{"list":"other","total":72,"rows":[{"id":"1706.03762","title":"Attention Is All You Need","created":"2017-06-12","cited_by_count":60361},{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"2005.14165","title":"Language Models are Few-Shot Learners","created":"2020-05-28","cited_by_count":32419},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2103.14030","title":"Swin Transformer: Hierarchical Vision Transformer using Shifted Windows","created":"2021-03-25","cited_by_count":12139},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1905.11946","title":"EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks","created":"2019-05-28","cited_by_count":6442},{"id":"1607.06450","title":"Layer Normalization","created":"2016-07-21","cited_by_count":5669},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"2012.12877","title":"Training data-efficient image transformers & distillation through attention","created":"2020-12-23","cited_by_count":4586},{"id":"1409.4842","title":"Going Deeper with Convolutions","created":"2014-09-17","cited_by_count":4241},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"2201.03545","title":"A ConvNet for the 2020s","created":"2022-01-10","cited_by_count":3579},{"id":"1606.08415","title":"Gaussian Error Linear Units (GELUs)","created":"2016-06-27","cited_by_count":3502},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1906.08237","title":"XLNet: Generalized Autoregressive Pretraining for Language Understanding","created":"2019-06-19","cited_by_count":2811},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1611.05431","title":"Aggregated Residual Transformations for Deep Neural Networks","created":"2016-11-16","cited_by_count":2546},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1905.02244","title":"Searching for MobileNetV3","created":"2019-05-06","cited_by_count":1994},{"id":"2101.11986","title":"Tokens-to-Token ViT: Training Vision Transformers from Scratch on ImageNet","created":"2021-01-28","cited_by_count":1101},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"1603.09382","title":"Deep Networks with Stochastic Depth","created":"2016-03-30","cited_by_count":979},{"id":"2003.13678","title":"Designing Network Design Spaces","created":"2020-03-30","cited_by_count":960},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"2103.17239","title":"Going deeper with Image Transformers","created":"2021-03-31","cited_by_count":764},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"2108.08810","title":"Do Vision Transformers See Like Convolutional Neural Networks?","created":"2021-08-19","cited_by_count":675},{"id":"2106.10270","title":"How to train your ViT? Data, Augmentation, and Regularization in Vision Transformers","created":"2021-06-18","cited_by_count":569},{"id":"1701.04128","title":"Understanding the Effective Receptive Field in Deep Convolutional Neural Networks","created":"2017-01-15","cited_by_count":553},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1906.05271","title":"Does Learning Require Memorization? A Short Tale about a Long Tail","created":"2019-06-12","cited_by_count":460},{"id":"2106.14881","title":"Early Convolutions Help Transformers See Better","created":"2021-06-28","cited_by_count":396},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"2001.02610","title":"iDLG: Improved Deep Leakage from Gradients","created":"2020-01-08","cited_by_count":382},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"2111.09679","title":"Enhanced Membership Inference Attacks against Machine Learning Models","created":"2021-11-18","cited_by_count":248},{"id":"1911.07013","title":"Understanding and Improving Layer Normalization","created":"2019-11-16","cited_by_count":217},{"id":"2105.07581","title":"Vision Transformers are Robust Learners","created":"2021-05-17","cited_by_count":207},{"id":"2004.00053","title":"Information Leakage in Embedding Models","created":"2020-03-31","cited_by_count":203},{"id":"2005.02205","title":"When Machine Unlearning Jeopardizes Privacy","created":"2020-05-05","cited_by_count":198},{"id":"2111.05464","title":"Are Transformers More Robust Than CNNs?","created":"2021-11-10","cited_by_count":187},{"id":"2204.03645","title":"DaViT: Dual Attention Vision Transformers","created":"2022-04-07","cited_by_count":175},{"id":"2007.15528","title":"Membership Leakage in Label-Only Exposures","created":"2020-07-30","cited_by_count":168},{"id":"2111.08440","title":"On the Importance of Difficulty Calibration in Membership Inference Attacks","created":"2021-11-15","cited_by_count":147},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136},{"id":"2005.10881","title":"Revisiting Membership Inference Under Realistic Assumptions","created":"2020-05-21","cited_by_count":112},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85},{"id":"1905.11742","title":"Overlearning Reveals Sensitive Attributes","created":"2019-05-28","cited_by_count":76},{"id":"2203.15696","title":"Auditing Privacy Defenses in Federated Learning via Generative Gradient Leakage","created":"2022-03-29","cited_by_count":72},{"id":"2203.11894","title":"GradViT: Gradient Inversion of Vision Transformers","created":"2022-03-22","cited_by_count":53},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"2206.07284","title":"A Survey on Gradient Inversion: Attacks, Defenses and Future Directions","created":"2022-06-15","cited_by_count":40},{"id":"2206.03452","title":"Can CNNs Be More Robust Than Transformers?","created":"2022-06-07","cited_by_count":38},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36},{"id":"1912.09685","title":"Segmentations-Leak: Membership Inference Attacks and Defenses in Semantic Image Segmentation","created":"2019-12-20","cited_by_count":32},{"id":"2103.07101","title":"On the (In)Feasibility of Attribute Inference Attacks on Machine Learning Models","created":"2021-03-12","cited_by_count":31},{"id":"1611.09913","title":"Capacity and Trainability in Recurrent Neural Networks","created":"2016-11-29","cited_by_count":28},{"id":"2112.14087","title":"APRIL: Finding the Achilles' Heel on Privacy for Vision Transformers","created":"2021-12-28","cited_by_count":24},{"id":"1709.06129","title":"When is a Convolutional Filter Easy To Learn?","created":"2017-09-18","cited_by_count":21},{"id":"1802.02547","title":"Learning One Convolutional Layer with Overlapping Patches","created":"2018-02-07","cited_by_count":21},{"id":"2009.04872","title":"Privacy Analysis of Deep Learning in the Wild: Membership Inference Attacks against Transfer Learning","created":"2020-09-10","cited_by_count":20},{"id":"2208.09967","title":"Inferring Sensitive Attributes from Model Explanations","created":"2022-08-21","cited_by_count":15},{"id":"2106.07724","title":"An Exponential Improvement on the Memorization Capacity of Deep Threshold Networks","created":"2021-06-14","cited_by_count":14},{"id":"1909.03935","title":"GAN-Leaks: A Taxonomy of Membership Inference Attacks against Generative Models","created":"2019-09-09","cited_by_count":10}],"next_cursor":null}