{"list":"other","total":128,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1603.06560","title":"Hyperband: A Novel Bandit-Based Approach to Hyperparameter Optimization","created":"2016-03-21","cited_by_count":699},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1806.04910","title":"Bilevel Programming for Hyperparameter Optimization and Meta-Learning","created":"2018-06-13","cited_by_count":405},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"1502.03492","title":"Gradient-based Hyperparameter Optimization through Reversible Learning","created":"2015-02-11","cited_by_count":360},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"2010.08138","title":"Input-Aware Dynamic Backdoor Attack","created":"2020-10-16","cited_by_count":313},{"id":"1911.02590","title":"Optimizing Millions of Hyperparameters by Implicit Differentiation","created":"2019-11-06","cited_by_count":304},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"2007.08432","title":"Data Poisoning Attacks Against Federated Learning Systems","created":"2020-07-16","cited_by_count":275},{"id":"2011.10369","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","created":"2020-11-20","cited_by_count":263},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"1902.08412","title":"Adversarial Attacks on Graph Neural Networks via Meta Learning","created":"2019-02-22","cited_by_count":261},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1911.07963","title":"Can You Really Backdoor Federated Learning?","created":"2019-11-18","cited_by_count":255},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"1807.01069","title":"Adversarial Robustness Toolbox v1.0.0","created":"2018-07-03","cited_by_count":215},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"2012.10544","title":"Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses","created":"2020-12-18","cited_by_count":180},{"id":"2003.03030","title":"Clean-Label Backdoor Attacks on Video Recognition Models","created":"2020-03-06","cited_by_count":169},{"id":"1812.10528","title":"Adversarial Attack and Defense on Graph Data: A Survey","created":"2018-12-26","cited_by_count":167},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"1906.10842","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","created":"2019-06-26","cited_by_count":146},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"1808.10307","title":"Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation","created":"2018-08-30","cited_by_count":134},{"id":"2006.14580","title":"Backdoor Attacks Against Deep Learning Systems in the Physical World","created":"2020-06-25","cited_by_count":134},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130},{"id":"2006.11165","title":"Backdoor Attacks to Graph Neural Networks","created":"2020-06-19","cited_by_count":128},{"id":"1803.02815","title":"Sever: A Robust Meta-Algorithm for Stochastic Optimization","created":"2018-03-07","cited_by_count":125},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"2007.10760","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","created":"2020-07-21","cited_by_count":123},{"id":"1908.01763","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","created":"2019-08-02","cited_by_count":122},{"id":"2004.00225","title":"MetaPoison: Practical General-purpose Clean-label Data Poisoning","created":"2020-04-01","cited_by_count":120},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119},{"id":"2003.08904","title":"RAB: Provable Robustness Against Backdoor Attacks","created":"2020-03-19","cited_by_count":118},{"id":"2006.12557","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","created":"2020-06-22","cited_by_count":116},{"id":"2006.14768","title":"Deep Partition Aggregation: Provable Defense against General Poisoning Attacks","created":"2020-06-26","cited_by_count":115},{"id":"2006.11890","title":"Graph Backdoor","created":"2020-06-21","cited_by_count":112},{"id":"1809.01093","title":"Adversarial Attacks on Node Embeddings via Graph Poisoning","created":"2018-09-04","cited_by_count":109},{"id":"2002.03018","title":"Certified Robustness to Label-Flipping Attacks via Randomized Smoothing","created":"2020-02-07","cited_by_count":108},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98},{"id":"2011.08512","title":"Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database","created":"2020-11-17","cited_by_count":96},{"id":"1911.07116","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","created":"2019-11-16","cited_by_count":95},{"id":"2012.11212","title":"Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification","created":"2020-12-21","cited_by_count":95},{"id":"1804.07933","title":"Is feature selection secure against training data poisoning?","created":"2018-04-21","cited_by_count":93},{"id":"1701.04143","title":"Vulnerability of Deep Reinforcement Learning to Policy Induction Attacks","created":"2017-01-16","cited_by_count":91},{"id":"2008.00312","title":"Trojaning Language Models for Fun and Profit","created":"2020-08-01","cited_by_count":90},{"id":"2011.09527","title":"Strong Data Augmentation Sanitizes Poisoning and Backdoor Attacks Without an Accuracy Tradeoff","created":"2020-11-18","cited_by_count":89},{"id":"2003.12613","title":"Adaptive Reward-Poisoning Attacks against Reinforcement Learning","created":"2020-03-27","cited_by_count":86},{"id":"2007.12070","title":"Mitigating backdoor attacks in LSTM-based Text Classification Systems by Backdoor Keyword Identification","created":"2020-07-11","cited_by_count":86},{"id":"1910.04749","title":"Defending Neural Backdoors via Generative Distribution Modeling","created":"2019-10-10","cited_by_count":84},{"id":"2002.11497","title":"On the Effectiveness of Mitigating Data Poisoning Attacks with Gradient Shaping","created":"2020-02-26","cited_by_count":83},{"id":"2003.12909","title":"Policy Teaching via Environment Poisoning: Training-time Adversarial Attacks against Reinforcement Learning","created":"2020-03-28","cited_by_count":81},{"id":"1810.01032","title":"Reinforcement Learning with Perturbed Rewards","created":"2018-10-02","cited_by_count":79},{"id":"1903.09860","title":"Data Poisoning against Differentially-Private Learners: Attacks and Defenses","created":"2019-03-23","cited_by_count":78},{"id":"2004.04692","title":"Rethinking the Trigger of Backdoor Attack","created":"2020-04-09","cited_by_count":77},{"id":"2012.07006","title":"DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation","created":"2020-12-13","cited_by_count":77},{"id":"1905.13409","title":"Bypassing Backdoor Detection Algorithms in Deep Learning","created":"2019-05-31","cited_by_count":74},{"id":"1803.00992","title":"Label Sanitization against Label Flipping Poisoning Attacks","created":"2018-03-02","cited_by_count":73},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73},{"id":"1705.08417","title":"Reinforcement Learning with a Corrupted Reward Channel","created":"2017-05-23","cited_by_count":70},{"id":"1905.09027","title":"Learning to Confuse: Generating Training Time Adversarial Data with Auto-Encoder","created":"2019-05-22","cited_by_count":70},{"id":"2006.14026","title":"Subpopulation Data Poisoning Attacks","created":"2020-06-24","cited_by_count":70},{"id":"2005.00191","title":"Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability","created":"2020-05-01","cited_by_count":66},{"id":"2012.03765","title":"Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks","created":"2020-12-07","cited_by_count":60},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60},{"id":"2004.07401","title":"Poisoning Attacks on Algorithmic Fairness","created":"2020-04-15","cited_by_count":59},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59},{"id":"1807.06732","title":"Motivating the Rules of the Game for Adversarial Example Research","created":"2018-07-18","cited_by_count":57},{"id":"2110.14880","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","created":"2021-10-28","cited_by_count":53},{"id":"1703.01340","title":"Generative Poisoning Attack Method Against Neural Networks","created":"2017-03-03","cited_by_count":52},{"id":"1906.10571","title":"Deceptive Reinforcement Learning Under Adversarial Manipulations on Cost Signals","created":"2019-06-24","cited_by_count":50},{"id":"1911.07399","title":"NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanations","created":"2019-11-18","cited_by_count":50},{"id":"2107.14569","title":"Can You Hear It? Backdoor Attacks via Ultrasonic Triggers","created":"2021-07-30","cited_by_count":44},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34},{"id":"1907.09470","title":"Characterizing Attacks on Deep Reinforcement Learning","created":"2019-07-21","cited_by_count":31}],"next_cursor":"100"}