{"total":227,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2103.10689","title":"Interpretable Deep Learning: Interpretation, Interpretability, Trustworthiness, and Beyond","created":"2021-03-19","cited_by_count":118,"area":null},{"id":"2112.06409","title":"Data Collection and Quality Challenges in Deep Learning: A Data-Centric AI Perspective","created":"2021-12-13","cited_by_count":116,"area":null},{"id":"2102.13620","title":"Towards Robust and Reliable Algorithmic Recourse","created":"2021-02-26","cited_by_count":102,"area":null},{"id":"2401.08573","title":"WAVES: Benchmarking the Robustness of Image Watermarks","created":"2024-01-16","cited_by_count":97,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2210.07321","title":"Machine Generated Text: A Comprehensive Survey of Threat Models and Detection Methods","created":"2022-10-13","cited_by_count":79,"area":null},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73,"area":null},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57,"area":null},{"id":"2101.02032","title":"Socially Responsible AI Algorithms: Issues, Purposes, and Challenges","created":"2021-01-01","cited_by_count":56,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2210.05927","title":"Efficient Adversarial Training without Attacking: Worst-Case-Aware Robust Reinforcement Learning","created":"2022-10-12","cited_by_count":43,"area":null},{"id":"2402.14433","title":"A Language Model's Guide Through Latent Space","created":"2024-02-22","cited_by_count":43,"area":null},{"id":"2208.03160","title":"Almost-Orthogonal Layers for Efficient General-Purpose Lipschitz Networks","created":"2022-08-05","cited_by_count":39,"area":null},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38,"area":null},{"id":"2107.10137","title":"Improved Text Classification via Contrastive Adversarial Training","created":"2021-07-21","cited_by_count":38,"area":null},{"id":"2305.12090","title":"UP5: Unbiased Foundation Model for Fairness-aware Recommendation","created":"2023-05-20","cited_by_count":38,"area":null},{"id":"2207.09504","title":"Invariant Feature Learning for Generalized Long-Tailed Classification","created":"2022-07-19","cited_by_count":34,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2104.05097","title":"Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networks","created":"2021-04-11","cited_by_count":30,"area":null},{"id":"2403.18249","title":"Exploring the Deceptive Power of LLM-Generated Fake News: A Study of Real-World Detection Challenges","created":"2024-03-27","cited_by_count":30,"area":null},{"id":"2110.14068","title":"Drawing Robust Scratch Tickets: Subnetworks with Inborn Robustness Are Found within Randomly Initialized Networks","created":"2021-10-26","cited_by_count":29,"area":null},{"id":"2105.07091","title":"Verification of Image-based Neural Network Controllers Using Generative Models","created":"2021-05-14","cited_by_count":27,"area":null},{"id":"2103.05266","title":"BASAR:Black-box Attack on Skeletal Action Recognition","created":"2021-03-09","cited_by_count":26,"area":null},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2305.02279","title":"Learngene: Inheriting Condensed Knowledge from the Ancestry Model to Descendant Models","created":"2023-05-03","cited_by_count":24,"area":null},{"id":"2102.07788","title":"Universal Adversarial Examples and Perturbations for Quantum Classifiers","created":"2021-02-15","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2103.00429","title":"Medical Image Segmentation with Limited Supervision: A Review of Deep Network Models","created":"2021-02-28","cited_by_count":22,"area":null},{"id":"2201.08619","title":"Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World","created":"2022-01-21","cited_by_count":22,"area":null},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22,"area":null},{"id":"2309.10544","title":"Model Leeching: An Extraction Attack Targeting LLMs","created":"2023-09-19","cited_by_count":22,"area":null},{"id":"2305.06024","title":"A Survey on the Robustness of Computer Vision Models against Common Corruptions","created":"2023-05-10","cited_by_count":21,"area":null},{"id":"2110.08932","title":"Poisoning Attacks on Fair Machine Learning","created":"2021-10-17","cited_by_count":19,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2112.12310","title":"Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art","created":"2021-12-23","cited_by_count":18,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2202.01263","title":"NoisyMix: Boosting Model Robustness to Common Corruptions","created":"2022-02-02","cited_by_count":17,"area":null},{"id":"2203.15230","title":"Zero-Query Transfer Attacks on Context-Aware Object Detectors","created":"2022-03-29","cited_by_count":17,"area":null},{"id":"2206.08304","title":"Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Survey","created":"2022-06-16","cited_by_count":17,"area":null},{"id":"2212.02531","title":"Enhancing Quantum Adversarial Robustness by Randomized Encodings","created":"2022-12-05","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2112.02625","title":"Explainable Deep Learning in Healthcare: A Methodological Survey from an Attribution View","created":"2021-12-05","cited_by_count":15,"area":null},{"id":"2302.03225","title":"Efficient XAI Techniques: A Taxonomic Survey","created":"2023-02-07","cited_by_count":14,"area":null},{"id":"2401.14440","title":"Semantic Sensitivities and Inconsistent Predictions: Measuring the Fragility of NLI Models","created":"2024-01-25","cited_by_count":14,"area":null},{"id":"2111.10130","title":"Fooling Adversarial Training with Inducing Noise","created":"2021-11-19","cited_by_count":13,"area":null},{"id":"2203.10939","title":"Deep Learning Serves Traffic Safety Analysis: A Forward-looking Review","created":"2022-03-07","cited_by_count":13,"area":null},{"id":"2407.12443","title":"Preventing Catastrophic Overfitting in Fast Adversarial Training: A Bi-level Optimization Perspective","created":"2024-07-17","cited_by_count":13,"area":null},{"id":"2105.14644","title":"Generating Adversarial Examples with Graph Neural Networks","created":"2021-05-30","cited_by_count":12,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2408.05446","title":"Ensemble everything everywhere: Multi-scale aggregation for adversarial robustness","created":"2024-08-08","cited_by_count":12,"area":null},{"id":"2103.14739","title":"Leaky Nets: Recovering Embedded Neural Network Models and Inputs through Simple Power and Timing Side-Channels -- Attacks and Defenses","created":"2021-03-26","cited_by_count":11,"area":null},{"id":"2107.13639","title":"Imbalanced Adversarial Training with Reweighting","created":"2021-07-28","cited_by_count":11,"area":null},{"id":"2112.06654","title":"Toward Open-World Electroencephalogram Decoding Via Deep Learning: A Comprehensive Survey","created":"2021-12-08","cited_by_count":11,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2211.01671","title":"Visual Adversarial Attacks and Defenses in the Physical World: A Survey","created":"2022-11-03","cited_by_count":11,"area":null},{"id":"2402.02629","title":"PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks","created":"2024-02-04","cited_by_count":11,"area":null},{"id":"2407.18454","title":"Fairness Definitions in Language Models Explained","created":"2024-07-26","cited_by_count":11,"area":null},{"id":"2102.07244","title":"Resilient Machine Learning for Networked Cyber Physical Systems: A Survey for Machine Learning Security to Securing Machine Learning for CPS","created":"2021-02-14","cited_by_count":10,"area":null},{"id":"2110.07034","title":"How Does Momentum Benefit Deep Neural Networks Architecture Design? A Few Case Studies","created":"2021-10-13","cited_by_count":10,"area":null},{"id":"2201.02354","title":"GenLabel: Mixup Relabeling using Generative Models","created":"2022-01-07","cited_by_count":10,"area":null},{"id":"2306.06359","title":"NeRFool: Uncovering the Vulnerability of Generalizable Neural Radiance Fields against Adversarial Perturbations","created":"2023-06-10","cited_by_count":10,"area":null},{"id":"2107.05911","title":"Model Transferability With Responsive Decision Subjects","created":"2021-07-13","cited_by_count":9,"area":null},{"id":"2202.03071","title":"Distributionally Robust Fair Principal Components via Geodesic Descents","created":"2022-02-07","cited_by_count":9,"area":null},{"id":"2202.07260","title":"Learning Disentangled Behaviour Patterns for Wearable-based Human Activity Recognition","created":"2022-02-15","cited_by_count":9,"area":null},{"id":"2203.04713","title":"Defending Black-box Skeleton-based Human Activity Classifiers","created":"2022-03-09","cited_by_count":9,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9,"area":null},{"id":"2207.05225","title":"Susceptibility of Continual Learning Against Adversarial Attacks","created":"2022-07-11","cited_by_count":8,"area":null},{"id":"2305.06472","title":"ChatGPT-Like Large-Scale Foundation Models for Prognostics and Health Management: A Survey and Roadmaps","created":"2023-05-10","cited_by_count":8,"area":null},{"id":"2401.15568","title":"Intriguing Equivalence Structures of the Embedding Space of Vision Transformers","created":"2024-01-28","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2111.01714","title":"Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks","created":"2021-11-02","cited_by_count":7,"area":null},{"id":"2202.09994","title":"Transferring Adversarial Robustness Through Robust Representation Matching","created":"2022-02-21","cited_by_count":7,"area":null},{"id":"2206.10158","title":"Certifiably Robust Policy Learning against Adversarial Communication in Multi-agent Systems","created":"2022-06-21","cited_by_count":7,"area":null},{"id":"2207.00694","title":"Efficient Adversarial Training With Data Pruning","created":"2022-07-01","cited_by_count":7,"area":null},{"id":"2211.11312","title":"Understanding the Vulnerability of Skeleton-based Human Activity Recognition via Black-box Attack","created":"2022-11-21","cited_by_count":7,"area":null},{"id":"2102.01979","title":"Key Technology Considerations in Developing and Deploying Machine Learning Models in Clinical Radiology Practice","created":"2021-02-03","cited_by_count":6,"area":null},{"id":"2103.10229","title":"Explainable Adversarial Attacks in Deep Neural Networks Using Activation Profiles","created":"2021-03-18","cited_by_count":6,"area":null},{"id":"2112.08091","title":"Ensuring DNN Solution Feasibility for Optimization Problems with Convex Constraints and Its Application to DC Optimal Power Flow Problems","created":"2021-12-15","cited_by_count":6,"area":null},{"id":"2203.13890","title":"Improving Robustness of Jet Tagging Algorithms with Adversarial Training","created":"2022-03-25","cited_by_count":6,"area":null},{"id":"2207.06196","title":"Interactive Machine Learning: A State of the Art Review","created":"2022-07-13","cited_by_count":6,"area":null},{"id":"2305.05116","title":"Communication-Robust Multi-Agent Learning by Adaptable Auxiliary Multi-Agent Adversary Generation","created":"2023-05-09","cited_by_count":6,"area":null},{"id":"2305.13057","title":"Causality-Aided Trade-off Analysis for Machine Learning Fairness","created":"2023-05-22","cited_by_count":6,"area":null},{"id":"2305.17440","title":"Modeling Adversarial Attack on Pre-trained Language Models as Sequential Decision Making","created":"2023-05-27","cited_by_count":6,"area":null},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2102.07164","title":"Adversarial Attack on Network Embeddings via Supervised Network Poisoning","created":"2021-02-14","cited_by_count":5,"area":null},{"id":"2109.05223","title":"2-in-1 Accelerator: Enabling Random Precision Switch for Winning Both Adversarial Robustness and Efficiency","created":"2021-09-11","cited_by_count":5,"area":null},{"id":"2202.07787","title":"Trustworthy Anomaly Detection: A Survey","created":"2022-02-15","cited_by_count":5,"area":null},{"id":"2209.12935","title":"A Comprehensive Review of Trends, Applications and Challenges In Out-of-Distribution Detection","created":"2022-09-26","cited_by_count":5,"area":null},{"id":"2301.12896","title":"Identifying Adversarially Attackable and Robust Samples","created":"2023-01-30","cited_by_count":5,"area":null},{"id":"2302.04246","title":"Shortcut Detection with Variational Autoencoders","created":"2023-02-08","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2310.03518","title":"Towards Robust and Generalizable Training: An Empirical Study of Noisy Slot Filling for Input Perturbations","created":"2023-10-05","cited_by_count":5,"area":null},{"id":"2311.10992","title":"Towards Robust and Accurate Visual Prompting","created":"2023-11-18","cited_by_count":5,"area":null}],"next_cursor":"100"}