{"total":61,"rows":[{"id":"2102.04906","title":"Dynamic Neural Networks: A Survey","created":"2021-02-09","cited_by_count":408,"area":null},{"id":"2502.02542","title":"OverThink: Slowdown Attacks on Reasoning LLMs","created":"2025-02-04","cited_by_count":96,"area":"lr"},{"id":"2106.05022","title":"Adaptive Inference through Early-Exit Networks: Design, Challenges and Directions","created":"2021-06-09","cited_by_count":75,"area":"inference"},{"id":"2401.11170","title":"Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images","created":"2024-01-20","cited_by_count":69,"area":"mllm"},{"id":"2109.08266","title":"Hard to Forget: Poisoning Attacks on Certified Machine Unlearning","created":"2021-09-17","cited_by_count":52,"area":"safety"},{"id":"2203.15859","title":"NICGSlowDown: Evaluating the Efficiency Robustness of Neural Image Caption Generation Models","created":"2022-03-29","cited_by_count":50,"area":null},{"id":"2205.13618","title":"Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors","created":"2022-05-26","cited_by_count":28,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2302.06359","title":"Fixing Overconfidence in Dynamic Neural Networks","created":"2023-02-13","cited_by_count":19,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17,"area":null},{"id":"2405.05990","title":"Special Characters Attack: Toward Scalable Training Data Extraction From Large Language Models","created":"2024-05-09","cited_by_count":17,"area":null},{"id":"2210.03696","title":"LLMEffiChecker: Understanding and Testing Efficiency Degradation of Large Language Models","created":"2022-10-07","cited_by_count":16,"area":null},{"id":"2410.04960","title":"On Efficient Variants of Segment Anything Model: A Survey","created":"2024-10-07","cited_by_count":16,"area":null},{"id":"2312.09520","title":"SlowTrack: Increasing the Latency of Camera-based Perception in Autonomous Driving Using Adversarial Examples","created":"2023-12-15","cited_by_count":15,"area":null},{"id":"2305.12228","title":"Dynamic Transformers Provide a False Sense of Efficiency","created":"2023-05-20","cited_by_count":14,"area":"inference"},{"id":"2404.16557","title":"Energy-Latency Manipulation of Multi-modal Large Language Models via Verbose Samples","created":"2024-04-25","cited_by_count":14,"area":"mllm"},{"id":"2304.05370","title":"Overload: Latency Attacks on Object Detection for Edge Devices","created":"2023-04-11","cited_by_count":13,"area":null},{"id":"2305.08840","title":"Attacking Perceptual Similarity Metrics","created":"2023-05-15","cited_by_count":10,"area":null},{"id":"2506.14493","title":"LingoLoop Attack: Trapping MLLMs via Linguistic Context and State Entrapment into Endless Loops","created":"2025-06-17","cited_by_count":9,"area":"mllm"},{"id":"2304.06724","title":"GradMDM: Adversarial Attack on Dynamic Networks","created":"2023-04-01","cited_by_count":8,"area":null},{"id":"2402.07039","title":"Coordinated Flaw Disclosure for AI: Beyond Security Vulnerabilities","created":"2024-02-10","cited_by_count":8,"area":null},{"id":"2403.18587","title":"The Impact of Uniform Inputs on Activation Sparsity and Energy-Latency Attacks in Computer Vision","created":"2024-03-27","cited_by_count":7,"area":null},{"id":"2511.22147","title":"RemedyGS: Defend 3D Gaussian Splatting against Computation Cost Attacks","created":"2025-11-27","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2202.06084","title":"EREBA: Black-box Energy Testing of Adaptive Neural Networks","created":"2022-02-12","cited_by_count":5,"area":null},{"id":"2210.08159","title":"Dynamics-aware Adversarial Attack of Adaptive Neural Networks","created":"2022-10-15","cited_by_count":5,"area":null},{"id":"2503.04963","title":"Energy-Latency Attacks: A New Adversarial Threat to Deep Learning","created":"2025-03-06","cited_by_count":5,"area":null},{"id":"2110.03175","title":"Fingerprinting Multi-exit Deep Neural Network Models via Inference Time","created":"2021-10-07","cited_by_count":4,"area":null},{"id":"2212.01562","title":"Understanding the Robustness of Multi-Exit Models under Common Corruptions","created":"2022-12-03","cited_by_count":4,"area":"inference"},{"id":"2306.03430","title":"Revisiting the Trade-off between Accuracy and Robustness via Weight Distribution of Filters","created":"2023-06-06","cited_by_count":4,"area":null},{"id":"2310.19152","title":"BERT Lost Patience Won't Be Robust to Adversarial Slowdown","created":"2023-10-29","cited_by_count":4,"area":null},{"id":"2403.17726","title":"Tiny Models are the Computational Saver for Large Models","created":"2024-03-26","cited_by_count":4,"area":"inference"},{"id":"2310.02544","title":"SlowFormer: Universal Adversarial Patch for Attack on Compute and Energy Efficiency of Inference Efficient Vision Transformers","created":"2023-10-04","cited_by_count":3,"area":null},{"id":"2311.00428","title":"NEO-KD: Knowledge-Distillation-Based Adversarial Training for Robust Multi-Exit Neural Networks","created":"2023-11-01","cited_by_count":3,"area":"distill"},{"id":"2403.01695","title":"DyCE: Dynamically Configurable Exiting for Deep Learning Compression and Real-time Scaling","created":"2024-03-04","cited_by_count":3,"area":null},{"id":"2601.20615","title":"DRAINCODE: Stealthy Energy Consumption Attacks on Retrieval-Augmented Code Generation via Context Poisoning","created":"2026-01-28","cited_by_count":3,"area":"rag"},{"id":"2309.05686","title":"Temporal Patience: Efficient Adaptive Deep Learning for Embedded Radar Data Processing","created":"2023-09-11","cited_by_count":2,"area":null},{"id":"2309.17401","title":"Adversarial Attacks to Latent Representations of Distributed Neural Networks in Split Computing","created":"2023-09-29","cited_by_count":2,"area":null},{"id":"2312.02220","title":"QuantAttack: Exploiting Dynamic Quantization to Attack Vision Transformers","created":"2023-12-03","cited_by_count":2,"area":null},{"id":"2402.02554","title":"DeSparsify: Adversarial Attack Against Token Sparsification Mechanisms in Vision Transformers","created":"2024-02-04","cited_by_count":2,"area":null},{"id":"2505.16670","title":"BitHydra: Towards Bit-flip Inference Cost Attack against Large Language Models","created":"2025-05-22","cited_by_count":2,"area":null},{"id":"2507.18053","title":"Resource Consumption Red-Teaming for Large Vision-Language Models","created":"2025-07-24","cited_by_count":2,"area":"mllm"},{"id":"2603.16068","title":"Resource Consumption Threats in Large Language Models","created":"2026-03-17","cited_by_count":2,"area":null},{"id":"2312.09494","title":"No-Skim: Towards Efficiency Robustness Evaluation on Skimming-based Language Models","created":"2023-12-15","cited_by_count":1,"area":null},{"id":"2403.00942","title":"Resilience of Entropy Model in Distributed Neural Networks","created":"2024-03-01","cited_by_count":1,"area":null},{"id":"2506.10831","title":"Efficiency Robustness of Dynamic Deep Learning Systems","created":"2025-06-12","cited_by_count":1,"area":null},{"id":"2506.17621","title":"Exploiting Efficiency Vulnerabilities in Dynamic Deep Learning Systems","created":"2025-06-21","cited_by_count":1,"area":null},{"id":"2608.05217","title":"A Survey of Adversarial Efficiency Degradation for Vision Transformer by Exploiting Input-adaptive Optimization","created":"2026-08-05","cited_by_count":1,"area":"inference"},{"id":"2210.08956","title":"A Novel Membership Inference Attack against Dynamic Neural Networks by Utilizing Policy Networks Information","created":"2022-10-17","cited_by_count":0,"area":"safety"},{"id":"2305.09179","title":"Ortho-ODE: Enhancing Robustness and of Neural ODEs against Adversarial Attacks","created":"2023-05-16","cited_by_count":0,"area":null},{"id":"2505.03850","title":"Impact Analysis of Inference Time Attack of Perception Sensors on Autonomous Vehicles","created":"2025-05-05","cited_by_count":0,"area":null},{"id":"2505.04850","title":"ORXE: Orchestrating Experts for Dynamically Configurable Efficiency","created":"2025-05-07","cited_by_count":0,"area":null},{"id":"2509.03379","title":"TinyDrop: Tiny Model Guided Token Dropping for Vision Transformers","created":"2025-09-03","cited_by_count":0,"area":"inference"},{"id":"2511.16163","title":"An Image Is Worth Ten Thousand Words: Verbose-Text Induction Attacks on VLMs","created":"2025-11-20","cited_by_count":0,"area":"mllm"},{"id":"2602.17778","title":"Asking Forever: Universal Activations Behind Turn Amplification in Conversational LLMs","created":"2026-02-19","cited_by_count":0,"area":null},{"id":"2605.10987","title":"AESOP: Adversarial Execution-path Selection to Overload Deep Learning Pipelines","created":"2026-05-09","cited_by_count":0,"area":null},{"id":"2607.27990","title":"Driving up Inference Energy on SNNs: Per-Sample and Universal Sponge Attacks","created":"2026-07-30","cited_by_count":0,"area":null},{"id":"2608.04680","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2609.38802","title":"Uncovering Uncontrolled Repetition through Residual Stream Dynamics","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}