{"list":"other","total":57,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1705.06640","title":"DeepXplore: Automated Whitebox Testing of Deep Learning Systems","created":"2017-05-18","cited_by_count":311},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1610.06940","title":"Safety Verification of Deep Neural Networks","created":"2016-10-21","cited_by_count":263},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"1708.08559","title":"DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars","created":"2017-08-28","cited_by_count":251},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1705.01320","title":"Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks","created":"2017-05-03","cited_by_count":242},{"id":"1804.10829","title":"Formal Security Analysis of Neural Networks using Symbolic Intervals","created":"2018-04-28","cited_by_count":185},{"id":"1801.10578","title":"Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approach","created":"2018-01-31","cited_by_count":182},{"id":"1809.08098","title":"Efficient Formal Safety Analysis of Neural Networks","created":"2018-09-19","cited_by_count":165},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"1803.07519","title":"DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systems","created":"2018-03-20","cited_by_count":147},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"1803.06567","title":"A Dual Approach to Scalable Verification of Deep Networks","created":"2018-03-17","cited_by_count":125},{"id":"1808.08444","title":"Guiding Deep Learning System Testing using Surprise Adequacy","created":"2018-08-25","cited_by_count":124},{"id":"1805.02242","title":"Reachability Analysis of Deep Neural Networks with Provable Guarantees","created":"2018-05-06","cited_by_count":93},{"id":"1605.07262","title":"Measuring Neural Net Robustness with Constraints","created":"2016-05-24","cited_by_count":90},{"id":"1704.00103","title":"SafetyNet: Detecting and Rejecting Adversarial Examples Robustly","created":"2017-04-01","cited_by_count":76},{"id":"1902.04818","title":"The Odds are Odd: A Statistical Test for Detecting Adversarial Examples","created":"2019-02-13","cited_by_count":75},{"id":"1910.14574","title":"An Abstraction-Based Framework for Neural Network Verification","created":"2019-10-31","cited_by_count":68},{"id":"1805.05206","title":"DeepMutation: Mutation Testing of Deep Learning Systems","created":"2018-05-14","cited_by_count":67},{"id":"1805.00089","title":"Concolic Testing for Deep Neural Networks","created":"2018-04-30","cited_by_count":51},{"id":"1812.10812","title":"DeepBillboard: Systematic Physical-World Testing of Autonomous Driving Systems","created":"2018-12-27","cited_by_count":50},{"id":"1710.07859","title":"Feature-Guided Black-Box Safety Testing of Deep Neural Networks","created":"2017-10-21","cited_by_count":49},{"id":"1812.05793","title":"Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing","created":"2018-12-14","cited_by_count":48},{"id":"1711.08478","title":"MagNet and \"Efficient Defenses Against Adversarial Attacks\" are Not Robust to Adversarial Examples","created":"2017-11-22","cited_by_count":46},{"id":"1904.08554","title":"Gotta Catch 'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks","created":"2019-04-18","cited_by_count":40},{"id":"1803.04792","title":"Testing Deep Neural Networks","created":"2018-03-10","cited_by_count":36},{"id":"2103.07224","title":"BDD4BNN: A BDD-based Quantitative Analysis Framework for Binarized Neural Networks","created":"2021-03-12","cited_by_count":17},{"id":"2004.06954","title":"Advanced Evasion Attacks and Mitigations on Practical ML-Based Phishing Website Classifiers","created":"2020-04-15","cited_by_count":16},{"id":"2007.08520","title":"Accelerating Robustness Verification of Deep Neural Networks Guided by Target Labels","created":"2020-07-16","cited_by_count":5},{"id":"1909.03824","title":"Testing Deep Learning Models for Image Analysis Using Object-Relevant Metamorphic Relations","created":"2019-09-06","cited_by_count":3}],"next_cursor":null}