{"list":"other","total":81,"rows":[{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1705.07874","title":"A Unified Approach to Interpreting Model Predictions","created":"2017-05-22","cited_by_count":6555},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1602.04938","title":"\"Why Should I Trust You?\": Explaining the Predictions of Any Classifier","created":"2016-02-16","cited_by_count":5070},{"id":"1506.02142","title":"Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learning","created":"2015-06-06","cited_by_count":4448},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1710.07035","title":"Generative Adversarial Networks: An Overview","created":"2017-10-19","cited_by_count":590},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1812.03411","title":"Feature Denoising for Improving Adversarial Robustness","created":"2018-12-09","cited_by_count":314},{"id":"1705.09064","title":"MagNet: a Two-Pronged Defense against Adversarial Examples","created":"2017-05-25","cited_by_count":269},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"1711.09404","title":"Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients","created":"2017-11-26","cited_by_count":236},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"2010.00467","title":"Bag of Tricks for Adversarial Training","created":"2020-10-01","cited_by_count":200},{"id":"1710.11342","title":"Generating Natural Adversarial Examples","created":"2017-10-31","cited_by_count":183},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"1511.05741","title":"A Random Forest Guided Tour","created":"2015-11-18","cited_by_count":168},{"id":"1704.03453","title":"The Space of Transferable Adversarial Examples","created":"2017-04-11","cited_by_count":158},{"id":"1412.5068","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","created":"2014-12-11","cited_by_count":146},{"id":"2006.07589","title":"Adversarial Self-Supervised Contrastive Learning","created":"2020-06-13","cited_by_count":139},{"id":"1610.00768","title":"Technical Report on the CleverHans v2.1.0 Adversarial Examples Library","created":"2016-10-03","cited_by_count":124},{"id":"1906.02611","title":"Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentation","created":"2019-06-06","cited_by_count":105},{"id":"1805.09190","title":"Towards the first adversarially robust neural network model on MNIST","created":"2018-05-23","cited_by_count":104},{"id":"1907.10764","title":"Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Training","created":"2019-07-24","cited_by_count":95},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"1702.05983","title":"Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN","created":"2017-02-20","cited_by_count":75},{"id":"1608.07690","title":"A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples","created":"2016-08-27","cited_by_count":70},{"id":"1511.03034","title":"Learning with a Strong Adversary","created":"2015-11-10","cited_by_count":68},{"id":"1704.08996","title":"Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection","created":"2017-04-28","cited_by_count":52},{"id":"1906.03499","title":"ML-LOO: Detecting Adversarial Examples with Feature Attribution","created":"2019-06-08","cited_by_count":48},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"1709.00609","title":"Security Evaluation of Pattern Classifiers under Attack","created":"2017-09-02","cited_by_count":39},{"id":"1905.12386","title":"Misleading Authorship Attribution of Source Code using Adversarial Learning","created":"2019-05-29","cited_by_count":33},{"id":"2006.16545","title":"Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection","created":"2020-06-30","cited_by_count":33},{"id":"1801.02950","title":"Adversarial Deep Learning for Robust Detection of Binary Encoded Malware","created":"2018-01-09","cited_by_count":32},{"id":"1910.00470","title":"Deep Neural Rejection against Adversarial Examples","created":"2019-10-01","cited_by_count":32},{"id":"1612.04433","title":"MaMaDroid: Detecting Android Malware by Building Markov Chains of Behavioral Models","created":"2016-12-13","cited_by_count":30},{"id":"1808.08994","title":"Data Poisoning Attacks against Online Learning","created":"2018-08-27","cited_by_count":27},{"id":"1705.05264","title":"Extending Defensive Distillation","created":"2017-05-15","cited_by_count":23},{"id":"1703.04318","title":"Blocking Transferability of Adversarial Examples in Black-Box Learning Systems","created":"2017-03-13","cited_by_count":19},{"id":"1808.04218","title":"Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection","created":"2018-08-10","cited_by_count":19},{"id":"2005.11671","title":"Arms Race in Adversarial Malware Detection: A Survey","created":"2020-05-24","cited_by_count":16},{"id":"2111.08223","title":"A Survey on Adversarial Attacks for Malware Analysis","created":"2021-11-16","cited_by_count":16},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14},{"id":"2110.03301","title":"EvadeDroid: A Practical Evasion Attack on Machine Learning for Black-box Android Malware Detection","created":"2021-10-07","cited_by_count":13},{"id":"1711.07477","title":"MaMaDroid: Detecting Android Malware by Building Markov Chains of Behavioral Models (Extended Version)","created":"2017-11-20","cited_by_count":11},{"id":"1610.01239","title":"Adversary Resistant Deep Neural Networks with an Application to Malware Detection","created":"2016-10-05","cited_by_count":9},{"id":"1908.05759","title":"Similarity-based Android Malware Detection Using Hamming Distance of Static Binary Features","created":"2019-08-13","cited_by_count":8},{"id":"1902.04238","title":"Adversarial Samples on Android Malware Detection Systems for IoT Systems","created":"2019-02-12","cited_by_count":7},{"id":"2105.11593","title":"OFEI: A Semi-black-box Android Adversarial Sample Attack Framework Against DLaaS","created":"2021-05-25","cited_by_count":7},{"id":"1607.08149","title":"N-opcode Analysis for Android Malware Classification and Categorization","created":"2016-07-27","cited_by_count":6},{"id":"2102.06747","title":"Realizable Universal Adversarial Perturbations for Malware","created":"2021-02-12","cited_by_count":5},{"id":"1809.06498","title":"HashTran-DNN: A Framework for Enhancing Robustness of Deep Neural Networks against Adversarial Malware Samples","created":"2018-09-18","cited_by_count":4},{"id":"2007.08716","title":"Understanding and Diagnosing Vulnerability under Adversarial Attacks","created":"2020-07-17","cited_by_count":4},{"id":"1302.7212","title":"DroidAnalytics: A Signature Based Analytic System to Collect, Extract, Analyze and Associate Android Malware","created":"2013-02-28","cited_by_count":3},{"id":"1705.07512","title":"Pyramid: Enhancing Selectivity in Big Data Protection with Count Featurization","created":"2017-05-21","cited_by_count":2},{"id":"2201.05071","title":"Evaluation of Neural Networks Defenses and Attacks using NDCG and Reciprocal Rank Metrics","created":"2022-01-10","cited_by_count":2},{"id":"2202.13922","title":"MaMaDroid2.0 -- The Holes of Control Flow Graphs","created":"2022-02-28","cited_by_count":1}],"next_cursor":null}