{"list":"other","total":56,"rows":[{"id":"1907.11692","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","created":"2019-07-26","cited_by_count":13372},{"id":"1409.0575","title":"ImageNet Large Scale Visual Recognition Challenge","created":"2014-09-01","cited_by_count":8498},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1907.11932","title":"Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment","created":"2019-07-27","cited_by_count":671},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1711.01991","title":"Mitigating Adversarial Effects Through Randomization","created":"2017-11-06","cited_by_count":383},{"id":"1812.05271","title":"TextBugger: Generating Adversarial Text Against Real-world Applications","created":"2018-12-13","cited_by_count":381},{"id":"1801.04354","title":"Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers","created":"2018-01-13","cited_by_count":345},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"1807.01069","title":"Adversarial Robustness Toolbox v1.0.0","created":"2018-07-03","cited_by_count":215},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"1909.00986","title":"Certified Robustness to Adversarial Word Substitutions","created":"2019-09-03","cited_by_count":168},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"2005.14137","title":"QEBA: Query-Efficient Boundary-Based Blackbox Attack","created":"2020-05-28","cited_by_count":104},{"id":"2307.03718","title":"Frontier AI Regulation: Managing Emerging Risks to Public Safety","created":"2023-07-06","cited_by_count":98},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"2003.06468","title":"GeoDA: a geometric framework for black-box adversarial attacks","created":"2020-03-13","cited_by_count":66},{"id":"2003.06222","title":"An Evaluation of Change Point Detection Algorithms","created":"2020-03-13","cited_by_count":63},{"id":"1907.05587","title":"Stateful Detection of Black-Box Adversarial Attacks","created":"2019-07-12","cited_by_count":56},{"id":"1905.06635","title":"Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization","created":"2019-05-16","cited_by_count":49},{"id":"2104.11470","title":"Random Noise Defense Against Query-Based Black-Box Attacks","created":"2021-04-23","cited_by_count":47},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40},{"id":"2006.14042","title":"Blacklight: Scalable Defense for Neural Networks against Query-Based Black-Box Attacks","created":"2020-06-24","cited_by_count":37},{"id":"2206.09491","title":"On the Limitations of Stochastic Pre-processing Defenses","created":"2022-06-19","cited_by_count":21},{"id":"2005.03837","title":"Projection & Probability-Driven Black-Box Attack","created":"2020-05-08","cited_by_count":19},{"id":"2205.12134","title":"Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks","created":"2022-05-24","cited_by_count":19},{"id":"2101.04829","title":"On the Effectiveness of Small Input Noise for Defending Against Query-based Black-Box Attacks","created":"2021-01-13","cited_by_count":17},{"id":"2207.03574","title":"Demystifying the Adversarial Robustness of Random Transformation Defenses","created":"2022-06-18","cited_by_count":14},{"id":"2306.02895","title":"Evading Black-box Classifiers Without Breaking Eggs","created":"2023-06-05","cited_by_count":13},{"id":"2006.09539","title":"AdvMind: Inferring Adversary Intent of Black-Box Attacks","created":"2020-06-16","cited_by_count":12},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11},{"id":"2104.08690","title":"Rethinking Image-Scaling Attacks: The Interplay Between Vulnerabilities in Machine Learning Systems","created":"2021-04-18","cited_by_count":7},{"id":"2201.13444","title":"Boundary Defense Against Black-box Adversarial Attacks","created":"2022-01-31","cited_by_count":6},{"id":"2301.13869","title":"Reverse engineering adversarial attacks with fingerprints from adversarial examples","created":"2023-01-31","cited_by_count":4},{"id":"2101.02899","title":"Adversarial Attack Attribution: Discovering Attributable Signals in Adversarial ML Attacks","created":"2021-01-08","cited_by_count":2},{"id":"2302.14059","title":"Scalable Attribution of Adversarial Attacks via Multi-Task Learning","created":"2023-02-25","cited_by_count":2}],"next_cursor":null}