{"list":"other","total":54,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1905.00414","title":"Similarity of Neural Network Representations Revisited","created":"2019-05-01","cited_by_count":1755},{"id":"1801.09414","title":"CosFace: Large Margin Cosine Loss for Deep Face Recognition","created":"2018-01-29","cited_by_count":971},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1902.01046","title":"Towards Federated Learning at Scale: System Design","created":"2019-02-04","cited_by_count":832},{"id":"1704.08063","title":"SphereFace: Deep Hypersphere Embedding for Face Recognition","created":"2017-04-26","cited_by_count":737},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1701.04082","title":"Embedding Watermarks into Deep Neural Networks","created":"2017-01-15","cited_by_count":248},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"1604.04326","title":"Improving the Robustness of Deep Neural Networks via Stability Training","created":"2016-04-15","cited_by_count":156},{"id":"2002.12200","title":"Entangled Watermarks as a Defense against Model Extraction","created":"2020-02-27","cited_by_count":149},{"id":"1910.12366","title":"Thieves on Sesame Street! Model Extraction of BERT-based APIs","created":"2019-10-27","cited_by_count":139},{"id":"1711.01894","title":"Adversarial Frontier Stitching for Remote Neural Network Watermarking","created":"2017-11-06","cited_by_count":118},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116},{"id":"2005.02131","title":"Stealing Links from Graph Neural Networks","created":"2020-05-05","cited_by_count":115},{"id":"1906.00830","title":"DAWN: Dynamic Adversarial Watermarking of Neural Networks","created":"2019-06-03","cited_by_count":100},{"id":"1912.00888","title":"Deep Neural Network Fingerprinting by Conferrable Adversarial Examples","created":"2019-12-02","cited_by_count":93},{"id":"1909.07830","title":"[Extended version] Rethinking Deep Neural Network Ownership Verification: Embedding Passports to Defeat Ambiguity Attacks","created":"2019-09-16","cited_by_count":88},{"id":"2103.05633","title":"Proof-of-Learning: Definitions and Practice","created":"2021-03-09","cited_by_count":84},{"id":"2004.15015","title":"Imitation Attacks and Defenses for Black-box Machine Translation Systems","created":"2020-04-30","cited_by_count":81},{"id":"2103.09274","title":"A survey of deep neural network watermarking techniques","created":"2021-03-16","cited_by_count":73},{"id":"1806.05476","title":"Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data","created":"2018-06-14","cited_by_count":70},{"id":"1910.12903","title":"IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary","created":"2019-10-28","cited_by_count":70},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69},{"id":"2003.04884","title":"Cryptanalytic Extraction of Neural Network Models","created":"2020-03-10","cited_by_count":68},{"id":"1903.01743","title":"How to Prove Your Model Belongs to You: A Blind-Watermark based Framework to Protect Intellectual Property of DNN","created":"2019-03-05","cited_by_count":66},{"id":"2009.12153","title":"A Systematic Review on Model Watermarking for Neural Networks","created":"2020-09-25","cited_by_count":52},{"id":"1901.06151","title":"Robust Watermarking of Neural Network with Exponential Weighting","created":"2019-01-18","cited_by_count":51},{"id":"1704.02654","title":"Enhancing Robustness of Machine Learning Systems via Data Transformations","created":"2017-04-09","cited_by_count":38},{"id":"1511.06292","title":"Foveation-based Mechanisms Alleviate Adversarial Examples","created":"2015-11-19","cited_by_count":32},{"id":"1904.00344","title":"BlackMarks: Blackbox Multibit Watermarking for Deep Neural Networks","created":"2019-03-31","cited_by_count":26},{"id":"2108.09454","title":"\"Adversarial Examples\" for Proof-of-Learning","created":"2021-08-21","cited_by_count":20},{"id":"1910.05429","title":"Extraction of Complex DNN Models: Real Threat or Boogeyman?","created":"2019-10-11","cited_by_count":19},{"id":"2201.07391","title":"MetaV: A Meta-Verifier Approach to Task-Agnostic Model Fingerprinting","created":"2022-01-19","cited_by_count":16},{"id":"1612.01401","title":"Learning Adversary-Resistant Deep Neural Networks","created":"2016-12-05","cited_by_count":9},{"id":"2210.13631","title":"On the Robustness of Dataset Inference","created":"2022-10-24","cited_by_count":8},{"id":"2303.11595","title":"Effective Ambiguity Attack Against Passport-based DNN Intellectual Property Protection Schemes through Fully Connected Layer Substitution","created":"2023-03-21","cited_by_count":7},{"id":"1911.08053","title":"A novel method for identifying the deep neural network model with the Serial Number","created":"2019-11-19","cited_by_count":4}],"next_cursor":null}