{"list":"other","total":67,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6980","title":"Adam: A Method for Stochastic Optimization","created":"2014-12-22","cited_by_count":37240},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1705.07874","title":"A Unified Approach to Interpreting Model Predictions","created":"2017-05-22","cited_by_count":6555},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1602.04938","title":"\"Why Should I Trust You?\": Explaining the Predictions of Any Classifier","created":"2016-02-16","cited_by_count":5070},{"id":"1703.01365","title":"Axiomatic Attribution for Deep Networks","created":"2017-03-04","cited_by_count":3384},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1512.04150","title":"Learning Deep Features for Discriminative Localization","created":"2015-12-14","cited_by_count":2436},{"id":"1312.6034","title":"Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Maps","created":"2013-12-20","cited_by_count":2371},{"id":"1704.00028","title":"Improved Training of Wasserstein GANs","created":"2017-03-31","cited_by_count":2235},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1704.02685","title":"Learning Important Features Through Propagating Activation Differences","created":"2017-04-10","cited_by_count":1458},{"id":"1810.03292","title":"Sanity Checks for Saliency Maps","created":"2018-10-08","cited_by_count":1156},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1702.03118","title":"Sigmoid-Weighted Linear Units for Neural Network Function Approximation in Reinforcement Learning","created":"2017-02-10","cited_by_count":950},{"id":"1710.11063","title":"Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networks","created":"2017-10-30","cited_by_count":939},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1704.03296","title":"Interpretable Explanations of Black Boxes by Meaningful Perturbation","created":"2017-04-11","cited_by_count":612},{"id":"1910.01279","title":"Score-CAM: Score-Weighted Visual Explanations for Convolutional Neural Networks","created":"2019-10-03","cited_by_count":582},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1710.10547","title":"Interpretation of Neural Networks is Fragile","created":"2017-10-29","cited_by_count":444},{"id":"1911.02508","title":"Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methods","created":"2019-11-06","cited_by_count":443},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1902.10178","title":"Unmasking Clever Hans Predictors and Assessing What Machines Really Learn","created":"2019-02-26","cited_by_count":365},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"1711.00867","title":"The (Un)reliability of saliency methods","created":"2017-11-02","cited_by_count":333},{"id":"2010.08138","title":"Input-Aware Dynamic Backdoor Attack","created":"2020-10-16","cited_by_count":313},{"id":"1605.01713","title":"Not Just a Black Box: Learning Important Features Through Propagating Activation Differences","created":"2016-05-05","cited_by_count":297},{"id":"1804.00308","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","created":"2018-04-01","cited_by_count":225},{"id":"1906.07983","title":"Explanations can be manipulated and geometry is to blame","created":"2019-06-19","cited_by_count":216},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161},{"id":"1702.08591","title":"The Shattered Gradients Problem: If resnets are the answer, then what is the question?","created":"2017-02-28","cited_by_count":157},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123},{"id":"2006.12557","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","created":"2020-06-22","cited_by_count":116},{"id":"1902.02041","title":"Fooling Neural Network Interpretations via Adversarial Model Manipulation","created":"2019-02-06","cited_by_count":112},{"id":"1807.07838","title":"TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time","created":"2018-07-20","cited_by_count":108},{"id":"2006.08131","title":"An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks","created":"2020-06-15","cited_by_count":97},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"1901.09749","title":"Fairwashing: the risk of rationalization","created":"2019-01-28","cited_by_count":81},{"id":"1812.00891","title":"Interpretable Deep Learning under Fire","created":"2018-12-03","cited_by_count":74},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73},{"id":"2007.09969","title":"Fairwashing Explanations with Off-Manifold Detergent","created":"2020-07-20","cited_by_count":72},{"id":"1611.07270","title":"Investigating the influence of noise and distractors on the interpretation of neural networks","created":"2016-11-22","cited_by_count":54},{"id":"1911.07399","title":"NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanations","created":"2019-11-18","cited_by_count":50},{"id":"1811.07789","title":"Explicit Bias Discovery in Visual Question Answering Models","created":"2018-11-19","cited_by_count":42},{"id":"1909.03418","title":"When Explainability Meets Adversarial Learning: Detecting Adversarial Examples using SHAP Signatures","created":"2019-09-08","cited_by_count":40},{"id":"2003.08633","title":"Backdooring and Poisoning Neural Networks with Image-Scaling Attacks","created":"2020-03-19","cited_by_count":28},{"id":"1908.03369","title":"Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems","created":"2019-08-09","cited_by_count":27},{"id":"2004.11514","title":"Systematic Evaluation of Backdoor Data Poisoning Attacks on Image Classifiers","created":"2020-04-24","cited_by_count":23},{"id":"2011.10698","title":"Backdoor Attacks on the DNN Interpretation System","created":"2020-11-21","cited_by_count":6},{"id":"2106.12328","title":"Learning Explainable Representations of Malware Behavior","created":"2021-06-23","cited_by_count":2}],"next_cursor":null}