{"total":32,"rows":[{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2109.13963","title":"Smart at what cost? Characterising Mobile Deep Neural Networks in the wild","created":"2021-09-28","cited_by_count":25,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2101.04401","title":"Robustness of on-device Models: Adversarial Attack to Deep Learning Models on Android Apps","created":"2021-01-12","cited_by_count":19,"area":null},{"id":"2407.10886","title":"SLIP: Securing LLMs IP Using Weights Decomposition","created":"2024-07-15","cited_by_count":14,"area":null},{"id":"2204.11075","title":"Smart App Attack: Hacking Deep Learning Models in Android Apps","created":"2022-04-23","cited_by_count":12,"area":null},{"id":"2404.19296","title":"Octopus v4: Graph of language models","created":"2024-04-30","cited_by_count":11,"area":null},{"id":"2309.01866","title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting","created":"2023-09-05","cited_by_count":10,"area":null},{"id":"2111.03308","title":"Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective","created":"2021-11-05","cited_by_count":4,"area":null},{"id":"2302.13028","title":"A Light-weight Deep Learning Model for Remote Sensing Image Classification","created":"2023-02-25","cited_by_count":4,"area":null},{"id":"2206.07164","title":"Edge Security: Challenges and Issues","created":"2022-06-14","cited_by_count":3,"area":null},{"id":"2211.02820","title":"A Robust and Low Complexity Deep Learning Model for Remote Sensing Image Classification","created":"2022-11-05","cited_by_count":3,"area":null},{"id":"2304.03388","title":"InferNet: Exploiting Aggregate GPU Profiles as Side-Channel for DNN Architecture Inference","created":"2023-04-06","cited_by_count":3,"area":null},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2412.03824","title":"Towards Data Governance of Frontier AI Models","created":"2024-12-05","cited_by_count":3,"area":null},{"id":"2305.03963","title":"Beyond the Model: Data Pre-processing Attack to Deep Learning Models in Android Apps","created":"2023-05-06","cited_by_count":2,"area":null},{"id":"2309.03466","title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","created":"2023-09-07","cited_by_count":2,"area":null},{"id":"2403.19717","title":"A Picture is Worth 500 Labels: A Case Study of Demographic Disparities in Local Machine Learning Models for Instagram and TikTok","created":"2024-03-27","cited_by_count":2,"area":null},{"id":"2405.03974","title":"TBNet: A Neural Architectural Defense Framework Facilitating DNN Model Protection in Trusted Execution Environments","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2210.08610","title":"Robust, General, and Low Complexity Acoustic Scene Classification Systems and An Effective Visualization for Presenting a Sound Scene Context","created":"2022-10-16","cited_by_count":1,"area":null},{"id":"2212.01635","title":"An Empirical Study of AI Techniques in Mobile Applications","created":"2022-12-03","cited_by_count":1,"area":null},{"id":"2501.01263","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2503.03927","title":"\"Impressively Scary:\" Exploring User Perceptions and Reactions to Unraveling Machine Learning Models in Social Media Applications","created":"2025-03-05","cited_by_count":1,"area":null},{"id":"2506.08602","title":"WGLE:Backdoor-free and Multi-bit Black-box Watermarking for Graph Neural Networks","created":"2025-06-10","cited_by_count":1,"area":null},{"id":"2304.08411","title":"Evil from Within: Machine Learning Backdoors through Hardware Trojans","created":"2023-04-17","cited_by_count":0,"area":null},{"id":"2307.00756","title":"Towards Real Smart Apps: Investigating Human-AI Interactions in Smartphone On-Device AI Apps","created":"2023-07-03","cited_by_count":0,"area":null},{"id":"2411.03847","title":"A Novel Access Control and Privacy-Enhancing Approach for Models in Edge Computing","created":"2024-11-06","cited_by_count":0,"area":null},{"id":"2503.13224","title":"ProDiF: Protecting Domain-Invariant Features to Secure Pre-Trained Models Against Extraction","created":"2025-03-17","cited_by_count":0,"area":null},{"id":"2509.06402","title":"NeuroDeX: Unlocking Diverse Support in Decompiling Deep Neural Network Executables","created":"2025-09-08","cited_by_count":0,"area":null},{"id":"2605.13163","title":"LoREnc: Low-Rank Encryption for Securing Foundation Models and LoRA Adapters","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2607.00362","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2609.36153","title":"Privacy-Friendly Cohort Determination: Sealed, CSP-Independent In-Browser ML Inference of Professional Segments for Identity-Less Advertising","created":"2026-09-28","cited_by_count":0,"area":null}],"next_cursor":null}