{"list":"other","total":187,"rows":[{"id":"2005.14165","title":"Language Models are Few-Shot Learners","created":"2020-05-28","cited_by_count":32419},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1812.04948","title":"A Style-Based Generator Architecture for Generative Adversarial Networks","created":"2018-12-12","cited_by_count":6013},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1602.04938","title":"\"Why Should I Trust You?\": Explaining the Predictions of Any Classifier","created":"2016-02-16","cited_by_count":5070},{"id":"1612.01474","title":"Simple and Scalable Predictive Uncertainty Estimation using Deep Ensembles","created":"2016-12-05","cited_by_count":3926},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1610.02413","title":"Equality of Opportunity in Supervised Learning","created":"2016-10-07","cited_by_count":2007},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1807.03888","title":"A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks","created":"2018-07-10","cited_by_count":1485},{"id":"1905.02249","title":"MixMatch: A Holistic Approach to Semi-Supervised Learning","created":"2019-05-06","cited_by_count":1391},{"id":"1803.09010","title":"Datasheets for Datasets","created":"2018-03-23","cited_by_count":1386},{"id":"2012.07421","title":"WILDS: A Benchmark of in-the-Wild Distribution Shifts","created":"2020-12-14","cited_by_count":1375},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1706.02690","title":"Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networks","created":"2017-06-08","cited_by_count":1328},{"id":"1711.11279","title":"Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)","created":"2017-11-30","cited_by_count":1319},{"id":"1903.07291","title":"Semantic Image Synthesis with Spatially-Adaptive Normalization","created":"2019-03-18","cited_by_count":1299},{"id":"1906.02243","title":"Energy and Policy Considerations for Deep Learning in NLP","created":"2019-06-05","cited_by_count":1254},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1810.03993","title":"Model Cards for Model Reporting","created":"2018-10-05","cited_by_count":1080},{"id":"1912.03817","title":"Machine Unlearning","created":"2019-12-09","cited_by_count":1061},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1812.04606","title":"Deep Anomaly Detection with Outlier Exposure","created":"2018-12-11","cited_by_count":942},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1805.08318","title":"Self-Attention Generative Adversarial Networks","created":"2018-05-21","cited_by_count":809},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1412.3756","title":"Certifying and removing disparate impact","created":"2014-12-11","cited_by_count":715},{"id":"2107.06499","title":"Deduplicating Training Data Makes Language Models Better","created":"2021-07-14","cited_by_count":714},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1904.03189","title":"Image2StyleGAN: How to Embed Images Into the StyleGAN Latent Space?","created":"2019-04-05","cited_by_count":675},{"id":"1801.07593","title":"Mitigating Unwanted Biases with Adversarial Learning","created":"2018-01-22","cited_by_count":663},{"id":"1702.07476","title":"Renyi Differential Privacy","created":"2017-02-24","cited_by_count":650},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1911.04933","title":"Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networks","created":"2019-11-12","cited_by_count":618},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1802.10501","title":"Predictive Uncertainty Estimation via Prior Networks","created":"2018-02-28","cited_by_count":557},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1911.03030","title":"Certified Data Removal from Machine Learning Models","created":"2019-11-08","cited_by_count":535},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"2008.03703","title":"What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimation","created":"2020-08-09","cited_by_count":497},{"id":"1911.11815","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","created":"2019-11-26","cited_by_count":493},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"2004.05785","title":"Learning under Concept Drift: A Review","created":"2020-04-13","cited_by_count":477},{"id":"1906.05271","title":"Does Learning Require Memorization? A Short Tale about a Long Tail","created":"2019-06-12","cited_by_count":460},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"1906.02845","title":"Likelihood Ratios for Out-of-Distribution Detection","created":"2019-06-07","cited_by_count":453},{"id":"1804.07998","title":"Generating Natural Language Adversarial Examples","created":"2018-04-21","cited_by_count":424},{"id":"1808.01974","title":"A Survey on Deep Transfer Learning","created":"2018-08-06","cited_by_count":419},{"id":"2002.11297","title":"Generalized ODIN: Detecting Out-of-distribution Image without Learning from Out-of-distribution Data","created":"2020-02-26","cited_by_count":408},{"id":"1709.02012","title":"On Fairness and Calibration","created":"2017-09-06","cited_by_count":406},{"id":"1701.08230","title":"Algorithmic decision making and the cost of fairness","created":"2017-01-28","cited_by_count":403},{"id":"1711.09325","title":"Training Confidence-calibrated Classifiers for Detecting Out-of-Distribution Samples","created":"2017-11-26","cited_by_count":389},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"2103.03279","title":"Remember What You Want to Forget: Algorithms for Machine Unlearning","created":"2021-03-04","cited_by_count":371},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"2002.06673","title":"Performative Prediction","created":"2020-02-16","cited_by_count":327},{"id":"1812.05720","title":"Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problem","created":"2018-12-13","cited_by_count":323},{"id":"2010.10981","title":"Amnesiac Machine Learning","created":"2020-10-21","cited_by_count":319},{"id":"1905.12101","title":"Differential Privacy Has Disparate Impact on Model Accuracy","created":"2019-05-28","cited_by_count":316},{"id":"2004.01970","title":"BAE: BERT-based Adversarial Examples for Text Classification","created":"2020-04-04","cited_by_count":316},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"1907.06515","title":"Detecting and Simulating Artifacts in GAN Fake Images","created":"2019-07-15","cited_by_count":293},{"id":"1801.01944","title":"Audio Adversarial Examples: Targeted Attacks on Speech-to-Text","created":"2018-01-05","cited_by_count":274},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"1802.08908","title":"Scalable Private Learning with PATE","created":"2018-02-24","cited_by_count":269},{"id":"1812.05239","title":"Improving fairness in machine learning systems: What do industry practitioners need?","created":"2018-12-13","cited_by_count":262},{"id":"1506.06980","title":"Strategic Classification","created":"2015-06-23","cited_by_count":257},{"id":"1812.00535","title":"Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning","created":"2018-12-03","cited_by_count":246},{"id":"1911.07135","title":"The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks","created":"2019-11-17","cited_by_count":246},{"id":"1802.04865","title":"Learning Confidence for Out-of-Distribution Detection in Neural Networks","created":"2018-02-13","cited_by_count":245},{"id":"1910.07969","title":"On Completeness-aware Concept-Based Explanations in Deep Neural Networks","created":"2019-10-17","cited_by_count":239},{"id":"2011.11660","title":"Differentially Private Learning Needs Better Features (or Much More Data)","created":"2020-11-23","cited_by_count":235},{"id":"2006.07709","title":"Auditing Differentially Private Machine Learning: How Private is Private SGD?","created":"2020-06-13","cited_by_count":218},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1803.04765","title":"Deep k-Nearest Neighbors: Towards Confident, Interpretable and Robust Deep Learning","created":"2018-03-13","cited_by_count":207},{"id":"1805.11783","title":"To Trust Or Not To Trust A Classifier","created":"2018-05-30","cited_by_count":207},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199},{"id":"2005.02205","title":"When Machine Unlearning Jeopardizes Privacy","created":"2020-05-05","cited_by_count":198},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"1511.03575","title":"Federated Optimization:Distributed Optimization Beyond the Datacenter","created":"2015-11-11","cited_by_count":195},{"id":"1801.05507","title":"Gazelle: A Low Latency Framework for Secure Neural Network Inference","created":"2018-01-16","cited_by_count":193},{"id":"1901.10002","title":"A Framework for Understanding Sources of Harm throughout the Machine Learning Life Cycle","created":"2019-01-28","cited_by_count":193},{"id":"1812.11842","title":"Do GANs leave artificial fingerprints?","created":"2018-12-31","cited_by_count":190},{"id":"1909.11480","title":"Input complexity and out-of-distribution detection with likelihood-based generative models","created":"2019-09-25","cited_by_count":186},{"id":"1710.11342","title":"Generating Natural Adversarial Examples","created":"2017-10-31","cited_by_count":183},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1611.04482","title":"Practical Secure Aggregation for Federated Learning on User-Held Data","created":"2016-11-14","cited_by_count":178}],"next_cursor":"100"}