{"list":"other","total":64,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"2303.08774","title":"GPT-4 Technical Report","created":"2023-03-15","cited_by_count":18396},{"id":"1801.03924","title":"The Unreasonable Effectiveness of Deep Features as a Perceptual Metric","created":"2018-01-11","cited_by_count":11177},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"2204.06125","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","created":"2022-04-13","cited_by_count":6585},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2106.05744","title":"Pivotal Tuning for Latent-based Editing of Real Images","created":"2021-06-10","cited_by_count":427},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"1806.05759","title":"Insights on representational similarity in neural networks with canonical correlation","created":"2018-06-14","cited_by_count":324},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"2111.09888","title":"Simple but Effective: CLIP Embeddings for Embodied AI","created":"2021-11-18","cited_by_count":191},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153},{"id":"2106.09667","title":"Poisoning and Backdooring Contrastive Learning","created":"2021-06-17","cited_by_count":151},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"1908.01763","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","created":"2019-08-02","cited_by_count":122},{"id":"2002.05646","title":"Adversarial Machine Learning -- Industry Perspectives","created":"2020-02-04","cited_by_count":122},{"id":"2004.00225","title":"MetaPoison: Practical General-purpose Clean-label Data Poisoning","created":"2020-04-01","cited_by_count":120},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119},{"id":"2003.08904","title":"RAB: Provable Robustness Against Backdoor Attacks","created":"2020-03-19","cited_by_count":118},{"id":"2006.12557","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","created":"2020-06-22","cited_by_count":116},{"id":"2006.14768","title":"Deep Partition Aggregation: Provable Defense against General Poisoning Attacks","created":"2020-06-26","cited_by_count":115},{"id":"1902.01889","title":"Analyzing and Improving Representations with the Soft Nearest Neighbor Loss","created":"2019-02-05","cited_by_count":95},{"id":"1911.07116","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","created":"2019-11-16","cited_by_count":95},{"id":"2008.04495","title":"Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks","created":"2020-08-11","cited_by_count":94},{"id":"2002.11497","title":"On the Effectiveness of Mitigating Data Poisoning Attacks with Gradient Shaping","created":"2020-02-26","cited_by_count":83},{"id":"2012.07006","title":"DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation","created":"2020-12-13","cited_by_count":77},{"id":"2006.14026","title":"Subpopulation Data Poisoning Attacks","created":"2020-06-24","cited_by_count":70},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69},{"id":"2005.00191","title":"Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability","created":"2020-05-01","cited_by_count":66},{"id":"2108.09135","title":"PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier","created":"2021-08-20","cited_by_count":65},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63},{"id":"2012.03765","title":"Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks","created":"2020-12-07","cited_by_count":60},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59},{"id":"1908.02203","title":"Model Agnostic Defence against Backdoor Attacks in Machine Learning","created":"2019-08-06","cited_by_count":52},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38},{"id":"2304.07361","title":"PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators","created":"2023-04-14","cited_by_count":37},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34},{"id":"2012.09302","title":"TrojanZoo: Towards Unified, Holistic, and Practical Evaluation of Neural Backdoors","created":"2020-12-16","cited_by_count":30},{"id":"1908.03369","title":"Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems","created":"2019-08-09","cited_by_count":27},{"id":"2009.13384","title":"Transparency, Auditability and eXplainability of Machine Learning Models in Credit Scoring","created":"2020-09-28","cited_by_count":26},{"id":"2207.02842","title":"When does Bias Transfer in Transfer Learning?","created":"2022-07-06","cited_by_count":23},{"id":"2203.05314","title":"SoK: On the Semantic AI Security in Autonomous Driving","created":"2022-03-10","cited_by_count":22},{"id":"2204.08615","title":"Poisons that are learned faster are more effective","created":"2022-04-19","cited_by_count":14},{"id":"2210.06704","title":"COLLIDER: A Robust Training Framework for Backdoor Data","created":"2022-10-13","cited_by_count":6},{"id":"2204.12848","title":"Detecting Backdoor Poisoning Attacks on Deep Neural Networks by Heatmap Clustering","created":"2022-04-27","cited_by_count":4}],"next_cursor":null}