{"list":"other","total":74,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1703.01365","title":"Axiomatic Attribution for Deep Networks","created":"2017-03-04","cited_by_count":3384},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1810.03292","title":"Sanity Checks for Saliency Maps","created":"2018-10-08","cited_by_count":1156},{"id":"1604.07316","title":"End to End Learning for Self-Driving Cars","created":"2016-04-25","cited_by_count":1009},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1806.07538","title":"Towards Robust Interpretability with Self-Explaining Neural Networks","created":"2018-06-20","cited_by_count":505},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1703.09039","title":"Efficient Processing of Deep Neural Networks: A Tutorial and Survey","created":"2017-03-27","cited_by_count":434},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1705.06640","title":"DeepXplore: Automated Whitebox Testing of Deep Learning Systems","created":"2017-05-18","cited_by_count":311},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"1610.06940","title":"Safety Verification of Deep Neural Networks","created":"2016-10-21","cited_by_count":263},{"id":"1708.08559","title":"DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars","created":"2017-08-28","cited_by_count":251},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"1809.08098","title":"Efficient Formal Safety Analysis of Neural Networks","created":"2018-09-19","cited_by_count":165},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"1706.07351","title":"An approach to reachability analysis for feed-forward ReLU neural networks","created":"2017-06-22","cited_by_count":127},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"1705.01040","title":"Maximum Resilience of Artificial Neural Networks","created":"2017-04-28","cited_by_count":97},{"id":"1605.07262","title":"Measuring Neural Net Robustness with Constraints","created":"2016-05-24","cited_by_count":90},{"id":"1611.03814","title":"Towards the Science of Security and Privacy in Machine Learning","created":"2016-11-11","cited_by_count":89},{"id":"1708.03322","title":"Output Reachable Set Estimation and Verification for Multi-Layer Neural Networks","created":"2017-08-09","cited_by_count":80},{"id":"1709.06662","title":"Verifying Properties of Binarized Deep Neural Networks","created":"2017-09-19","cited_by_count":79},{"id":"1711.09001","title":"Natural and Effective Obfuscation by Head Inpainting","created":"2017-11-24","cited_by_count":60},{"id":"1711.05189","title":"CryptoDL: Deep Neural Networks over Encrypted Data","created":"2017-11-14","cited_by_count":56},{"id":"1706.10268","title":"SafetyNets: Verifiable Execution of Deep Neural Networks on an Untrusted Cloud","created":"2017-06-30","cited_by_count":50},{"id":"1707.03501","title":"NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles","created":"2017-07-12","cited_by_count":48},{"id":"1808.07945","title":"Maximal Jacobian-based Saliency Map Attack","created":"2018-08-23","cited_by_count":46},{"id":"1812.11720","title":"Stealing Neural Networks via Timing Side Channels","created":"2018-12-31","cited_by_count":43},{"id":"1803.05961","title":"Chiron: Privacy-preserving Machine Learning as a Service","created":"2018-03-15","cited_by_count":40},{"id":"1905.12105","title":"Certifiably Robust Interpretation in Deep Learning","created":"2019-05-28","cited_by_count":35},{"id":"1912.00941","title":"FT-ClipAct: Resilience Analysis of Deep Neural Networks and Improving their Fault Tolerance using Clipped Activation","created":"2019-12-02","cited_by_count":31},{"id":"1803.05847","title":"I Know What You See: Power Side-Channel Attack on Convolutional Neural Network Accelerators","created":"2018-03-05","cited_by_count":27},{"id":"1802.04657","title":"Analyzing and Mitigating the Impact of Permanent Faults on a Systolic Array Based Neural Network Accelerator","created":"2018-02-11","cited_by_count":25},{"id":"1910.05340","title":"EDEN: Enabling Energy-Efficient, High-Performance Deep Neural Network Inference Using Approximate DRAM","created":"2019-10-12","cited_by_count":24},{"id":"1905.09165","title":"A framework for the extraction of Deep Neural Networks by leveraging public data","created":"2019-05-22","cited_by_count":22},{"id":"1504.02351","title":"When Face Recognition Meets with Deep Learning: an Evaluation of Convolutional Neural Networks for Face Recognition","created":"2015-04-09","cited_by_count":21},{"id":"1712.01785","title":"Towards Practical Verification of Machine Learning: The Case of Computer Vision Systems","created":"2017-12-05","cited_by_count":19},{"id":"1904.09724","title":"RowHammer: A Retrospective","created":"2019-04-22","cited_by_count":19},{"id":"1802.03806","title":"ThUnderVolt: Enabling Aggressive Voltage Underscaling and Timing Error Resilience for Energy Efficient Deep Neural Network Accelerators","created":"2018-02-11","cited_by_count":18},{"id":"1809.04913","title":"Query-Efficient Black-Box Attack by Active Learning","created":"2018-09-13","cited_by_count":15},{"id":"1508.01667","title":"Places205-VGGNet Models for Scene Recognition","created":"2015-08-07","cited_by_count":13},{"id":"1811.11373","title":"Formal Verification of CNN-based Perception Systems","created":"2018-11-28","cited_by_count":13},{"id":"1805.09944","title":"Reachability Analysis and Safety Verification for Neural Network Control Systems","created":"2018-05-25","cited_by_count":12},{"id":"1806.05768","title":"Hardware Trojan Attacks on Neural Networks","created":"2018-06-14","cited_by_count":12},{"id":"1906.03612","title":"On the Vulnerability of Capsule Networks to Adversarial Attacks","created":"2019-06-09","cited_by_count":11},{"id":"1910.13063","title":"MaskedNet: The First Hardware Inference Engine Aiming Power Side-Channel Protection","created":"2019-10-29","cited_by_count":11},{"id":"1802.03043","title":"PoTrojan: powerful neural-level trojan designs in deep learning models","created":"2018-02-08","cited_by_count":10},{"id":"1804.07870","title":"Gradient Masking Causes CLEVER to Overestimate Adversarial Perturbation Size","created":"2018-04-21","cited_by_count":9},{"id":"1810.09076","title":"CSI Neural Network: Using Side-channels to Recover Your Artificial Neural Network Information","created":"2018-10-22","cited_by_count":9},{"id":"1811.01031","title":"TrISec: Training Data-Unaware Imperceptible Security Attacks on Deep Neural Networks","created":"2018-11-02","cited_by_count":8},{"id":"1901.09878","title":"CapsAttacks: Robust and Imperceptible Adversarial Attacks on Capsule Networks","created":"2019-01-28","cited_by_count":8},{"id":"1811.01444","title":"FAdeML: Understanding the Impact of Pre-Processing Noise Filtering on Adversarial Machine Learning","created":"2018-11-04","cited_by_count":7},{"id":"1708.03309","title":"Systematic Testing of Convolutional Neural Networks for Autonomous Driving","created":"2017-08-10","cited_by_count":5},{"id":"1710.04280","title":"GeneSIS-RT: Generating Synthetic Images for training Secondary Real-world Tasks","created":"2017-10-11","cited_by_count":5},{"id":"1810.08640","title":"On Extensions of CLEVER: A Neural Network Robustness Evaluation Algorithm","created":"2018-10-19","cited_by_count":5},{"id":"1812.06161","title":"Specification-Guided Safety Verification for Feedforward Neural Networks","created":"2018-12-14","cited_by_count":4},{"id":"1905.00180","title":"Dropping Pixels for Adversarial Robustness","created":"2019-05-01","cited_by_count":4},{"id":"1812.02770","title":"TrojanZero: Switching Activity-Aware Design of Undetectable Hardware Trojans with Zero Power and Area Footprint","created":"2018-11-05","cited_by_count":1},{"id":"1901.10258","title":"RED-Attack: Resource Efficient Decision based Attack for Machine Learning","created":"2019-01-29","cited_by_count":1}],"next_cursor":null}