{"list":"other","total":58,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1705.07874","title":"A Unified Approach to Interpreting Model Predictions","created":"2017-05-22","cited_by_count":6555},{"id":"1602.04938","title":"\"Why Should I Trust You?\": Explaining the Predictions of Any Classifier","created":"2016-02-16","cited_by_count":5070},{"id":"1801.04381","title":"MobileNetV2: Inverted Residuals and Linear Bottlenecks","created":"2018-01-13","cited_by_count":4795},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1904.02868","title":"Data Shapley: Equitable Valuation of Data for Machine Learning","created":"2019-04-05","cited_by_count":629},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1912.08795","title":"Dreaming to Distill: Data-free Knowledge Transfer via DeepInversion","created":"2019-12-18","cited_by_count":423},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"2010.08138","title":"Input-Aware Dynamic Backdoor Attack","created":"2020-10-16","cited_by_count":313},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"2303.14186","title":"TRAK: Attributing Model Behavior at Scale","created":"2023-03-24","cited_by_count":283},{"id":"1911.07135","title":"The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks","created":"2019-11-17","cited_by_count":246},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"2006.07709","title":"Auditing Differentially Private Machine Learning: How Private is Private SGD?","created":"2020-06-13","cited_by_count":218},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"2004.00053","title":"Information Leakage in Embedding Models","created":"2020-03-31","cited_by_count":203},{"id":"2101.04535","title":"Adversary Instantiation: Lower Bounds for Differentially Private Machine Learning","created":"2021-01-11","cited_by_count":199},{"id":"1708.08689","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","created":"2017-08-29","cited_by_count":197},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"2007.15528","title":"Membership Leakage in Label-Only Exposures","created":"2020-07-30","cited_by_count":168},{"id":"2110.14049","title":"Beta Shapley: a Unified and Noise-reduced Data Valuation Framework for Machine Learning","created":"2021-10-26","cited_by_count":165},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161},{"id":"2003.03675","title":"Dynamic Backdoor Attacks Against Machine Learning Models","created":"2020-03-07","cited_by_count":151},{"id":"1908.08619","title":"Efficient Task-Specific Data Valuation for Nearest Neighbor Algorithms","created":"2019-08-22","cited_by_count":148},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"2206.10469","title":"The Privacy Onion Effect: Memorization is Relative","created":"2022-06-21","cited_by_count":136},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128},{"id":"2011.14779","title":"Data-Free Model Extraction","created":"2020-11-30","cited_by_count":124},{"id":"1904.01067","title":"Updates-Leak: Data Set Inference and Reconstruction Attacks in Online Learning","created":"2019-04-01","cited_by_count":122},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101},{"id":"2005.03161","title":"MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation","created":"2020-05-06","cited_by_count":99},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84},{"id":"1805.08125","title":"A Marketplace for Data: An Algorithmic Solution","created":"2018-05-21","cited_by_count":76},{"id":"1905.11742","title":"Overlearning Reveals Sensitive Attributes","created":"2019-05-28","cited_by_count":76},{"id":"2201.10787","title":"Variational Model Inversion Attacks","created":"2022-01-26","cited_by_count":75},{"id":"2003.04884","title":"Cryptanalytic Extraction of Neural Network Models","created":"2020-03-10","cited_by_count":68},{"id":"2010.04092","title":"Knowledge-Enriched Distributional Model Inversion Attacks","created":"2020-10-08","cited_by_count":67},{"id":"2201.12179","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","created":"2022-01-28","cited_by_count":60},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58},{"id":"2209.01292","title":"Are Attribute Inference Attacks Just Imputation?","created":"2022-09-02","cited_by_count":49},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"2210.07346","title":"An Embarrassingly Simple Backdoor Attack on Self-supervised Learning","created":"2022-10-13","cited_by_count":31},{"id":"2205.03190","title":"Imperceptible Backdoor Attack: From Input Space to Feature Representation","created":"2022-05-06","cited_by_count":27},{"id":"2112.02230","title":"SHAPr: An Efficient and Versatile Membership Privacy Risk Metric for Machine Learning","created":"2021-12-04","cited_by_count":10},{"id":"2404.00108","title":"Efficient Data-Free Model Stealing with Label Diversity","created":"2024-03-29","cited_by_count":4}],"next_cursor":null}