{"list":"other","total":52,"rows":[{"id":"1705.07874","title":"A Unified Approach to Interpreting Model Predictions","created":"2017-05-22","cited_by_count":6555},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1908.07125","title":"Universal Adversarial Triggers for Attacking and Analyzing NLP","created":"2019-08-20","cited_by_count":722},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"2010.08138","title":"Input-Aware Dynamic Backdoor Attack","created":"2020-10-16","cited_by_count":313},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166},{"id":"1804.04637","title":"EMBER: An Open Dataset for Training Static PE Malware Machine Learning Models","created":"2018-04-12","cited_by_count":165},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"1906.10842","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","created":"2019-06-26","cited_by_count":146},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123},{"id":"2003.08904","title":"RAB: Provable Robustness Against Backdoor Attacks","created":"2020-03-19","cited_by_count":118},{"id":"1909.05193","title":"TBT: Targeted Neural Network Attack with Bit Trojan","created":"2019-09-10","cited_by_count":113},{"id":"1807.07838","title":"TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time","created":"2018-07-20","cited_by_count":108},{"id":"2002.03018","title":"Certified Robustness to Label-Flipping Attacks via Randomized Smoothing","created":"2020-02-07","cited_by_count":108},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98},{"id":"2012.11212","title":"Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification","created":"2020-12-21","cited_by_count":95},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"2002.11750","title":"On Certifying Robustness against Backdoor Attacks via Randomized Smoothing","created":"2020-02-26","cited_by_count":77},{"id":"2104.09667","title":"Manipulating SGD with Data Ordering Attacks","created":"2021-04-19","cited_by_count":74},{"id":"2112.05224","title":"Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures","created":"2021-12-09","cited_by_count":73},{"id":"2006.14026","title":"Subpopulation Data Poisoning Attacks","created":"2020-06-24","cited_by_count":70},{"id":"1801.08917","title":"Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning","created":"2018-01-26","cited_by_count":61},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60},{"id":"1704.08996","title":"Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection","created":"2017-04-28","cited_by_count":52},{"id":"1911.07399","title":"NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanations","created":"2019-11-18","cited_by_count":50},{"id":"2012.07634","title":"SOREL-20M: A Large Scale Benchmark Dataset for Malicious PE Detection","created":"2020-12-14","cited_by_count":49},{"id":"2008.07711","title":"One-pixel Signature: Characterizing CNN Models for Backdoor Detection","created":"2020-08-18","cited_by_count":34},{"id":"2201.08474","title":"Post-Training Detection of Backdoor Attacks for Two-Class and Multi-Attack Scenarios","created":"2022-01-20","cited_by_count":29},{"id":"1904.03542","title":"On Training Robust PDF Malware Classifiers","created":"2019-04-06","cited_by_count":19},{"id":"2009.03779","title":"Automatic Yara Rule Generation Using Biclustering","created":"2020-09-06","cited_by_count":17},{"id":"2011.02526","title":"Detecting Backdoors in Neural Networks Using Novel Feature-Based Anomaly Detection","created":"2020-11-04","cited_by_count":9},{"id":"1811.06888","title":"The MalSource Dataset: Quantifying Complexity and Code Reuse in Malware Development","created":"2018-11-16","cited_by_count":7}],"next_cursor":null}