{"list":"other","total":73,"rows":[{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1904.12848","title":"Unsupervised Data Augmentation for Consistency Training","created":"2019-04-29","cited_by_count":1060},{"id":"1704.03976","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","created":"2017-04-13","cited_by_count":920},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1911.11815","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","created":"2019-11-26","cited_by_count":493},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1904.05046","title":"Generalizing from a Few Examples: A Survey on Few-Shot Learning","created":"2019-04-10","cited_by_count":463},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1904.04717","title":"Label Propagation for Deep Semi-supervised Learning","created":"2019-04-09","cited_by_count":289},{"id":"1407.6981","title":"RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response","created":"2014-07-25","cited_by_count":272},{"id":"1802.08908","title":"Scalable Private Learning with PATE","created":"2018-02-24","cited_by_count":269},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1608.00853","title":"A study of the effect of JPG compression on adversarial images","created":"2016-08-02","cited_by_count":197},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"2004.07213","title":"Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claims","created":"2020-04-15","cited_by_count":165},{"id":"1906.06668","title":"Principles alone cannot guarantee ethical AI","created":"2019-06-16","cited_by_count":135},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2008.04495","title":"Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks","created":"2020-08-11","cited_by_count":94},{"id":"1611.03814","title":"Towards the Science of Security and Privacy in Machine Learning","created":"2016-11-11","cited_by_count":89},{"id":"1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","created":"2017-05-08","cited_by_count":87},{"id":"1804.11238","title":"Privacy Preserving Machine Learning: Threats and Solutions","created":"2018-03-27","cited_by_count":79},{"id":"1809.04790","title":"Adversarial Examples: Opportunities and Challenges","created":"2018-09-13","cited_by_count":63},{"id":"2002.08025","title":"Influence Function based Data Poisoning Attacks to Top-N Recommender Systems","created":"2020-02-19","cited_by_count":63},{"id":"1805.04810","title":"AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning","created":"2018-05-13","cited_by_count":60},{"id":"1812.10659","title":"Low Latency Privacy Preserving Inference","created":"2018-12-27","cited_by_count":57},{"id":"1809.04127","title":"Poisoning Attacks to Graph-Based Recommender Systems","created":"2018-09-11","cited_by_count":56},{"id":"1912.09899","title":"Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing","created":"2019-12-20","cited_by_count":54},{"id":"1711.05929","title":"Defense against Universal Adversarial Perturbations","created":"2017-11-16","cited_by_count":48},{"id":"1511.06385","title":"A Unified Gradient Regularization Family for Adversarial Examples","created":"2015-11-19","cited_by_count":43},{"id":"2101.02644","title":"Data Poisoning Attacks to Deep Learning Based Recommender Systems","created":"2021-01-07","cited_by_count":43},{"id":"1606.04435","title":"Adversarial Perturbations Against Deep Neural Networks for Malware Classification","created":"2016-06-14","cited_by_count":42},{"id":"1709.00609","title":"Security Evaluation of Pattern Classifiers under Attack","created":"2017-09-02","cited_by_count":39},{"id":"1511.06292","title":"Foveation-based Mechanisms Alleviate Adversarial Examples","created":"2015-11-19","cited_by_count":32},{"id":"2003.08861","title":"Face-Off: Adversarial Face Obfuscation","created":"2020-03-19","cited_by_count":25},{"id":"2008.04094","title":"Adversarial Examples on Object Recognition: A Comprehensive Survey","created":"2020-08-07","cited_by_count":23},{"id":"1702.06763","title":"DeepCloak: Masking Deep Neural Network Models for Robustness Against Adversarial Samples","created":"2017-02-22","cited_by_count":22},{"id":"1807.05720","title":"Governing autonomous vehicles: emerging responses for safety, liability, privacy, cybersecurity, and industry risks","created":"2018-07-16","cited_by_count":21},{"id":"1705.03387","title":"Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN","created":"2017-05-09","cited_by_count":20},{"id":"1707.01159","title":"UPSET and ANGRI : Breaking High Performance Image Classifiers","created":"2017-07-04","cited_by_count":19},{"id":"1610.03577","title":"Minimax Filter: Learning to Preserve Privacy from Inference Attacks","created":"2016-10-12","cited_by_count":16},{"id":"1711.11008","title":"Security Risks in Deep Learning Implementations","created":"2017-11-29","cited_by_count":12},{"id":"1912.02258","title":"A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks","created":"2019-12-04","cited_by_count":12},{"id":"2003.01261","title":"Adversarial Network Traffic: Towards Evaluating the Robustness of Deep Learning-Based Network Traffic Classification","created":"2020-03-03","cited_by_count":11},{"id":"1808.01753","title":"Gray-box Adversarial Training","created":"2018-08-06","cited_by_count":10},{"id":"1902.03151","title":"Discretization based Solutions for Secure Machine Learning against Adversarial Attacks","created":"2019-02-08","cited_by_count":10},{"id":"1910.14107","title":"Investigating Resistance of Deep Learning-based IDS against Adversaries using min-max Optimization","created":"2019-10-30","cited_by_count":10},{"id":"1804.10367","title":"Autonomous Vehicles for Smart and Sustainable Cities: An In-Depth Exploration of Privacy and Cybersecurity Implications","created":"2018-04-27","cited_by_count":5},{"id":"1911.12322","title":"Crypto-Oriented Neural Architecture Design","created":"2019-11-27","cited_by_count":5},{"id":"1701.04739","title":"Summoning Demons: The Pursuit of Exploitable Bugs in Machine Learning","created":"2017-01-17","cited_by_count":3},{"id":"1901.09493","title":"Strong Black-box Adversarial Attacks on Unsupervised Machine Learning Models","created":"2019-01-28","cited_by_count":2},{"id":"1704.02441","title":"Ontologies for Network Security and Future Challenges","created":"2017-04-08","cited_by_count":1},{"id":"1811.03685","title":"New CleverHans Feature: Better Adversarial Robustness Evaluations with Attack Bundling","created":"2018-11-08","cited_by_count":1},{"id":"1911.07658","title":"Hacking Neural Networks: A Short Introduction","created":"2019-11-18","cited_by_count":1}],"next_cursor":null}