{"list":"other","total":51,"rows":[{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"2007.00644","title":"Measuring Robustness to Natural Distribution Shifts in Image Classification","created":"2020-07-01","cited_by_count":454},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"2007.05084","title":"Attack of the Tails: Yes, You Really Can Backdoor Federated Learning","created":"2020-07-09","cited_by_count":309},{"id":"2006.04152","title":"BERT Loses Patience: Fast and Robust Inference with Early Exit","created":"2020-06-07","cited_by_count":273},{"id":"2003.08938","title":"Robust Deep Reinforcement Learning against Adversarial Perturbations on State Observations","created":"2020-03-19","cited_by_count":238},{"id":"2006.13009","title":"Iterative Deep Graph Learning for Graph Neural Networks: Better and Robust Node Embeddings","created":"2020-06-21","cited_by_count":214},{"id":"2006.08149","title":"GNNGuard: Defending Graph Neural Networks against Adversarial Attacks","created":"2020-06-15","cited_by_count":195},{"id":"2010.13337","title":"Robust Pre-Training by Adversarial Contrastive Learning","created":"2020-10-26","cited_by_count":144},{"id":"2004.00225","title":"MetaPoison: Practical General-purpose Clean-label Data Poisoning","created":"2020-04-01","cited_by_count":120},{"id":"2006.08907","title":"Robust Federated Learning: The Case of Affine Distribution Shifts","created":"2020-06-16","cited_by_count":102},{"id":"2006.05057","title":"Towards More Practical Adversarial Attacks on Graph Neural Networks","created":"2020-06-09","cited_by_count":76},{"id":"2009.14720","title":"DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles","created":"2020-09-30","cited_by_count":73},{"id":"2010.11443","title":"Optimal Robustness-Consistency Trade-offs for Learning-Augmented Online Algorithms","created":"2020-10-22","cited_by_count":64},{"id":"1805.04810","title":"AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning","created":"2018-05-13","cited_by_count":60},{"id":"2006.08403","title":"On the Loss Landscape of Adversarial Training: Identifying Challenges and How to Overcome Them","created":"2020-06-15","cited_by_count":59},{"id":"2004.14861","title":"Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability","created":"2020-04-29","cited_by_count":57},{"id":"2005.01095","title":"A Causal View on Robustness of Neural Networks","created":"2020-05-03","cited_by_count":53},{"id":"2002.04359","title":"Robustness of Bayesian Neural Networks to Gradient-Based Attacks","created":"2020-02-11","cited_by_count":48},{"id":"2007.15839","title":"Robust and Heavy-Tailed Mean Estimation Made Simple, via Regret Minimization","created":"2020-07-31","cited_by_count":44},{"id":"2010.15651","title":"Reliable Graph Neural Networks via Robust Aggregation","created":"2020-10-29","cited_by_count":43},{"id":"1910.06144","title":"What does it mean to solve the problem of discrimination in hiring? Social, technical and legal perspectives from the UK on automated hiring systems","created":"2019-09-28","cited_by_count":38},{"id":"2002.06668","title":"Over-parameterized Adversarial Training: An Analysis Overcoming the Curse of Dimensionality","created":"2020-02-16","cited_by_count":36},{"id":"2007.07435","title":"AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows","created":"2020-07-15","cited_by_count":36},{"id":"2006.06980","title":"Robust Sub-Gaussian Principal Component Analysis and Width-Independent Schatten Packing","created":"2020-06-12","cited_by_count":35},{"id":"2010.11742","title":"Learning Black-Box Attackers with Transferable Priors and Query Feedback","created":"2020-10-21","cited_by_count":32},{"id":"2012.02525","title":"Practical No-box Adversarial Attacks against DNNs","created":"2020-12-04","cited_by_count":32},{"id":"1806.02711","title":"POTs: Protective Optimization Technologies","created":"2018-06-07","cited_by_count":28},{"id":"2010.12039","title":"Reducing Adversarially Robust Learning to Non-Robust PAC Learning","created":"2020-10-22","cited_by_count":28},{"id":"2007.05086","title":"Boundary thickness and robustness in learning models","created":"2020-07-09","cited_by_count":26},{"id":"2012.09995","title":"Data Leverage: A Framework for Empowering the Public in its Relationship with Technology Companies","created":"2020-12-18","cited_by_count":26},{"id":"1912.01172","title":"Value-laden Disciplinary Shifts in Machine Learning","created":"2019-12-03","cited_by_count":25},{"id":"2003.08861","title":"Face-Off: Adversarial Face Obfuscation","created":"2020-03-19","cited_by_count":25},{"id":"2010.12088","title":"Adversarial Robustness of Supervised Sparse Coding","created":"2020-10-22","cited_by_count":22},{"id":"2004.05465","title":"Robust Large-Margin Learning in Hyperbolic Space","created":"2020-04-11","cited_by_count":21},{"id":"1910.06093","title":"Election Coding for Distributed Learning: Protecting SignSGD against Byzantine Attacks","created":"2019-10-14","cited_by_count":20},{"id":"2007.00399","title":"Online Robust Regression via SGD on the l1 loss","created":"2020-07-01","cited_by_count":20},{"id":"2006.03712","title":"Lipschitz Bounds and Provably Robust Training by Laplacian Smoothing","created":"2020-06-05","cited_by_count":17},{"id":"2007.15220","title":"The Complexity of Adversarially Robust Proper Learning of Halfspaces with Agnostic Noise","created":"2020-07-30","cited_by_count":15},{"id":"2006.06759","title":"On the Tightness of Semidefinite Relaxations for Certifying Robustness to Adversarial Examples","created":"2020-06-11","cited_by_count":14},{"id":"2007.06555","title":"Adversarial robustness via robust low rank representations","created":"2020-07-13","cited_by_count":14},{"id":"2010.05373","title":"Distributionally Robust Local Non-parametric Conditional Estimation","created":"2020-10-12","cited_by_count":13},{"id":"2002.05648","title":"Politics of Adversarial Machine Learning","created":"2020-02-01","cited_by_count":12},{"id":"2010.11598","title":"An Efficient Adversarial Attack for Tree Ensembles","created":"2020-10-22","cited_by_count":9},{"id":"2002.11099","title":"A General Method for Robust Learning from Batches","created":"2020-02-25","cited_by_count":8},{"id":"1909.08526","title":"Defending against Machine Learning based Inference Attacks via Adversarial Examples: Opportunities and Challenges","created":"2019-09-17","cited_by_count":3},{"id":"2012.02048","title":"Ethical Testing in the Real World: Evaluating Physical Testing of Adversarial Machine Learning","created":"2020-12-03","cited_by_count":3},{"id":"2001.06528","title":"Activism by the AI Community: Analysing Recent Achievements and Future Prospects","created":"2020-01-17","cited_by_count":2},{"id":"2006.08035","title":"The Statistical Cost of Robust Kernel Hyperparameter Tuning","created":"2020-06-14","cited_by_count":1},{"id":"2007.05033","title":"Adversarially-learned Inference via an Ensemble of Discrete Undirected Graphical Models","created":"2020-07-09","cited_by_count":1}],"next_cursor":null}