{"list":"other","total":55,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2106.09685","title":"LoRA: Low-Rank Adaptation of Large Language Models","created":"2021-06-17","cited_by_count":14380},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1910.13461","title":"BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehension","created":"2019-10-29","cited_by_count":5893},{"id":"1804.07461","title":"GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understanding","created":"2018-04-20","cited_by_count":4899},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1911.02685","title":"A Comprehensive Survey on Transfer Learning","created":"2019-11-07","cited_by_count":1160},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1702.08423","title":"Age Progression/Regression by Conditional Adversarial Autoencoder","created":"2017-02-27","cited_by_count":429},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"1905.12101","title":"Differential Privacy Has Disparate Impact on Model Accuracy","created":"2019-05-28","cited_by_count":316},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"2004.00053","title":"Information Leakage in Embedding Models","created":"2020-03-31","cited_by_count":203},{"id":"2005.02205","title":"When Machine Unlearning Jeopardizes Privacy","created":"2020-05-05","cited_by_count":198},{"id":"1801.05507","title":"Gazelle: A Low Latency Framework for Secure Neural Network Inference","created":"2018-01-16","cited_by_count":193},{"id":"1807.05852","title":"Machine Learning with Membership Privacy using Adversarial Regularization","created":"2018-07-16","cited_by_count":186},{"id":"1906.11798","title":"Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference","created":"2019-06-27","cited_by_count":175},{"id":"2007.15528","title":"Membership Leakage in Label-Only Exposures","created":"2020-07-30","cited_by_count":168},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"1806.03287","title":"Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware","created":"2018-06-08","cited_by_count":102},{"id":"2104.14380","title":"PPFL: Privacy-preserving Federated Learning with Trusted Execution Environments","created":"2021-04-29","cited_by_count":93},{"id":"1611.03814","title":"Towards the Science of Security and Privacy in Machine Learning","created":"2016-11-11","cited_by_count":89},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85},{"id":"1906.10908","title":"Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks","created":"2019-06-26","cited_by_count":81},{"id":"2004.05703","title":"DarkneTZ: Towards Model Privacy at the Edge using Trusted Execution Environments","created":"2020-04-12","cited_by_count":58},{"id":"2010.09063","title":"Enabling Fast Differentially Private SGD via Just-in-Time Compilation and Vectorization","created":"2020-10-18","cited_by_count":58},{"id":"1808.04761","title":"Cache Telepathy: Leveraging Shared Resource Attacks to Learn DNN Architectures","created":"2018-08-14","cited_by_count":57},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50},{"id":"1801.01203","title":"Spectre Attacks: Exploiting Speculative Execution","created":"2018-01-03","cited_by_count":47},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42},{"id":"2006.12784","title":"Hermes Attack: Steal DNN Models with Lossless Inference Accuracy","created":"2020-06-23","cited_by_count":41},{"id":"2002.07687","title":"Mind Your Weight(s): A Large-scale Study on Insufficient Machine Learning Model Protection in Mobile Apps","created":"2020-02-18","cited_by_count":36},{"id":"1808.00590","title":"MLCapsule: Guarded Offline Deployment of Machine Learning as a Service","created":"2018-08-01","cited_by_count":31},{"id":"1905.09165","title":"A framework for the extraction of Deep Neural Networks by leveraging public data","created":"2019-05-22","cited_by_count":22},{"id":"1912.03485","title":"Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environments","created":"2019-12-07","cited_by_count":17},{"id":"2009.13747","title":"Dynamic Slicing for Deep Neural Networks","created":"2020-09-29","cited_by_count":16},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16},{"id":"2209.09577","title":"Understanding Real-world Threats to Deep Learning Models in Android Apps","created":"2022-09-20","cited_by_count":15},{"id":"1802.09085","title":"SgxPectre Attacks: Stealing Intel Secrets from SGX Enclaves via Speculative Execution","created":"2018-02-25","cited_by_count":14},{"id":"2207.00083","title":"DarKnight: An Accelerated Framework for Privacy and Integrity Preserving Deep Learning Using Trusted Hardware","created":"2022-06-30","cited_by_count":14},{"id":"1907.00274","title":"NetTailor: Tuning the Architecture, Not Just the Weights","created":"2019-06-29","cited_by_count":11},{"id":"2001.07450","title":"Occlum: Secure and Efficient Multitasking Inside a Single Enclave of Intel SGX","created":"2020-01-21","cited_by_count":11},{"id":"2005.06043","title":"Serdab: An IoT Framework for Partitioning Neural Networks Computation across Multiple Enclaves","created":"2020-05-12","cited_by_count":11},{"id":"1611.06952","title":"Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing","created":"2016-11-21","cited_by_count":10},{"id":"2006.13598","title":"A Survey of Published Attacks on Intel SGX","created":"2020-06-24","cited_by_count":10}],"next_cursor":null}