{"list":"other","total":73,"rows":[{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1610.05492","title":"Federated Learning: Strategies for Improving Communication Efficiency","created":"2016-10-18","cited_by_count":1475},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1902.01046","title":"Towards Federated Learning at Scale: System Design","created":"2019-02-04","cited_by_count":832},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1610.02527","title":"Federated Optimization: Distributed Machine Learning for On-Device Intelligence","created":"2016-10-08","cited_by_count":564},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1312.6184","title":"Do Deep Nets Really Need to be Deep?","created":"2013-12-21","cited_by_count":474},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1801.01944","title":"Audio Adversarial Examples: Targeted Attacks on Speech-to-Text","created":"2018-01-05","cited_by_count":274},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1804.00308","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","created":"2018-04-01","cited_by_count":225},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"1704.03453","title":"The Space of Transferable Adversarial Examples","created":"2017-04-11","cited_by_count":158},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"1412.5068","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","created":"2014-12-11","cited_by_count":146},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"1608.08182","title":"Data Poisoning Attacks on Factorization-Based Collaborative Filtering","created":"2016-08-29","cited_by_count":83},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"1702.05983","title":"Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN","created":"2017-02-20","cited_by_count":75},{"id":"1809.04790","title":"Adversarial Examples: Opportunities and Challenges","created":"2018-09-13","cited_by_count":63},{"id":"1703.09387","title":"Adversarial Transformation Networks: Learning to Generate Adversarial Examples","created":"2017-03-28","cited_by_count":62},{"id":"1709.05583","title":"Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification","created":"2017-09-17","cited_by_count":56},{"id":"1711.05189","title":"CryptoDL: Deep Neural Networks over Encrypted Data","created":"2017-11-14","cited_by_count":56},{"id":"1707.02812","title":"Towards Crafting Text Adversarial Samples","created":"2017-07-10","cited_by_count":55},{"id":"1703.01340","title":"Generative Poisoning Attack Method Against Neural Networks","created":"2017-03-03","cited_by_count":52},{"id":"1606.04435","title":"Adversarial Perturbations Against Deep Neural Networks for Malware Classification","created":"2016-06-14","cited_by_count":42},{"id":"1709.00609","title":"Security Evaluation of Pattern Classifiers under Attack","created":"2017-09-02","cited_by_count":39},{"id":"1810.11580","title":"Attacks Meet Interpretability: Attribute-steered Detection of Adversarial Samples","created":"2018-10-27","cited_by_count":38},{"id":"1911.05268","title":"Adversarial Examples in Modern Machine Learning: A Review","created":"2019-11-13","cited_by_count":36},{"id":"1706.04701","title":"Adversarial Example Defenses: Ensembles of Weak Defenses are not Strong","created":"2017-06-15","cited_by_count":32},{"id":"1709.03423","title":"Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks","created":"2017-09-11","cited_by_count":31},{"id":"1702.06856","title":"Robustness to Adversarial Examples through an Ensemble of Specialists","created":"2017-02-22","cited_by_count":21},{"id":"1707.01159","title":"UPSET and ANGRI : Breaking High Performance Image Classifiers","created":"2017-07-04","cited_by_count":19},{"id":"1708.06939","title":"Is Deep Learning Safe for Robot Vision? Adversarial Examples against the iCub Humanoid","created":"2017-08-23","cited_by_count":19},{"id":"1807.11655","title":"Security and Privacy Issues in Deep Learning","created":"2018-07-31","cited_by_count":19},{"id":"1809.04913","title":"Query-Efficient Black-Box Attack by Active Learning","created":"2018-09-13","cited_by_count":15},{"id":"1412.6181","title":"Crypto-Nets: Neural Networks over Encrypted Data","created":"2014-12-18","cited_by_count":10},{"id":"1508.06574","title":"A review of homomorphic encryption and software tools for encrypted statistical machine learning","created":"2015-08-26","cited_by_count":9},{"id":"1705.07535","title":"Evading Classifiers by Morphing in the Dark","created":"2017-05-22","cited_by_count":9},{"id":"1905.09162","title":"Biometric Backdoors: A Poisoning Attack Against Unsupervised Template Updating","created":"2019-05-22","cited_by_count":9},{"id":"1401.7727","title":"Security Evaluation of Support Vector Machines in Adversarial Environments","created":"2014-01-30","cited_by_count":8},{"id":"1705.10686","title":"Feature Squeezing Mitigates and Detects Carlini/Wagner Adversarial Examples","created":"2017-05-30","cited_by_count":3},{"id":"1810.07339","title":"Security Matters: A Survey on Adversarial Machine Learning","created":"2018-10-16","cited_by_count":3}],"next_cursor":null}