{"list":"other","total":53,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1502.01852","title":"Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classification","created":"2015-02-06","cited_by_count":3611},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1810.00069","title":"Adversarial Attacks and Defences: A Survey","created":"2018-09-28","cited_by_count":259},{"id":"1901.08846","title":"Improving Adversarial Robustness via Promoting Ensemble Diversity","created":"2019-01-25","cited_by_count":213},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1802.05351","title":"Stealing Hyperparameters in Machine Learning","created":"2018-02-14","cited_by_count":118},{"id":"1807.07838","title":"TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time","created":"2018-07-20","cited_by_count":108},{"id":"2005.14137","title":"QEBA: Query-Efficient Boundary-Based Blackbox Attack","created":"2020-05-28","cited_by_count":104},{"id":"2010.09470","title":"Dos and Don'ts of Machine Learning in Computer Security","created":"2020-10-19","cited_by_count":102},{"id":"1808.05665","title":"Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding","created":"2018-08-16","cited_by_count":85},{"id":"2009.14720","title":"DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles","created":"2020-09-30","cited_by_count":73},{"id":"1901.09981","title":"Improving Adversarial Robustness of Ensembles with Diversity Training","created":"2019-01-28","cited_by_count":69},{"id":"1905.05301","title":"Hierarchically Structured Meta-learning","created":"2019-05-13","cited_by_count":68},{"id":"2003.13526","title":"Functionality-preserving Black-box Optimization of Adversarial Windows Malware","created":"2020-03-30","cited_by_count":58},{"id":"1907.05587","title":"Stateful Detection of Black-Box Adversarial Attacks","created":"2019-07-12","cited_by_count":56},{"id":"2010.03856","title":"Transcending Transcend: Revisiting Malware Classification in the Presence of Concept Drift","created":"2020-10-08","cited_by_count":53},{"id":"1704.08996","title":"Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection","created":"2017-04-28","cited_by_count":52},{"id":"1908.05257","title":"Few-Shot Learning with Global Class Representations","created":"2019-08-14","cited_by_count":44},{"id":"1606.04435","title":"Adversarial Perturbations Against Deep Neural Networks for Malware Classification","created":"2016-06-14","cited_by_count":42},{"id":"2006.14042","title":"Blacklight: Scalable Defense for Neural Networks against Query-Based Black-Box Attacks","created":"2020-06-24","cited_by_count":37},{"id":"1909.06727","title":"An Empirical Study towards Characterizing Deep Learning Development and Deployment across Different Frameworks and Platforms","created":"2019-09-15","cited_by_count":35},{"id":"1801.02950","title":"Adversarial Deep Learning for Robust Detection of Binary Encoded Malware","created":"2018-01-09","cited_by_count":32},{"id":"1510.07338","title":"Reviewer Integration and Performance Measurement for Malware Detection","created":"2015-10-26","cited_by_count":19},{"id":"2005.11671","title":"Arms Race in Adversarial Malware Detection: A Survey","created":"2020-05-24","cited_by_count":16},{"id":"1705.07213","title":"MTDeep: Boosting the Security of Deep Neural Nets Against Adversarial Attacks with Moving Target Defense","created":"2017-05-19","cited_by_count":12},{"id":"1909.08092","title":"Toward Proactive, Adaptive Defense: A Survey on Moving Target Defense","created":"2019-09-12","cited_by_count":12},{"id":"1912.02258","title":"A Survey of Game Theoretic Approaches for Adversarial Machine Learning in Cybersecurity Tasks","created":"2019-12-04","cited_by_count":12},{"id":"2108.13952","title":"Morphence: Moving Target Defense Against Adversarial Examples","created":"2021-08-31","cited_by_count":9},{"id":"2112.03315","title":"Adversarial Machine Learning In Network Intrusion Detection Domain: A Systematic Review","created":"2021-12-06","cited_by_count":8},{"id":"2009.10537","title":"EI-MTD:Moving Target Defense for Edge Intelligence against Adversarial Attacks","created":"2020-09-19","cited_by_count":6},{"id":"1712.05919","title":"Attack and Defense of Dynamic Analysis-Based, Adversarial Neural Malware Classification Models","created":"2017-12-16","cited_by_count":5},{"id":"1909.04778","title":"Effectiveness of Adversarial Examples and Defenses for Malware Classification","created":"2019-09-10","cited_by_count":4},{"id":"2202.07568","title":"StratDef: Strategic Defense Against Adversarial Attacks in ML-based Malware Detection","created":"2022-02-15","cited_by_count":3},{"id":"2210.12952","title":"Ares: A System-Oriented Wargame Framework for Adversarial ML","created":"2022-10-24","cited_by_count":1}],"next_cursor":null}