{"list":"other","total":63,"rows":[{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1909.13719","title":"RandAugment: Practical automated data augmentation with a reduced search space","created":"2019-09-30","cited_by_count":2269},{"id":"2006.16241","title":"The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalization","created":"2020-06-29","cited_by_count":1850},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1805.09501","title":"AutoAugment: Learning Augmentation Policies from Data","created":"2018-05-24","cited_by_count":730},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279},{"id":"1801.01944","title":"Audio Adversarial Examples: Targeted Attacks on Speech-to-Text","created":"2018-01-05","cited_by_count":274},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"2110.09468","title":"Improving Robustness using Generated Data","created":"2021-10-18","cited_by_count":234},{"id":"1804.00308","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","created":"2018-04-01","cited_by_count":225},{"id":"2004.00053","title":"Information Leakage in Embedding Models","created":"2020-03-31","cited_by_count":203},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"1709.07886","title":"Machine Learning Models that Remember Too Much","created":"2017-09-22","cited_by_count":169},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"1804.05810","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","created":"2018-04-16","cited_by_count":159},{"id":"1709.04114","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","created":"2017-09-13","cited_by_count":155},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148},{"id":"1306.4447","title":"Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifiers","created":"2013-06-19","cited_by_count":130},{"id":"1903.10346","title":"Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognition","created":"2019-03-22","cited_by_count":124},{"id":"1711.01894","title":"Adversarial Frontier Stitching for Remote Neural Network Watermarking","created":"2017-11-06","cited_by_count":118},{"id":"2006.03463","title":"Sponge Examples: Energy-Latency Attacks on Neural Networks","created":"2020-06-05","cited_by_count":111},{"id":"1811.04017","title":"A generic framework for privacy preserving deep learning","created":"2018-11-09","cited_by_count":103},{"id":"1702.08138","title":"Deceiving Google's Perspective API Built for Detecting Toxic Comments","created":"2017-02-27","cited_by_count":102},{"id":"1902.07906","title":"Wasserstein Adversarial Examples via Projected Sinkhorn Iterations","created":"2019-02-21","cited_by_count":89},{"id":"1811.02054","title":"Exploring Connections Between Active Learning and Model Extraction","created":"2018-11-05","cited_by_count":85},{"id":"1905.13409","title":"Bypassing Backdoor Detection Algorithms in Deep Learning","created":"2019-05-31","cited_by_count":74},{"id":"1806.05476","title":"Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data","created":"2018-06-14","cited_by_count":70},{"id":"1412.7584","title":"Differential Privacy and Machine Learning: a Survey and Review","created":"2014-12-24","cited_by_count":67},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57},{"id":"1707.06728","title":"Efficient Defenses Against Adversarial Attacks","created":"2017-07-21","cited_by_count":53},{"id":"1812.02425","title":"MEAL: Multi-Model Ensemble via Adversarial Learning","created":"2018-12-06","cited_by_count":52},{"id":"1804.03648","title":"DeepMarks: A Digital Fingerprinting Framework for Deep Neural Networks","created":"2018-04-10","cited_by_count":26},{"id":"2111.10759","title":"Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Model","created":"2021-11-21","cited_by_count":19},{"id":"2101.02656","title":"Adversarial Machine Learning for 5G Communications Security","created":"2021-01-07","cited_by_count":12},{"id":"2103.06297","title":"TANTRA: Timing-Based Adversarial Network Traffic Reshaping Attack","created":"2021-03-10","cited_by_count":12},{"id":"1708.02562","title":"A Survey on Low Latency Towards 5G: RAN, Core Network and Caching Solutions","created":"2017-08-08","cited_by_count":10},{"id":"1610.01239","title":"Adversary Resistant Deep Neural Networks with an Application to Malware Detection","created":"2016-10-05","cited_by_count":9},{"id":"2002.09896","title":"Adversarial Attack on DL-based Massive MIMO CSI Feedback","created":"2020-02-23","cited_by_count":9},{"id":"2012.15740","title":"Poisoning Attacks on Cyber Attack Detectors for Industrial Control Systems","created":"2020-12-23","cited_by_count":8},{"id":"2101.08724","title":"Adversarial Machine Learning for Flooding Attacks on 5G Radio Access Network Slicing","created":"2021-01-21","cited_by_count":6},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6},{"id":"2104.09445","title":"Artificial Intelligence in Open Radio Access Network","created":"2021-04-19","cited_by_count":5}],"next_cursor":null}