{"list":"other","total":53,"rows":[{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1907.11692","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","created":"2019-07-26","cited_by_count":13372},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1703.03400","title":"Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networks","created":"2017-03-09","cited_by_count":4897},{"id":"2004.07780","title":"Shortcut Learning in Deep Neural Networks","created":"2020-04-16","cited_by_count":1969},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1904.01038","title":"fairseq: A Fast, Extensible Toolkit for Sequence Modeling","created":"2019-04-01","cited_by_count":1488},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"2002.08484","title":"Estimating Training Data Influence by Tracing Gradient Descent","created":"2020-02-19","cited_by_count":580},{"id":"1911.03030","title":"Certified Data Removal from Machine Learning Models","created":"2019-11-08","cited_by_count":535},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"2008.03703","title":"What Neural Networks Memorize and Why: Discovering the Long Tail via Influence Estimation","created":"2020-08-09","cited_by_count":497},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"2006.07710","title":"The Pitfalls of Simplicity Bias in Neural Networks","created":"2020-06-13","cited_by_count":351},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"2006.14651","title":"Influence Functions in Deep Learning Are Fragile","created":"2020-06-25","cited_by_count":252},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"1811.09720","title":"Representer Point Selection for Explaining Deep Neural Networks","created":"2018-11-23","cited_by_count":187},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"1906.10842","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","created":"2019-06-26","cited_by_count":146},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2002.05646","title":"Adversarial Machine Learning -- Industry Perspectives","created":"2020-02-04","cited_by_count":122},{"id":"2004.00225","title":"MetaPoison: Practical General-purpose Clean-label Data Poisoning","created":"2020-04-01","cited_by_count":120},{"id":"2012.15781","title":"FastIF: Scalable Influence Functions for Efficient Model Interpretation and Debugging","created":"2020-12-31","cited_by_count":120},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119},{"id":"2003.08904","title":"RAB: Provable Robustness Against Backdoor Attacks","created":"2020-03-19","cited_by_count":118},{"id":"2006.14768","title":"Deep Partition Aggregation: Provable Defense against General Poisoning Attacks","created":"2020-06-26","cited_by_count":115},{"id":"2008.04495","title":"Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks","created":"2020-08-11","cited_by_count":94},{"id":"1804.07933","title":"Is feature selection secure against training data poisoning?","created":"2018-04-21","cited_by_count":93},{"id":"1910.04749","title":"Defending Neural Backdoors via Generative Distribution Modeling","created":"2019-10-10","cited_by_count":84},{"id":"1911.00418","title":"On Second-Order Group Influence Functions for Black-Box Predictions","created":"2019-11-01","cited_by_count":79},{"id":"2002.11750","title":"On Certifying Robustness against Backdoor Attacks via Randomized Smoothing","created":"2020-02-26","cited_by_count":77},{"id":"2006.14026","title":"Subpopulation Data Poisoning Attacks","created":"2020-06-24","cited_by_count":70},{"id":"1906.08473","title":"Data Cleansing for Models Trained with SGD","created":"2019-06-20","cited_by_count":67},{"id":"1908.02203","title":"Model Agnostic Defence against Backdoor Attacks in Machine Learning","created":"2019-08-06","cited_by_count":52},{"id":"2109.08266","title":"Hard to Forget: Poisoning Attacks on Certified Machine Unlearning","created":"2021-09-17","cited_by_count":52},{"id":"2102.02515","title":"HYDRA: Hypergradient Data Relevance Analysis for Interpreting Deep Neural Networks","created":"2021-02-04","cited_by_count":38},{"id":"2003.11630","title":"RelatIF: Identifying Explanatory Training Examples via Relative Influence","created":"2020-03-25","cited_by_count":28},{"id":"2007.00711","title":"ConFoc: Content-Focus Protection Against Trojan Attacks on Neural Networks","created":"2020-07-01","cited_by_count":28},{"id":"1908.03369","title":"Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems","created":"2019-08-09","cited_by_count":27},{"id":"2112.08297","title":"Rethinking Influence Functions of Neural Networks in the Over-parameterized Regime","created":"2021-12-15","cited_by_count":26},{"id":"1707.09752","title":"Anomaly Detection by Robust Statistics","created":"2017-07-31","cited_by_count":23},{"id":"2009.05530","title":"TREX: Tree-Ensemble Representer-Point Explanations","created":"2020-09-11","cited_by_count":4},{"id":"1911.10008","title":"Attack Agnostic Statistical Method for Adversarial Detection","created":"2019-11-22","cited_by_count":2}],"next_cursor":null}