{"list":"other","total":92,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1406.1078","title":"Learning Phrase Representations using RNN Encoder-Decoder for Statistical Machine Translation","created":"2014-06-03","cited_by_count":4057},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1408.5882","title":"Convolutional Neural Networks for Sentence Classification","created":"2014-08-25","cited_by_count":1127},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1812.00332","title":"ProxylessNAS: Direct Neural Architecture Search on Target Task and Hardware","created":"2018-12-02","cited_by_count":673},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"2002.12200","title":"Entangled Watermarks as a Defense against Model Extraction","created":"2020-02-27","cited_by_count":149},{"id":"1910.12366","title":"Thieves on Sesame Street! Model Extraction of BERT-based APIs","created":"2019-10-27","cited_by_count":139},{"id":"2011.14779","title":"Data-Free Model Extraction","created":"2020-11-30","cited_by_count":124},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116},{"id":"1710.09435","title":"Malware Detection by Eating a Whole EXE","created":"2017-10-25","cited_by_count":115},{"id":"2005.02131","title":"Stealing Links from Graph Neural Networks","created":"2020-05-05","cited_by_count":115},{"id":"1906.00830","title":"DAWN: Dynamic Adversarial Watermarking of Neural Networks","created":"2019-06-03","cited_by_count":100},{"id":"2005.03161","title":"MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation","created":"2020-05-06","cited_by_count":99},{"id":"1912.00888","title":"Deep Neural Network Fingerprinting by Conferrable Adversarial Examples","created":"2019-12-02","cited_by_count":93},{"id":"1807.05185","title":"Model Reconstruction from Model Explanations","created":"2018-07-13","cited_by_count":86},{"id":"1811.02054","title":"Exploring Connections Between Active Learning and Model Extraction","created":"2018-11-05","cited_by_count":85},{"id":"1910.00744","title":"Reverse-Engineering Deep ReLU Networks","created":"2019-10-02","cited_by_count":83},{"id":"1906.10908","title":"Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks","created":"2019-06-26","cited_by_count":81},{"id":"1806.05476","title":"Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data","created":"2018-06-14","cited_by_count":70},{"id":"2003.04884","title":"Cryptanalytic Extraction of Neural Network Models","created":"2020-03-10","cited_by_count":68},{"id":"2001.09684","title":"Challenges and Countermeasures for Adversarial Attacks on Deep Reinforcement Learning","created":"2020-01-27","cited_by_count":61},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58},{"id":"1808.04761","title":"Cache Telepathy: Leveraging Shared Resource Attacks to Learn DNN Architectures","created":"2018-08-14","cited_by_count":57},{"id":"1911.07100","title":"Defending Against Model Stealing Attacks with Adaptive Misinformation","created":"2019-11-16","cited_by_count":57},{"id":"2103.10013","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","created":"2021-03-18","cited_by_count":53},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50},{"id":"2009.01884","title":"Model extraction from counterfactual explanations","created":"2020-09-03","cited_by_count":47},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46},{"id":"1812.11720","title":"Stealing Neural Networks via Timing Side Channels","created":"2018-12-31","cited_by_count":43},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42},{"id":"2006.12784","title":"Hermes Attack: Steal DNN Models with Lossless Inference Accuracy","created":"2020-06-23","cited_by_count":41},{"id":"2101.02559","title":"Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead","created":"2021-01-04","cited_by_count":41},{"id":"1711.07221","title":"Model Extraction Warning in MLaaS Paradigm","created":"2017-11-20","cited_by_count":40},{"id":"2010.12751","title":"Model Extraction Attacks on Graph Neural Networks: Taxonomy and Realization","created":"2020-10-24","cited_by_count":40},{"id":"2109.01165","title":"Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction","created":"2021-09-01","cited_by_count":37},{"id":"2107.08909","title":"MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AI","created":"2021-07-19","cited_by_count":35},{"id":"2205.06504","title":"DualCF: Efficient Model Extraction Attack from Counterfactual Explanations","created":"2022-05-13","cited_by_count":32},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31},{"id":"1907.10406","title":"Open DNN Box by Power Side-Channel Attack","created":"2019-07-21","cited_by_count":28},{"id":"2010.11158","title":"Black-Box Ripper: Copying black-box models using generative evolutionary algorithms","created":"2020-10-21","cited_by_count":26},{"id":"2009.09560","title":"ES Attack: Model Stealing against Deep Neural Networks without Data Hurdles","created":"2020-09-21","cited_by_count":25},{"id":"2105.00623","title":"Black-Box Dissector: Towards Erasing-based Hard-Label Model Stealing Attack","created":"2021-05-03","cited_by_count":25},{"id":"2006.05032","title":"Stealing Deep Reinforcement Learning Models for Fun and Profit","created":"2020-06-09","cited_by_count":24},{"id":"1912.07721","title":"Adversarial Model Extraction on Graph Neural Networks","created":"2019-12-16","cited_by_count":23},{"id":"2002.11021","title":"SNIFF: Reverse Engineering of Neural Networks with Fault Attacks","created":"2020-02-23","cited_by_count":23},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23},{"id":"1905.09165","title":"A framework for the extraction of Deep Neural Networks by leveraging public data","created":"2019-05-22","cited_by_count":22},{"id":"2205.07890","title":"On the Difficulty of Defending Self-Supervised Learning against Model Extraction","created":"2022-05-16","cited_by_count":22},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21},{"id":"1810.03487","title":"Security Analysis of Deep Neural Networks Operating in the Presence of Cache Side-Channel Attacks","created":"2018-10-08","cited_by_count":19},{"id":"1910.05429","title":"Extraction of Complex DNN Models: Real Threat or Boogeyman?","created":"2019-10-11","cited_by_count":19},{"id":"1809.04913","title":"Query-Efficient Black-Box Attack by Active Learning","created":"2018-09-13","cited_by_count":15},{"id":"1906.01121","title":"Adversarial Exploitation of Policy Imitation","created":"2019-06-03","cited_by_count":13},{"id":"2009.06112","title":"Information Laundering for Model Privacy","created":"2020-09-13","cited_by_count":13},{"id":"2002.06776","title":"How to 0wn NAS in Your Spare Time","created":"2020-02-17","cited_by_count":11},{"id":"1811.01811","title":"Active Deep Learning Attacks under Strict Rate Limitations for Online API Calls","created":"2018-11-05","cited_by_count":10},{"id":"2104.05921","title":"Thief, Beware of What Get You There: Towards Understanding Model Extraction Attack","created":"2021-04-13","cited_by_count":9},{"id":"1901.09113","title":"Generative Adversarial Networks for Black-Box API Attacks with Limited Training Data","created":"2019-01-25","cited_by_count":8},{"id":"1912.03959","title":"Stealing Knowledge from Protected Deep Neural Networks Using Composite Unlabeled Data","created":"2019-12-09","cited_by_count":8},{"id":"1912.08987","title":"Model Weight Theft With Just Noise Inputs: The Curious Case of the Petulant Attacker","created":"2019-12-19","cited_by_count":8},{"id":"2107.05166","title":"Stateful Detection of Model Extraction Attacks","created":"2021-07-12","cited_by_count":8},{"id":"2002.00123","title":"Model Extraction Attacks against Recurrent Neural Networks","created":"2020-02-01","cited_by_count":7},{"id":"1703.07909","title":"Data Driven Exploratory Attacks on Black Box Classifiers in Adversarial Domains","created":"2017-03-23","cited_by_count":6},{"id":"1806.10313","title":"DeepObfuscation: Securing the Structure of Convolutional Neural Networks via Knowledge Distillation","created":"2018-06-27","cited_by_count":6},{"id":"1911.11932","title":"Survey of Attacks and Defenses on Edge-Deployed Neural Networks","created":"2019-11-27","cited_by_count":5},{"id":"2005.05823","title":"Perturbing Inputs to Prevent Model Stealing","created":"2020-05-12","cited_by_count":4},{"id":"2006.15725","title":"Best-Effort Adversarial Approximation of Black-Box Malware Classifiers","created":"2020-06-28","cited_by_count":4},{"id":"1910.14409","title":"Quantifying (Hyper) Parameter Leakage in Machine Learning","created":"2019-10-31","cited_by_count":3},{"id":"2002.09864","title":"Stealing Black-Box Functionality Using The Deep Neural Tree Architecture","created":"2020-02-23","cited_by_count":3},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3},{"id":"2005.12782","title":"A Protection against the Extraction of Neural Network Models","created":"2020-05-26","cited_by_count":2},{"id":"2106.08299","title":"Model Extraction and Adversarial Attacks on Neural Networks using Switching Power Information","created":"2021-06-15","cited_by_count":2},{"id":"1803.09163","title":"Security Theater: On the Vulnerability of Classifiers to Exploratory Attacks","created":"2018-03-24","cited_by_count":1}],"next_cursor":null}