{"total":37,"rows":[{"id":"2105.01984","title":"Software Engineering for AI-Based Systems: A Survey","created":"2021-05-05","cited_by_count":69,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2110.14880","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","created":"2021-10-28","cited_by_count":53,"area":null},{"id":"2101.06969","title":"Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attacks","created":"2021-01-18","cited_by_count":49,"area":null},{"id":"2210.07346","title":"An Embarrassingly Simple Backdoor Attack on Self-supervised Learning","created":"2022-10-13","cited_by_count":31,"area":null},{"id":"2108.09187","title":"Quantization Backdoors to Deep Learning Commercial Frameworks","created":"2021-08-20","cited_by_count":29,"area":null},{"id":"2107.03311","title":"RoFL: Robustness of Secure Federated Learning","created":"2021-07-07","cited_by_count":25,"area":null},{"id":"2202.03609","title":"PolicyCleanse: Backdoor Detection and Mitigation in Reinforcement Learning","created":"2022-02-08","cited_by_count":19,"area":null},{"id":"2104.04268","title":"Reversible Watermarking in Deep Convolutional Neural Networks for Integrity Authentication","created":"2021-04-09","cited_by_count":17,"area":null},{"id":"2108.03980","title":"Decentralized Deep Learning for Multi-Access Edge Computing: A Survey on Communication Efficiency and Trustworthiness","created":"2021-07-30","cited_by_count":15,"area":null},{"id":"2203.06462","title":"Low-Rank Softmax Can Have Unargmaxable Classes in Theory but Rarely in Practice","created":"2022-03-12","cited_by_count":15,"area":null},{"id":"2204.11075","title":"Smart App Attack: Hacking Deep Learning Models in Android Apps","created":"2022-04-23","cited_by_count":12,"area":null},{"id":"2203.11633","title":"Semi-Targeted Model Poisoning Attack on Federated Learning via Backward Error Analysis","created":"2022-03-22","cited_by_count":9,"area":null},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2110.06018","title":"On the Security Risks of AutoML","created":"2021-10-12","cited_by_count":7,"area":null},{"id":"2103.04333","title":"Measuring Discrimination to Boost Comparative Testing for Multiple Deep Learning Models","created":"2021-03-07","cited_by_count":6,"area":null},{"id":"2104.08323","title":"Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Accelerators","created":"2021-04-16","cited_by_count":6,"area":null},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2109.01275","title":"A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples","created":"2021-09-03","cited_by_count":6,"area":null},{"id":"2304.00245","title":"Reusing Deep Neural Network Models through Model Re-engineering","created":"2023-04-01","cited_by_count":6,"area":null},{"id":"2206.00145","title":"CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defences","created":"2022-05-31","cited_by_count":5,"area":null},{"id":"2305.02383","title":"On the Security Risks of Knowledge Graph Reasoning","created":"2023-05-03","cited_by_count":5,"area":null},{"id":"2203.06570","title":"Model Inversion Attack against Transfer Learning: Inverting a Model without Accessing It","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2306.09376","title":"Modularizing while Training: A New Paradigm for Modularizing DNN Models","created":"2023-06-15","cited_by_count":4,"area":null},{"id":"2110.04571","title":"Widen The Backdoor To Let More Attackers In","created":"2021-10-09","cited_by_count":3,"area":null},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3,"area":null},{"id":"2304.06326","title":"Understanding Overfitting in Adversarial Training via Kernel Regression","created":"2023-04-13","cited_by_count":2,"area":null},{"id":"2109.10770","title":"Exploring Adversarial Examples for Efficient Active Learning in Machine Learning Classifiers","created":"2021-09-22","cited_by_count":1,"area":null},{"id":"2202.04311","title":"Identifying Backdoor Attacks in Federated Learning via Anomaly Detection","created":"2022-02-09","cited_by_count":1,"area":null},{"id":"2402.08695","title":"Game of Trojans: Adaptive Adversaries Against Output-based Trojaned-Model Detectors","created":"2024-02-12","cited_by_count":1,"area":null},{"id":"2105.03726","title":"Mental Models of Adversarial Machine Learning","created":"2021-05-08","cited_by_count":0,"area":null},{"id":"2207.05937","title":"Game of Trojans: A Submodular Byzantine Approach","created":"2022-07-13","cited_by_count":0,"area":null},{"id":"2210.12179","title":"Neural Architectural Backdoors","created":"2022-10-21","cited_by_count":0,"area":null},{"id":"2408.08920","title":"A Survey of Trojan Attacks and Defenses to Deep Neural Networks","created":"2024-08-15","cited_by_count":0,"area":null},{"id":"2502.13459","title":"Poisoned Source Code Detection in Code Models","created":"2025-02-19","cited_by_count":0,"area":null},{"id":"2503.09049","title":"Adaptive Backdoor Attacks with Reasonable Constraints on Graph Neural Networks","created":"2025-03-12","cited_by_count":0,"area":null}],"next_cursor":null}