{"list":"other","total":90,"rows":[{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2002.05709","title":"A Simple Framework for Contrastive Learning of Visual Representations","created":"2020-02-13","cited_by_count":12049},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1705.07874","title":"A Unified Approach to Interpreting Model Predictions","created":"2017-05-22","cited_by_count":6555},{"id":"2201.03545","title":"A ConvNet for the 2020s","created":"2022-01-10","cited_by_count":3579},{"id":"1603.05027","title":"Identity Mappings in Deep Residual Networks","created":"2016-03-16","cited_by_count":1965},{"id":"1607.02533","title":"Adversarial examples in the physical world","created":"2016-07-08","cited_by_count":1769},{"id":"1610.05492","title":"Federated Learning: Strategies for Improving Communication Efficiency","created":"2016-10-18","cited_by_count":1475},{"id":"1609.04836","title":"On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minima","created":"2016-09-15","cited_by_count":1352},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"2207.12396","title":"Exploring CLIP for Assessing the Look and Feel of Images","created":"2022-07-25","cited_by_count":991},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1812.05159","title":"An Empirical Study of Example Forgetting during Deep Neural Network Learning","created":"2018-12-12","cited_by_count":678},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1706.08947","title":"Exploring Generalization in Deep Learning","created":"2017-06-27","cited_by_count":600},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"2010.08138","title":"Input-Aware Dynamic Backdoor Attack","created":"2020-10-16","cited_by_count":313},{"id":"2007.05084","title":"Attack of the Tails: Yes, You Really Can Backdoor Federated Learning","created":"2020-07-09","cited_by_count":309},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"1807.01069","title":"Adversarial Robustness Toolbox v1.0.0","created":"2018-07-03","cited_by_count":215},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"2003.03030","title":"Clean-Label Backdoor Attacks on Video Recognition Models","created":"2020-03-06","cited_by_count":169},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"2007.10760","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","created":"2020-07-21","cited_by_count":123},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102},{"id":"2206.10341","title":"Neurotoxin: Durable Backdoors in Federated Learning","created":"2022-06-12","cited_by_count":98},{"id":"2302.03251","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","created":"2023-02-07","cited_by_count":97},{"id":"1911.07116","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","created":"2019-11-16","cited_by_count":95},{"id":"2205.13383","title":"BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning","created":"2022-05-26","cited_by_count":86},{"id":"2109.05211","title":"RobustART: Benchmarking Robustness on Architecture Design and Training Techniques","created":"2021-09-11","cited_by_count":79},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74},{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59},{"id":"2110.14880","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","created":"2021-10-28","cited_by_count":53},{"id":"1908.02203","title":"Model Agnostic Defence against Backdoor Attacks in Machine Learning","created":"2019-08-06","cited_by_count":52},{"id":"2108.02488","title":"Poison Ink: Robust and Invisible Backdoor Attack","created":"2021-08-05","cited_by_count":50},{"id":"2303.18191","title":"Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency","created":"2023-03-27","cited_by_count":46},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43},{"id":"2003.07233","title":"The TrojAI Software Framework: An OpenSource tool for Embedding Trojans into Deep Learning Models","created":"2020-03-13","cited_by_count":42},{"id":"2112.14889","title":"Few-shot Backdoor Defense Using Shapley Estimation","created":"2021-12-30","cited_by_count":41},{"id":"2001.07384","title":"Understanding Why Neural Networks Generalize Well Through GSNR of Parameters","created":"2020-01-21","cited_by_count":40},{"id":"2205.13616","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","created":"2022-05-26","cited_by_count":40},{"id":"2302.14677","title":"Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger","created":"2023-02-28","cited_by_count":40},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37},{"id":"2210.09194","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","created":"2022-10-17","cited_by_count":33},{"id":"2310.01875","title":"Towards Stable Backdoor Purification through Feature Shift Tuning","created":"2023-10-03","cited_by_count":32},{"id":"2210.07346","title":"An Embarrassingly Simple Backdoor Attack on Self-supervised Learning","created":"2022-10-13","cited_by_count":31},{"id":"2012.09302","title":"TrojanZoo: Towards Unified, Holistic, and Practical Evaluation of Neural Backdoors","created":"2020-12-16","cited_by_count":30},{"id":"2302.11408","title":"ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms","created":"2023-02-22","cited_by_count":29},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29},{"id":"2007.00711","title":"ConFoc: Content-Focus Protection Against Trojan Attacks on Neural Networks","created":"2020-07-01","cited_by_count":28},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20},{"id":"2204.09975","title":"Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation","created":"2022-04-21","cited_by_count":18},{"id":"2001.05574","title":"Advbox: a toolbox to generate adversarial examples that fool neural networks","created":"2020-01-13","cited_by_count":17},{"id":"2006.07026","title":"Backdoor Attacks on Federated Meta-Learning","created":"2020-06-12","cited_by_count":15},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14},{"id":"2307.10184","title":"A Dual Stealthy Backdoor: From Both Spatial and Frequency Perspectives","created":"2023-07-03","cited_by_count":13},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11},{"id":"2312.06230","title":"Activation Gradient based Poisoned Sample Detection Against Backdoor Attacks","created":"2023-12-11","cited_by_count":11},{"id":"2312.12724","title":"Progressive Poisoned Data Isolation for Training-time Backdoor Defense","created":"2023-12-20","cited_by_count":10},{"id":"2312.11057","title":"DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models","created":"2023-12-18","cited_by_count":9},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8},{"id":"2312.04902","title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","created":"2023-12-08","cited_by_count":7},{"id":"2401.13578","title":"WPDA: Frequency-based Backdoor Attack with Wavelet Packet Decomposition","created":"2024-01-24","cited_by_count":5}],"next_cursor":null}