{"list":"other","total":97,"rows":[{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"2203.00667","title":"Generative Adversarial Networks","created":"2022-03-01","cited_by_count":5627},{"id":"1912.04977","title":"Advances and Open Problems in Federated Learning","created":"2019-12-10","cited_by_count":3046},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1911.04933","title":"Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networks","created":"2019-11-12","cited_by_count":618},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1801.00553","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","created":"2018-01-02","cited_by_count":460},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"1911.02508","title":"Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methods","created":"2019-11-06","cited_by_count":443},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1805.06605","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","created":"2018-05-17","cited_by_count":362},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"2209.02299","title":"A Survey of Machine Unlearning","created":"2022-09-06","cited_by_count":312},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"1804.09699","title":"Towards Fast Computation of Certified Robustness for ReLU Networks","created":"2018-04-25","cited_by_count":255},{"id":"1701.04082","title":"Embedding Watermarks into Deep Neural Networks","created":"2017-01-15","cited_by_count":248},{"id":"1906.07983","title":"Explanations can be manipulated and geometry is to blame","created":"2019-06-19","cited_by_count":216},{"id":"1807.01069","title":"Adversarial Robustness Toolbox v1.0.0","created":"2018-07-03","cited_by_count":215},{"id":"1909.06342","title":"Explainable Machine Learning in Deployment","created":"2019-09-13","cited_by_count":211},{"id":"1608.00853","title":"A study of the effect of JPG compression on adversarial images","created":"2016-08-02","cited_by_count":197},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"1709.07886","title":"Machine Learning Models that Remember Too Much","created":"2017-09-22","cited_by_count":169},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"1712.00673","title":"Towards Robust Neural Networks via Random Self-ensemble","created":"2017-12-02","cited_by_count":159},{"id":"2201.04845","title":"Reconstructing Training Data with Informed Adversaries","created":"2022-01-13","cited_by_count":148},{"id":"2007.07646","title":"A Survey of Privacy Attacks in Machine Learning","created":"2020-07-15","cited_by_count":146},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127},{"id":"1610.00768","title":"Technical Report on the CleverHans v2.1.0 Adversarial Examples Library","created":"2016-10-03","cited_by_count":124},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"2006.03463","title":"Sponge Examples: Energy-Latency Attacks on Neural Networks","created":"2020-06-05","cited_by_count":111},{"id":"2002.03018","title":"Certified Robustness to Label-Flipping Attacks via Randomized Smoothing","created":"2020-02-07","cited_by_count":108},{"id":"1405.7085","title":"Differentially Private Empirical Risk Minimization: Efficient Algorithms and Tight Error Bounds","created":"2014-05-27","cited_by_count":107},{"id":"1811.12673","title":"ComDefend: An Efficient Image Compression Model to Defend Adversarial Examples","created":"2018-11-30","cited_by_count":105},{"id":"2012.02670","title":"Unleashing the Tiger: Inference Attacks on Split Learning","created":"2020-12-04","cited_by_count":105},{"id":"2002.02730","title":"Machine Unlearning: Linear Filtration for Logit-based Classifiers","created":"2020-02-07","cited_by_count":95},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94},{"id":"2011.09527","title":"Strong Data Augmentation Sanitizes Poisoning and Backdoor Attacks Without an Accuracy Tradeoff","created":"2020-11-18","cited_by_count":89},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75},{"id":"2103.09274","title":"A survey of deep neural network watermarking techniques","created":"2021-03-16","cited_by_count":73},{"id":"2004.12254","title":"Privacy in Deep Learning: A Survey","created":"2020-04-25","cited_by_count":71},{"id":"1806.05476","title":"Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data","created":"2018-06-14","cited_by_count":70},{"id":"2007.09339","title":"ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learning","created":"2020-07-18","cited_by_count":70},{"id":"2011.11819","title":"When Machine Learning Meets Privacy: A Survey and Outlook","created":"2020-11-24","cited_by_count":68},{"id":"1901.01677","title":"Image Super-Resolution as a Defense Against Adversarial Attacks","created":"2019-01-07","cited_by_count":65},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60},{"id":"2004.07401","title":"Poisoning Attacks on Algorithmic Fairness","created":"2020-04-15","cited_by_count":59},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59},{"id":"2009.12153","title":"A Systematic Review on Model Watermarking for Neural Networks","created":"2020-09-25","cited_by_count":52},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52},{"id":"2212.10986","title":"SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning","created":"2022-12-21","cited_by_count":51},{"id":"1811.12395","title":"CNN-Cert: An Efficient Framework for Certifying Robustness of Convolutional Neural Networks","created":"2018-11-29","cited_by_count":50},{"id":"2006.07267","title":"Leakage of Dataset Properties in Multi-Party Machine Learning","created":"2020-06-12","cited_by_count":47},{"id":"2012.08723","title":"Exacerbating Algorithmic Bias through Fairness Attacks","created":"2020-12-16","cited_by_count":47},{"id":"1810.11793","title":"Robust Audio Adversarial Example for a Physical Attack","created":"2018-10-28","cited_by_count":44},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44},{"id":"1511.06385","title":"A Unified Gradient Regularization Family for Adversarial Examples","created":"2015-11-19","cited_by_count":43},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38},{"id":"2005.09042","title":"BLAZE: Blazing Fast Privacy-Preserving Machine Learning","created":"2020-05-18","cited_by_count":32},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31},{"id":"2203.08147","title":"Energy-Latency Attacks via Sponge Poisoning","created":"2022-03-14","cited_by_count":29},{"id":"1908.03369","title":"Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems","created":"2019-08-09","cited_by_count":27},{"id":"2204.05986","title":"Machine Learning Security against Data Poisoning: Are We There Yet?","created":"2022-04-12","cited_by_count":23},{"id":"1910.05429","title":"Extraction of Complex DNN Models: Real Threat or Boogeyman?","created":"2019-10-11","cited_by_count":19},{"id":"1807.01860","title":"Privacy-preserving Machine Learning through Data Obfuscation","created":"2018-07-05","cited_by_count":18},{"id":"2207.08367","title":"Protecting Global Properties of Datasets with Distribution Privacy Mechanisms","created":"2022-07-18","cited_by_count":11},{"id":"1812.08329","title":"PROVEN: Certifying Robustness of Neural Networks with a Probabilistic Approach","created":"2018-12-18","cited_by_count":10},{"id":"2201.04736","title":"Security for Machine Learning-based Software Systems: a survey of threats, practices and challenges","created":"2022-01-12","cited_by_count":9},{"id":"1908.07116","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","created":"2019-08-20","cited_by_count":8},{"id":"2005.05823","title":"Perturbing Inputs to Prevent Model Stealing","created":"2020-05-12","cited_by_count":4},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4},{"id":"2106.02203","title":"Adam in Private: Secure and Fast Training of Deep Neural Networks with Adaptive Moment Estimation","created":"2021-06-04","cited_by_count":4},{"id":"2010.13751","title":"Robust and Verifiable Information Embedding Attacks to Deep Neural Networks via Error-Correcting Codes","created":"2020-10-26","cited_by_count":2}],"next_cursor":null}