{"list":"other","total":87,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1912.04977","title":"Advances and Open Problems in Federated Learning","created":"2019-12-10","cited_by_count":3046},{"id":"1812.06127","title":"Federated Optimization in Heterogeneous Networks","created":"2018-12-14","cited_by_count":2987},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1311.2901","title":"Visualizing and Understanding Convolutional Networks","created":"2013-11-12","cited_by_count":2290},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1908.07873","title":"Federated Learning: Challenges, Methods, and Future Directions","created":"2019-08-21","cited_by_count":1538},{"id":"1905.02249","title":"MixMatch: A Holistic Approach to Semi-Supervised Learning","created":"2019-05-06","cited_by_count":1391},{"id":"1411.1792","title":"How transferable are features in deep neural networks?","created":"2014-11-06","cited_by_count":1225},{"id":"1904.12848","title":"Unsupervised Data Augmentation for Consistency Training","created":"2019-04-29","cited_by_count":1060},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"2003.00295","title":"Adaptive Federated Optimization","created":"2020-02-29","cited_by_count":1046},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"2007.03898","title":"NVAE: A Deep Hierarchical Variational Autoencoder","created":"2020-07-08","cited_by_count":637},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"2002.06440","title":"Federated Learning with Matched Averaging","created":"2020-02-15","cited_by_count":564},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1911.11815","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","created":"2019-11-26","cited_by_count":493},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2010.01264","title":"HeteroFL: Computation and Communication Efficient Federated Learning for Heterogeneous Clients","created":"2020-10-03","cited_by_count":337},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"1803.00942","title":"Not All Samples Are Created Equal: Deep Learning with Importance Sampling","created":"2018-03-02","cited_by_count":328},{"id":"1906.00091","title":"Deep Learning Recommendation Model for Personalization and Recommendation Systems","created":"2019-05-31","cited_by_count":327},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"2007.08432","title":"Data Poisoning Attacks Against Federated Learning Systems","created":"2020-07-16","cited_by_count":275},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"2206.07137","title":"Prioritized Training on Points that are Learnable, Worth Learning, and Not Yet Learnt","created":"2022-06-14","cited_by_count":236},{"id":"1711.04574","title":"Learning Explanatory Rules from Noisy Data","created":"2017-11-13","cited_by_count":211},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"1912.09789","title":"A Survey on Distributed Machine Learning","created":"2019-12-20","cited_by_count":188},{"id":"2002.10689","title":"A Theory of Usable Information Under Computational Constraints","created":"2020-02-25","cited_by_count":162},{"id":"2007.07646","title":"A Survey of Privacy Attacks in Machine Learning","created":"2020-07-15","cited_by_count":146},{"id":"1812.05069","title":"Recent Advances in Autoencoder-Based Representation Learning","created":"2018-12-12","cited_by_count":133},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123},{"id":"2103.10689","title":"Interpretable Deep Learning: Interpretation, Interpretability, Trustworthiness, and Beyond","created":"2021-03-19","cited_by_count":118},{"id":"2108.10241","title":"Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning","created":"2021-08-23","cited_by_count":118},{"id":"2111.02862","title":"Parameterized Knowledge Transfer for Personalized Federated Learning","created":"2021-11-04","cited_by_count":109},{"id":"1806.03287","title":"Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware","created":"2018-06-08","cited_by_count":102},{"id":"2104.14380","title":"PPFL: Privacy-preserving Federated Learning with Trusted Execution Environments","created":"2021-04-29","cited_by_count":93},{"id":"2206.00187","title":"DisPFL: Towards Communication-Efficient Personalized Federated Learning via Decentralized Sparse Training","created":"2022-06-01","cited_by_count":74},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69},{"id":"2011.11819","title":"When Machine Learning Meets Privacy: A Survey and Outlook","created":"2020-11-24","cited_by_count":68},{"id":"1805.04810","title":"AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning","created":"2018-05-13","cited_by_count":60},{"id":"2004.05703","title":"DarkneTZ: Towards Model Privacy at the Edge using Trusted Execution Environments","created":"2020-04-12","cited_by_count":58},{"id":"1808.04761","title":"Cache Telepathy: Leveraging Shared Resource Attacks to Learn DNN Architectures","created":"2018-08-14","cited_by_count":57},{"id":"2004.12289","title":"Deep k-NN for Noisy Labels","created":"2020-04-26","cited_by_count":55},{"id":"1905.12107","title":"SpArSe: Sparse Architecture Search for CNNs on Resource-Constrained Microcontrollers","created":"2019-05-28","cited_by_count":52},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42},{"id":"1803.05961","title":"Chiron: Privacy-preserving Machine Learning as a Service","created":"2018-03-15","cited_by_count":40},{"id":"2102.05188","title":"CaPC Learning: Confidential and Private Collaborative Learning","created":"2021-02-09","cited_by_count":33},{"id":"1808.00590","title":"MLCapsule: Guarded Offline Deployment of Machine Learning as a Service","created":"2018-08-01","cited_by_count":31},{"id":"1907.10406","title":"Open DNN Box by Power Side-Channel Attack","created":"2019-07-21","cited_by_count":28},{"id":"2112.12727","title":"EIFFeL: Ensuring Integrity for Federated Learning","created":"2021-12-23","cited_by_count":28},{"id":"2011.01963","title":"A Scalable Approach for Privacy-Preserving Collaborative Machine Learning","created":"2020-11-03","cited_by_count":21},{"id":"2108.09454","title":"\"Adversarial Examples\" for Proof-of-Learning","created":"2021-08-21","cited_by_count":20},{"id":"2010.08762","title":"Layer-wise Characterization of Latent Information Leakage in Federated Learning","created":"2020-10-17","cited_by_count":19},{"id":"1807.06689","title":"Efficient Deep Learning on Multi-Source Private Data","created":"2018-07-17","cited_by_count":17},{"id":"1912.03485","title":"Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environments","created":"2019-12-07","cited_by_count":17},{"id":"2105.01281","title":"Citadel: Protecting Data Privacy and Model Confidentiality for Collaborative Learning with SGX","created":"2021-05-04","cited_by_count":14},{"id":"2001.07450","title":"Occlum: Secure and Efficient Multitasking Inside a Single Enclave of Intel SGX","created":"2020-01-21","cited_by_count":11},{"id":"2005.06043","title":"Serdab: An IoT Framework for Partitioning Neural Networks Computation across Multiple Enclaves","created":"2020-05-12","cited_by_count":11},{"id":"2008.11632","title":"GuardNN: Secure Accelerator Architecture for Privacy-Preserving Deep Learning","created":"2020-08-26","cited_by_count":9},{"id":"1902.04413","title":"TensorSCONE: A Secure TensorFlow Framework using Intel SGX","created":"2019-02-12","cited_by_count":8},{"id":"1902.06288","title":"Conclave: secure multi-party computation on big data (extended TR)","created":"2019-02-17","cited_by_count":7},{"id":"2007.02351","title":"Offline Model Guard: Secure and Private ML on Mobile Devices","created":"2020-07-05","cited_by_count":7},{"id":"1807.00969","title":"Confidential Inference via Ternary Model Partitioning","created":"2018-07-03","cited_by_count":5},{"id":"2103.03500","title":"ShEF: Shielded Enclaves for Cloud FPGAs","created":"2021-03-05","cited_by_count":5},{"id":"2111.03308","title":"Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective","created":"2021-11-05","cited_by_count":4},{"id":"1704.05600","title":"TrustShadow: Secure Execution of Unmodified Applications with ARM TrustZone","created":"2017-04-19","cited_by_count":3},{"id":"1907.06034","title":"Towards Characterizing and Limiting Information Exposure in DNN Layers","created":"2019-07-13","cited_by_count":3},{"id":"1908.10730","title":"Confidential Deep Learning: Executing Proprietary Models on Untrusted Devices","created":"2019-08-28","cited_by_count":3},{"id":"2104.15109","title":"Memory-Efficient Deep Learning Inference in Trusted Execution Environments","created":"2021-04-30","cited_by_count":3},{"id":"2110.00981","title":"SecFL: Confidential Federated Learning using TEEs","created":"2021-10-03","cited_by_count":3},{"id":"2010.15866","title":"CURE: A Security Architecture with CUstomizable and Resilient Enclaves","created":"2020-10-29","cited_by_count":2},{"id":"2201.07711","title":"Enhancing the Security & Privacy of Wearable Brain-Computer Interfaces","created":"2022-01-19","cited_by_count":2},{"id":"2111.03065","title":"Safe and Practical GPU Acceleration in TrustZone","created":"2021-11-04","cited_by_count":1},{"id":"2205.03322","title":"Private delegated computations using strong isolation","created":"2022-05-06","cited_by_count":1}],"next_cursor":null}