{"total":50,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2101.08254","title":"RADAR: Run-time Adversarial Weight Attack Detection and Accuracy Recovery","created":"2021-01-20","cited_by_count":18,"area":null},{"id":"2109.09829","title":"Towards Energy-Efficient and Secure Edge AI: A Cross-Layer Framework","created":"2021-09-20","cited_by_count":17,"area":null},{"id":"2112.13544","title":"FitAct: Error Resilient Deep Neural Networks via Fine-Grained Post-Trainable Activation Functions","created":"2021-12-27","cited_by_count":12,"area":null},{"id":"2103.13813","title":"RA-BNN: Constructing Robust & Accurate Binary Neural Network to Simultaneously Defend Adversarial Bit-Flip Attack and Improve Accuracy","created":"2021-03-22","cited_by_count":11,"area":null},{"id":"2303.08226","title":"DeepAxe: A Framework for Exploration of Approximation and Reliability Trade-offs in DNN Accelerators","created":"2023-03-14","cited_by_count":11,"area":null},{"id":"2111.01932","title":"HASHTAG: Hash Signatures for Online Detection of Fault-Injection Attacks on Deep Neural Networks","created":"2021-11-02","cited_by_count":9,"area":null},{"id":"2108.07019","title":"Towards a Safety Case for Hardware Fault Tolerance in Convolutional Neural Networks Using Activation Range Supervision","created":"2021-08-16","cited_by_count":7,"area":null},{"id":"2209.03225","title":"Hardware faults that matter: Understanding and Estimating the safety impact of hardware faults on object detection DNNs","created":"2022-09-07","cited_by_count":7,"area":null},{"id":"2306.08386","title":"Efficient Backdoor Attacks for Deep Neural Networks in Real-world Scenarios","created":"2023-06-14","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2101.02860","title":"Exploring Fault-Energy Trade-offs in Approximate DNN Hardware Accelerators","created":"2021-01-08","cited_by_count":6,"area":null},{"id":"2109.11249","title":"FooBaR: Fault Fooling Backdoor Attack on Neural Network Training","created":"2021-09-23","cited_by_count":6,"area":null},{"id":"2110.07683","title":"Don't Knock! Rowhammer at the Backdoor of DNN Models","created":"2021-10-14","cited_by_count":6,"area":null},{"id":"2310.20349","title":"A Low-cost Strategic Monitoring Approach for Scalable and Interpretable Error Detection in Deep Neural Networks","created":"2023-10-31","cited_by_count":6,"area":null},{"id":"2306.08313","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","created":"2023-06-14","cited_by_count":5,"area":null},{"id":"2502.07408","title":"Maximal Brain Damage Without Data or Optimization: Disrupting Neural Networks via Sign-Bit Flips","created":"2025-02-11","cited_by_count":4,"area":null},{"id":"2309.06223","title":"Compiled Models, Built-In Exploits: Uncovering Pervasive Bit-Flip Attack Surfaces in DNN Executables","created":"2023-09-12","cited_by_count":3,"area":null},{"id":"2405.13891","title":"DeepNcode: Encoding-Based Protection against Bit-Flip Attacks on Neural Networks","created":"2024-05-22","cited_by_count":3,"area":null},{"id":"2412.03682","title":"Designing DNNs for a trade-off between robustness and processing performance in embedded devices","created":"2024-12-04","cited_by_count":3,"area":null},{"id":"2212.02649","title":"Thales: Formulating and Estimating Architectural Vulnerability Factors for DNN Accelerators","created":"2022-12-05","cited_by_count":2,"area":null},{"id":"2305.08034","title":"DNN-Defender: A Victim-Focused In-DRAM Defense Mechanism for Taming Adversarial Weight Attack on DNNs","created":"2023-05-14","cited_by_count":2,"area":null},{"id":"2411.18993","title":"Harden Deep Neural Networks Against Fault Injections Through Weight Scaling","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2502.16286","title":"Verification of Bit-Flip Attacks against Quantized Neural Networks","created":"2025-02-22","cited_by_count":2,"area":null},{"id":"2504.05122","title":"DoCIA: An Online Document-Level Context Incorporation Agent for Speech Translation","created":"2025-04-07","cited_by_count":2,"area":null},{"id":"2303.01245","title":"An Incremental Gray-box Physical Adversarial Attack on Neural Network Training","created":"2023-02-20","cited_by_count":1,"area":null},{"id":"2407.04964","title":"ZOBNN: Zero-Overhead Dependable Design of Binary Neural Networks with Deliberately Quantized Parameters","created":"2024-07-06","cited_by_count":1,"area":null},{"id":"2407.21220","title":"DeepBaR: Fault Backdoor Attack on Deep Neural Network Layers","created":"2024-07-30","cited_by_count":1,"area":null},{"id":"2505.12019","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","created":"2025-05-17","cited_by_count":1,"area":null},{"id":"2507.05531","title":"Bit-Flip Fault Attack: Crushing Graph Neural Networks via Gradual Bit Search","created":"2025-07-07","cited_by_count":1,"area":null},{"id":"2602.16309","title":"The Weight of a Bit: EMFI Sensitivity Analysis of Embedded Deep Learning Models","created":"2026-02-18","cited_by_count":1,"area":null},{"id":"2605.08594","title":"FLARE: One-Shot PE-Level Fault Localization in Systolic Arrays via Algebraic Test Vectors","created":"2026-05-09","cited_by_count":1,"area":null},{"id":"2108.10066","title":"Dynamic Neural Network Architectural and Topological Adaptation and Related Methods -- A Survey","created":"2021-07-28","cited_by_count":0,"area":null},{"id":"2301.00675","title":"FlatENN: Train Flat for Enhanced Fault Tolerance of Quantized Deep Neural Networks","created":"2022-12-29","cited_by_count":0,"area":null},{"id":"2304.08411","title":"Evil from Within: Machine Learning Backdoors through Hardware Trojans","created":"2023-04-17","cited_by_count":0,"area":null},{"id":"2311.01205","title":"Attacking Graph Neural Networks with Bit Flips: Weisfeiler and Lehman Go Indifferent","created":"2023-11-02","cited_by_count":0,"area":null},{"id":"2411.08133","title":"Impactful Bit-Flip Search on Full-precision Models","created":"2024-11-12","cited_by_count":0,"area":null},{"id":"2411.19027","title":"Enhancing Neural Network Robustness Against Fault Injection Through Non-linear Weight Transformations","created":"2024-11-28","cited_by_count":0,"area":null},{"id":"2504.01933","title":"Hessian-aware Training for Enhancing DNNs Resilience to Parameter Corruptions","created":"2025-04-02","cited_by_count":0,"area":null},{"id":"2505.06315","title":"Threat Modeling for AI: The Case for an Asset-Centric Approach","created":"2025-05-08","cited_by_count":0,"area":null},{"id":"2603.18120","title":"MAED: Mathematical Activation Error Detection for Mitigating Physical Fault Attacks in DNN Inference","created":"2026-03-18","cited_by_count":0,"area":null},{"id":"2605.17432","title":"DP-SelFT: Differentially Private Selective Fine-Tuning for Large Language Models","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.22437","title":"Characterizing the Fault Response of the Intel Neural Compute Stick 2 Under Single-Pulse Electromagnetic Fault Injection","created":"2026-05-21","cited_by_count":0,"area":null},{"id":"2606.04266","title":"Long-Term and Short-Term Transistor Aging in Deep Neural Networks: Impact and Mitigation","created":"2026-06-02","cited_by_count":0,"area":null},{"id":"2607.19623","title":"From Bit-Position Sensitivity to Unequal Error Protection for DNN Inference Memory","created":"2026-07-21","cited_by_count":0,"area":null},{"id":"2608.04173","title":"Understanding Fault Tolerance of Adversarially Robust Pruned Models","created":"2026-08-04","cited_by_count":0,"area":null},{"id":"2609.21713","title":"TERMon: Detecting Persistent Behavioral Threats in Edge AI via Hardware-Native Ternary Runtime Monitor","created":"2026-09-18","cited_by_count":0,"area":null},{"id":"2610.04396","title":"JASPER: Special Session on Joint Reliability And Security Assessment of SPlit Computing for Edge Robustness","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}