{"list":"other","total":141,"rows":[{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1710.09412","title":"mixup: Beyond Empirical Risk Minimization","created":"2017-10-25","cited_by_count":5183},{"id":"1703.01365","title":"Axiomatic Attribution for Deep Networks","created":"2017-03-04","cited_by_count":3384},{"id":"1905.04899","title":"CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Features","created":"2019-05-13","cited_by_count":2884},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1610.02413","title":"Equality of Opportunity in Supervised Learning","created":"2016-10-07","cited_by_count":2007},{"id":"1908.09635","title":"A Survey on Bias and Fairness in Machine Learning","created":"2019-08-23","cited_by_count":1917},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"1708.04552","title":"Improved Regularization of Convolutional Neural Networks with Cutout","created":"2017-08-15","cited_by_count":1628},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1704.02685","title":"Learning Important Features Through Propagating Activation Differences","created":"2017-04-10","cited_by_count":1458},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1711.11279","title":"Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)","created":"2017-11-30","cited_by_count":1319},{"id":"1706.03825","title":"SmoothGrad: removing noise by adding noise","created":"2017-06-12","cited_by_count":1109},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1711.00399","title":"Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPR","created":"2017-11-01","cited_by_count":1089},{"id":"1802.01933","title":"A Survey Of Methods For Explaining Black Box Models","created":"2018-02-06","cited_by_count":973},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1412.3756","title":"Certifying and removing disparate impact","created":"2014-12-11","cited_by_count":715},{"id":"1609.03683","title":"Making Deep Neural Networks Robust to Label Noise: a Loss Correction Approach","created":"2016-09-13","cited_by_count":665},{"id":"1801.07593","title":"Mitigating Unwanted Biases with Adversarial Learning","created":"2018-01-22","cited_by_count":663},{"id":"1803.02453","title":"A Reductions Approach to Fair Classification","created":"2018-03-06","cited_by_count":587},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"2002.08347","title":"On Adaptive Attacks to Adversarial Example Defenses","created":"2020-02-19","cited_by_count":555},{"id":"2009.07896","title":"Captum: A unified and generic model interpretability library for PyTorch","created":"2020-09-16","cited_by_count":547},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"2205.07460","title":"Diffusion Models for Adversarial Purification","created":"2022-05-16","cited_by_count":476},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1709.02012","title":"On Fairness and Calibration","created":"2017-09-06","cited_by_count":406},{"id":"1711.05144","title":"Preventing Fairness Gerrymandering: Auditing and Learning for Subgroup Fairness","created":"2017-11-14","cited_by_count":384},{"id":"2109.12298","title":"Opacus: User-Friendly Differential Privacy Library in PyTorch","created":"2021-09-25","cited_by_count":383},{"id":"1708.02072","title":"Measuring Catastrophic Forgetting in Neural Networks","created":"2017-08-07","cited_by_count":360},{"id":"1802.04633","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","created":"2018-02-13","cited_by_count":357},{"id":"1610.05755","title":"Semi-supervised Knowledge Transfer for Deep Learning from Private Training Data","created":"2016-10-18","cited_by_count":348},{"id":"2103.07853","title":"Membership Inference Attacks on Machine Learning: A Survey","created":"2021-03-14","cited_by_count":321},{"id":"1905.12101","title":"Differential Privacy Has Disparate Impact on Model Accuracy","created":"2019-05-28","cited_by_count":316},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1701.04082","title":"Embedding Watermarks into Deep Neural Networks","created":"2017-01-15","cited_by_count":248},{"id":"1710.10766","title":"PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examples","created":"2017-10-30","cited_by_count":244},{"id":"1802.06739","title":"Differentially Private Generative Adversarial Network","created":"2018-02-19","cited_by_count":235},{"id":"2011.11660","title":"Differentially Private Learning Needs Better Features (or Much More Data)","created":"2020-11-23","cited_by_count":235},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"2111.05328","title":"Data Augmentation Can Improve Robustness","created":"2021-11-09","cited_by_count":194},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193},{"id":"1904.13000","title":"Adversarial Training and Robustness for Multiple Perturbations","created":"2019-04-30","cited_by_count":183},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"1702.06280","title":"On the (Statistical) Detection of Adversarial Examples","created":"2017-02-21","cited_by_count":180},{"id":"1905.12843","title":"Fair Regression: Quantitative Definitions and Reduction-based Algorithms","created":"2019-05-30","cited_by_count":168},{"id":"1703.02391","title":"Learning from Noisy Labels with Distillation","created":"2017-03-07","cited_by_count":161},{"id":"2002.10716","title":"Understanding and Mitigating the Tradeoff Between Robustness and Accuracy","created":"2020-02-25","cited_by_count":149},{"id":"2002.12200","title":"Entangled Watermarks as a Defense against Model Extraction","created":"2020-02-27","cited_by_count":149},{"id":"1908.08619","title":"Efficient Task-Specific Data Valuation for Nearest Neighbor Algorithms","created":"2019-08-22","cited_by_count":148},{"id":"1806.06055","title":"Classification with Fairness Constraints: A Meta-Algorithm with Provable Guarantees","created":"2018-06-15","cited_by_count":146},{"id":"1910.03231","title":"Peer Loss Functions: Learning from Noisy Labels without Knowing Noise Rates","created":"2019-10-08","cited_by_count":142},{"id":"1905.01989","title":"Fairness-Aware Ranking in Search & Recommendation Systems with Application to LinkedIn Talent Search","created":"2019-04-30","cited_by_count":138},{"id":"2010.06121","title":"To be Robust or to be Fair: Towards Fairness in Adversarial Training","created":"2020-10-13","cited_by_count":137},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"1803.02815","title":"Sever: A Robust Meta-Algorithm for Stochastic Optimization","created":"2018-03-07","cited_by_count":125},{"id":"2007.14191","title":"Tempered Sigmoid Activations for Deep Learning with Differential Privacy","created":"2020-07-28","cited_by_count":122},{"id":"2001.09700","title":"DP-CGAN: Differentially Private Synthetic Data and Label Generation","created":"2020-01-27","cited_by_count":118},{"id":"2104.10706","title":"Dataset Inference: Ownership Resolution in Machine Learning","created":"2021-04-21","cited_by_count":116},{"id":"2202.10103","title":"Robustness and Accuracy Could Be Reconcilable by (Proper) Definition","created":"2022-02-21","cited_by_count":111},{"id":"1906.00830","title":"DAWN: Dynamic Adversarial Watermarking of Neural Networks","created":"2019-06-03","cited_by_count":100},{"id":"1912.00888","title":"Deep Neural Network Fingerprinting by Conferrable Adversarial Examples","created":"2019-12-02","cited_by_count":93},{"id":"2011.09527","title":"Strong Data Augmentation Sanitizes Poisoning and Backdoor Attacks Without an Accuracy Tradeoff","created":"2020-11-18","cited_by_count":89},{"id":"1705.02900","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","created":"2017-05-08","cited_by_count":87},{"id":"1808.08166","title":"An Empirical Study of Rich Subgroup Fairness for Machine Learning","created":"2018-08-24","cited_by_count":81},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79},{"id":"1903.09860","title":"Data Poisoning against Differentially-Private Learners: Attacks and Defenses","created":"2019-03-23","cited_by_count":78},{"id":"2012.07006","title":"DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation","created":"2020-12-13","cited_by_count":77},{"id":"1812.02696","title":"Differentially Private Fair Learning","created":"2018-12-06","cited_by_count":76},{"id":"1803.00992","title":"Label Sanitization against Label Flipping Poisoning Attacks","created":"2018-03-02","cited_by_count":73},{"id":"1910.12903","title":"IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary","created":"2019-10-28","cited_by_count":70},{"id":"2111.14338","title":"Improving Deep Learning Interpretability by Saliency Guided Training","created":"2021-11-29","cited_by_count":68},{"id":"2002.00937","title":"Radioactive data: tracing through training","created":"2020-02-03","cited_by_count":67},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61},{"id":"2009.03728","title":"Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspective","created":"2020-09-08","cited_by_count":59},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59},{"id":"2006.12621","title":"Fairness Through Robustness: Investigating Robustness Disparity in Deep Learning","created":"2020-06-17","cited_by_count":56},{"id":"1611.01046","title":"Learning to Pivot with Adversarial Networks","created":"2016-11-03","cited_by_count":55},{"id":"2009.12562","title":"Differentially Private and Fair Deep Learning: A Lagrangian Dual Approach","created":"2020-09-26","cited_by_count":53},{"id":"2303.14460","title":"CFA: Class-wise Calibrated Fair Adversarial Training","created":"2023-03-25","cited_by_count":53},{"id":"1905.09957","title":"Robust Attribution Regularization","created":"2019-05-23","cited_by_count":47},{"id":"2011.06169","title":"Robust and Stable Black Box Explanations","created":"2020-11-12","cited_by_count":47},{"id":"2202.08187","title":"Differential Privacy and Fairness in Decisions and Learning Tasks: A Survey","created":"2022-02-16","cited_by_count":47},{"id":"1802.03041","title":"Detection of Adversarial Training Examples in Poisoning Attacks through Anomaly Detection","created":"2018-02-08","cited_by_count":46},{"id":"2002.11651","title":"Fair Learning with Private Demographic Data","created":"2020-02-26","cited_by_count":46},{"id":"2010.13365","title":"Robustness May Be at Odds with Fairness: An Empirical Study on Class-wise Accuracy","created":"2020-10-26","cited_by_count":45},{"id":"2207.07972","title":"Certified Neural Network Watermarks with Randomized Smoothing","created":"2022-07-16","cited_by_count":41},{"id":"2005.08679","title":"An Overview of Privacy in Machine Learning","created":"2020-05-18","cited_by_count":39},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38},{"id":"2307.02106","title":"SoK: Privacy-Preserving Data Synthesis","created":"2023-07-05","cited_by_count":38},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37}],"next_cursor":"100"}