{"list":"other","total":58,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1505.07818","title":"Domain-Adversarial Training of Neural Networks","created":"2015-05-28","cited_by_count":3044},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1411.1784","title":"Conditional Generative Adversarial Nets","created":"2014-11-06","cited_by_count":2162},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1705.07204","title":"Ensemble Adversarial Training: Attacks and Defenses","created":"2017-05-19","cited_by_count":840},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1710.08864","title":"One pixel attack for fooling deep neural networks","created":"2017-10-24","cited_by_count":582},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1712.07107","title":"Adversarial Examples: Attacks and Defenses for Deep Learning","created":"2017-12-19","cited_by_count":351},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1804.11285","title":"Adversarially Robust Generalization Requires More Data","created":"2018-04-30","cited_by_count":318},{"id":"1806.02371","title":"Adversarial Attack on Graph Structured Data","created":"2018-06-06","cited_by_count":301},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279},{"id":"1703.00410","title":"Detecting Adversarial Samples from Artifacts","created":"2017-03-01","cited_by_count":245},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"1803.08533","title":"Understanding Measures of Uncertainty for Adversarial Example Detection","created":"2018-03-22","cited_by_count":177},{"id":"1812.00740","title":"Disentangling Adversarial Robustness and Generalization","created":"2018-12-03","cited_by_count":172},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"2002.05646","title":"Adversarial Machine Learning -- Industry Perspectives","created":"2020-02-04","cited_by_count":122},{"id":"1811.11304","title":"Universal Adversarial Training","created":"2018-11-27","cited_by_count":87},{"id":"1808.01664","title":"Structured Adversarial Attack: Towards General Implementation and Better Interpretability","created":"2018-08-05","cited_by_count":64},{"id":"1809.04790","title":"Adversarial Examples: Opportunities and Challenges","created":"2018-09-13","cited_by_count":63},{"id":"1511.05122","title":"Adversarial Manipulation of Deep Representations","created":"2015-11-16","cited_by_count":56},{"id":"1807.04644","title":"Algorithms that Remember: Model Inversion Attacks and Data Protection Law","created":"2018-07-12","cited_by_count":55},{"id":"1509.07892","title":"Evasion and Hardening of Tree Ensemble Classifiers","created":"2015-09-25","cited_by_count":44},{"id":"1809.02077","title":"IDSGAN: Generative Adversarial Networks for Attack Generation against Intrusion Detection","created":"2018-09-06","cited_by_count":42},{"id":"2106.09380","title":"Modeling Realistic Adversarial Attacks against Network Intrusion Detection Systems","created":"2021-06-17","cited_by_count":41},{"id":"1902.10660","title":"Robust Decision Trees Against Adversarial Examples","created":"2019-02-27","cited_by_count":40},{"id":"1709.00609","title":"Security Evaluation of Pattern Classifiers under Attack","created":"2017-09-02","cited_by_count":39},{"id":"1911.05268","title":"Adversarial Examples in Modern Machine Learning: A Review","created":"2019-11-13","cited_by_count":36},{"id":"1510.05328","title":"Exploring the Space of Adversarial Images","created":"2015-10-19","cited_by_count":28},{"id":"1903.01563","title":"Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications","created":"2019-03-01","cited_by_count":28},{"id":"2012.10438","title":"Efficient Training of Robust Decision Trees Against Adversarial Examples","created":"2020-12-18","cited_by_count":24},{"id":"1905.05137","title":"Analyzing Adversarial Attacks Against Deep Learning for Intrusion Detection in IoT Networks","created":"2019-05-13","cited_by_count":16},{"id":"2203.04234","title":"Adaptative Perturbation Patterns: Realistic Adversarial Learning for Robust Intrusion Detection","created":"2022-03-08","cited_by_count":13},{"id":"1912.03790","title":"Hardening Random Forest Cyber Detectors Against Adversarial Attacks","created":"2019-12-09","cited_by_count":12},{"id":"1910.14107","title":"Investigating Resistance of Deep Learning-based IDS against Adversaries using min-max Optimization","created":"2019-10-30","cited_by_count":10},{"id":"2004.05005","title":"Adversarial Attacks on Machine Learning Cybersecurity Defences in Industrial Control Systems","created":"2020-04-10","cited_by_count":10},{"id":"2301.13122","title":"Towards Adversarial Realism and Robust Learning for IoT Intrusion Detection and Classification","created":"2023-01-30","cited_by_count":10},{"id":"2104.12426","title":"Launching Adversarial Attacks against Network Intrusion Detection Systems for IoT","created":"2021-04-26","cited_by_count":9},{"id":"2007.15310","title":"Black-box Adversarial Sample Generation Based on Differential Evolution","created":"2020-07-30","cited_by_count":6},{"id":"2303.07546","title":"Constrained Adversarial Learning for Automated Software Testing: a literature review","created":"2023-03-14","cited_by_count":6}],"next_cursor":null}