{"list":"other","total":108,"rows":[{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"1405.0312","title":"Microsoft COCO: Common Objects in Context","created":"2014-05-01","cited_by_count":17608},{"id":"2302.13971","title":"LLaMA: Open and Efficient Foundation Language Models","created":"2023-02-27","cited_by_count":14132},{"id":"2304.08485","title":"Visual Instruction Tuning","created":"2023-04-17","cited_by_count":7869},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"2204.06125","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","created":"2022-04-13","cited_by_count":6585},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"2301.12597","title":"BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Models","created":"2023-01-30","cited_by_count":6137},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2310.03744","title":"Improved Baselines with Visual Instruction Tuning","created":"2023-10-05","cited_by_count":4418},{"id":"2204.14198","title":"Flamingo: a Visual Language Model for Few-Shot Learning","created":"2022-04-29","cited_by_count":4386},{"id":"2102.12092","title":"Zero-Shot Text-to-Image Generation","created":"2021-02-24","cited_by_count":4288},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"2305.06500","title":"InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuning","created":"2023-05-11","cited_by_count":2876},{"id":"2304.10592","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","created":"2023-04-20","cited_by_count":2711},{"id":"1602.07332","title":"Visual Genome: Connecting Language and Vision Using Crowdsourced Dense Image Annotations","created":"2016-02-23","cited_by_count":2656},{"id":"1612.00837","title":"Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answering","created":"2016-12-02","cited_by_count":2516},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"2306.13549","title":"A Survey on Multimodal Large Language Models","created":"2023-06-23","cited_by_count":909},{"id":"1610.08401","title":"Universal adversarial perturbations","created":"2016-10-26","cited_by_count":784},{"id":"1908.07125","title":"Universal Adversarial Triggers for Attacking and Analyzing NLP","created":"2019-08-20","cited_by_count":722},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1712.09665","title":"Adversarial Patch","created":"2017-12-27","cited_by_count":517},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2306.15447","title":"Are aligned neural networks adversarially aligned?","created":"2023-06-26","cited_by_count":315},{"id":"2310.02949","title":"Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models","created":"2023-10-04","cited_by_count":297},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"1905.12457","title":"A backdoor attack against LSTM-based text classification systems","created":"2019-05-29","cited_by_count":227},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172},{"id":"2003.03030","title":"Clean-Label Backdoor Attacks on Video Recognition Models","created":"2020-03-06","cited_by_count":169},{"id":"2307.04087","title":"SVIT: Scaling up Visual Instruction Tuning","created":"2023-07-09","cited_by_count":162},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"1806.02299","title":"DPatch: An Adversarial Patch Attack on Object Detectors","created":"2018-06-05","cited_by_count":147},{"id":"1906.10842","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","created":"2019-06-26","cited_by_count":146},{"id":"2308.10741","title":"On the Adversarial Robustness of Multi-Modal Foundation Models","created":"2023-08-21","cited_by_count":145},{"id":"1808.10307","title":"Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation","created":"2018-08-30","cited_by_count":134},{"id":"2006.14580","title":"Backdoor Attacks Against Deep Learning Systems in the Physical World","created":"2020-06-25","cited_by_count":134},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2207.05382","title":"Frequency Domain Model Augmentation for Adversarial Attack","created":"2022-07-12","cited_by_count":130},{"id":"2003.08757","title":"Adversarial Camouflage: Hiding Physical-World Attacks with Natural Styles","created":"2020-03-08","cited_by_count":126},{"id":"2007.10760","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","created":"2020-07-21","cited_by_count":123},{"id":"2003.08904","title":"RAB: Provable Robustness Against Backdoor Attacks","created":"2020-03-19","cited_by_count":118},{"id":"2006.12557","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","created":"2020-06-22","cited_by_count":116},{"id":"2311.12075","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","created":"2023-11-20","cited_by_count":115},{"id":"1909.05193","title":"TBT: Targeted Neural Network Attack with Bit Trojan","created":"2019-09-10","cited_by_count":113},{"id":"2311.16101","title":"How Many Unicorns Are in This Image? A Safety Evaluation Benchmark for Vision LLMs","created":"2023-11-27","cited_by_count":108},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104},{"id":"2204.05255","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","created":"2022-04-11","cited_by_count":103},{"id":"2006.08131","title":"An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks","created":"2020-06-15","cited_by_count":97},{"id":"2307.14692","title":"Backdoor Attacks for In-Context Learning with Language Models","created":"2023-07-27","cited_by_count":96},{"id":"1906.11897","title":"On Physical Adversarial Patches for Object Detection","created":"2019-06-20","cited_by_count":93},{"id":"1704.05712","title":"Universal Adversarial Perturbations Against Semantic Image Segmentation","created":"2017-04-19","cited_by_count":92},{"id":"2106.08283","title":"CRFL: Certifiably Robust Federated Learning against Backdoor Attacks","created":"2021-06-15","cited_by_count":91},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90},{"id":"2105.10123","title":"Backdoor Attacks on Self-Supervised Learning","created":"2021-05-21","cited_by_count":90},{"id":"2111.00197","title":"Backdoor Pre-trained Models Can Transfer to All","created":"2021-10-30","cited_by_count":86},{"id":"2110.02467","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","created":"2021-10-06","cited_by_count":85},{"id":"2104.02361","title":"Backdoor Attack in the Physical World","created":"2021-04-06","cited_by_count":84},{"id":"2401.12242","title":"BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models","created":"2024-01-20","cited_by_count":80},{"id":"2002.11750","title":"On Certifying Robustness against Backdoor Attacks via Randomized Smoothing","created":"2020-02-26","cited_by_count":77},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73},{"id":"2310.08588","title":"Octopus: Embodied Vision-Language Programmer from Environmental Feedback","created":"2023-10-12","cited_by_count":73},{"id":"1911.10312","title":"Design and Evaluation of a Multi-Domain Trojan Detection Method on Deep Neural Networks","created":"2019-11-23","cited_by_count":71},{"id":"1904.00759","title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","created":"2019-03-21","cited_by_count":70},{"id":"1812.03128","title":"Backdooring Convolutional Neural Networks via Targeted Weight Perturbations","created":"2018-12-07","cited_by_count":69},{"id":"2105.00579","title":"BACKDOORL: Backdoor Attack against Competitive Reinforcement Learning","created":"2021-05-02","cited_by_count":68},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68},{"id":"1707.05572","title":"Fast Feature Fool: A data independent approach to universal adversarial perturbations","created":"2017-07-18","cited_by_count":66},{"id":"2005.00191","title":"Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability","created":"2020-05-01","cited_by_count":66},{"id":"2111.07970","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","created":"2021-11-15","cited_by_count":66},{"id":"2303.03323","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","created":"2023-03-06","cited_by_count":63},{"id":"2103.01498","title":"A Survey On Universal Adversarial Attack","created":"2021-03-02","cited_by_count":59},{"id":"2008.01761","title":"Can Adversarial Weight Perturbations Inject Neural Backdoors?","created":"2020-08-04","cited_by_count":56},{"id":"2005.00174","title":"Universal Adversarial Attacks with Natural Triggers for Text Classification","created":"2020-05-01","cited_by_count":51},{"id":"2108.02488","title":"Poison Ink: Robust and Invisible Backdoor Attack","created":"2021-08-05","cited_by_count":50},{"id":"2001.06325","title":"Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNet","created":"2020-01-16","cited_by_count":45},{"id":"2101.06896","title":"DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injection","created":"2021-01-18","cited_by_count":44},{"id":"2209.15266","title":"Data Poisoning Attacks Against Multimodal Encoders","created":"2022-09-30","cited_by_count":41},{"id":"2112.07668","title":"Dual-Key Multimodal Backdoors for Visual Question Answering","created":"2021-12-14","cited_by_count":37},{"id":"2312.00374","title":"The Philosopher's Stone: Trojaning Plugins of Large Language Models","created":"2023-12-01","cited_by_count":37},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34},{"id":"2106.01810","title":"Defending Against Backdoor Attacks in Natural Language Generation","created":"2021-06-03","cited_by_count":33},{"id":"1812.00552","title":"Universal Perturbation Attack Against Image Retrieval","created":"2018-12-03","cited_by_count":32},{"id":"2005.08087","title":"Universal Adversarial Perturbations: A Survey","created":"2020-05-16","cited_by_count":28},{"id":"2207.00278","title":"BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label","created":"2022-07-01","cited_by_count":28},{"id":"2109.01300","title":"How to Inject Backdoors with Better Consistency: Logit Anchoring on Clean Data","created":"2021-09-03","cited_by_count":24},{"id":"2002.12162","title":"Defending against Backdoor Attack on Deep Neural Networks","created":"2020-02-26","cited_by_count":22}],"next_cursor":"100"}