{"list":"other","total":67,"rows":[{"id":"1602.05629","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","created":"2016-02-17","cited_by_count":7669},{"id":"1708.07747","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","created":"2017-08-25","cited_by_count":4349},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"1806.00582","title":"Federated Learning with Non-IID Data","created":"2018-06-02","cited_by_count":1108},{"id":"1906.08935","title":"Deep Leakage from Gradients","created":"2019-06-21","cited_by_count":1021},{"id":"1902.01046","title":"Towards Federated Learning at Scale: System Design","created":"2019-02-04","cited_by_count":832},{"id":"1807.00459","title":"How To Backdoor Federated Learning","created":"2018-07-02","cited_by_count":765},{"id":"1312.6211","title":"An Empirical Investigation of Catastrophic Forgetting in Gradient-Based Neural Networks","created":"2013-12-21","cited_by_count":722},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"1702.07476","title":"Renyi Differential Privacy","created":"2017-02-24","cited_by_count":650},{"id":"1805.04049","title":"Exploiting Unintended Feature Leakage in Collaborative Learning","created":"2018-05-10","cited_by_count":520},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1806.01246","title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","created":"2018-06-04","cited_by_count":498},{"id":"1911.11815","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","created":"2019-11-26","cited_by_count":493},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1712.01887","title":"Deep Gradient Compression: Reducing the Communication Bandwidth for Distributed Training","created":"2017-12-05","cited_by_count":478},{"id":"1712.07557","title":"Differentially Private Federated Learning: A Client Level Perspective","created":"2017-12-20","cited_by_count":459},{"id":"2007.14321","title":"Label-Only Membership Inference Attacks","created":"2020-07-28","cited_by_count":388},{"id":"2001.02610","title":"iDLG: Improved Deep Leakage from Gradients","created":"2020-01-08","cited_by_count":382},{"id":"1811.12470","title":"Analyzing Federated Learning through an Adversarial Lens","created":"2018-11-29","cited_by_count":351},{"id":"2012.13995","title":"FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping","created":"2020-12-27","cited_by_count":346},{"id":"1702.07464","title":"Deep Models Under the GAN: Information Leakage from Collaborative Deep Learning","created":"2017-02-24","cited_by_count":334},{"id":"2104.07586","title":"See through Gradients: Image Batch Recovery via GradInversion","created":"2021-04-15","cited_by_count":326},{"id":"1905.12101","title":"Differential Privacy Has Disparate Impact on Model Accuracy","created":"2019-05-28","cited_by_count":316},{"id":"2007.05084","title":"Attack of the Tails: Yes, You Really Can Backdoor Federated Learning","created":"2020-07-09","cited_by_count":309},{"id":"2007.08432","title":"Data Poisoning Attacks Against Federated Learning Systems","created":"2020-07-16","cited_by_count":275},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"1911.07963","title":"Can You Really Backdoor Federated Learning?","created":"2019-11-18","cited_by_count":255},{"id":"1812.00535","title":"Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning","created":"2018-12-03","cited_by_count":246},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"1909.10594","title":"MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples","created":"2019-09-23","cited_by_count":197},{"id":"1807.05852","title":"Machine Learning with Membership Privacy using Adversarial Regularization","created":"2018-07-16","cited_by_count":186},{"id":"1906.11798","title":"Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference","created":"2019-06-27","cited_by_count":175},{"id":"1709.07886","title":"Machine Learning Models that Remember Too Much","created":"2017-09-22","cited_by_count":169},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"1905.05897","title":"Transferable Clean-Label Poisoning Attacks on Deep Neural Nets","created":"2019-05-15","cited_by_count":131},{"id":"2007.02220","title":"You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion","created":"2020-07-05","cited_by_count":131},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130},{"id":"1908.00686","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","created":"2019-08-02","cited_by_count":124},{"id":"2004.00225","title":"MetaPoison: Practical General-purpose Clean-label Data Poisoning","created":"2020-04-01","cited_by_count":120},{"id":"2006.08131","title":"An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks","created":"2020-06-15","cited_by_count":97},{"id":"2010.07733","title":"R-GAP: Recursive Gradient Attack on Privacy","created":"2020-10-15","cited_by_count":97},{"id":"2012.06043","title":"Provable Defense against Privacy Leakage in Federated Learning from Representation Perspective","created":"2020-12-08","cited_by_count":94},{"id":"2104.14380","title":"PPFL: Privacy-preserving Federated Learning with Trusted Execution Environments","created":"2021-04-29","cited_by_count":93},{"id":"2011.09527","title":"Strong Data Augmentation Sanitizes Poisoning and Backdoor Attacks Without an Accuracy Tradeoff","created":"2020-11-18","cited_by_count":89},{"id":"2002.00211","title":"Learning to Detect Malicious Clients for Robust Federated Learning","created":"2020-02-01","cited_by_count":88},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79},{"id":"1903.09860","title":"Data Poisoning against Differentially-Private Learners: Attacks and Defenses","created":"2019-03-23","cited_by_count":78},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78},{"id":"1812.00910","title":"Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning","created":"2018-12-03","cited_by_count":77},{"id":"1910.03197","title":"Accelerating Federated Learning via Momentum Gradient Descent","created":"2019-10-08","cited_by_count":76},{"id":"2107.01154","title":"Gradient-Leakage Resilient Federated Learning","created":"2021-07-02","cited_by_count":40},{"id":"2008.13578","title":"Against Membership Inference Attack: Pruning is All You Need","created":"2020-08-28","cited_by_count":32},{"id":"1808.00590","title":"MLCapsule: Guarded Offline Deployment of Machine Learning as a Service","created":"2018-08-01","cited_by_count":31},{"id":"2201.02873","title":"LoMar: A Local Defense Against Poisoning Attack on Federated Learning","created":"2022-01-08","cited_by_count":31},{"id":"1910.13111","title":"Shielding Collaborative Learning: Mitigating Poisoning Attacks through Client-Side Detection","created":"2019-10-29","cited_by_count":26},{"id":"1910.08234","title":"Federated Learning with Unbiased Gradient Aggregation and Controllable Meta Updating","created":"2019-10-18","cited_by_count":22},{"id":"2112.13178","title":"Gradient Leakage Attack Resilient Deep Learning","created":"2021-12-25","cited_by_count":18},{"id":"1911.09777","title":"Effects of Differential Privacy and Data Skewness on Membership Inference Vulnerability","created":"2019-11-21","cited_by_count":17},{"id":"2305.06473","title":"Securing Distributed SGD against Gradient Leakage Threats","created":"2023-05-10","cited_by_count":14},{"id":"2007.02977","title":"Sharing Models or Coresets: A Study based on Membership Inference Attack","created":"2020-07-06","cited_by_count":7},{"id":"2303.11511","title":"STDLens: Model Hijacking-Resilient Federated Learning for Object Detection","created":"2023-03-21","cited_by_count":4},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3}],"next_cursor":null}