{"list":"other","total":64,"rows":[{"id":"1706.03762","title":"Attention Is All You Need","created":"2017-06-12","cited_by_count":60361},{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1704.04861","title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications","created":"2017-04-17","cited_by_count":3845},{"id":"1806.07366","title":"Neural Ordinary Differential Equations","created":"2018-06-19","cited_by_count":3779},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1511.04599","title":"DeepFool: a simple and accurate method to fool deep neural networks","created":"2015-11-14","cited_by_count":1318},{"id":"1906.02243","title":"Energy and Policy Considerations for Deep Learning in NLP","created":"2019-06-05","cited_by_count":1254},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"2208.07339","title":"LLM.int8(): 8-bit Matrix Multiplication for Transformers at Scale","created":"2022-08-15","cited_by_count":906},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"1802.08232","title":"The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networks","created":"2018-02-22","cited_by_count":864},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"1709.01686","title":"BranchyNet: Fast Inference via Early Exiting from Deep Neural Networks","created":"2017-09-06","cited_by_count":596},{"id":"2102.00554","title":"Sparsity in Deep Learning: Pruning and growth for efficient inference and training in neural networks","created":"2021-01-31","cited_by_count":527},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"2112.07658","title":"AdaViT: Adaptive Tokens for Efficient Vision Transformer","created":"2021-12-14","cited_by_count":362},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"1904.02144","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","created":"2019-04-03","cited_by_count":333},{"id":"1711.09485","title":"SkipNet: Learning Dynamic Routing in Convolutional Networks","created":"2017-11-26","cited_by_count":332},{"id":"1602.01528","title":"EIE: Efficient Inference Engine on Compressed Deep Neural Network","created":"2016-02-04","cited_by_count":295},{"id":"1908.11229","title":"White-box vs Black-box: Bayes Optimal Strategies for Membership Inference","created":"2019-08-29","cited_by_count":271},{"id":"2111.15668","title":"AdaViT: Adaptive Vision Transformers for Efficient Image Recognition","created":"2021-11-30","cited_by_count":228},{"id":"1606.01885","title":"Learning to Optimize","created":"2016-06-06","cited_by_count":195},{"id":"1906.11798","title":"Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inference","created":"2019-06-27","cited_by_count":175},{"id":"1710.00942","title":"Neural Trojans","created":"2017-10-03","cited_by_count":153},{"id":"2007.07646","title":"A Survey of Privacy Attacks in Machine Learning","created":"2020-07-15","cited_by_count":146},{"id":"2007.10760","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","created":"2020-07-21","cited_by_count":123},{"id":"1612.02297","title":"Spatially Adaptive Computation Time for Residual Networks","created":"2016-12-07","cited_by_count":118},{"id":"2006.03463","title":"Sponge Examples: Energy-Latency Attacks on Neural Networks","created":"2020-06-05","cited_by_count":111},{"id":"2012.11212","title":"Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxification","created":"2020-12-21","cited_by_count":95},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84},{"id":"2401.11170","title":"Inducing High Energy-Latency of Large Vision-Language Models with Verbose Images","created":"2024-01-20","cited_by_count":69},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66},{"id":"2010.02432","title":"A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inference","created":"2020-10-06","cited_by_count":61},{"id":"2009.03728","title":"Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspective","created":"2020-09-08","cited_by_count":59},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52},{"id":"2203.15859","title":"NICGSlowDown: Evaluating the Efficiency Robustness of Neural Image Caption Generation Models","created":"2022-03-29","cited_by_count":50},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44},{"id":"1907.06627","title":"Batch-Shaping for Learning Conditional Channel Gated Networks","created":"2019-07-15","cited_by_count":42},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34},{"id":"2203.08147","title":"Energy-Latency Attacks via Sponge Poisoning","created":"2022-03-14","cited_by_count":29},{"id":"2205.13618","title":"Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors","created":"2022-05-26","cited_by_count":28},{"id":"2007.06712","title":"Embedded Encoder-Decoder in Convolutional Networks Towards Explainable AI","created":"2020-06-19","cited_by_count":24},{"id":"2008.04094","title":"Adversarial Examples on Object Recognition: A Comprehensive Survey","created":"2020-08-07","cited_by_count":23},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19},{"id":"2302.12685","title":"Active Membership Inference Attack under Local Differential Privacy in Federated Learning","created":"2023-02-24","cited_by_count":17},{"id":"2303.14133","title":"Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges","created":"2023-03-24","cited_by_count":17},{"id":"2305.12228","title":"Dynamic Transformers Provide a False Sense of Efficiency","created":"2023-05-20","cited_by_count":14},{"id":"2304.05370","title":"Overload: Latency Attacks on Object Detection for Edge Devices","created":"2023-04-11","cited_by_count":13},{"id":"2405.03636","title":"The Federation Strikes Back: A Survey of Federated Learning Privacy Attacks, Defenses, Applications, and Policy Landscape","created":"2024-05-06","cited_by_count":13},{"id":"2305.03888","title":"Energy-Latency Attacks to On-Device Neural Networks via Sponge Poisoning","created":"2023-05-06","cited_by_count":10},{"id":"2306.00794","title":"SlothSpeech: Denial-of-service Attack Against Speech Recognition Models","created":"2023-06-01","cited_by_count":10},{"id":"1910.08906","title":"Self-Adaptive Network Pruning","created":"2019-10-20","cited_by_count":7},{"id":"2403.18587","title":"The Impact of Uniform Inputs on Activation Sparsity and Energy-Latency Attacks in Computer Vision","created":"2024-03-27","cited_by_count":7},{"id":"1803.09638","title":"On the Limitation of Local Intrinsic Dimensionality for Characterizing the Subspaces of Adversarial Examples","created":"2018-03-26","cited_by_count":6},{"id":"2012.07242","title":"Neighbors From Hell: Voltage Attacks Against Deep Learning Accelerators on Multi-Tenant FPGAs","created":"2020-12-14","cited_by_count":4},{"id":"2312.02220","title":"QuantAttack: Exploiting Dynamic Quantization to Attack Vision Transformers","created":"2023-12-03","cited_by_count":2},{"id":"2501.08152","title":"Energy Backdoor Attack to Deep Neural Networks","created":"2025-01-14","cited_by_count":1}],"next_cursor":null}