{"list":"other","total":160,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1512.00567","title":"Rethinking the Inception Architecture for Computer Vision","created":"2015-12-02","cited_by_count":5475},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1602.04938","title":"\"Why Should I Trust You?\": Explaining the Predictions of Any Classifier","created":"2016-02-16","cited_by_count":5070},{"id":"1703.01365","title":"Axiomatic Attribution for Deep Networks","created":"2017-03-04","cited_by_count":3384},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1905.00414","title":"Similarity of Neural Network Representations Revisited","created":"2019-05-01","cited_by_count":1755},{"id":"1411.1792","title":"How transferable are features in deep neural networks?","created":"2014-11-06","cited_by_count":1225},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1803.06978","title":"Improving Transferability of Adversarial Examples with Input Diversity","created":"2018-03-19","cited_by_count":599},{"id":"1611.02770","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","created":"2016-11-08","cited_by_count":536},{"id":"1804.08598","title":"Black-box Adversarial Attacks with Limited Queries and Information","created":"2018-04-23","cited_by_count":501},{"id":"1712.04248","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","created":"2017-12-12","cited_by_count":462},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1904.02884","title":"Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attacks","created":"2019-04-05","cited_by_count":442},{"id":"1908.06281","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","created":"2019-08-17","cited_by_count":355},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"2007.08489","title":"Do Adversarially Robust ImageNet Models Transfer Better?","created":"2020-07-16","cited_by_count":316},{"id":"1801.02610","title":"Generating Adversarial Examples with Adversarial Networks","created":"2018-01-08","cited_by_count":258},{"id":"1905.07121","title":"Simple Black-box Adversarial Attacks","created":"2019-05-17","cited_by_count":251},{"id":"2103.15571","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","created":"2021-03-29","cited_by_count":244},{"id":"1802.05666","title":"Adversarial Risk and the Dangers of Evaluating Against Weak Attacks","created":"2018-02-15","cited_by_count":221},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1904.04433","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","created":"2019-04-09","cited_by_count":175},{"id":"2002.05990","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","created":"2020-02-14","cited_by_count":167},{"id":"2102.00436","title":"Admix: Enhancing the Transferability of Adversarial Attacks","created":"2021-01-31","cited_by_count":156},{"id":"1712.02328","title":"Generative Adversarial Perturbations","created":"2017-12-06","cited_by_count":153},{"id":"1807.07978","title":"Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors","created":"2018-07-20","cited_by_count":146},{"id":"1907.10823","title":"Enhancing Adversarial Example Transferability with an Intermediate Level Attack","created":"2019-07-23","cited_by_count":140},{"id":"1805.11770","title":"AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks","created":"2018-05-30","cited_by_count":137},{"id":"1807.04457","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","created":"2018-07-12","cited_by_count":130},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130},{"id":"2107.14185","title":"Feature Importance-aware Transferable Adversarial Attacks","created":"2021-07-29","cited_by_count":127},{"id":"2011.14779","title":"Data-Free Model Extraction","created":"2020-11-30","cited_by_count":124},{"id":"1906.06919","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","created":"2019-06-17","cited_by_count":121},{"id":"1909.10773","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","created":"2019-09-24","cited_by_count":120},{"id":"2009.04131","title":"SoK: Certified Robustness for Deep Neural Networks","created":"2020-09-09","cited_by_count":105},{"id":"2005.03161","title":"MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation","created":"2020-05-06","cited_by_count":99},{"id":"1804.00097","title":"Adversarial Attacks and Defences Competition","created":"2018-03-31","cited_by_count":96},{"id":"2006.12792","title":"RayS: A Ray Searching Method for Hard-label Adversarial Attack","created":"2020-06-23","cited_by_count":96},{"id":"1909.05040","title":"Sparse and Imperceivable Adversarial Attacks","created":"2019-09-11","cited_by_count":95},{"id":"1905.00441","title":"NATTACK: Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks","created":"2019-05-01","cited_by_count":94},{"id":"2204.00008","title":"Improving Adversarial Transferability via Neuron Attribution-Based Attacks","created":"2022-03-31","cited_by_count":93},{"id":"1905.11736","title":"Cross-Domain Transferability of Adversarial Perturbations","created":"2019-05-28","cited_by_count":92},{"id":"2012.11207","title":"On Success and Simplicity: A Second Look at Transferable Targeted Attacks","created":"2020-12-21","cited_by_count":89},{"id":"1801.08092","title":"Generalizable Data-free Objective for Crafting Universal Adversarial Perturbations","created":"2018-01-24","cited_by_count":88},{"id":"1805.11090","title":"GenAttack: Practical Black-box Attacks with Gradient-Free Optimization","created":"2018-05-28","cited_by_count":82},{"id":"2012.03528","title":"Backpropagating Linearly Improves Transferability of Adversarial Examples","created":"2020-12-07","cited_by_count":79},{"id":"2007.06765","title":"Patch-wise Attack for Fooling Deep Neural Network","created":"2020-07-14","cited_by_count":78},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75},{"id":"2010.04055","title":"A Unified Approach to Interpreting and Boosting Adversarial Transferability","created":"2020-10-08","cited_by_count":71},{"id":"1812.03413","title":"Learning Transferable Adversarial Examples via Ghost Networks","created":"2018-12-09","cited_by_count":70},{"id":"2210.05968","title":"Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbation","created":"2022-10-12","cited_by_count":68},{"id":"2010.04092","title":"Knowledge-Enriched Distributional Model Inversion Attacks","created":"2020-10-08","cited_by_count":67},{"id":"1707.05572","title":"Fast Feature Fool: A data independent approach to universal adversarial perturbations","created":"2017-07-18","cited_by_count":66},{"id":"2003.06468","title":"GeoDA: a geometric framework for black-box adversarial attacks","created":"2020-03-13","cited_by_count":66},{"id":"2006.12834","title":"Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks","created":"2020-06-23","cited_by_count":65},{"id":"2103.14641","title":"On Generating Transferable Targeted Perturbations","created":"2021-03-26","cited_by_count":65},{"id":"1703.09387","title":"Adversarial Transformation Networks: Learning to Generate Adversarial Examples","created":"2017-03-28","cited_by_count":62},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62},{"id":"2003.12703","title":"DaST: Data-free Substitute Training for Adversarial Attacks","created":"2020-03-28","cited_by_count":60},{"id":"2011.12807","title":"SurFree: a fast surrogate-free black-box attack","created":"2020-11-25","cited_by_count":60},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58},{"id":"1911.07140","title":"Black-Box Adversarial Attack with Transferable Model-based Embedding","created":"2019-11-17","cited_by_count":57},{"id":"2004.14861","title":"Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability","created":"2020-04-29","cited_by_count":57},{"id":"1907.05587","title":"Stateful Detection of Black-Box Adversarial Attacks","created":"2019-07-12","cited_by_count":56},{"id":"1909.04385","title":"FDA: Feature Disruptive Attack","created":"2019-09-10","cited_by_count":56},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56},{"id":"2108.04204","title":"Meta Gradient Adversarial Attack","created":"2021-08-09","cited_by_count":55},{"id":"2103.10609","title":"Boosting Adversarial Transferability through Enhanced Momentum","created":"2021-03-19","cited_by_count":54},{"id":"2009.05241","title":"Improving Robustness to Model Inversion Attacks via Mutual Information Regularization","created":"2020-09-11","cited_by_count":52},{"id":"2004.12519","title":"Transferable Perturbations of Deep Feature Distributions","created":"2020-04-27","cited_by_count":51},{"id":"2203.09123","title":"Improving the Transferability of Targeted Adversarial Examples through Object-Based Diverse Input","created":"2022-03-17","cited_by_count":50},{"id":"1905.06635","title":"Parsimonious Black-Box Adversarial Attacks via Efficient Combinatorial Optimization","created":"2019-05-16","cited_by_count":49},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48},{"id":"1911.11616","title":"Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reduction","created":"2019-11-22","cited_by_count":47},{"id":"1812.09803","title":"Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks","created":"2018-12-24","cited_by_count":46},{"id":"2007.06622","title":"SoK: The Faults in our ASRs: An Overview of Attacks against Automatic Speech Recognition and Speaker Identification Systems","created":"2020-07-13","cited_by_count":46},{"id":"2106.14851","title":"Data Poisoning Won't Save You From Facial Recognition","created":"2021-06-28","cited_by_count":45},{"id":"2201.11528","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","created":"2022-01-27","cited_by_count":42},{"id":"1802.09707","title":"Understanding and Enhancing the Transferability of Adversarial Examples","created":"2018-02-27","cited_by_count":41},{"id":"1904.01160","title":"Curls & Whey: Boosting Black-Box Adversarial Attacks","created":"2019-04-02","cited_by_count":37},{"id":"1912.01667","title":"A Survey of Black-Box Adversarial Attacks on Computer Vision Models","created":"2019-12-03","cited_by_count":37},{"id":"2112.06011","title":"Improving the Transferability of Adversarial Examples with Resized-Diverse-Inputs, Diversity-Ensemble and Region Fitting","created":"2021-12-11","cited_by_count":37},{"id":"2007.07435","title":"AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows","created":"2020-07-15","cited_by_count":36},{"id":"2106.10189","title":"Adversarial Training Helps Transfer Learning via Better Representations","created":"2021-06-18","cited_by_count":36},{"id":"2303.15735","title":"Improving the Transferability of Adversarial Samples by Path-Augmented Method","created":"2023-03-28","cited_by_count":36},{"id":"1906.04392","title":"Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks","created":"2019-06-11","cited_by_count":35},{"id":"2008.08847","title":"Yet Another Intermediate-Level Attack","created":"2020-08-20","cited_by_count":35},{"id":"2009.11508","title":"Improving Query Efficiency of Black-box Adversarial Attack","created":"2020-09-24","cited_by_count":34},{"id":"2106.02105","title":"A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks","created":"2021-06-03","cited_by_count":34}],"next_cursor":"100"}