{"list":"other","total":57,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1604.01685","title":"The Cityscapes Dataset for Semantic Urban Scene Understanding","created":"2016-04-06","cited_by_count":4444},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1602.07360","title":"SqueezeNet: AlexNet-level accuracy with 50x fewer parameters and <0.5MB model size","created":"2016-02-24","cited_by_count":1060},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"2008.08186","title":"Prevalence of Neural Collapse during the terminal phase of deep learning training","created":"2020-08-18","cited_by_count":719},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1911.11815","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","created":"2019-11-26","cited_by_count":493},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2004.06660","title":"Weight Poisoning Attacks on Pre-trained Models","created":"2020-04-14","cited_by_count":341},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"2007.05084","title":"Attack of the Tails: Yes, You Really Can Backdoor Federated Learning","created":"2020-07-09","cited_by_count":309},{"id":"2007.08432","title":"Data Poisoning Attacks Against Federated Learning Systems","created":"2020-07-16","cited_by_count":275},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"1506.02753","title":"Inverting Visual Representations with Convolutional Networks","created":"2015-06-09","cited_by_count":170},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"1906.10842","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","created":"2019-06-26","cited_by_count":146},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98},{"id":"1911.07116","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","created":"2019-11-16","cited_by_count":95},{"id":"2007.15802","title":"Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Cases","created":"2020-07-31","cited_by_count":95},{"id":"2012.11212","title":"Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification","created":"2020-12-21","cited_by_count":95},{"id":"2008.00312","title":"Trojaning Language Models for Fun and Profit","created":"2020-08-01","cited_by_count":90},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"2201.00763","title":"DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection","created":"2022-01-03","cited_by_count":81},{"id":"2004.04692","title":"Rethinking the Trigger of Backdoor Attack","created":"2020-04-09","cited_by_count":77},{"id":"2012.07006","title":"DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation","created":"2020-12-13","cited_by_count":77},{"id":"2105.00579","title":"BACKDOORL: Backdoor Attack against Competitive Reinforcement Learning","created":"2021-05-02","cited_by_count":68},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65},{"id":"2012.03765","title":"Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks","created":"2020-12-07","cited_by_count":60},{"id":"2004.13799","title":"Minority Reports Defense: Defending Against Adversarial Patches","created":"2020-04-28","cited_by_count":36},{"id":"2008.07711","title":"One-pixel Signature: Characterizing CNN Models for Backdoor Detection","created":"2020-08-18","cited_by_count":34},{"id":"1911.08040","title":"Poison as a Cure: Detecting & Neutralizing Variable-Sized Backdoor Attacks in Deep Neural Networks","created":"2019-11-19","cited_by_count":22},{"id":"1506.02351","title":"Stacked What-Where Auto-encoders","created":"2015-06-08","cited_by_count":20},{"id":"1606.06582","title":"Augmenting Supervised Neural Networks with Unsupervised Objectives for Large-scale Image Classification","created":"2016-06-21","cited_by_count":18},{"id":"2101.02281","title":"FLAME: Taming Backdoors in Federated Learning (Extended Version 1)","created":"2021-01-06","cited_by_count":16},{"id":"2007.14433","title":"Cassandra: Detecting Trojaned Networks from Adversarial Perturbations","created":"2020-07-28","cited_by_count":15},{"id":"2106.07214","title":"Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence Functions","created":"2021-06-14","cited_by_count":5}],"next_cursor":null}