{"list":"other","total":92,"rows":[{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"1908.07873","title":"Federated Learning: Challenges, Methods, and Future Directions","created":"2019-08-21","cited_by_count":1538},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1812.05271","title":"TextBugger: Generating Adversarial Text Against Real-world Applications","created":"2018-12-13","cited_by_count":381},{"id":"2012.13995","title":"FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping","created":"2020-12-27","cited_by_count":346},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"2107.04649","title":"Accuracy on the Line: On the Strong Correlation Between Out-of-Distribution and In-Distribution Generalization","created":"2021-07-09","cited_by_count":249},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"2004.00053","title":"Information Leakage in Embedding Models","created":"2020-03-31","cited_by_count":203},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199},{"id":"2005.02205","title":"When Machine Unlearning Jeopardizes Privacy","created":"2020-05-05","cited_by_count":198},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"1906.11798","title":"Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference","created":"2019-06-27","cited_by_count":175},{"id":"2007.15528","title":"Membership Leakage in Label-Only Exposures","created":"2020-07-30","cited_by_count":168},{"id":"2002.12200","title":"Entangled Watermarks as a Defense against Model Extraction","created":"2020-02-27","cited_by_count":149},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"2007.02220","title":"You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion","created":"2020-07-05","cited_by_count":131},{"id":"2009.03015","title":"Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hiding","created":"2020-09-07","cited_by_count":130},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"1904.01067","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","created":"2019-04-01","cited_by_count":122},{"id":"2002.05646","title":"Adversarial Machine Learning -- Industry Perspectives","created":"2020-02-04","cited_by_count":122},{"id":"2005.02131","title":"Stealing Links from Graph Neural Networks","created":"2020-05-05","cited_by_count":115},{"id":"2006.11890","title":"Graph Backdoor","created":"2020-06-21","cited_by_count":112},{"id":"1407.5225","title":"The Rise of Social Bots","created":"2014-07-19","cited_by_count":96},{"id":"2011.08512","title":"Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database","created":"2020-11-17","cited_by_count":96},{"id":"1912.07942","title":"Analyzing Information Leakage of Updates to Natural Language Models","created":"2019-12-17","cited_by_count":90},{"id":"1811.02054","title":"Exploring Connections Between Active Learning and Model Extraction","created":"2018-11-05","cited_by_count":85},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78},{"id":"1812.00891","title":"Interpretable Deep Learning under Fire","created":"2018-12-03","cited_by_count":74},{"id":"1911.01840","title":"Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems","created":"2019-11-03","cited_by_count":67},{"id":"2009.06701","title":"Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack","created":"2020-09-14","cited_by_count":64},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60},{"id":"1807.06732","title":"Motivating the Rules of the Game for Adversarial Example Research","created":"2018-07-18","cited_by_count":57},{"id":"1906.01017","title":"Terminal Brain Damage: Exposing the Graceless Degradation in Deep Neural Networks Under Hardware Fault Attacks","created":"2019-06-03","cited_by_count":57},{"id":"1906.10395","title":"Quantitative Verification of Neural Networks And its Security Applications","created":"2019-06-25","cited_by_count":56},{"id":"1903.00553","title":"Attacking Graph-based Classification via Manipulating the Graph Structure","created":"2019-03-01","cited_by_count":53},{"id":"2007.04137","title":"SLAP: Improving Physical Adversarial Examples with Short-Lived Adversarial Perturbations","created":"2020-07-08","cited_by_count":50},{"id":"2002.12398","title":"TSS: Transformation-Specific Smoothing for Robustness Certification","created":"2020-02-27","cited_by_count":49},{"id":"2007.06622","title":"SoK: The Faults in our ASRs: An Overview of Attacks against Automatic Speech Recognition and Speaker Identification Systems","created":"2020-07-13","cited_by_count":46},{"id":"2105.01622","title":"Poisoning the Unlabeled Dataset of Semi-Supervised Learning","created":"2021-05-04","cited_by_count":44},{"id":"2101.02644","title":"Data Poisoning Attacks to Deep Learning Based Recommender Systems","created":"2021-01-07","cited_by_count":43},{"id":"2006.12784","title":"Hermes Attack: Steal DNN Models with Lossless Inference Accuracy","created":"2020-06-23","cited_by_count":41},{"id":"2106.09380","title":"Modeling Realistic Adversarial Attacks against Network Intrusion Detection Systems","created":"2021-06-17","cited_by_count":41},{"id":"1904.08554","title":"Gotta Catch 'Em All: Using Honeypots to Catch Adversarial Attacks on Neural Networks","created":"2019-04-18","cited_by_count":40},{"id":"2103.03344","title":"WaveGuard: Understanding and Mitigating Audio Adversarial Examples","created":"2021-03-04","cited_by_count":40},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40},{"id":"1910.05262","title":"Hear \"No Evil\", See \"Kenansville\": Efficient and Transferable Black-Box Attacks on Speech Recognition and Voice Identification Systems","created":"2019-10-11","cited_by_count":38},{"id":"2002.07687","title":"Mind Your Weight(s): A Large-scale Study on Insufficient Machine Learning Model Protection in Mobile Apps","created":"2020-02-18","cited_by_count":36},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36},{"id":"1606.05893","title":"You are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors","created":"2016-06-19","cited_by_count":34},{"id":"1905.12386","title":"Misleading Authorship Attribution of Source Code using Adversarial Learning","created":"2019-05-29","cited_by_count":33},{"id":"1908.07000","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","created":"2019-08-19","cited_by_count":33},{"id":"1807.00458","title":"Adversarial Perturbations Against Real-Time Video Classification Systems","created":"2018-07-02","cited_by_count":32},{"id":"1901.03597","title":"CT-GAN: Malicious Tampering of 3D Medical Imagery using Deep Learning","created":"2019-01-11","cited_by_count":32},{"id":"2012.02525","title":"Practical No-box Adversarial Attacks against DNNs","created":"2020-12-04","cited_by_count":32},{"id":"2108.09513","title":"A Hard Label Black-box Adversarial Attack Against Graph Neural Networks","created":"2021-08-21","cited_by_count":26},{"id":"2110.09714","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","created":"2021-10-19","cited_by_count":25},{"id":"2106.09947","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples","created":"2021-06-18","cited_by_count":23},{"id":"2206.09707","title":"The Role of Machine Learning in Cybersecurity","created":"2022-06-20","cited_by_count":22},{"id":"1810.00470","title":"Procedural Noise Adversarial Examples for Black-Box Attacks on Deep Convolutional Networks","created":"2018-09-30","cited_by_count":21},{"id":"1708.08327","title":"Improving Robustness of ML Classifiers against Realizable Evasion Attacks Using Conserved Features","created":"2017-08-28","cited_by_count":18},{"id":"2001.04935","title":"Humpty Dumpty: Controlling Word Meanings via Corpus Poisoning","created":"2020-01-14","cited_by_count":18},{"id":"2109.11126","title":"A Framework for Cluster and Classifier Evaluation in the Absence of Reference Labels","created":"2021-09-23","cited_by_count":16},{"id":"2205.08944","title":"SoK: The Impact of Unlabelled Data in Cyberthreat Detection","created":"2022-05-18","cited_by_count":15},{"id":"1811.03194","title":"AdVersarial: Perceptual Ad Blocking meets Adversarial Machine Learning","created":"2018-11-08","cited_by_count":14},{"id":"2104.05996","title":"Fall of Giants: How popular text-based MLaaS fall against a simple evasion attack","created":"2021-04-13","cited_by_count":13},{"id":"2009.09663","title":"DeepDyve: Dynamic Verification for Deep Neural Networks","created":"2020-09-21","cited_by_count":12},{"id":"2102.00918","title":"Robust Adversarial Attacks Against DNN-Based Wireless Communication Systems","created":"2021-02-01","cited_by_count":12},{"id":"2008.11533","title":"SIGL: Securing Software Installations Through Deep Graph Learning","created":"2020-08-26","cited_by_count":11},{"id":"2105.08619","title":"On the Robustness of Domain Constraints","created":"2021-05-18","cited_by_count":11},{"id":"2011.03006","title":"Deep-Dup: An Adversarial Weight Duplication Attack Framework to Crush Deep Neural Network in Multi-Tenant FPGA","created":"2020-11-05","cited_by_count":10},{"id":"2102.05431","title":"Dompteur: Taming Audio Adversarial Examples","created":"2021-02-10","cited_by_count":10},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9},{"id":"2205.10686","title":"Post-breach Recovery: Protection against White-box Adversarial Examples for Leaked DNN Models","created":"2022-05-21","cited_by_count":7},{"id":"1905.07112","title":"A critique of the DeepSec Platform for Security Analysis of Deep Learning Models","created":"2019-05-17","cited_by_count":6},{"id":"2010.09569","title":"Against All Odds: Winning the Defense Challenge in an Evasion Competition with Diversification","created":"2020-10-19","cited_by_count":5},{"id":"2207.01531","title":"Wild Networks: Exposure of 5G Network Infrastructures to Adversarial Examples","created":"2022-07-04","cited_by_count":5},{"id":"2203.10166","title":"Concept-based Adversarial Attacks: Tricking Humans and Classifiers Alike","created":"2022-03-18","cited_by_count":3}],"next_cursor":null}