{"list":"other","total":81,"rows":[{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"1905.12457","title":"A backdoor attack against LSTM-based text classification systems","created":"2019-05-29","cited_by_count":227},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"2003.03030","title":"Clean-Label Backdoor Attacks on Video Recognition Models","created":"2020-03-06","cited_by_count":169},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"1906.10842","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","created":"2019-06-26","cited_by_count":146},{"id":"2004.00543","title":"Physically Realizable Adversarial Examples for LiDAR Object Detection","created":"2020-04-01","cited_by_count":137},{"id":"1808.10307","title":"Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation","created":"2018-08-30","cited_by_count":134},{"id":"2006.14580","title":"Backdoor Attacks Against Deep Learning Systems in the Physical World","created":"2020-06-25","cited_by_count":134},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"1406.2984","title":"Joint Training of a Convolutional Network and a Graphical Model for Human Pose Estimation","created":"2014-06-11","cited_by_count":129},{"id":"2006.11165","title":"Backdoor Attacks to Graph Neural Networks","created":"2020-06-19","cited_by_count":128},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"1908.01763","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","created":"2019-08-02","cited_by_count":122},{"id":"2003.08904","title":"RAB: Provable Robustness Against Backdoor Attacks","created":"2020-03-19","cited_by_count":118},{"id":"1909.05193","title":"TBT: Targeted Neural Network Attack with Bit Trojan","created":"2019-09-10","cited_by_count":113},{"id":"2006.11890","title":"Graph Backdoor","created":"2020-06-21","cited_by_count":112},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98},{"id":"2006.08131","title":"An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks","created":"2020-06-15","cited_by_count":97},{"id":"1911.07116","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","created":"2019-11-16","cited_by_count":95},{"id":"2007.15802","title":"Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Cases","created":"2020-07-31","cited_by_count":95},{"id":"2012.11212","title":"Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification","created":"2020-12-21","cited_by_count":95},{"id":"1910.04749","title":"Defending Neural Backdoors via Generative Distribution Modeling","created":"2019-10-10","cited_by_count":84},{"id":"2002.11497","title":"On the Effectiveness of Mitigating Data Poisoning Attacks with Gradient Shaping","created":"2020-02-26","cited_by_count":83},{"id":"1810.11780","title":"Deep Affinity Network for Multiple Object Tracking","created":"2018-10-28","cited_by_count":82},{"id":"2002.11750","title":"On Certifying Robustness against Backdoor Attacks via Randomized Smoothing","created":"2020-02-26","cited_by_count":77},{"id":"2004.04692","title":"Rethinking the Trigger of Backdoor Attack","created":"2020-04-09","cited_by_count":77},{"id":"2012.07006","title":"DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation","created":"2020-12-13","cited_by_count":77},{"id":"1905.13409","title":"Bypassing Backdoor Detection Algorithms in Deep Learning","created":"2019-05-31","cited_by_count":74},{"id":"1911.10312","title":"Design and Evaluation of a Multi-Domain Trojan Detection Method on Deep Neural Networks","created":"2019-11-23","cited_by_count":71},{"id":"1812.03128","title":"Backdooring Convolutional Neural Networks via Targeted Weight Perturbations","created":"2018-12-07","cited_by_count":69},{"id":"1906.10395","title":"Quantitative Verification of Neural Networks And its Security Applications","created":"2019-06-25","cited_by_count":56},{"id":"1908.02203","title":"Model Agnostic Defence against Backdoor Attacks in Machine Learning","created":"2019-08-06","cited_by_count":52},{"id":"1911.07399","title":"NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanations","created":"2019-11-18","cited_by_count":50},{"id":"2003.04247","title":"Towards Probabilistic Verification of Machine Unlearning","created":"2020-03-09","cited_by_count":50},{"id":"2001.03274","title":"Backdoor Attacks against Transfer Learning with Pre-trained Deep Learning Models","created":"2020-01-10","cited_by_count":44},{"id":"2101.06896","title":"DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injection","created":"2021-01-18","cited_by_count":44},{"id":"2003.07859","title":"Stop-and-Go: Exploring Backdoor Attacks on Deep Reinforcement Learning-based Traffic Congestion Control Systems","created":"2020-03-17","cited_by_count":37},{"id":"2008.07711","title":"One-pixel Signature: Characterizing CNN Models for Backdoor Detection","created":"2020-08-18","cited_by_count":34},{"id":"2106.06469","title":"Topological Detection of Trojaned Neural Networks","created":"2021-06-11","cited_by_count":34},{"id":"2009.10639","title":"What Do You See? Evaluation of Explainable Artificial Intelligence (XAI) Interpretability through Neural Backdoors","created":"2020-09-22","cited_by_count":32},{"id":"1903.06638","title":"TrojDRL: Trojan Attacks on Deep Reinforcement Learning Agents","created":"2019-03-01","cited_by_count":30},{"id":"2010.05821","title":"Open-sourced Dataset Protection via Backdoor Watermarking","created":"2020-10-12","cited_by_count":30},{"id":"2003.08633","title":"Backdooring and Poisoning Neural Networks with Image-Scaling Attacks","created":"2020-03-19","cited_by_count":28},{"id":"2007.00711","title":"ConFoc: Content-Focus Protection Against Trojan Attacks on Neural Networks","created":"2020-07-01","cited_by_count":28},{"id":"2010.03007","title":"BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models","created":"2020-10-06","cited_by_count":25},{"id":"1902.05655","title":"Going Deep in Medical Image Analysis: Concepts, Methods, Challenges and Future Directions","created":"2019-02-15","cited_by_count":24},{"id":"2009.02326","title":"CLEANN: Accelerated Trojan Shield for Embedded Neural Networks","created":"2020-09-04","cited_by_count":22},{"id":"1902.09972","title":"Design of intentional backdoors in sequential models","created":"2019-02-26","cited_by_count":21},{"id":"2010.03282","title":"Don't Trigger Me! A Triggerless Backdoor Attack Against Deep Neural Networks","created":"2020-10-07","cited_by_count":19},{"id":"1910.10766","title":"Trojan Attacks on Wireless Signal Classification with Adversarial Machine Learning","created":"2019-10-23","cited_by_count":15},{"id":"2201.00672","title":"Compression-Resistant Backdoor Attack against Deep Neural Networks","created":"2022-01-03","cited_by_count":14},{"id":"2103.10274","title":"TOP: Backdoor Detection in Neural Networks via Transferability of Perturbation","created":"2021-03-18","cited_by_count":13},{"id":"1806.05768","title":"Hardware Trojan Attacks on Neural Networks","created":"2018-06-14","cited_by_count":12},{"id":"1603.07292","title":"Debugging Machine Learning Tasks","created":"2016-03-23","cited_by_count":10},{"id":"1912.01206","title":"Deep Probabilistic Models to Detect Data Poisoning Attacks","created":"2019-12-03","cited_by_count":10},{"id":"2011.02526","title":"Detecting Backdoors in Neural Networks Using Novel Feature-Based Anomaly Detection","created":"2020-11-04","cited_by_count":9},{"id":"1805.05098","title":"Hu-Fu: Hardware and Software Collaborative Attack Framework against Neural Networks","created":"2018-05-14","cited_by_count":8},{"id":"2008.00047","title":"Towards Class-Oriented Poisoning Attacks Against Neural Networks","created":"2020-07-31","cited_by_count":8},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8},{"id":"1908.10498","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","created":"2019-08-27","cited_by_count":7}],"next_cursor":null}