{"list":"other","total":60,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1705.07874","title":"A Unified Approach to Interpreting Model Predictions","created":"2017-05-22","cited_by_count":6555},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1602.04938","title":"\"Why Should I Trust You?\": Explaining the Predictions of Any Classifier","created":"2016-02-16","cited_by_count":5070},{"id":"1708.07747","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","created":"2017-08-25","cited_by_count":4349},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1704.03976","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","created":"2017-04-13","cited_by_count":920},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1804.03209","title":"Speech Commands: A Dataset for Limited-Vocabulary Speech Recognition","created":"2018-04-09","cited_by_count":752},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1303.5778","title":"Speech Recognition with Deep Recurrent Neural Networks","created":"2013-03-22","cited_by_count":669},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1512.02595","title":"Deep Speech 2: End-to-End Speech Recognition in English and Mandarin","created":"2015-12-08","cited_by_count":451},{"id":"1412.5567","title":"Deep Speech: Scaling up end-to-end speech recognition","created":"2014-12-17","cited_by_count":354},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"1810.12715","title":"On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models","created":"2018-10-30","cited_by_count":328},{"id":"1312.4659","title":"DeepPose: Human Pose Estimation via Deep Neural Networks","created":"2013-12-17","cited_by_count":305},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1606.00704","title":"Adversarially Learned Inference","created":"2016-06-02","cited_by_count":216},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"1807.05852","title":"Machine Learning with Membership Privacy using Adversarial Regularization","created":"2018-07-16","cited_by_count":186},{"id":"1709.07886","title":"Machine Learning Models that Remember Too Much","created":"2017-09-22","cited_by_count":169},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"2002.12200","title":"Entangled Watermarks as a Defense against Model Extraction","created":"2020-02-27","cited_by_count":149},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"1306.4447","title":"Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifiers","created":"2013-06-19","cited_by_count":130},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2006.08265","title":"GS-WGAN: A Gradient-Sanitized Approach for Learning Differentially Private Generators","created":"2020-06-15","cited_by_count":117},{"id":"1906.00830","title":"DAWN: Dynamic Adversarial Watermarking of Neural Networks","created":"2019-06-03","cited_by_count":100},{"id":"1902.01889","title":"Analyzing and Improving Representations with the Soft Nearest Neighbor Loss","created":"2019-02-05","cited_by_count":95},{"id":"1510.00726","title":"A Primer on Neural Network Models for Natural Language Processing","created":"2015-10-02","cited_by_count":76},{"id":"1708.06145","title":"Knock Knock, Who's There? Membership Inference on Aggregate Location Data","created":"2017-08-21","cited_by_count":70},{"id":"1801.03239","title":"Chameleon: A Hybrid Secure Computation Framework for Machine Learning Applications","created":"2018-01-10","cited_by_count":67},{"id":"1805.04810","title":"AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning","created":"2018-05-13","cited_by_count":60},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60},{"id":"1802.09653","title":"On the Suitability of $L_p$-norms for Creating and Preventing Adversarial Examples","created":"2018-02-27","cited_by_count":58},{"id":"1806.03281","title":"Blind Justice: Fairness with Encrypted Sensitive Attributes","created":"2018-06-08","cited_by_count":41},{"id":"1907.03372","title":"QUOTIENT: Two-Party Secure Neural Network Training and Prediction","created":"2019-07-08","cited_by_count":41},{"id":"1802.02601","title":"Digital Watermarking for Deep Neural Networks","created":"2018-02-06","cited_by_count":39},{"id":"1606.05893","title":"You are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors","created":"2016-06-19","cited_by_count":34},{"id":"1902.08552","title":"Adversarial Neural Network Inversion via Auxiliary Knowledge Alignment","created":"2019-02-22","cited_by_count":32},{"id":"1808.04218","title":"Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection","created":"2018-08-10","cited_by_count":19},{"id":"1910.05429","title":"Extraction of Complex DNN Models: Real Threat or Boogeyman?","created":"2019-10-11","cited_by_count":19},{"id":"1806.03461","title":"TAPAS: Tricks to Accelerate (encrypted) Prediction As a Service","created":"2018-06-09","cited_by_count":14},{"id":"1907.10218","title":"Boosting Privately: Privacy-Preserving Federated Extreme Boosting for Mobile Crowdsensing","created":"2019-07-24","cited_by_count":11},{"id":"1903.10484","title":"Exploiting Excessive Invariance caused by Norm-Bounded Adversarial Robustness","created":"2019-03-25","cited_by_count":9},{"id":"2102.07969","title":"Machine Learning Based Cyber Attacks Targeting on Controlled Information: A Survey","created":"2021-02-16","cited_by_count":5},{"id":"1502.03182","title":"PowerSpy: Location Tracking using Mobile Device Power Analysis","created":"2015-02-11","cited_by_count":3},{"id":"1705.05030","title":"Information Leakage Games","created":"2017-05-14","cited_by_count":2},{"id":"1702.02382","title":"An Adversarial Regularisation for Semi-Supervised Training of Structured Output Neural Networks","created":"2017-02-08","cited_by_count":1}],"next_cursor":null}