{"list":"other","total":51,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1703.03400","title":"Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networks","created":"2017-03-09","cited_by_count":4897},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1710.10196","title":"Progressive Growing of GANs for Improved Quality, Stability, and Variation","created":"2017-10-27","cited_by_count":2988},{"id":"1503.03832","title":"FaceNet: A Unified Embedding for Face Recognition and Clustering","created":"2015-03-12","cited_by_count":2849},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1810.04650","title":"Multi-Task Learning as Multi-Objective Optimization","created":"2018-10-10","cited_by_count":821},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1607.08221","title":"MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognition","created":"2016-07-27","cited_by_count":624},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1803.10704","title":"End-to-End Multi-Task Learning with Attention","created":"2018-03-28","cited_by_count":534},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1905.07553","title":"Which Tasks Should Be Learned Together in Multi-task Learning?","created":"2019-05-18","cited_by_count":375},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244},{"id":"1804.07573","title":"MobileFaceNets: Efficient CNNs for Accurate Real-Time Face Verification on Mobile Devices","created":"2018-04-20","cited_by_count":182},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"1908.08705","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","created":"2019-08-23","cited_by_count":163},{"id":"2105.03162","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","created":"2021-05-07","cited_by_count":97},{"id":"2302.03251","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","created":"2023-02-07","cited_by_count":97},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93},{"id":"1911.10771","title":"Regularized Fine-grained Meta Face Anti-spoofing","created":"2019-11-25","cited_by_count":86},{"id":"2111.10752","title":"Stochastic Variance Reduced Ensemble Adversarial Attack for Boosting the Adversarial Transferability","created":"2021-11-21","cited_by_count":84},{"id":"2004.05790","title":"Towards Transferable Adversarial Attack against Deep Face Recognition","created":"2020-04-13","cited_by_count":80},{"id":"2106.15058","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","created":"2021-06-29","cited_by_count":80},{"id":"1907.04449","title":"PhysGAN: Generating Physical-World-Resilient Adversarial Examples for Autonomous Driving","created":"2019-07-09","cited_by_count":72},{"id":"1908.05008","title":"AdvFaces: Adversarial Face Synthesis","created":"2019-08-14","cited_by_count":60},{"id":"2110.14880","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","created":"2021-10-28","cited_by_count":53},{"id":"1812.10812","title":"DeepBillboard: Systematic Physical-World Testing of Autonomous Driving Systems","created":"2018-12-27","cited_by_count":50},{"id":"2203.15859","title":"NICGSlowDown: Evaluating the Efficiency Robustness of Neural Image Caption Generation Models","created":"2022-03-29","cited_by_count":50},{"id":"2210.06871","title":"Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognition","created":"2022-10-13","cited_by_count":43},{"id":"2104.11408","title":"Neural Mean Discrepancy for Efficient Out-of-Distribution Detection","created":"2021-04-23","cited_by_count":42},{"id":"2205.13152","title":"Transferable Adversarial Attack based on Integrated Gradients","created":"2022-05-26","cited_by_count":35},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27},{"id":"2110.01256","title":"Revisiting Self-Training for Few-Shot Learning of Language Model","created":"2021-10-04","cited_by_count":23},{"id":"2210.16798","title":"Generate, Discriminate and Contrast: A Semi-Supervised Sentence Representation Learning Framework","created":"2022-10-30","cited_by_count":19},{"id":"2110.15053","title":"Adversarial Robustness in Multi-Task Learning: Promises and Illusions","created":"2021-10-26","cited_by_count":17},{"id":"2210.05370","title":"DeepPerform: An Efficient Approach for Performance Testing of Resource-Constrained Neural Networks","created":"2022-10-10","cited_by_count":17},{"id":"2205.10364","title":"Learning to Reverse DNNs from AI Programs Automatically","created":"2022-05-20","cited_by_count":12},{"id":"1805.00324","title":"A Deep Face Identification Network Enhanced by Facial Attributes Prediction","created":"2018-04-20","cited_by_count":7},{"id":"2011.09824","title":"Multi-Task Adversarial Attack","created":"2020-11-19","cited_by_count":7},{"id":"2108.04584","title":"UniNet: A Unified Scene Understanding Network and Exploring Multi-Task Relationships through the Lens of Adversarial Attacks","created":"2021-08-10","cited_by_count":7},{"id":"2105.07054","title":"Face Attributes as Cues for Deep Face Recognition Understanding","created":"2021-05-14","cited_by_count":2}],"next_cursor":null}