{"list":"other","total":65,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1505.04597","title":"U-Net: Convolutional Networks for Biomedical Image Segmentation","created":"2015-05-18","cited_by_count":19713},{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"2004.11362","title":"Supervised Contrastive Learning","created":"2020-04-23","cited_by_count":2829},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153},{"id":"1704.00805","title":"On the Properties of the Softmax Function with Application in Game Theory and Reinforcement Learning","created":"2017-04-03","cited_by_count":142},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"2007.10760","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","created":"2020-07-21","cited_by_count":123},{"id":"1806.11146","title":"Adversarial Reprogramming of Neural Networks","created":"2018-06-28","cited_by_count":116},{"id":"1911.07116","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","created":"2019-11-16","cited_by_count":95},{"id":"2007.15802","title":"Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Cases","created":"2020-07-31","cited_by_count":95},{"id":"2106.09296","title":"Voice2Series: Reprogramming Acoustic Models for Time Series Classification","created":"2021-06-17","cited_by_count":91},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86},{"id":"2104.02361","title":"Backdoor Attack in the Physical World","created":"2021-04-06","cited_by_count":84},{"id":"2007.08714","title":"Transfer Learning without Knowing: Reprogramming Black-box Machine Learning Models with Scarce Data and Limited Resources","created":"2020-07-17","cited_by_count":83},{"id":"2012.07006","title":"DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation","created":"2020-12-13","cited_by_count":77},{"id":"2306.06874","title":"VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Models","created":"2023-06-12","cited_by_count":68},{"id":"2010.11607","title":"Backdoor Attack against Speaker Verification","created":"2020-10-22","cited_by_count":66},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65},{"id":"2202.10629","title":"Model Reprogramming: Resource-Efficient Cross-Domain Machine Learning","created":"2022-02-22","cited_by_count":64},{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45},{"id":"2405.04825","title":"Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution","created":"2024-05-08","cited_by_count":40},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37},{"id":"2201.13178","title":"Few-Shot Backdoor Attacks on Visual Object Tracking","created":"2022-01-31","cited_by_count":35},{"id":"2102.07325","title":"Cross-modal Adversarial Reprogramming","created":"2021-02-15","cited_by_count":34},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30},{"id":"2007.00711","title":"ConFoc: Content-Focus Protection Against Trojan Attacks on Neural Networks","created":"2020-07-01","cited_by_count":28},{"id":"2009.02326","title":"CLEANN: Accelerated Trojan Shield for Embedded Neural Networks","created":"2020-09-04","cited_by_count":22},{"id":"2304.14593","title":"Deep Graph Reprogramming","created":"2023-04-28","cited_by_count":22},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20},{"id":"2408.05500","title":"PointNCBW: Towards Dataset Ownership Verification for Point Clouds via Negative Clean-label Backdoor Watermark","created":"2024-08-10","cited_by_count":20},{"id":"2410.10437","title":"Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models","created":"2024-10-14","cited_by_count":20},{"id":"2310.18633","title":"Setting the Trap: Capturing and Defeating Backdoors in Pretrained Language Models through Honeypots","created":"2023-10-28","cited_by_count":19},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18},{"id":"2303.12247","title":"Exploring the Benefits of Visual Prompting in Differential Privacy","created":"2023-03-22","cited_by_count":17},{"id":"2308.07934","title":"One-bit Flip is All You Need: When Bit-flip Attack Meets Model Training","created":"2023-08-12","cited_by_count":14},{"id":"2402.07818","title":"Differentially Private Zeroth-Order Methods for Scalable Large Language Model Finetuning","created":"2024-02-12","cited_by_count":14},{"id":"2301.02120","title":"Reprogramming Pretrained Language Models for Protein Sequence Representation Learning","created":"2023-01-05","cited_by_count":12},{"id":"2308.05362","title":"FINER: Enhancing State-of-the-art Classifiers with Feature Attribution to Facilitate Security Analysis","created":"2023-08-10","cited_by_count":12},{"id":"2211.01806","title":"BATT: Backdoor Attack with Transformation-based Triggers","created":"2022-11-02","cited_by_count":11},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11},{"id":"2211.05631","title":"Backdoor Defense via Suppressing Model Shortcuts","created":"2022-11-02","cited_by_count":10},{"id":"2312.11057","title":"DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models","created":"2023-12-18","cited_by_count":9},{"id":"2301.13862","title":"Salient Conditional Diffusion for Defending Against Backdoor Attacks","created":"2023-01-31","cited_by_count":7},{"id":"2403.06569","title":"Enhancing Joint Motion Prediction for Individuals with Limb Loss Through Model Reprogramming","created":"2024-03-11","cited_by_count":2}],"next_cursor":null}