{"list":"other","total":54,"rows":[{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1704.01155","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","created":"2017-04-04","cited_by_count":486},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1901.09192","title":"SelectiveNet: A Deep Neural Network with an Integrated Reject Option","created":"2019-01-26","cited_by_count":350},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1801.09344","title":"Certified Defenses against Adversarial Examples","created":"2018-01-29","cited_by_count":306},{"id":"1807.01069","title":"Adversarial Robustness Toolbox v1.0.0","created":"2018-07-03","cited_by_count":215},{"id":"2007.02617","title":"Understanding and Improving Fast Adversarial Training","created":"2020-07-06","cited_by_count":214},{"id":"2302.04638","title":"Better Diffusion Models Further Improve Adversarial Training","created":"2023-02-09","cited_by_count":208},{"id":"1806.00451","title":"Do CIFAR-10 Classifiers Generalize to CIFAR-10?","created":"2018-06-01","cited_by_count":200},{"id":"1803.01442","title":"Stochastic Activation Pruning for Robust Adversarial Defense","created":"2018-03-05","cited_by_count":171},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"2206.10550","title":"(Certified!!) Adversarial Robustness for Free!","created":"2022-06-21","cited_by_count":132},{"id":"2203.06616","title":"LAS-AT: Adversarial Training with Learnable Attack Strategy","created":"2022-03-13","cited_by_count":95},{"id":"2303.15991","title":"Efficient Parallel Split Learning over Resource-constrained Wireless Edge Networks","created":"2023-03-26","cited_by_count":95},{"id":"1912.11006","title":"Data-Free Adversarial Distillation","created":"2019-12-23","cited_by_count":90},{"id":"2201.05057","title":"On Adversarial Robustness of Trajectory Prediction for Autonomous Vehicles","created":"2022-01-13","cited_by_count":90},{"id":"2309.16739","title":"Pushing Large Language Models to the 6G Edge: Vision, Challenges, and Opportunities","created":"2023-09-28","cited_by_count":90},{"id":"2002.05999","title":"Adversarial Distributional Training for Robust Deep Learning","created":"2020-02-14","cited_by_count":79},{"id":"2306.12194","title":"Split Learning in 6G Edge Networks","created":"2023-06-21","cited_by_count":68},{"id":"1906.04948","title":"Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers","created":"2019-06-12","cited_by_count":65},{"id":"2403.13101","title":"AdaptSFL: Adaptive Split Federated Learning in Resource-constrained Edge Networks","created":"2024-03-19","cited_by_count":64},{"id":"2407.00952","title":"SplitLoRA: A Split Parameter-Efficient Fine-Tuning Framework for Large Language Models","created":"2024-07-01","cited_by_count":62},{"id":"1911.09272","title":"Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation","created":"2019-11-21","cited_by_count":60},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52},{"id":"2003.12365","title":"Can We Use Split Learning on 1D CNN Models for Privacy Preserving Training?","created":"2020-03-16","cited_by_count":50},{"id":"2404.06448","title":"Automated Federated Pipeline for Parameter-Efficient Fine-Tuning of Large Language Models","created":"2024-04-09","cited_by_count":49},{"id":"2002.09169","title":"Black-Box Certification with Randomized Smoothing: A Functional Optimization Based Framework","created":"2020-02-21","cited_by_count":46},{"id":"2203.14046","title":"A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologies","created":"2022-03-26","cited_by_count":44},{"id":"2203.14195","title":"How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspective","created":"2022-03-27","cited_by_count":39},{"id":"2311.01483","title":"FedSN: A Federated Learning Framework over Heterogeneous LEO Satellite Networks","created":"2023-11-02","cited_by_count":38},{"id":"1909.10147","title":"Robust Local Features for Improving the Generalization of Adversarial Training","created":"2019-09-23","cited_by_count":30},{"id":"2103.04302","title":"Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain","created":"2021-03-07","cited_by_count":29},{"id":"2303.10653","title":"Randomized Adversarial Training via Taylor Expansion","created":"2023-03-19","cited_by_count":28},{"id":"2112.12084","title":"Input-Specific Robustness Certification for Randomized Smoothing","created":"2021-12-21","cited_by_count":11},{"id":"2204.06273","title":"Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures","created":"2022-04-13","cited_by_count":11},{"id":"2206.09628","title":"Diversified Adversarial Attacks based on Conjugate Gradient Method","created":"2022-06-20","cited_by_count":11},{"id":"2304.06430","title":"Certified Zeroth-order Black-Box Defense with Robust UNet Denoiser","created":"2023-04-13","cited_by_count":11},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10},{"id":"2403.03846","title":"Can Distillation Mitigate Backdoor Attacks in Pre-trained Encoders?","created":"2024-03-06","cited_by_count":6},{"id":"2302.11628","title":"Provable Robustness Against a Union of $\\ell_0$ Adversarial Attacks","created":"2023-02-22","cited_by_count":5},{"id":"2304.10446","title":"Certified Adversarial Robustness Within Multiple Perturbation Bounds","created":"2023-04-20","cited_by_count":4},{"id":"2406.00921","title":"Towards Effective Detection of Ponzi schemes on Ethereum with Contract Runtime Behavior Graph","created":"2024-06-03","cited_by_count":4},{"id":"2211.13535","title":"DeepTaster: Adversarial Perturbation-Based Fingerprinting to Identify Proprietary Dataset Use in Deep Neural Networks","created":"2022-11-24","cited_by_count":2},{"id":"2407.01260","title":"DeepiSign-G: Generic Watermark to Stamp Hidden DNN Parameters for Self-contained Tracking","created":"2024-07-01","cited_by_count":2},{"id":"2210.08929","title":"DE-CROP: Data-efficient Certified Robustness for Pretrained Classifiers","created":"2022-10-17","cited_by_count":1}],"next_cursor":null}