{"list":"other","total":54,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1609.04747","title":"An overview of gradient descent optimization algorithms","created":"2016-09-15","cited_by_count":1033},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"1707.06168","title":"Channel Pruning for Accelerating Very Deep Neural Networks","created":"2017-07-19","cited_by_count":702},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1707.08819","title":"A Downsampled Variant of ImageNet as an Alternative to the CIFAR datasets","created":"2017-07-27","cited_by_count":377},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"2101.11517","title":"Investigating Bi-Level Optimization for Learning and Vision from a Unified Perspective: A Survey and Beyond","created":"2021-01-27","cited_by_count":153},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"2106.09667","title":"Poisoning and Backdooring Contrastive Learning","created":"2021-06-17","cited_by_count":151},{"id":"2002.12200","title":"Entangled Watermarks as a Defense against Model Extraction","created":"2020-02-27","cited_by_count":149},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"2009.03015","title":"Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding","created":"2020-09-07","cited_by_count":130},{"id":"2006.12557","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","created":"2020-06-22","cited_by_count":116},{"id":"1909.05193","title":"TBT: Targeted Neural Network Attack with Bit Trojan","created":"2019-09-10","cited_by_count":113},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102},{"id":"1804.07933","title":"Is feature selection secure against training data poisoning?","created":"2018-04-21","cited_by_count":93},{"id":"2104.09667","title":"Manipulating SGD with Data Ordering Attacks","created":"2021-04-19","cited_by_count":74},{"id":"1911.10312","title":"Design and Evaluation of a Multi-Domain Trojan Detection Method on Deep Neural Networks","created":"2019-11-23","cited_by_count":71},{"id":"1905.09027","title":"Learning to Confuse: Generating Training Time Adversarial Data with Auto-Encoder","created":"2019-05-22","cited_by_count":70},{"id":"2002.00937","title":"Radioactive data: tracing through training","created":"2020-02-03","cited_by_count":67},{"id":"2104.05808","title":"A Backdoor Attack against 3D Point Cloud Classifiers","created":"2021-04-12","cited_by_count":53},{"id":"2110.14880","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","created":"2021-10-28","cited_by_count":53},{"id":"1911.07399","title":"NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanations","created":"2019-11-18","cited_by_count":50},{"id":"2009.09869","title":"FakeTagger: Robust Safeguards against DeepFake Dissemination via Provenance Tracking","created":"2020-09-21","cited_by_count":46},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46},{"id":"2004.07955","title":"Targeted Attack for Deep Hashing based Retrieval","created":"2020-04-15","cited_by_count":35},{"id":"2201.13178","title":"Few-Shot Backdoor Attacks on Visual Object Tracking","created":"2022-01-31","cited_by_count":35},{"id":"1606.05893","title":"You are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors","created":"2016-06-19","cited_by_count":34},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34},{"id":"2010.05821","title":"Open-sourced Dataset Protection via Backdoor Watermarking","created":"2020-10-12","cited_by_count":30},{"id":"1911.01769","title":"Visual Privacy Protection via Mapping Distortion","created":"2019-11-05","cited_by_count":6},{"id":"1707.05726","title":"Halftone Image Watermarking by Content Aware Double-sided Embedding Error Diffusion","created":"2017-07-18","cited_by_count":4}],"next_cursor":null}