{"list":"other","total":71,"rows":[{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1705.07874","title":"A Unified Approach to Interpreting Model Predictions","created":"2017-05-22","cited_by_count":6555},{"id":"1608.04644","title":"Towards Evaluating the Robustness of Neural Networks","created":"2016-08-16","cited_by_count":2998},{"id":"1509.01626","title":"Character-level Convolutional Networks for Text Classification","created":"2015-09-04","cited_by_count":2330},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1511.07528","title":"The Limitations of Deep Learning in Adversarial Settings","created":"2015-11-24","cited_by_count":790},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"1811.00866","title":"Efficient Neural Network Robustness Certification with General Activation Functions","created":"2018-11-02","cited_by_count":445},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1910.03137","title":"Detecting AI Trojans Using Meta Neural Analysis","created":"2019-10-08","cited_by_count":199},{"id":"1804.10829","title":"Formal Security Analysis of Neural Networks using Symbolic Intervals","created":"2018-04-28","cited_by_count":185},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"1804.04637","title":"EMBER: An Open Dataset for Training Static PE Malware Machine Learning Models","created":"2018-04-12","cited_by_count":165},{"id":"1809.08098","title":"Efficient Formal Safety Analysis of Neural Networks","created":"2018-09-19","cited_by_count":165},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"1710.09435","title":"Malware Detection by Eating a Whole EXE","created":"2017-10-25","cited_by_count":115},{"id":"1807.07838","title":"TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time","created":"2018-07-20","cited_by_count":108},{"id":"1803.06975","title":"Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attacks","created":"2018-03-19","cited_by_count":81},{"id":"1803.04173","title":"Adversarial Malware Binaries: Evading Deep Learning for Malware Detection in Executables","created":"2018-03-12","cited_by_count":62},{"id":"1801.08917","title":"Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning","created":"2018-01-26","cited_by_count":61},{"id":"2003.13526","title":"Functionality-preserving Black-box Optimization of Adversarial Windows Malware","created":"2020-03-30","cited_by_count":58},{"id":"2010.03856","title":"Transcending Transcend: Revisiting Malware Classification in the Presence of Concept Drift","created":"2020-10-08","cited_by_count":53},{"id":"1704.08996","title":"Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection","created":"2017-04-28","cited_by_count":52},{"id":"2012.07634","title":"SOREL-20M: A Large Scale Benchmark Dataset for Malicious PE Detection","created":"2020-12-14","cited_by_count":49},{"id":"1802.10135","title":"Microsoft Malware Classification Challenge","created":"2018-02-22","cited_by_count":46},{"id":"1606.04435","title":"Adversarial Perturbations Against Deep Neural Networks for Malware Classification","created":"2016-06-14","cited_by_count":42},{"id":"1810.08280","title":"Exploring Adversarial Examples in Malware Detection","created":"2018-10-18","cited_by_count":42},{"id":"2205.13616","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","created":"2022-05-26","cited_by_count":40},{"id":"2006.16545","title":"Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection","created":"2020-06-30","cited_by_count":33},{"id":"1801.02950","title":"Adversarial Deep Learning for Robust Detection of Binary Encoded Malware","created":"2018-01-09","cited_by_count":32},{"id":"1901.03583","title":"Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries","created":"2019-01-11","cited_by_count":31},{"id":"1912.09064","title":"Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytes","created":"2019-12-19","cited_by_count":31},{"id":"1612.04433","title":"MaMaDroid: Detecting Android Malware by Building Markov Chains of Behavioral Models","created":"2016-12-13","cited_by_count":30},{"id":"2306.10426","title":"Understanding Certified Training with Interval Bound Propagation","created":"2023-06-17","cited_by_count":26},{"id":"2305.13991","title":"Expressive Losses for Verified Robustness via Convex Combinations","created":"2023-05-23","cited_by_count":23},{"id":"1806.06108","title":"Non-Negative Networks Against Adversarial Attacks","created":"2018-06-15","cited_by_count":20},{"id":"1706.04146","title":"Automated Poisoning Attacks and Defenses in Malware Detection Systems: An Adversarial Machine Learning Approach","created":"2017-06-13","cited_by_count":19},{"id":"1808.04218","title":"Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection","created":"2018-08-10","cited_by_count":19},{"id":"1904.03542","title":"On Training Robust PDF Malware Classifiers","created":"2019-04-06","cited_by_count":19},{"id":"2112.12310","title":"Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art","created":"2021-12-23","cited_by_count":18},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17},{"id":"2004.11516","title":"Why an Android App is Classified as Malware? Towards Malware Classification Interpretation","created":"2020-04-24","cited_by_count":16},{"id":"1811.09985","title":"Poisoning Behavioral Malware Clustering","created":"2018-11-25","cited_by_count":15},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14},{"id":"2406.04848","title":"CTBENCH: A Library and Benchmark for Certified Training","created":"2024-06-07","cited_by_count":14},{"id":"2110.03301","title":"EvadeDroid: A Practical Evasion Attack on Machine Learning for Black-box Android Malware Detection","created":"2021-10-07","cited_by_count":13},{"id":"2303.08509","title":"Black-box Adversarial Example Attack towards FCG Based Android Malware Detection under Incomplete Feature Information","created":"2023-03-15","cited_by_count":13},{"id":"2307.14657","title":"Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance","created":"2023-07-27","cited_by_count":13},{"id":"1910.11376","title":"Neurlux: Dynamic Malware Analysis Without Feature Engineering","created":"2019-10-24","cited_by_count":12},{"id":"2009.05602","title":"Semantic-preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection","created":"2020-09-11","cited_by_count":12},{"id":"2204.04063","title":"Transfer Attacks Revisited: A Large-Scale Empirical Study in Real Computer Vision Settings","created":"2022-04-07","cited_by_count":11},{"id":"2309.01866","title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting","created":"2023-09-05","cited_by_count":10},{"id":"1610.01239","title":"Adversary Resistant Deep Neural Networks with an Application to Malware Detection","created":"2016-10-05","cited_by_count":9},{"id":"2005.04970","title":"A Performance-Sensitive Malware Detection System Using Deep Learning on Mobile Devices","created":"2020-05-11","cited_by_count":9},{"id":"2302.10739","title":"MalProtect: Stateful Defense Against Adversarial Query Attacks in ML-based Malware Detection","created":"2023-02-21","cited_by_count":8},{"id":"2105.11593","title":"OFEI: A Semi-black-box Android Adversarial Sample Attack Framework Against DLaaS","created":"2021-05-25","cited_by_count":7},{"id":"2111.10085","title":"Mate! Are You Really Aware? An Explainability-Guided Testing Framework for Robustness of Malware Detectors","created":"2021-11-19","cited_by_count":7},{"id":"1712.05919","title":"Attack and Defense of Dynamic Analysis-Based, Adversarial Neural Malware Classification Models","created":"2017-12-16","cited_by_count":5},{"id":"1808.01546","title":"ATMPA: Attacking Machine Learning-based Malware Visualization Detection Methods via Adversarial Examples","created":"2018-08-05","cited_by_count":5},{"id":"2109.09654","title":"Can We Leverage Predictive Uncertainty to Detect Dataset Shift and Adversarial Examples in Android Malware Detection?","created":"2021-09-20","cited_by_count":5},{"id":"2302.11328","title":"PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks","created":"2023-02-22","cited_by_count":5},{"id":"1809.06498","title":"HashTran-DNN: A Framework for Enhancing Robustness of Deep Neural Networks against Adversarial Malware Samples","created":"2018-09-18","cited_by_count":4},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3},{"id":"2312.06423","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","created":"2023-12-11","cited_by_count":3},{"id":"2402.19027","title":"How to Train your Antivirus: RL-based Hardening through the Problem-Space","created":"2024-02-29","cited_by_count":3},{"id":"2110.11987","title":"Improving Robustness of Malware Classifiers using Adversarial Strings Generated from Perturbed Latent Representations","created":"2021-10-22","cited_by_count":2},{"id":"2407.02886","title":"A Wolf in Sheep's Clothing: Practical Black-box Adversarial Attacks for Evading Learning-based Windows Malware Detection in the Wild","created":"2024-07-03","cited_by_count":1}],"next_cursor":null}