{"list":"other","total":72,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1502.03167","title":"Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift","created":"2015-02-11","cited_by_count":7005},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1803.08494","title":"Group Normalization","created":"2018-03-22","cited_by_count":1524},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"1610.05492","title":"Federated Learning: Strategies for Improving Communication Efficiency","created":"2016-10-18","cited_by_count":1475},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"1801.02613","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","created":"2018-01-08","cited_by_count":282},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130},{"id":"2002.05646","title":"Adversarial Machine Learning -- Industry Perspectives","created":"2020-02-04","cited_by_count":122},{"id":"2004.00225","title":"MetaPoison: Practical General-purpose Clean-label Data Poisoning","created":"2020-04-01","cited_by_count":120},{"id":"1708.05024","title":"Fast Matrix Factorization for Online Recommendation with Implicit Feedback","created":"2017-08-16","cited_by_count":101},{"id":"2002.08619","title":"Boosting Adversarial Training with Hypersphere Embedding","created":"2020-02-20","cited_by_count":97},{"id":"1804.07933","title":"Is feature selection secure against training data poisoning?","created":"2018-04-21","cited_by_count":93},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90},{"id":"2105.10123","title":"Backdoor Attacks on Self-Supervised Learning","created":"2021-05-21","cited_by_count":90},{"id":"1608.08182","title":"Data Poisoning Attacks on Factorization-Based Collaborative Filtering","created":"2016-08-29","cited_by_count":83},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"2104.09667","title":"Manipulating SGD with Data Ordering Attacks","created":"2021-04-19","cited_by_count":74},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73},{"id":"2005.00191","title":"Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability","created":"2020-05-01","cited_by_count":66},{"id":"1810.12188","title":"Adversarial Attacks on Stochastic Bandits","created":"2018-10-29","cited_by_count":57},{"id":"2008.01761","title":"Can Adversarial Weight Perturbations Inject Neural Backdoors?","created":"2020-08-04","cited_by_count":56},{"id":"1905.06494","title":"Data Poisoning Attacks on Stochastic Bandits","created":"2019-05-16","cited_by_count":53},{"id":"2104.05808","title":"A Backdoor Attack against 3D Point Cloud Classifiers","created":"2021-04-12","cited_by_count":53},{"id":"1802.03041","title":"Detection of Adversarial Training Examples in Poisoning Attacks through Anomaly Detection","created":"2018-02-08","cited_by_count":46},{"id":"2104.03674","title":"Explainability-based Backdoor Attacks Against Graph Neural Networks","created":"2021-04-08","cited_by_count":42},{"id":"2103.16074","title":"PointBA: Towards Backdoor Attacks in 3D Point Cloud","created":"2021-03-30","cited_by_count":35},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33},{"id":"1808.08994","title":"Data Poisoning Attacks against Online Learning","created":"2018-08-27","cited_by_count":27},{"id":"2010.03007","title":"BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models","created":"2020-10-06","cited_by_count":25},{"id":"1808.05760","title":"Data Poisoning Attacks in Contextual Bandits","created":"2018-08-17","cited_by_count":23},{"id":"2104.07395","title":"Robust Backdoor Attacks against Deep Neural Networks in Real Physical World","created":"2021-04-15","cited_by_count":20},{"id":"2010.03282","title":"Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networks","created":"2020-10-07","cited_by_count":19},{"id":"2009.05474","title":"A black-box adversarial attack for poisoning clustering","created":"2020-09-09","cited_by_count":16},{"id":"1912.11852","title":"Benchmarking Adversarial Robustness","created":"2019-12-26","cited_by_count":15},{"id":"2010.09080","title":"Poisoned classifiers are not only backdoored, they are fundamentally broken","created":"2020-10-18","cited_by_count":15},{"id":"2012.01274","title":"How Robust are Randomized Smoothing based Defenses to Data Poisoning?","created":"2020-12-02","cited_by_count":15},{"id":"2011.00101","title":"EEG-Based Brain-Computer Interfaces Are Vulnerable to Backdoor Attacks","created":"2020-10-30","cited_by_count":13},{"id":"2103.10274","title":"TOP: Backdoor Detection in Neural Networks via Transferability of Perturbation","created":"2021-03-18","cited_by_count":13},{"id":"2105.08709","title":"Learning and Certification under Instance-targeted Poisoning","created":"2021-05-18","cited_by_count":13},{"id":"1810.06175","title":"An Optimal Control Approach to Sequential Machine Teaching","created":"2018-10-15","cited_by_count":11},{"id":"2105.10948","title":"Regularization Can Help Mitigate Poisoning Attacks... with the Right Hyperparameters","created":"2021-05-23","cited_by_count":8},{"id":"2009.14455","title":"Uncertainty-Matching Graph Neural Networks to Defend Against Poisoning Attacks","created":"2020-09-30","cited_by_count":7},{"id":"2105.04839","title":"Poisoning MorphNet for Clean-Label Backdoor Attack to Point Clouds","created":"2021-05-11","cited_by_count":7},{"id":"2105.10051","title":"Preventing Machine Learning Poisoning Attacks Using Authentication and Provenance","created":"2021-05-20","cited_by_count":5},{"id":"2012.07474","title":"HaS-Nets: A Heal and Select Mechanism to Defend DNNs Against Backdoor Attacks for Data Collection Scenarios","created":"2020-12-14","cited_by_count":4},{"id":"1902.00202","title":"Optimal Attack against Autoregressive Models by Manipulating the Environment","created":"2019-02-01","cited_by_count":3},{"id":"2104.13230","title":"Influence Based Defense Against Data Poisoning Attacks in Online Learning","created":"2021-04-24","cited_by_count":2}],"next_cursor":null}