{"total":79,"rows":[{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2205.14258","title":"On the Symmetries of Deep Learning Models and their Internal Representations","created":"2022-05-27","cited_by_count":64,"area":null},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42,"area":null},{"id":"2305.00241","title":"When Deep Learning Meets Polyhedral Theory: A Survey","created":"2023-04-29","cited_by_count":39,"area":null},{"id":"2306.06179","title":"Hidden symmetries of ReLU networks","created":"2023-06-09","cited_by_count":39,"area":null},{"id":"2111.09999","title":"TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems","created":"2021-11-19","cited_by_count":36,"area":null},{"id":"2506.13018","title":"Symmetry in Neural Network Parameter Spaces","created":"2025-06-16","cited_by_count":36,"area":null},{"id":"2107.08909","title":"MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AI","created":"2021-07-19","cited_by_count":35,"area":null},{"id":"2202.05258","title":"Hardness of Noise-Free Learning for Two-Hidden-Layer Neural Networks","created":"2022-02-10","cited_by_count":28,"area":null},{"id":"2210.07236","title":"Improved Bounds on Neural Complexity for Representing Piecewise Linear Functions","created":"2022-10-13","cited_by_count":26,"area":null},{"id":"2112.12982","title":"Parameter identifiability of a deep feedforward ReLU neural network","created":"2021-12-24","cited_by_count":24,"area":null},{"id":"2403.11871","title":"The Real Tropical Geometry of Neural Networks","created":"2024-03-18","cited_by_count":24,"area":null},{"id":"2406.10685","title":"Scale Equivariant Graph Metanetworks","created":"2024-06-15","cited_by_count":24,"area":null},{"id":"2404.00473","title":"Privacy Backdoors: Stealing Data with Corrupted Pretrained Models","created":"2024-03-30","cited_by_count":22,"area":null},{"id":"2209.04036","title":"Functional dimension of feedforward ReLU neural networks","created":"2022-09-08","cited_by_count":21,"area":null},{"id":"2107.09370","title":"An Embedding of ReLU Networks and an Analysis of their Identifiability","created":"2021-07-20","cited_by_count":20,"area":null},{"id":"2102.07804","title":"Scaling Up Exact Neural Network Compression by ReLU Stability","created":"2021-02-15","cited_by_count":19,"area":null},{"id":"2310.08708","title":"Polynomial Time Cryptanalytic Extraction of Neural Network Models","created":"2023-10-12","cited_by_count":17,"area":null},{"id":"2306.07212","title":"Polyhedral Complex Extraction from ReLU Networks using Edge Subdivision","created":"2023-06-12","cited_by_count":14,"area":null},{"id":"2110.04227","title":"Universal Joint Approximation of Manifolds and Densities by Simple Injective Flows","created":"2021-10-08","cited_by_count":13,"area":null},{"id":"2206.07424","title":"Local Identifiability of Deep ReLU Neural Networks: the Theory","created":"2022-06-15","cited_by_count":12,"area":null},{"id":"2310.08287","title":"A Symmetry-Aware Exploration of Bayesian Neural Network Posteriors","created":"2023-10-12","cited_by_count":12,"area":null},{"id":"2506.17093","title":"Identifiability of Deep Polynomial Neural Networks","created":"2025-06-20","cited_by_count":12,"area":null},{"id":"2105.09673","title":"An Exact Poly-Time Membership-Queries Algorithm for Extraction a three-Layer ReLU Network","created":"2021-05-20","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2203.11355","title":"Origami in N dimensions: How feed-forward networks manufacture linear separability","created":"2022-03-21","cited_by_count":9,"area":null},{"id":"2410.05750","title":"Polynomial Time Cryptanalytic Extraction of Deep Neural Networks in the Hard-Label Setting","created":"2024-10-08","cited_by_count":9,"area":null},{"id":"2101.07150","title":"Stable Recovery of Entangled Weights: Towards Robust Identification of Deep Neural Networks from Minimal Samples","created":"2021-01-18","cited_by_count":8,"area":null},{"id":"2406.10011","title":"Beyond Slow Signs in High-fidelity Model Extraction","created":"2024-06-14","cited_by_count":7,"area":null},{"id":"2505.16716","title":"The Computational Complexity of Counting Linear Regions in ReLU Neural Networks","created":"2025-05-22","cited_by_count":7,"area":null},{"id":"2108.13637","title":"When are Deep Networks really better than Decision Forests at small sample sizes, and how?","created":"2021-08-31","cited_by_count":6,"area":null},{"id":"2111.04727","title":"Efficiently Learning Any One Hidden Layer ReLU Network From Queries","created":"2021-11-08","cited_by_count":6,"area":null},{"id":"2210.08339","title":"Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systems","created":"2022-10-15","cited_by_count":6,"area":null},{"id":"2402.11687","title":"Evaluating Efficacy of Model Stealing Attacks and Defenses on Quantum Neural Networks","created":"2024-02-18","cited_by_count":6,"area":null},{"id":"2501.03017","title":"Convexity in ReLU Neural Networks: beyond ICNNs?","created":"2025-01-06","cited_by_count":6,"area":null},{"id":"2605.03601","title":"Most ReLU Networks Admit Identifiable Parameters","created":"2026-05-05","cited_by_count":6,"area":null},{"id":"2205.13531","title":"Learning ReLU networks to high uniform accuracy is intractable","created":"2022-05-26","cited_by_count":5,"area":null},{"id":"2210.03297","title":"Preprocessors Matter! Realistic Decision-Based Attacks on Machine Learning Systems","created":"2022-10-07","cited_by_count":5,"area":null},{"id":"2305.15912","title":"Neural Characteristic Activation Analysis and Geometric Parameterization for ReLU Networks","created":"2023-05-25","cited_by_count":5,"area":null},{"id":"2308.16703","title":"Fault Injection and Safe-Error Attack for Extraction of Embedded Neural Network Models","created":"2023-08-31","cited_by_count":5,"area":null},{"id":"2209.04022","title":"Privacy of Autonomous Vehicles: Risks, Protection Methods, and Future Directions","created":"2022-09-08","cited_by_count":4,"area":null},{"id":"2305.11417","title":"Exploring the Complexity of Deep Neural Networks through Functional Equivalence","created":"2023-05-19","cited_by_count":4,"area":null},{"id":"2311.18022","title":"Compelling ReLU Networks to Exhibit Exponentially Many Linear Regions at Initialization and During Training","created":"2023-11-29","cited_by_count":4,"area":null},{"id":"2409.11646","title":"Hard-Label Cryptanalytic Extraction of Neural Network Models","created":"2024-09-18","cited_by_count":3,"area":null},{"id":"2508.03867","title":"Constraining the outputs of ReLU neural networks","created":"2025-08-05","cited_by_count":3,"area":null},{"id":"2603.22030","title":"On the Interplay of Priors and Overparametrization in Bayesian Neural Network Posteriors","created":"2026-03-23","cited_by_count":3,"area":null},{"id":"2604.14037","title":"A Complete Symmetry Classification of Shallow ReLU Networks","created":"2026-04-15","cited_by_count":3,"area":null},{"id":"2605.18319","title":"The Symmetries of Three-Layer ReLU Networks","created":"2026-05-18","cited_by_count":3,"area":null},{"id":"2402.02407","title":"Defining Neural Network Architecture through Polytope Structures of Dataset","created":"2024-02-04","cited_by_count":2,"area":null},{"id":"2404.06104","title":"A singular Riemannian Geometry Approach to Deep Neural Networks III. Piecewise Differentiable Layers and Random Walks on $n$-dimensional Classes","created":"2024-04-09","cited_by_count":2,"area":null},{"id":"2510.06692","title":"Is the Hard-Label Cryptanalytic Model Extraction Really Polynomial?","created":"2025-10-08","cited_by_count":2,"area":null},{"id":"2103.06797","title":"BODAME: Bilevel Optimization for Defense Against Model Extraction","created":"2021-03-11","cited_by_count":1,"area":null},{"id":"2304.02972","title":"Training a Two Layer ReLU Network Analytically","created":"2023-04-06","cited_by_count":1,"area":null},{"id":"2307.00721","title":"Neural Polytopes","created":"2023-07-03","cited_by_count":1,"area":null},{"id":"2311.14005","title":"When Side-Channel Attacks Break the Black-Box Property of Embedded Artificial Intelligence","created":"2023-11-23","cited_by_count":1,"area":null},{"id":"2404.19710","title":"A rank decomposition for the topological classification of neural representations","created":"2024-04-30","cited_by_count":1,"area":null},{"id":"2410.17191","title":"On Functional Dimension and Persistent Pseudodimension","created":"2024-10-22","cited_by_count":1,"area":null},{"id":"2502.18300","title":"Bayesian Computation in Deep Learning","created":"2025-02-25","cited_by_count":1,"area":null},{"id":"2505.17092","title":"Covert Attacks on Machine Learning Training in Passively Secure MPC","created":"2025-05-21","cited_by_count":1,"area":null},{"id":"2605.06218","title":"AffineLens: Capturing the Continuous Piecewise Affine Functions of Neural Networks","created":"2026-05-07","cited_by_count":1,"area":null},{"id":"2605.06300","title":"Region Seeding via Pre-Activation Regularization: A Geometric View of Piecewise Affine Neural Networks","created":"2026-05-07","cited_by_count":1,"area":null},{"id":"2606.07728","title":"Characterizing the Discrete Geometry of ReLU Networks","created":"2026-06-05","cited_by_count":1,"area":null},{"id":"2307.10997","title":"DREAM: Domain-free Reverse Engineering Attributes of Black-box Model","created":"2023-07-20","cited_by_count":0,"area":null},{"id":"2312.04675","title":"Reverse Engineering Deep ReLU Networks An Optimization-based Algorithm","created":"2023-12-07","cited_by_count":0,"area":null},{"id":"2402.11953","title":"Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels","created":"2024-02-19","cited_by_count":0,"area":null},{"id":"2408.02814","title":"Pre-trained Encoder Inference: Revealing Upstream Encoders In Downstream Machine Learning Services","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2411.10174","title":"A Divide-and-Conquer Strategy for Hard-Label Extraction of Deep Neural Networks via Side-Channel Attacks","created":"2024-11-15","cited_by_count":0,"area":null},{"id":"2412.05842","title":"DREAM: Domain-agnostic Reverse Engineering Attributes of Black-box Model","created":"2024-12-08","cited_by_count":0,"area":null},{"id":"2412.06829","title":"Stably unactivated neurons in ReLU neural networks","created":"2024-12-06","cited_by_count":0,"area":null},{"id":"2503.12744","title":"Finite Samples for Shallow Neural Networks","created":"2025-03-17","cited_by_count":0,"area":null},{"id":"2505.01985","title":"Optimization over Trained (and Sparse) Neural Networks: A Surrogate within a Surrogate","created":"2025-05-04","cited_by_count":0,"area":null},{"id":"2509.16546","title":"Train to Defend: First Defense Against Cryptanalytic Neural Network Parameter Extraction Attacks","created":"2025-09-20","cited_by_count":0,"area":null},{"id":"2511.20312","title":"Data Augmentation Techniques to Reverse-Engineer Neural Network Weights from Input-Output Queries","created":"2025-11-25","cited_by_count":0,"area":null},{"id":"2606.21687","title":"Expressivity Saturation: Reduced Affine Region Usage Under Increasing Task Complexity","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2608.28843","title":"Curvature Cryptanalysis of Smooth Transformer Feed-Forward Networks","created":"2026-08-28","cited_by_count":0,"area":null},{"id":"2609.21941","title":"End-to-End Hard-Label Cryptanalytic Model Extraction Using Efficient Sign Recovery","created":"2026-09-18","cited_by_count":0,"area":null},{"id":"2609.34166","title":"Hidden Activations are not Enough I: Knowledge Matrices as Higher Representations","created":"2026-09-28","cited_by_count":0,"area":null}],"next_cursor":null}