{"list":"other","total":69,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1612.00796","title":"Overcoming catastrophic forgetting in neural networks","created":"2016-12-02","cited_by_count":4787},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1704.00028","title":"Improved Training of Wasserstein GANs","created":"2017-03-31","cited_by_count":2235},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1710.11063","title":"Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networks","created":"2017-10-30","cited_by_count":939},{"id":"1710.08092","title":"VGGFace2: A dataset for recognising faces across pose and age","created":"2017-10-23","cited_by_count":914},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1411.4389","title":"Long-term Recurrent Convolutional Networks for Visual Recognition and Description","created":"2014-11-17","cited_by_count":484},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2004.06660","title":"Weight Poisoning Attacks on Pre-trained Models","created":"2020-04-14","cited_by_count":341},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"1905.12457","title":"A backdoor attack against LSTM-based text classification systems","created":"2019-05-29","cited_by_count":227},{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"2003.03030","title":"Clean-Label Backdoor Attacks on Video Recognition Models","created":"2020-03-06","cited_by_count":169},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"2106.09667","title":"Poisoning and Backdooring Contrastive Learning","created":"2021-06-17","cited_by_count":151},{"id":"1906.10842","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","created":"2019-06-26","cited_by_count":146},{"id":"1808.10307","title":"Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation","created":"2018-08-30","cited_by_count":134},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"1908.01763","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","created":"2019-08-02","cited_by_count":122},{"id":"1903.12269","title":"Bit-Flip Attack: Crushing Neural Network with Progressive Bit Search","created":"2019-03-28","cited_by_count":108},{"id":"1911.07116","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","created":"2019-11-16","cited_by_count":95},{"id":"2012.11212","title":"Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification","created":"2020-12-21","cited_by_count":95},{"id":"2106.06361","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","created":"2021-06-11","cited_by_count":89},{"id":"1910.04749","title":"Defending Neural Backdoors via Generative Distribution Modeling","created":"2019-10-10","cited_by_count":84},{"id":"2104.02361","title":"Backdoor Attack in the Physical World","created":"2021-04-06","cited_by_count":84},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"2012.07006","title":"DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation","created":"2020-12-13","cited_by_count":77},{"id":"1905.13409","title":"Bypassing Backdoor Detection Algorithms in Deep Learning","created":"2019-05-31","cited_by_count":74},{"id":"2103.09274","title":"A survey of deep neural network watermarking techniques","created":"2021-03-16","cited_by_count":73},{"id":"1812.03128","title":"Backdooring Convolutional Neural Networks via Targeted Weight Perturbations","created":"2018-12-07","cited_by_count":69},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60},{"id":"2102.10496","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","created":"2021-02-21","cited_by_count":49},{"id":"2101.06896","title":"DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injection","created":"2021-01-18","cited_by_count":44},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33},{"id":"2003.08633","title":"Backdooring and Poisoning Neural Networks with Image-Scaling Attacks","created":"2020-03-19","cited_by_count":28},{"id":"2007.00711","title":"ConFoc: Content-Focus Protection Against Trojan Attacks on Neural Networks","created":"2020-07-01","cited_by_count":28},{"id":"2004.11514","title":"Systematic Evaluation of Backdoor Data Poisoning Attacks on Image Classifiers","created":"2020-04-24","cited_by_count":23},{"id":"2103.04038","title":"Hidden Backdoor Attack against Semantic Segmentation Models","created":"2021-03-06","cited_by_count":20},{"id":"2104.07395","title":"Robust Backdoor Attacks against Deep Neural Networks in Real Physical World","created":"2021-04-15","cited_by_count":20},{"id":"2006.07026","title":"Backdoor Attacks on Federated Meta-Learning","created":"2020-06-12","cited_by_count":15},{"id":"2004.11370","title":"Live Trojan Attacks on Deep Neural Networks","created":"2020-04-22","cited_by_count":10},{"id":"2105.00249","title":"A Master Key Backdoor for Universal Impersonation Attack against DNN-based Face Verification","created":"2021-05-01","cited_by_count":10},{"id":"2101.02562","title":"DeepPoison: Feature Transfer Based Stealthy Poisoning Attack","created":"2021-01-06","cited_by_count":9},{"id":"1808.06809","title":"Are You Tampering With My Data?","created":"2018-08-21","cited_by_count":6}],"next_cursor":null}