{"list":"other","total":51,"rows":[{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1609.07843","title":"Pointer Sentinel Mixture Models","created":"2016-09-26","cited_by_count":3096},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1912.04977","title":"Advances and Open Problems in Federated Learning","created":"2019-12-10","cited_by_count":3046},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"1609.08144","title":"Google's Neural Machine Translation System: Bridging the Gap between Human and Machine Translation","created":"2016-09-26","cited_by_count":1475},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"2202.07646","title":"Quantifying Memorization Across Neural Language Models","created":"2022-02-15","cited_by_count":763},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1906.05271","title":"Does Learning Require Memorization? A Short Tale about a Long Tail","created":"2019-06-12","cited_by_count":460},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248},{"id":"1804.00308","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","created":"2018-04-01","cited_by_count":225},{"id":"2006.07709","title":"Auditing Differentially Private Machine Learning: How Private is Private SGD?","created":"2020-06-13","cited_by_count":218},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"1807.05852","title":"Machine Learning with Membership Privacy using Adversarial Regularization","created":"2018-07-16","cited_by_count":186},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"2203.03929","title":"Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attacks","created":"2022-03-08","cited_by_count":175},{"id":"1709.07886","title":"Machine Learning Models that Remember Too Much","created":"2017-09-22","cited_by_count":169},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2007.02220","title":"You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion","created":"2020-07-05","cited_by_count":131},{"id":"2112.02918","title":"When the Curious Abandon Honesty: Federated Learning Is Not Private","created":"2021-12-06","cited_by_count":127},{"id":"1803.02815","title":"Sever: A Robust Meta-Algorithm for Stochastic Optimization","created":"2018-03-07","cited_by_count":125},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119},{"id":"2005.10881","title":"Revisiting Membership Inference Under Realistic Assumptions","created":"2020-05-21","cited_by_count":112},{"id":"1611.02315","title":"Learning from Untrusted Data","created":"2016-11-07","cited_by_count":90},{"id":"1912.07942","title":"Analyzing Information Leakage of Updates to Natural Language Models","created":"2019-12-17","cited_by_count":90},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"2202.00580","title":"Fishing for User Data in Large-Batch Federated Learning via Gradient Magnification","created":"2022-02-01","cited_by_count":73},{"id":"2009.10031","title":"Training Production Language Models without Memorizing User Data","created":"2020-09-21","cited_by_count":68},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60},{"id":"2201.12675","title":"Decepticons: Corrupted Transformers Breach Privacy in Federated Learning for Language Models","created":"2022-01-29","cited_by_count":53},{"id":"2106.03408","title":"Antipodes of Label Differential Privacy: PATE and ALIBI","created":"2021-06-07","cited_by_count":52},{"id":"2012.12235","title":"Unadversarial Examples: Designing Objects for Robust Vision","created":"2020-12-22","cited_by_count":45},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"1909.13374","title":"Deep k-NN Defense against Clean-label Data Poisoning Attacks","created":"2019-09-29","cited_by_count":1}],"next_cursor":null}