{"list":"other","total":69,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1604.07316","title":"End to End Learning for Self-Driving Cars","created":"2016-04-25","cited_by_count":1009},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1711.00851","title":"Provable defenses against adversarial examples via the convex outer adversarial polytope","created":"2017-11-02","cited_by_count":567},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"2002.11569","title":"Overfitting in adversarially robust deep learning","created":"2020-02-26","cited_by_count":506},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"2010.08138","title":"Input-Aware Dynamic Backdoor Attack","created":"2020-10-16","cited_by_count":313},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"2010.03593","title":"Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples","created":"2020-10-07","cited_by_count":278},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"2002.11242","title":"Attacks Which Do Not Kill Training Make Adversarial Learning Stronger","created":"2020-02-26","cited_by_count":243},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"2010.01736","title":"Geometry-aware Instance-reweighted Adversarial Training","created":"2020-10-05","cited_by_count":198},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"2012.10544","title":"Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses","created":"2020-12-18","cited_by_count":180},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"2010.06121","title":"To be Robust or to be Fair: Towards Fairness in Adversarial Training","created":"2020-10-13","cited_by_count":137},{"id":"1808.01688","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","created":"2018-08-05","cited_by_count":135},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119},{"id":"2006.12557","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","created":"2020-06-22","cited_by_count":116},{"id":"1804.07933","title":"Is feature selection secure against training data poisoning?","created":"2018-04-21","cited_by_count":93},{"id":"2011.09527","title":"Strong Data Augmentation Sanitizes Poisoning and Backdoor Attacks Without an Accuracy Tradeoff","created":"2020-11-18","cited_by_count":89},{"id":"1905.09027","title":"Learning to Confuse: Generating Training Time Adversarial Data with Auto-Encoder","created":"2019-05-22","cited_by_count":70},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59},{"id":"2106.07904","title":"Probabilistic Margins for Instance Reweighting in Adversarial Training","created":"2021-06-15","cited_by_count":57},{"id":"2002.04599","title":"Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations","created":"2020-02-11","cited_by_count":55},{"id":"2010.11213","title":"Precise Statistical Analysis of Classification Accuracies for Adversarial Training","created":"2020-10-21","cited_by_count":50},{"id":"2012.12235","title":"Unadversarial Examples: Designing Objects for Robust Vision","created":"2020-12-22","cited_by_count":45},{"id":"2103.04623","title":"Consistency Regularization for Adversarial Robustness","created":"2021-03-08","cited_by_count":42},{"id":"2006.05161","title":"Provable tradeoffs in adversarially robust classification","created":"2020-06-09","cited_by_count":40},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34},{"id":"2102.03482","title":"Understanding the Interaction of Adversarial Training with Noisy Labels","created":"2021-02-06","cited_by_count":19},{"id":"2105.08709","title":"Learning and Certification under Instance-targeted Poisoning","created":"2021-05-18","cited_by_count":13},{"id":"2111.10130","title":"Fooling Adversarial Training with Inducing Noise","created":"2021-11-19","cited_by_count":13},{"id":"2101.06309","title":"Fundamental Tradeoffs in Distributionally Adversarial Training","created":"2021-01-15","cited_by_count":12},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10},{"id":"2106.06654","title":"Disrupting Model Training with Adversarial Shortcuts","created":"2021-06-12","cited_by_count":7},{"id":"1905.07112","title":"A critique of the DeepSec Platform for Security Analysis of Deep Learning Models","created":"2019-05-17","cited_by_count":6},{"id":"2012.14738","title":"With False Friends Like These, Who Can Notice Mistakes?","created":"2020-12-29","cited_by_count":4}],"next_cursor":null}