{"list":"other","total":56,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1912.04977","title":"Advances and Open Problems in Federated Learning","created":"2019-12-10","cited_by_count":3046},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1704.04760","title":"In-Datacenter Performance Analysis of a Tensor Processing Unit","created":"2017-04-16","cited_by_count":618},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1703.09039","title":"Efficient Processing of Deep Neural Networks: A Tutorial and Survey","created":"2017-03-27","cited_by_count":434},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"2007.08432","title":"Data Poisoning Attacks Against Federated Learning Systems","created":"2020-07-16","cited_by_count":275},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1611.04482","title":"Practical Secure Aggregation for Federated Learning on User-Held Data","created":"2016-11-14","cited_by_count":178},{"id":"1904.01067","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","created":"2019-04-01","cited_by_count":122},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2005.02131","title":"Stealing Links from Graph Neural Networks","created":"2020-05-05","cited_by_count":115},{"id":"1806.03287","title":"Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware","created":"2018-06-08","cited_by_count":102},{"id":"2104.14380","title":"PPFL: Privacy-preserving Federated Learning with Trusted Execution Environments","created":"2021-04-29","cited_by_count":93},{"id":"2004.12254","title":"Privacy in Deep Learning: A Survey","created":"2020-04-25","cited_by_count":71},{"id":"1412.7584","title":"Differential Privacy and Machine Learning: a Survey and Review","created":"2014-12-24","cited_by_count":67},{"id":"2004.05703","title":"DarkneTZ: Towards Model Privacy at the Edge using Trusted Execution Environments","created":"2020-04-12","cited_by_count":58},{"id":"1808.04761","title":"Cache Telepathy: Leveraging Shared Resource Attacks to Learn DNN Architectures","created":"2018-08-14","cited_by_count":57},{"id":"1812.11720","title":"Stealing Neural Networks via Timing Side Channels","created":"2018-12-31","cited_by_count":43},{"id":"2006.12784","title":"Hermes Attack: Steal DNN Models with Lossless Inference Accuracy","created":"2020-06-23","cited_by_count":41},{"id":"1803.05961","title":"Chiron: Privacy-preserving Machine Learning as a Service","created":"2018-03-15","cited_by_count":40},{"id":"2002.07687","title":"Mind Your Weight(s): A Large-scale Study on Insufficient Machine Learning Model Protection in Mobile Apps","created":"2020-02-18","cited_by_count":36},{"id":"1808.00590","title":"MLCapsule: Guarded Offline Deployment of Machine Learning as a Service","created":"2018-08-01","cited_by_count":31},{"id":"1907.10406","title":"Open DNN Box by Power Side-Channel Attack","created":"2019-07-21","cited_by_count":28},{"id":"1803.05847","title":"I Know What You See: Power Side-Channel Attack on Convolutional Neural Network Accelerators","created":"2018-03-05","cited_by_count":27},{"id":"2006.05032","title":"Stealing Deep Reinforcement Learning Models for Fun and Profit","created":"2020-06-09","cited_by_count":24},{"id":"1807.06689","title":"Efficient Deep Learning on Multi-Source Private Data","created":"2018-07-17","cited_by_count":17},{"id":"1912.03485","title":"Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environments","created":"2019-12-07","cited_by_count":17},{"id":"1702.07521","title":"Software Grand Exposure: SGX Cache Attacks Are Practical","created":"2017-02-24","cited_by_count":15},{"id":"2105.01281","title":"Citadel: Protecting Data Privacy and Model Confidentiality for Collaborative Learning with SGX","created":"2021-05-04","cited_by_count":14},{"id":"2101.08204","title":"secureTF: A Secure TensorFlow Framework","created":"2021-01-20","cited_by_count":12},{"id":"1611.06952","title":"Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing","created":"2016-11-21","cited_by_count":10},{"id":"1902.04413","title":"TensorSCONE: A Secure TensorFlow Framework using Intel SGX","created":"2019-02-12","cited_by_count":8},{"id":"1703.06986","title":"CacheZoom: How SGX Amplifies The Power of Cache Attacks","created":"2017-03-20","cited_by_count":7},{"id":"2007.02351","title":"Offline Model Guard: Secure and Private ML on Mobile Devices","created":"2020-07-05","cited_by_count":7},{"id":"1912.01701","title":"An Off-Chip Attack on Hardware Enclaves via the Memory Bus","created":"2019-12-03","cited_by_count":6},{"id":"2010.08855","title":"GOAT: GPU Outsourcing of Deep Learning Training With Asynchronous Probabilistic Integrity Verification Inside Trusted Execution Environment","created":"2020-10-17","cited_by_count":6},{"id":"2012.08156","title":"Confidential Machine Learning on Untrusted Platforms: A Survey","created":"2020-12-15","cited_by_count":4},{"id":"1701.01061","title":"SGXIO: Generic Trusted I/O Path for Intel SGX","created":"2017-01-04","cited_by_count":3},{"id":"1904.04782","title":"Enabling Privacy-Preserving, Compute- and Data-Intensive Computing using Heterogeneous Trusted Execution Environment","created":"2019-04-09","cited_by_count":3},{"id":"1908.10730","title":"Confidential Deep Learning: Executing Proprietary Models on Untrusted Devices","created":"2019-08-28","cited_by_count":3},{"id":"2007.15248","title":"DeepPeep: Exploiting Design Ramifications to Decipher the Architecture of Compact DNNs","created":"2020-07-30","cited_by_count":3},{"id":"2009.01867","title":"ESMFL: Efficient and Secure Models for Federated Learning","created":"2020-09-03","cited_by_count":3},{"id":"2103.15860","title":"Twine: An Embedded Trusted Runtime for WebAssembly","created":"2021-03-29","cited_by_count":3},{"id":"1511.04897","title":"ARMageddon: Cache Attacks on Mobile Devices","created":"2015-11-16","cited_by_count":2},{"id":"2010.15866","title":"CURE: A Security Architecture with CUstomizable and Resilient Enclaves","created":"2020-10-29","cited_by_count":2},{"id":"2103.16898","title":"Perun: Secure Multi-Stakeholder Machine Learning Framework with GPU Support","created":"2021-03-31","cited_by_count":2},{"id":"1908.11143","title":"SGX-LKL: Securing the Host OS Interface for Trusted Execution","created":"2019-08-29","cited_by_count":1}],"next_cursor":null}