{"list":"other","total":53,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1708.07747","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","created":"2017-08-25","cited_by_count":4349},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"1909.06335","title":"Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classification","created":"2019-09-13","cited_by_count":851},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1803.01498","title":"Byzantine-Robust Distributed Learning: Towards Optimal Statistical Rates","created":"2018-03-05","cited_by_count":711},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1805.08974","title":"Do Better ImageNet Models Transfer Better?","created":"2018-05-23","cited_by_count":565},{"id":"1911.11815","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","created":"2019-11-26","cited_by_count":493},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"1610.05755","title":"Semi-supervised Knowledge Transfer for Deep Learning from Private Training Data","created":"2016-10-18","cited_by_count":348},{"id":"2012.13995","title":"FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping","created":"2020-12-27","cited_by_count":346},{"id":"1802.08908","title":"Scalable Private Learning with PATE","created":"2018-02-24","cited_by_count":269},{"id":"1804.00308","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","created":"2018-04-01","cited_by_count":225},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"1903.03936","title":"Fall of Empires: Breaking Byzantine-tolerant SGD by Inner Product Manipulation","created":"2019-03-10","cited_by_count":141},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"2112.02918","title":"When the Curious Abandon Honesty: Federated Learning Is Not Private","created":"2021-12-06","cited_by_count":127},{"id":"2006.14768","title":"Deep Partition Aggregation: Provable Defense against General Poisoning Attacks","created":"2020-06-26","cited_by_count":115},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101},{"id":"2008.04495","title":"Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks","created":"2020-08-11","cited_by_count":94},{"id":"2010.06457","title":"CrypTFlow2: Practical 2-Party Secure Inference","created":"2020-10-13","cited_by_count":82},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"2201.00763","title":"DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection","created":"2022-01-03","cited_by_count":81},{"id":"2004.02229","title":"FALCON: Honest-Majority Maliciously Secure Framework for Private Deep Learning","created":"2020-04-05","cited_by_count":74},{"id":"1502.04585","title":"The Ladder: A Reliable Leaderboard for Machine Learning Competitions","created":"2015-02-16","cited_by_count":69},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67},{"id":"2102.01854","title":"Provably Secure Federated Learning against Malicious Clients","created":"2021-02-03","cited_by_count":63},{"id":"1909.07814","title":"CrypTFlow: Secure TensorFlow Inference","created":"2019-09-16","cited_by_count":61},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59},{"id":"2006.07267","title":"Leakage of Dataset Properties in Multi-Party Machine Learning","created":"2020-06-12","cited_by_count":47},{"id":"2109.06024","title":"Formalizing and Estimating Distribution Inference Risks","created":"2021-09-13","cited_by_count":43},{"id":"2102.05188","title":"CaPC Learning: Confidential and Private Collaborative Learning","created":"2021-02-09","cited_by_count":33},{"id":"1806.05358","title":"Defending Against Saddle Point Attack in Byzantine-Robust Distributed Learning","created":"2018-06-14","cited_by_count":32},{"id":"1909.09630","title":"Manipulation Attacks in Local Differential Privacy","created":"2019-09-20","cited_by_count":28},{"id":"2203.17005","title":"Privacy-Preserving Aggregation in Federated Learning: A Survey","created":"2022-03-31","cited_by_count":27},{"id":"1911.02046","title":"Data Poisoning Attacks to Local Differential Privacy Protocols","created":"2019-11-05","cited_by_count":26},{"id":"1912.02631","title":"Trident: Efficient 4PC Framework for Privacy Preserving Machine Learning","created":"2019-12-05","cited_by_count":26},{"id":"1910.12435","title":"Secure Evaluation of Quantized Neural Networks","created":"2019-10-28","cited_by_count":22},{"id":"1703.02757","title":"Byzantine-Tolerant Machine Learning","created":"2017-03-08","cited_by_count":19},{"id":"2005.11901","title":"Two-Phase Multi-Party Computation Enabled Privacy-Preserving Federated Learning","created":"2020-05-25","cited_by_count":19},{"id":"1912.02592","title":"ASTRA: High Throughput 3PC over Rings with Application to Secure Prediction","created":"2019-12-05","cited_by_count":18},{"id":"2007.13585","title":"VFL: A Verifiable Federated Learning with Privacy-Preserving for Big Data in Industrial IoT","created":"2020-07-27","cited_by_count":18}],"next_cursor":null}