited_by_count":3,"area":null},{"id":"2306.15790","title":"Probing the Transition to Dataset-Level Privacy in ML Models Using an Output-Specific and Data-Resolved Privacy Profile","created":"2023-06-27","cited_by_count":3,"area":null},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2401.01537","title":"The Art of Deception: Robust Backdoor Attack using Dynamic Stacking of Triggers","created":"2024-01-03","cited_by_count":3,"area":null},{"id":"2403.14641","title":"Testing autonomous vehicles and AI: perspectives and challenges from cybersecurity, transparency, robustness and fairness","created":"2024-02-21","cited_by_count":3,"area":null},{"id":"2404.10789","title":"PASA: Attack Agnostic Unsupervised Adversarial Detection using Prediction & Attribution Sensitivity Analysis","created":"2024-04-12","cited_by_count":3,"area":null},{"id":"2408.10647","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","created":"2024-08-20","cited_by_count":3,"area":null},{"id":"2501.14230","title":"GreedyPixel: Fine-Grained Black-Box Adversarial Attack Via Greedy Algorithm","created":"2025-01-24","cited_by_count":3,"area":null},{"id":"2506.06381","title":"DURA-CPS: A Multi-Role Orchestrator for Dependability Assurance in LLM-Enabled Cyber-Physical Systems","created":"2025-06-04","cited_by_count":3,"area":null},{"id":"2510.12468","title":"MS-GAGA: Metric-Selective Guided Adversarial Generation Attack","created":"2025-10-14","cited_by_count":3,"area":null},{"id":"2101.12097","title":"Adversarial Machine Learning Attacks on Condition-Based Maintenance Capabilities","created":"2021-01-28","cited_by_count":2,"area":null},{"id":"2105.02595","title":"Scaling up Memory-Efficient Formal Verification Tools for Tree Ensembles","created":"2021-05-06","cited_by_count":2,"area":null},{"id":"2106.05657","title":"Deep neural network loses attention to adversarial images","created":"2021-06-10","cited_by_count":2,"area":null},{"id":"2109.12838","title":"MUTEN: Boosting Gradient-Based Adversarial Attacks via Mutant-Based Ensembles","created":"2021-09-27","cited_by_count":2,"area":null},{"id":"2110.09983","title":"ECG-ATK-GAN: Robustness against Adversarial Attacks on ECGs using Conditional Generative Adversarial Networks","created":"2021-10-17","cited_by_count":2,"area":null},{"id":"2202.01117","title":"An Eye for an Eye: Defending against Gradient-based Attacks with Gradients","created":"2022-02-02","cited_by_count":2,"area":null},{"id":"2203.09289","title":"PiDAn: A Coherence Optimization Approach for Backdoor Attack Detection and Mitigation in Deep Neural Networks","created":"2022-03-17","cited_by_count":2,"area":null},{"id":"2204.00734","title":"SkeleVision: Towards Adversarial Resiliency of Person Tracking with Multi-Task Learning","created":"2022-04-02","cited_by_count":2,"area":null},{"id":"2204.10046","title":"Testing robustness of predictions of trained classifiers against naturally occurring perturbations","created":"2022-04-21","cited_by_count":2,"area":null},{"id":"2205.10457","title":"Robust Sensible Adversarial Learning of Deep Neural Networks for Image Classification","created":"2022-05-20","cited_by_count":2,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2211.03933","title":"A Hypergraph-Based Machine Learning Ensemble Network Intrusion Detection System","created":"2022-11-08","cited_by_count":2,"area":null},{"id":"2302.12538","title":"UnbiasedNets: A Dataset Diversification Framework for Robustness Bias Alleviation in Neural Networks","created":"2023-02-24","cited_by_count":2,"area":null},{"id":"2306.05494","title":"Evasion Adversarial Attacks Remain Impractical Against ML-based Network Intrusion Detection Systems, Especially Dynamic Ones","created":"2023-06-08","cited_by_count":2,"area":null},{"id":"2309.03702","title":"DiffDefense: Defending against Adversarial Attacks via Diffusion Models","created":"2023-09-07","cited_by_count":2,"area":"diffusion"},{"id":"2402.11082","title":"The AI Security Pyramid of Pain","created":"2024-02-16","cited_by_count":2,"area":null},{"id":"2407.00866","title":"Silver Linings in the Shadows: Harnessing Membership Inference for Machine Unlearning","created":"2024-07-01","cited_by_count":2,"area":"safety"},{"id":"2410.22374","title":"Machine Unlearning using Forgetting Neural Networks","created":"2024-10-29","cited_by_count":2,"area":"safety"},{"id":"2411.02099","title":"Differentially Private Integrated Decision Gradients (IDG-DP) for Radar-based Human Activity Recognition","created":"2024-11-04","cited_by_count":2,"area":null},{"id":"2412.07782","title":"Trustworthy artificial intelligence in the energy sector: Landscape analysis and evaluation framework","created":"2024-11-25","cited_by_count":2,"area":null},{"id":"2501.16490","title":"Towards Robust Stability Prediction in Smart Grids: GAN-based Approach under Data Constraints and Adversarial Challenges","created":"2025-01-27","cited_by_count":2,"area":null}],"next_cursor":"100"}