{"list":"other","total":68,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1907.11692","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","created":"2019-07-26","cited_by_count":13372},{"id":"1708.07747","title":"Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms","created":"2017-08-25","cited_by_count":4349},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1912.03817","title":"Machine Unlearning","created":"2019-12-09","cited_by_count":1061},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1909.06335","title":"Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classification","created":"2019-09-13","cited_by_count":851},{"id":"1904.02868","title":"Data Shapley: Equitable Valuation of Data for Machine Learning","created":"2019-04-05","cited_by_count":629},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"2002.08484","title":"Estimating Training Data Influence by Tracing Gradient Descent","created":"2020-02-19","cited_by_count":580},{"id":"1911.03030","title":"Certified Data Removal from Machine Learning Models","created":"2019-11-08","cited_by_count":535},{"id":"1804.00792","title":"Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","created":"2018-04-03","cited_by_count":519},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1711.09325","title":"Training Confidence-calibrated Classifiers for Detecting Out-of-Distribution Samples","created":"2017-11-26","cited_by_count":389},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"1803.00942","title":"Not All Samples Are Created Equal: Deep Learning with Importance Sampling","created":"2018-03-02","cited_by_count":328},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"1411.4357","title":"Sketching as a Tool for Numerical Linear Algebra","created":"2014-11-17","cited_by_count":288},{"id":"1902.10275","title":"Towards Efficient Data Valuation Based on the Shapley Value","created":"2019-02-27","cited_by_count":281},{"id":"2108.11577","title":"Machine Unlearning of Features and Labels","created":"2021-08-26","cited_by_count":229},{"id":"1804.00308","title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning","created":"2018-04-01","cited_by_count":225},{"id":"2305.10120","title":"Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Models","created":"2023-05-17","cited_by_count":177},{"id":"1804.04637","title":"EMBER: An Open Dataset for Training Static PE Malware Machine Learning Models","created":"2018-04-12","cited_by_count":165},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158},{"id":"2106.09667","title":"Poisoning and Backdooring Contrastive Learning","created":"2021-06-17","cited_by_count":151},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130},{"id":"2112.02918","title":"When the Curious Abandon Honesty: Federated Learning Is Not Private","created":"2021-12-06","cited_by_count":127},{"id":"1809.03576","title":"Out-of-Distribution Detection Using an Ensemble of Self Supervised Leave-out Classifiers","created":"2018-09-04","cited_by_count":126},{"id":"1803.02815","title":"Sever: A Robust Meta-Algorithm for Stochastic Optimization","created":"2018-03-07","cited_by_count":125},{"id":"2006.12557","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","created":"2020-06-22","cited_by_count":116},{"id":"2006.14768","title":"Deep Partition Aggregation: Provable Defense against General Poisoning Attacks","created":"2020-06-26","cited_by_count":115},{"id":"2002.03018","title":"Certified Robustness to Label-Flipping Attacks via Randomized Smoothing","created":"2020-02-07","cited_by_count":108},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102},{"id":"2008.04495","title":"Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks","created":"2020-08-11","cited_by_count":94},{"id":"2010.06457","title":"CrypTFlow2: Practical 2-Party Secure Inference","created":"2020-10-13","cited_by_count":82},{"id":"2004.02229","title":"FALCON: Honest-Majority Maliciously Secure Framework for Private Deep Learning","created":"2020-04-05","cited_by_count":74},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74},{"id":"2006.14026","title":"Subpopulation Data Poisoning Attacks","created":"2020-06-24","cited_by_count":70},{"id":"1906.08473","title":"Data Cleansing for Models Trained with SGD","created":"2019-06-20","cited_by_count":67},{"id":"2005.00191","title":"Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability","created":"2020-05-01","cited_by_count":66},{"id":"2210.10936","title":"FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Information","created":"2022-10-20","cited_by_count":58},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52},{"id":"2401.14462","title":"AI auditing: The Broken Bus on the Road to AI Accountability","created":"2024-01-25","cited_by_count":43},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32},{"id":"2107.03311","title":"RoFL: Robustness of Secure Federated Learning","created":"2021-07-07","cited_by_count":25},{"id":"2109.00685","title":"Excess Capacity and Backdoor Poisoning","created":"2021-09-02","cited_by_count":24},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18},{"id":"2302.02300","title":"Run-Off Election: Improved Provable Defense against Data Poisoning Attacks","created":"2023-02-05","cited_by_count":17},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16},{"id":"2107.00501","title":"Secure Quantized Training for Deep Learning","created":"2021-07-01","cited_by_count":15},{"id":"2301.06241","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","created":"2023-01-16","cited_by_count":15},{"id":"2009.08739","title":"A Framework of Randomized Selection Based Certified Defenses Against Data Poisoning Attacks","created":"2020-09-18","cited_by_count":12},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8},{"id":"2407.07221","title":"Tracing Back the Malicious Clients in Poisoning Attacks to Federated Learning","created":"2024-07-09","cited_by_count":6},{"id":"1301.2725","title":"Robust High Dimensional Sparse Regression and Matching Pursuit","created":"2013-01-12","cited_by_count":5},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5},{"id":"2402.15780","title":"Holding Secrets Accountable: Auditing Privacy-Preserving Machine Learning","created":"2024-02-24","cited_by_count":5},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5},{"id":"2408.10468","title":"Tracing Privacy Leakage of Language Models to Training Data via Adjusted Influence Functions","created":"2024-08-20","cited_by_count":2}],"next_cursor":null}