{"list":"other","total":52,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1505.07818","title":"Domain-Adversarial Training of Neural Networks","created":"2015-05-28","cited_by_count":3044},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1803.03635","title":"The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networks","created":"2018-03-09","cited_by_count":2262},{"id":"1703.06868","title":"Arbitrary Style Transfer in Real-time with Adaptive Instance Normalization","created":"2017-03-20","cited_by_count":2010},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"1811.12231","title":"ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness","created":"2018-11-29","cited_by_count":1432},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1810.11910","title":"Learning to Learn without Forgetting by Maximizing Transfer and Minimizing Interference","created":"2018-10-29","cited_by_count":521},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1911.11815","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","created":"2019-11-26","cited_by_count":493},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"1912.02757","title":"Deep Ensembles: A Loss Landscape Perspective","created":"2019-12-05","cited_by_count":443},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"2007.05084","title":"Attack of the Tails: Yes, You Really Can Backdoor Federated Learning","created":"2020-07-09","cited_by_count":309},{"id":"1911.07963","title":"Can You Really Backdoor Federated Learning?","created":"2019-11-18","cited_by_count":255},{"id":"1804.00308","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","created":"2018-04-01","cited_by_count":225},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"2010.06610","title":"Training independent subnetworks for robust prediction","created":"2020-10-13","cited_by_count":177},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158},{"id":"2006.14580","title":"Backdoor Attacks Against Deep Learning Systems in the Physical World","created":"2020-06-25","cited_by_count":134},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2007.10760","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","created":"2020-07-21","cited_by_count":123},{"id":"1908.01763","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","created":"2019-08-02","cited_by_count":122},{"id":"1909.05193","title":"TBT: Targeted Neural Network Attack with Bit Trojan","created":"2019-09-10","cited_by_count":113},{"id":"1804.07933","title":"Is feature selection secure against training data poisoning?","created":"2018-04-21","cited_by_count":93},{"id":"1905.11736","title":"Cross-Domain Transferability of Adversarial Perturbations","created":"2019-05-28","cited_by_count":92},{"id":"2011.09527","title":"Strong Data Augmentation Sanitizes Poisoning and Backdoor Attacks Without an Accuracy Tradeoff","created":"2020-11-18","cited_by_count":89},{"id":"1902.05522","title":"Superposition of many models into one","created":"2019-02-14","cited_by_count":64},{"id":"1812.00483","title":"Model-Reuse Attacks on Deep Learning Systems","created":"2018-12-02","cited_by_count":49},{"id":"1911.08040","title":"Poison as a Cure: Detecting & Neutralizing Variable-Sized Backdoor Attacks in Deep Neural Networks","created":"2019-11-19","cited_by_count":22},{"id":"2107.07240","title":"Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting","created":"2021-07-15","cited_by_count":21},{"id":"1809.03474","title":"Universal Multi-Party Poisoning Attacks","created":"2018-09-10","cited_by_count":17},{"id":"1712.05855","title":"A Berkeley View of Systems Challenges for AI","created":"2017-12-15","cited_by_count":15},{"id":"1901.02402","title":"Contamination Attacks and Mitigation in Multi-Party Machine Learning","created":"2019-01-08","cited_by_count":13},{"id":"1711.11008","title":"Security Risks in Deep Learning Implementations","created":"2017-11-29","cited_by_count":12},{"id":"1905.09162","title":"Biometric Backdoors: A Poisoning Attack Against Unsupervised Template Updating","created":"2019-05-22","cited_by_count":9},{"id":"2011.07429","title":"Dynamic backdoor attacks against federated learning","created":"2020-11-15","cited_by_count":9},{"id":"2109.01275","title":"A Synergetic Attack against Neural Network Classifiers combining Backdoor and Adversarial Examples","created":"2021-09-03","cited_by_count":6},{"id":"2110.04571","title":"Widen The Backdoor To Let More Attackers In","created":"2021-10-09","cited_by_count":3},{"id":"2201.09774","title":"Hiding Behind Backdoors: Self-Obfuscation Against Generative Models","created":"2022-01-24","cited_by_count":2}],"next_cursor":null}