{"list":"other","total":105,"rows":[{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"2002.05709","title":"A Simple Framework for Contrastive Learning of Visual Representations","created":"2020-02-13","cited_by_count":12049},{"id":"1911.05722","title":"Momentum Contrast for Unsupervised Visual Representation Learning","created":"2019-11-13","cited_by_count":7513},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2006.07733","title":"Bootstrap your own latent: A new approach to self-supervised Learning","created":"2020-06-13","cited_by_count":4750},{"id":"2108.07258","title":"On the Opportunities and Risks of Foundation Models","created":"2021-08-16","cited_by_count":4033},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"2010.13902","title":"Graph Contrastive Learning with Augmentations","created":"2020-10-22","cited_by_count":1208},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"2010.14945","title":"Graph Contrastive Learning with Adaptive Augmentation","created":"2020-10-27","cited_by_count":519},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1911.11815","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","created":"2019-11-26","cited_by_count":493},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"2006.09963","title":"GCC: Graph Contrastive Coding for Graph Neural Network Pre-Training","created":"2020-06-17","cited_by_count":463},{"id":"1805.07984","title":"Adversarial Attacks on Neural Networks for Graph Data","created":"2018-05-21","cited_by_count":397},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"1905.12457","title":"A backdoor attack against LSTM-based text classification systems","created":"2019-05-29","cited_by_count":227},{"id":"1804.00308","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","created":"2018-04-01","cited_by_count":225},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"1807.05852","title":"Machine Learning with Membership Privacy using Adversarial Regularization","created":"2018-07-16","cited_by_count":186},{"id":"2003.12862","title":"Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuning","created":"2020-03-28","cited_by_count":153},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"2106.09667","title":"Poisoning and Backdooring Contrastive Learning","created":"2021-06-17","cited_by_count":151},{"id":"2002.12200","title":"Entangled Watermarks as a Defense against Model Extraction","created":"2020-02-27","cited_by_count":149},{"id":"2010.13337","title":"Robust Pre-Training by Adversarial Contrastive Learning","created":"2020-10-26","cited_by_count":144},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"1910.12366","title":"Thieves on Sesame Street! Model Extraction of BERT-based APIs","created":"2019-10-27","cited_by_count":139},{"id":"2006.07589","title":"Adversarial Self-Supervised Contrastive Learning","created":"2020-06-13","cited_by_count":139},{"id":"1808.10307","title":"Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation","created":"2018-08-30","cited_by_count":134},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"1306.4447","title":"Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifiers","created":"2013-06-19","cited_by_count":130},{"id":"2006.11165","title":"Backdoor Attacks to Graph Neural Networks","created":"2020-06-19","cited_by_count":128},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123},{"id":"2004.00225","title":"MetaPoison: Practical General-purpose Clean-label Data Poisoning","created":"2020-04-01","cited_by_count":120},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2005.02131","title":"Stealing Links from Graph Neural Networks","created":"2020-05-05","cited_by_count":115},{"id":"2006.14768","title":"Deep Partition Aggregation: Provable Defense against General Poisoning Attacks","created":"2020-06-26","cited_by_count":115},{"id":"2006.11890","title":"Graph Backdoor","created":"2020-06-21","cited_by_count":112},{"id":"2006.03463","title":"Sponge Examples: Energy-Latency Attacks on Neural Networks","created":"2020-06-05","cited_by_count":111},{"id":"2002.03018","title":"Certified Robustness to Label-Flipping Attacks via Randomized Smoothing","created":"2020-02-07","cited_by_count":108},{"id":"2003.06693","title":"Certified Defenses for Adversarial Patches","created":"2020-03-14","cited_by_count":101},{"id":"2002.10733","title":"(De)Randomized Smoothing for Certifiable Defense against Patch Attacks","created":"2020-02-25","cited_by_count":98},{"id":"1612.09161","title":"Learning Visual N-Grams from Web Data","created":"2016-12-29","cited_by_count":95},{"id":"2008.04495","title":"Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks","created":"2020-08-11","cited_by_count":94},{"id":"2008.00312","title":"Trojaning Language Models for Fun and Profit","created":"2020-08-01","cited_by_count":90},{"id":"1811.02054","title":"Exploring Connections Between Active Learning and Model Extraction","created":"2018-11-05","cited_by_count":85},{"id":"1608.08182","title":"Data Poisoning Attacks on Factorization-Based Collaborative Filtering","created":"2016-08-29","cited_by_count":83},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"1906.10908","title":"Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks","created":"2019-06-26","cited_by_count":81},{"id":"1903.09860","title":"Data Poisoning against Differentially-Private Learners: Attacks and Defenses","created":"2019-03-23","cited_by_count":78},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78},{"id":"2002.11750","title":"On Certifying Robustness against Backdoor Attacks via Randomized Smoothing","created":"2020-02-26","cited_by_count":77},{"id":"1905.11742","title":"Overlearning Reveals Sensitive Attributes","created":"2019-05-28","cited_by_count":76},{"id":"1905.13409","title":"Bypassing Backdoor Detection Algorithms in Deep Learning","created":"2019-05-31","cited_by_count":74},{"id":"2108.11023","title":"EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning","created":"2021-08-25","cited_by_count":73},{"id":"2003.04884","title":"Cryptanalytic Extraction of Neural Network Models","created":"2020-03-10","cited_by_count":68},{"id":"2002.00937","title":"Radioactive data: tracing through training","created":"2020-02-03","cited_by_count":67},{"id":"2002.08025","title":"Influence Function based Data Poisoning Attacks to Top-N Recommender Systems","created":"2020-02-19","cited_by_count":63},{"id":"2010.02432","title":"A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inference","created":"2020-10-06","cited_by_count":61},{"id":"1805.04810","title":"AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning","created":"2018-05-13","cited_by_count":60},{"id":"1808.04761","title":"Cache Telepathy: Leveraging Shared Resource Attacks to Learn DNN Architectures","created":"2018-08-14","cited_by_count":57},{"id":"1911.07100","title":"Defending Against Model Stealing Attacks with Adaptive Misinformation","created":"2019-11-16","cited_by_count":57},{"id":"1709.05583","title":"Mitigating Evasion Attacks to Deep Neural Networks via Region-based Classification","created":"2017-09-17","cited_by_count":56},{"id":"1809.04127","title":"Poisoning Attacks to Graph-Based Recommender Systems","created":"2018-09-11","cited_by_count":56},{"id":"1912.09899","title":"Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing","created":"2019-12-20","cited_by_count":54},{"id":"1903.00553","title":"Attacking Graph-based Classification via Manipulating the Graph Structure","created":"2019-03-01","cited_by_count":53},{"id":"2003.04247","title":"Towards Probabilistic Verification of Machine Unlearning","created":"2020-03-09","cited_by_count":50},{"id":"2101.02644","title":"Data Poisoning Attacks to Deep Learning Based Recommender Systems","created":"2021-01-07","cited_by_count":43},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36},{"id":"1606.05893","title":"You are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors","created":"2016-06-19","cited_by_count":34},{"id":"1902.08552","title":"Adversarial Neural Network Inversion via Auxiliary Knowledge Alignment","created":"2019-02-22","cited_by_count":32},{"id":"2002.03421","title":"Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing","created":"2020-02-09","cited_by_count":29}],"next_cursor":"100"}