{"list":"other","total":51,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1611.05431","title":"Aggregated Residual Transformations for Deep Neural Networks","created":"2016-11-16","cited_by_count":2546},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1806.09055","title":"DARTS: Differentiable Architecture Search","created":"2018-06-24","cited_by_count":1798},{"id":"1611.01578","title":"Neural Architecture Search with Reinforcement Learning","created":"2016-11-05","cited_by_count":1499},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1707.07012","title":"Learning Transferable Architectures for Scalable Image Recognition","created":"2017-07-21","cited_by_count":1101},{"id":"1807.11626","title":"MnasNet: Platform-Aware Neural Architecture Search for Mobile","created":"2018-07-31","cited_by_count":943},{"id":"1802.01548","title":"Regularized Evolution for Image Classifier Architecture Search","created":"2018-02-05","cited_by_count":909},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1907.05737","title":"PC-DARTS: Partial Channel Connections for Memory-Efficient Architecture Search","created":"2019-07-12","cited_by_count":265},{"id":"1910.04465","title":"Searching for A Robust Neural Architecture in Four GPU Hours","created":"2019-10-10","cited_by_count":260},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1610.02915","title":"Deep Pyramidal Residual Networks","created":"2016-10-10","cited_by_count":163},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1808.01688","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","created":"2018-08-05","cited_by_count":135},{"id":"1906.06919","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","created":"2019-06-17","cited_by_count":121},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"2012.03528","title":"Backpropagating Linearly Improves Transferability of Adversarial Examples","created":"2020-12-07","cited_by_count":79},{"id":"1901.01677","title":"Image Super-Resolution as a Defense Against Adversarial Attacks","created":"2019-01-07","cited_by_count":65},{"id":"2003.12703","title":"DaST: Data-free Substitute Training for Adversarial Attacks","created":"2020-03-28","cited_by_count":60},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47},{"id":"2001.06325","title":"Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet","created":"2020-01-16","cited_by_count":45},{"id":"1703.02628","title":"Global optimization of Lipschitz functions","created":"2017-03-07","cited_by_count":39},{"id":"1906.04392","title":"Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks","created":"2019-06-11","cited_by_count":35},{"id":"1906.02398","title":"Query-efficient Meta Attack to Deep Neural Networks","created":"2019-06-06","cited_by_count":33},{"id":"2010.11742","title":"Learning Black-Box Attackers with Transferable Priors and Query Feedback","created":"2020-10-21","cited_by_count":32},{"id":"2005.03837","title":"Projection & Probability-Driven Black-Box Attack","created":"2020-05-08","cited_by_count":19},{"id":"1909.13857","title":"Black-box Adversarial Attacks with Bayesian Optimization","created":"2019-09-30","cited_by_count":13},{"id":"2008.06822","title":"Relevance Attack on Detectors","created":"2020-08-16","cited_by_count":8},{"id":"2007.10593","title":"Towards Visual Distortion in Black-Box Attacks","created":"2020-07-21","cited_by_count":6},{"id":"2009.08110","title":"Online Alternate Generator against Adversarial Attacks","created":"2020-09-17","cited_by_count":2}],"next_cursor":null}