{"list":"other","total":134,"rows":[{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1912.04977","title":"Advances and Open Problems in Federated Learning","created":"2019-12-10","cited_by_count":3046},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1606.03498","title":"Improved Techniques for Training GANs","created":"2016-06-10","cited_by_count":2970},{"id":"1503.03832","title":"FaceNet: A Unified Embedding for Face Recognition and Clustering","created":"2015-03-12","cited_by_count":2849},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1908.07873","title":"Federated Learning: Challenges, Methods, and Future Directions","created":"2019-08-21","cited_by_count":1538},{"id":"1610.05492","title":"Federated Learning: Strategies for Improving Communication Efficiency","created":"2016-10-18","cited_by_count":1475},{"id":"1703.06114","title":"Deep Sets","created":"2017-03-10","cited_by_count":1421},{"id":"1702.05747","title":"A Survey on Deep Learning in Medical Image Analysis","created":"2017-02-19","cited_by_count":1186},{"id":"1912.03817","title":"Machine Unlearning","created":"2019-12-09","cited_by_count":1061},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1603.04467","title":"TensorFlow: Large-Scale Machine Learning on Heterogeneous Distributed Systems","created":"2016-03-14","cited_by_count":664},{"id":"1702.07476","title":"Renyi Differential Privacy","created":"2017-02-24","cited_by_count":650},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1911.04933","title":"Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networks","created":"2019-11-12","cited_by_count":618},{"id":"1610.02527","title":"Federated Optimization: Distributed Machine Learning for On-Device Intelligence","created":"2016-10-08","cited_by_count":564},{"id":"1911.03030","title":"Certified Data Removal from Machine Learning Models","created":"2019-11-08","cited_by_count":535},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1907.05012","title":"Making AI Forget You: Data Deletion in Machine Learning","created":"2019-07-11","cited_by_count":465},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"1907.09693","title":"A Survey on Federated Learning Systems: Vision, Hype and Reality for Data Privacy and Protection","created":"2019-07-23","cited_by_count":374},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"1610.05755","title":"Semi-supervised Knowledge Transfer for Deep Learning from Private Training Data","created":"2016-10-18","cited_by_count":348},{"id":"1605.02065","title":"Concentrated Differential Privacy: Simplifications, Extensions, and Lower Bounds","created":"2016-05-06","cited_by_count":346},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"1802.08908","title":"Scalable Private Learning with PATE","created":"2018-02-24","cited_by_count":269},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"2002.10077","title":"Approximate Data Deletion from Machine Learning Models","created":"2020-02-24","cited_by_count":255},{"id":"1812.00535","title":"Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning","created":"2018-12-03","cited_by_count":246},{"id":"1911.07135","title":"The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks","created":"2019-11-17","cited_by_count":246},{"id":"1909.08072","title":"Adversarial Attacks and Defenses in Images, Graphs and Text: A Review","created":"2019-09-17","cited_by_count":237},{"id":"1808.00087","title":"Subsampled R\\'enyi Differential Privacy and Analytical Moments Accountant","created":"2018-07-31","cited_by_count":236},{"id":"1802.06739","title":"Differentially Private Generative Adversarial Network","created":"2018-02-19","cited_by_count":235},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"2005.02205","title":"When Machine Unlearning Jeopardizes Privacy","created":"2020-05-05","cited_by_count":198},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"1807.05852","title":"Machine Learning with Membership Privacy using Adversarial Regularization","created":"2018-07-16","cited_by_count":186},{"id":"2003.02960","title":"Forgetting Outside the Box: Scrubbing Deep Networks of Information Accessible from Input-Output Observations","created":"2020-03-05","cited_by_count":180},{"id":"2003.02133","title":"Threats to Federated Learning: A Survey","created":"2020-03-04","cited_by_count":178},{"id":"1711.10677","title":"Private federated learning on vertically partitioned data via entity resolution and additively homomorphic encryption","created":"2017-11-29","cited_by_count":176},{"id":"1901.08755","title":"SecureBoost: A Lossless Federated Learning Framework","created":"2019-01-25","cited_by_count":176},{"id":"1906.11798","title":"Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference","created":"2019-06-27","cited_by_count":175},{"id":"1709.07886","title":"Machine Learning Models that Remember Too Much","created":"2017-09-22","cited_by_count":169},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"2012.13431","title":"Mixed-Privacy Forgetting in Deep Networks","created":"2020-12-24","cited_by_count":163},{"id":"1704.03578","title":"A Survey on Homomorphic Encryption Schemes: Theory and Implementation","created":"2017-04-12","cited_by_count":156},{"id":"1706.02409","title":"A Convex Framework for Fair Regression","created":"2017-06-07","cited_by_count":148},{"id":"2007.07646","title":"A Survey of Privacy Attacks in Machine Learning","created":"2020-07-15","cited_by_count":146},{"id":"1511.06807","title":"Adding Gradient Noise Improves Learning for Very Deep Networks","created":"2015-11-21","cited_by_count":145},{"id":"1603.01887","title":"Concentrated Differential Privacy","created":"2016-03-06","cited_by_count":144},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"1910.12366","title":"Thieves on Sesame Street! Model Extraction of BERT-based APIs","created":"2019-10-27","cited_by_count":139},{"id":"1306.4447","title":"Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifiers","created":"2013-06-19","cited_by_count":130},{"id":"1802.05251","title":"Differentially Private Empirical Risk Minimization Revisited: Faster and More General","created":"2018-02-14","cited_by_count":128},{"id":"1904.01067","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","created":"2019-04-01","cited_by_count":122},{"id":"1906.03006","title":"Reconstruction and Membership Inference Attacks against Generative Models","created":"2019-06-07","cited_by_count":122},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2002.02730","title":"Machine Unlearning: Linear Filtration for Logit-based Classifiers","created":"2020-02-07","cited_by_count":95},{"id":"1802.04889","title":"Understanding Membership Inferences on Well-Generalized Learning Models","created":"2018-02-13","cited_by_count":90},{"id":"1807.05185","title":"Model Reconstruction from Model Explanations","created":"2018-07-13","cited_by_count":86},{"id":"1811.02054","title":"Exploring Connections Between Active Learning and Model Extraction","created":"2018-11-05","cited_by_count":85},{"id":"2006.15081","title":"On the Generalization Benefit of Noise in Stochastic Gradient Descent","created":"2020-06-26","cited_by_count":82},{"id":"1901.09888","title":"Federated Collaborative Filtering for Privacy-Preserving Personalized Recommendation System","created":"2019-01-29","cited_by_count":79},{"id":"1905.11742","title":"Overlearning Reveals Sensitive Attributes","created":"2019-05-28","cited_by_count":76},{"id":"1904.02200","title":"Differentially Private Model Publishing for Deep Learning","created":"2019-04-03","cited_by_count":71},{"id":"1904.05506","title":"Membership Inference Attacks on Sequence-to-Sequence Models: Is My Data In Your Machine Translation System?","created":"2019-04-11","cited_by_count":71},{"id":"1708.06145","title":"Knock Knock, Who's There? Membership Inference on Aggregate Location Data","created":"2017-08-21","cited_by_count":70},{"id":"1806.05476","title":"Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data","created":"2018-06-14","cited_by_count":70},{"id":"2011.11819","title":"When Machine Learning Meets Privacy: A Survey and Outlook","created":"2020-11-24","cited_by_count":68},{"id":"1412.7584","title":"Differential Privacy and Machine Learning: a Survey and Review","created":"2014-12-24","cited_by_count":67},{"id":"2008.09161","title":"NoPeek: Information leakage reduction to share activations in distributed deep learning","created":"2020-08-20","cited_by_count":66},{"id":"1710.06169","title":"Distill-and-Compare: Auditing Black-Box Models Using Transparent Model Distillation","created":"2017-10-17","cited_by_count":62},{"id":"1805.04810","title":"AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning","created":"2018-05-13","cited_by_count":60},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60},{"id":"1807.04644","title":"Algorithms that Remember: Model Inversion Attacks and Data Protection Law","created":"2018-07-12","cited_by_count":55},{"id":"1806.00550","title":"A Swiss Army Infinitesimal Jackknife","created":"2018-06-01","cited_by_count":54},{"id":"2002.10635","title":"Formalizing Data Deletion in the Context of the Right to be Forgotten","created":"2020-02-25","cited_by_count":50},{"id":"2003.04247","title":"Towards Probabilistic Verification of Machine Unlearning","created":"2020-03-09","cited_by_count":50},{"id":"1701.07953","title":"The Price of Differential Privacy For Online Learning","created":"2017-01-27","cited_by_count":45},{"id":"2005.08679","title":"An Overview of Privacy in Machine Learning","created":"2020-05-18","cited_by_count":39},{"id":"1710.06963","title":"Learning Differentially Private Recurrent Language Models","created":"2017-10-18","cited_by_count":36},{"id":"2005.03915","title":"Defending Model Inversion and Membership Inference Attacks via Prediction Purification","created":"2020-05-08","cited_by_count":34},{"id":"1808.09501","title":"Concentrated Differentially Private Gradient Descent with Adaptive per-Iteration Privacy Budget","created":"2018-08-28","cited_by_count":32},{"id":"1912.09685","title":"Segmentations-Leak: Membership Inference Attacks and Defenses in Semantic Image Segmentation","created":"2019-12-20","cited_by_count":32}],"next_cursor":"100"}