{"list":"other","total":80,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1705.07874","title":"A Unified Approach to Interpreting Model Predictions","created":"2017-05-22","cited_by_count":6555},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1602.04938","title":"\"Why Should I Trust You?\": Explaining the Predictions of Any Classifier","created":"2016-02-16","cited_by_count":5070},{"id":"1703.01365","title":"Axiomatic Attribution for Deep Networks","created":"2017-03-04","cited_by_count":3384},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1711.00399","title":"Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPR","created":"2017-11-01","cited_by_count":1089},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1810.07758","title":"The UCR Time Series Archive","created":"2018-10-17","cited_by_count":431},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1809.06514","title":"Actionable Recourse in Linear Classification","created":"2018-09-18","cited_by_count":328},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"2010.08138","title":"Input-Aware Dynamic Backdoor Attack","created":"2020-10-16","cited_by_count":313},{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290},{"id":"2309.02705","title":"Certifying LLM Safety against Adversarial Prompting","created":"2023-09-06","cited_by_count":266},{"id":"1802.07623","title":"Explanations based on the Missing: Towards Contrastive Explanations with Pertinent Negatives","created":"2018-02-21","cited_by_count":262},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"2010.10596","title":"Counterfactual Explanations and Algorithmic Recourses for Machine Learning: A Review","created":"2020-10-20","cited_by_count":174},{"id":"2302.06588","title":"Raising the Cost of Malicious AI-Powered Image Editing","created":"2023-02-13","cited_by_count":163},{"id":"1910.09398","title":"Learning Model-Agnostic Counterfactual Explanations for Tabular Data","created":"2019-10-21","cited_by_count":146},{"id":"2103.08896","title":"Anti-Adversarially Manipulated Attributions for Weakly and Semi-Supervised Semantic Segmentation","created":"2021-03-16","cited_by_count":134},{"id":"1806.11146","title":"Adversarial Reprogramming of Neural Networks","created":"2018-06-28","cited_by_count":116},{"id":"2101.07922","title":"LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognition","created":"2021-01-20","cited_by_count":94},{"id":"2106.09296","title":"Voice2Series: Reprogramming Acoustic Models for Time Series Classification","created":"2021-06-17","cited_by_count":91},{"id":"1902.07906","title":"Wasserstein Adversarial Examples via Projected Sinkhorn Iterations","created":"2019-02-21","cited_by_count":89},{"id":"2007.08714","title":"Transfer Learning without Knowing: Reprogramming Black-box Machine Learning Models with Scarce Data and Limited Resources","created":"2020-07-17","cited_by_count":83},{"id":"2001.08103","title":"Secure and Robust Machine Learning for Healthcare: A Survey","created":"2020-01-21","cited_by_count":80},{"id":"2002.00937","title":"Radioactive data: tracing through training","created":"2020-02-03","cited_by_count":67},{"id":"2202.10629","title":"Model Reprogramming: Resource-Efficient Cross-Domain Machine Learning","created":"2022-02-22","cited_by_count":64},{"id":"2101.02032","title":"Socially Responsible AI Algorithms: Issues, Purposes, and Challenges","created":"2021-01-01","cited_by_count":56},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56},{"id":"2106.09992","title":"Exploring Counterfactual Explanations Through the Lens of Adversarial Examples: A Theoretical and Empirical Analysis","created":"2021-06-18","cited_by_count":52},{"id":"2011.01921","title":"Optimizing Molecules using Efficient Queries from Property Evaluations","created":"2020-11-03","cited_by_count":50},{"id":"2012.12235","title":"Unadversarial Examples: Designing Objects for Robust Vision","created":"2020-12-22","cited_by_count":45},{"id":"2106.14851","title":"Data Poisoning Won't Save You From Facial Recognition","created":"2021-06-28","cited_by_count":45},{"id":"2206.00477","title":"Anti-Forgery: Towards a Stealthy and Robust DeepFake Disruption Attack via Adversarial Perceptual-aware Perturbations","created":"2022-06-01","cited_by_count":39},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35},{"id":"2210.06284","title":"Visual Prompting for Adversarial Robustness","created":"2022-10-12","cited_by_count":34},{"id":"1905.12762","title":"Securing Connected & Autonomous Vehicles: Challenges Posed by Adversarial Machine Learning and The Way Forward","created":"2019-05-29","cited_by_count":33},{"id":"2206.07840","title":"Architectural Backdoors in Neural Networks","created":"2022-06-15","cited_by_count":25},{"id":"2006.07421","title":"Defending against GAN-based Deepfake Attacks via Transformation-aware Adversarial Faces","created":"2020-06-12","cited_by_count":21},{"id":"2207.05164","title":"Machine Learning Security in Industry: A Quantitative Survey","created":"2022-07-11","cited_by_count":21},{"id":"2210.07144","title":"Reprogramming Pretrained Language Models for Antibody Sequence Infilling","created":"2022-10-05","cited_by_count":20},{"id":"1902.10674","title":"The Best Defense Is a Good Offense: Adversarial Attacks to Avoid Modulation Detection","created":"2019-02-27","cited_by_count":17},{"id":"1901.01107","title":"Adversarial CAPTCHAs","created":"2019-01-04","cited_by_count":16},{"id":"2103.01895","title":"Adversarial Examples can be Effective Data Augmentation for Unsupervised Machine Learning","created":"2021-03-02","cited_by_count":16},{"id":"1811.03194","title":"AdVersarial: Perceptual Ad Blocking meets Adversarial Machine Learning","created":"2018-11-08","cited_by_count":14},{"id":"2002.05648","title":"Politics of Adversarial Machine Learning","created":"2020-02-01","cited_by_count":12},{"id":"1906.07153","title":"Adversarial attacks on Copyright Detection Systems","created":"2019-06-17","cited_by_count":11},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11},{"id":"2303.00215","title":"Single Image Backdoor Inversion via Robust Smoothed Classifiers","created":"2023-03-01","cited_by_count":10},{"id":"2010.16204","title":"Capture the Bot: Using Adversarial Examples to Improve CAPTCHA Robustness to Bot Attacks","created":"2020-10-30","cited_by_count":9},{"id":"2010.10242","title":"Ulixes: Facial Recognition Privacy with Adversarial Machine Learning","created":"2020-10-20","cited_by_count":7},{"id":"2302.10980","title":"MultiRobustBench: Benchmarking Robustness Against Multiple Attacks","created":"2023-02-21","cited_by_count":7},{"id":"2201.12356","title":"Adversarial Examples for Good: Adversarial Examples Guided Imbalanced Learning","created":"2022-01-28","cited_by_count":6},{"id":"2206.03656","title":"Fair Classification via Domain Adaptation: A Dual Adversarial Learning Approach","created":"2022-06-08","cited_by_count":6},{"id":"2107.10302","title":"Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks","created":"2021-07-11","cited_by_count":5},{"id":"2210.03297","title":"Preprocessors Matter! Realistic Decision-Based Attacks on Machine Learning Systems","created":"2022-10-07","cited_by_count":5},{"id":"2101.02483","title":"Robust Text CAPTCHAs Using Adversarial Examples","created":"2021-01-07","cited_by_count":4},{"id":"2111.12034","title":"Adversarial machine learning for protecting against online manipulation","created":"2021-11-23","cited_by_count":3},{"id":"2306.02488","title":"Adversary for Social Good: Leveraging Adversarial Attacks to Protect Personal Attribute Privacy","created":"2023-06-04","cited_by_count":3},{"id":"2103.03701","title":"Don't Forget to Sign the Gradients!","created":"2021-03-05","cited_by_count":2},{"id":"2102.00290","title":"Fake it Till You Make it: Self-Supervised Semantic Shifts for Monolingual Word Embedding Tasks","created":"2021-01-30","cited_by_count":1},{"id":"2211.01315","title":"Addressing Data Distribution Shifts in Online Machine Learning Powered Smart City Applications Using Augmented Test-Time Adaptation","created":"2022-11-02","cited_by_count":1},{"id":"2211.02885","title":"Stateful Detection of Adversarial Reprogramming","created":"2022-11-05","cited_by_count":1}],"next_cursor":null}