{"list":"other","total":68,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1712.05877","title":"Quantization and Training of Neural Networks for Efficient Integer-Arithmetic-Only Inference","created":"2017-12-15","cited_by_count":1593},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1902.08153","title":"Learned Step Size Quantization","created":"2019-02-21","cited_by_count":628},{"id":"1704.04760","title":"In-Datacenter Performance Analysis of a Tensor Processing Unit","created":"2017-04-16","cited_by_count":618},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1911.09665","title":"Adversarial Examples Improve Image Recognition","created":"2019-11-21","cited_by_count":286},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2004.09576","title":"LSQ+: Improving low-bit quantization through learnable offsets and better initialization","created":"2020-04-20","cited_by_count":189},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1808.05779","title":"Learning to Quantize Deep Networks by Optimizing Quantization Intervals with Task Loss","created":"2018-08-17","cited_by_count":160},{"id":"1909.11957","title":"Drawing Early-Bird Tickets: Towards More Efficient Training of Deep Networks","created":"2019-09-26","cited_by_count":160},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1811.09310","title":"Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack","created":"2018-11-22","cited_by_count":125},{"id":"1712.01507","title":"Bit Fusion: Bit-Level Dynamically Composable Architecture for Accelerating Deep Neural Networks","created":"2017-12-05","cited_by_count":109},{"id":"1904.08444","title":"Defensive Quantization: When Efficiency Meets Robustness","created":"2019-04-17","cited_by_count":95},{"id":"1902.03538","title":"Model Compression with Adversarial Robustness: A Unified Optimization Framework","created":"2019-02-10","cited_by_count":71},{"id":"1912.09666","title":"AdaBits: Neural Network Quantization with Adaptive Bit-Widths","created":"2019-12-20","cited_by_count":64},{"id":"2002.07686","title":"Robust Quantization: One Model to Rule Them All","created":"2020-02-18","cited_by_count":63},{"id":"2008.04693","title":"PROFIT: A Novel Training Method for sub-4-bit MobileNet Models","created":"2020-08-11","cited_by_count":50},{"id":"1709.03423","title":"Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks","created":"2017-09-11","cited_by_count":31},{"id":"1907.04523","title":"Dual Dynamic Inference: Enabling More Efficient, Adaptive and Controllable Deep Inference","created":"2019-07-10","cited_by_count":31},{"id":"1711.00449","title":"Attacking Binarized Neural Networks","created":"2017-11-01","cited_by_count":29},{"id":"2001.03535","title":"AutoDNNchip: An Automated DNN Chip Predictor and Builder for Both FPGAs and ASICs","created":"2020-01-06","cited_by_count":26},{"id":"2012.13113","title":"FracTrain: Fractionally Squeezing Bit Savings Both Temporally and Spatially for Efficient DNN Training","created":"2020-12-24","cited_by_count":23},{"id":"2101.09868","title":"CPT: Efficient Deep Neural Network Training via Cyclic Precision","created":"2021-01-25","cited_by_count":19},{"id":"1807.06714","title":"Defend Deep Neural Networks Against Adversarial Examples via Fixed and Dynamic Quantized Activation Functions","created":"2018-07-18","cited_by_count":17},{"id":"2002.11270","title":"DNN-Chip Predictor: An Analytical Performance Predictor for DNN Accelerators with Various Dataflows and Hardware Architectures","created":"2020-02-26","cited_by_count":16},{"id":"2005.03403","title":"SmartExchange: Trading Higher-cost Memory Storage/Access for Lower-cost Computation","created":"2020-05-07","cited_by_count":16},{"id":"1706.07853","title":"Loom: Exploiting Weight and Activation Precisions to Accelerate Convolutional Neural Networks","created":"2017-06-23","cited_by_count":12},{"id":"2004.11233","title":"QUANOS- Adversarial Noise Sensitivity Driven Hybrid Quantization of Neural Networks","created":"2020-04-22","cited_by_count":12},{"id":"2005.01206","title":"TIMELY: Pushing Data Movements and Interfaces in PIM Accelerators Towards Local and in Time Domain","created":"2020-05-03","cited_by_count":12},{"id":"2008.09954","title":"Ptolemy: Architecture Support for Robust Deep Learning","created":"2020-08-23","cited_by_count":12},{"id":"2106.06575","title":"Auto-NBA: Efficient and Effective Search Over the Joint Space of Networks, Bitwidths, and Accelerators","created":"2021-06-11","cited_by_count":12},{"id":"2010.14778","title":"DNA: Differentiable Network-Accelerator Co-Search","created":"2020-10-28","cited_by_count":11},{"id":"2012.14965","title":"Improving Adversarial Robustness in Weight-quantized Neural Networks","created":"2020-12-29","cited_by_count":11},{"id":"1902.03151","title":"Discretization based Solutions for Secure Machine Learning against Adversarial Attacks","created":"2019-02-08","cited_by_count":10},{"id":"2002.02815","title":"Switchable Precision Neural Networks","created":"2020-02-07","cited_by_count":6},{"id":"1606.05094","title":"A 0.3-2.6 TOPS/W Precision-Scalable Processor for Real-Time Large-Scale ConvNets","created":"2016-06-16","cited_by_count":5},{"id":"1707.09068","title":"Tartan: Accelerating Fully-Connected and Convolutional Layers in Deep Learning Networks by Exploiting Numerical Precision Variability","created":"2017-07-27","cited_by_count":2},{"id":"1909.05443","title":"Feedback Learning for Improving the Robustness of Neural Networks","created":"2019-09-12","cited_by_count":2},{"id":"2104.10853","title":"InstantNet: Automated Generation and Deployment of Instantaneously Switchable-Precision Networks","created":"2021-04-22","cited_by_count":2},{"id":"2008.01219","title":"Hardware Accelerator for Adversarial Attacks on Deep Learning Neural Networks","created":"2020-08-03","cited_by_count":1}],"next_cursor":null}