{"list":"other","total":52,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2103.00020","title":"Learning Transferable Visual Models From Natural Language Supervision","created":"2021-02-26","cited_by_count":33744},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"2109.01652","title":"Finetuned Language Models Are Zero-Shot Learners","created":"2021-09-03","cited_by_count":3780},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1805.09767","title":"Local SGD Converges Fast and Communicates Little","created":"2018-05-24","cited_by_count":605},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"1912.13445","title":"Robust Aggregation for Federated Learning","created":"2019-12-31","cited_by_count":317},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"2203.09249","title":"Fine-tuning Global Model via Data-Free Knowledge Distillation for Non-IID Federated Learning","created":"2022-03-17","cited_by_count":172},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166},{"id":"1804.04637","title":"EMBER: An Open Dataset for Training Static PE Malware Machine Learning Models","created":"2018-04-12","cited_by_count":165},{"id":"2006.14580","title":"Backdoor Attacks Against Deep Learning Systems in the Physical World","created":"2020-06-25","cited_by_count":134},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128},{"id":"2206.10341","title":"Neurotoxin: Durable Backdoors in Federated Learning","created":"2022-06-12","cited_by_count":98},{"id":"2106.08283","title":"CRFL: Certifiably Robust Federated Learning against Backdoor Attacks","created":"2021-06-15","cited_by_count":91},{"id":"2002.11497","title":"On the Effectiveness of Mitigating Data Poisoning Attacks with Gradient Shaping","created":"2020-02-26","cited_by_count":83},{"id":"1903.04488","title":"Communication-efficient distributed SGD with Sketching","created":"2019-03-12","cited_by_count":81},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79},{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64},{"id":"2112.01148","title":"FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis","created":"2021-12-02","cited_by_count":61},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59},{"id":"2205.06900","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","created":"2022-05-13","cited_by_count":55},{"id":"2302.14677","title":"Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger","created":"2023-02-28","cited_by_count":40},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38},{"id":"2201.13096","title":"SPDY: Accurate Pruning with Speedup Guarantees","created":"2022-01-31","cited_by_count":36},{"id":"2207.12020","title":"Domain-invariant Feature Exploration for Domain Generalization","created":"2022-07-25","cited_by_count":34},{"id":"2303.02213","title":"Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions","created":"2023-03-03","cited_by_count":33},{"id":"2310.01875","title":"Towards Stable Backdoor Purification through Feature Shift Tuning","created":"2023-10-03","cited_by_count":32},{"id":"1912.09064","title":"Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytes","created":"2019-12-19","cited_by_count":31},{"id":"2207.00278","title":"BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label","created":"2022-07-01","cited_by_count":28},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21},{"id":"2104.08618","title":"EXTRACTOR: Extracting Attack Behavior from Threat Reports","created":"2021-04-17","cited_by_count":19},{"id":"2112.12310","title":"Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art","created":"2021-12-23","cited_by_count":18},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18},{"id":"2302.01677","title":"Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks","created":"2023-02-03","cited_by_count":16},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14},{"id":"2012.07994","title":"Binary Black-box Evasion Attacks Against Deep Learning-based Static Malware Detectors with Adversarial Byte-Level Language Model","created":"2020-12-14","cited_by_count":10},{"id":"2407.19153","title":"A Survey of Malware Detection Using Deep Learning","created":"2024-07-27","cited_by_count":9},{"id":"2006.14871","title":"Can We Mitigate Backdoor Attack Using Adversarial Detection Methods?","created":"2020-06-26","cited_by_count":8},{"id":"2010.01862","title":"Data Augmentation Based Malware Detection using Convolutional Neural Networks","created":"2020-10-05","cited_by_count":8},{"id":"1811.06888","title":"The MalSource Dataset: Quantifying Complexity and Code Reuse in Malware Development","created":"2018-11-16","cited_by_count":7},{"id":"2308.08906","title":"Towards a Practical Defense against Adversarial Attacks on Deep Learning-based Malware Detectors via Randomized Smoothing","created":"2023-08-17","cited_by_count":5},{"id":"2002.03331","title":"MDEA: Malware Detection with Evolutionary Adversarial Learning","created":"2020-02-09","cited_by_count":4},{"id":"2208.06537","title":"Defense against Backdoor Attacks via Identifying and Purifying Bad Neurons","created":"2022-08-13","cited_by_count":4},{"id":"2212.03069","title":"Multiple Perturbation Attack: Attack Pixelwise Under Different $\\ell_p$-norms For Better Adversarial Performance","created":"2022-12-05","cited_by_count":2}],"next_cursor":null}