{"list":"other","total":61,"rows":[{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1610.02391","title":"Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localization","created":"2016-10-07","cited_by_count":6733},{"id":"1905.11946","title":"EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks","created":"2019-05-28","cited_by_count":6442},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2006.05525","title":"Knowledge Distillation: A Survey","created":"2020-06-09","cited_by_count":1603},{"id":"1611.01236","title":"Adversarial Machine Learning at Scale","created":"2016-11-04","cited_by_count":936},{"id":"1602.02697","title":"Practical Black-Box Attacks against Machine Learning","created":"2016-02-08","cited_by_count":903},{"id":"1912.11370","title":"Big Transfer (BiT): General Visual Representation Learning","created":"2019-12-24","cited_by_count":769},{"id":"1708.03999","title":"ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models","created":"2017-08-14","cited_by_count":666},{"id":"2010.09670","title":"RobustBench: a standardized adversarial robustness benchmark","created":"2020-10-19","cited_by_count":661},{"id":"1609.02943","title":"Stealing Machine Learning Models via Prediction APIs","created":"2016-09-09","cited_by_count":619},{"id":"1902.06705","title":"On Evaluating Adversarial Robustness","created":"2019-02-18","cited_by_count":447},{"id":"1605.07277","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","created":"2016-05-24","cited_by_count":446},{"id":"1712.03141","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","created":"2017-12-08","cited_by_count":414},{"id":"1812.02766","title":"Knockoff Nets: Stealing Functionality of Black-Box Models","created":"2018-12-06","cited_by_count":292},{"id":"1909.01838","title":"High Accuracy and High Fidelity Extraction of Neural Networks","created":"2019-09-03","cited_by_count":214},{"id":"1805.02628","title":"PRADA: Protecting against DNN Model Stealing Attacks","created":"2018-05-07","cited_by_count":165},{"id":"1910.12366","title":"Thieves on Sesame Street! Model Extraction of BERT-based APIs","created":"2019-10-27","cited_by_count":139},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128},{"id":"2011.14779","title":"Data-Free Model Extraction","created":"2020-11-30","cited_by_count":124},{"id":"2005.02131","title":"Stealing Links from Graph Neural Networks","created":"2020-05-05","cited_by_count":115},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94},{"id":"1807.05185","title":"Model Reconstruction from Model Explanations","created":"2018-07-13","cited_by_count":86},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75},{"id":"1905.13409","title":"Bypassing Backdoor Detection Algorithms in Deep Learning","created":"2019-05-31","cited_by_count":74},{"id":"1806.05476","title":"Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data","created":"2018-06-14","cited_by_count":70},{"id":"2003.12703","title":"DaST: Data-free Substitute Training for Adversarial Attacks","created":"2020-03-28","cited_by_count":60},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58},{"id":"2309.00035","title":"FACET: Fairness in Computer Vision Evaluation Benchmark","created":"2023-08-31","cited_by_count":58},{"id":"2403.04893","title":"A Safe Harbor for AI Evaluation and Red Teaming","created":"2024-03-07","cited_by_count":47},{"id":"1812.11720","title":"Stealing Neural Networks via Timing Side Channels","created":"2018-12-31","cited_by_count":43},{"id":"2106.03310","title":"Zero-Shot Knowledge Distillation from a Decision-Based Black-Box Model","created":"2021-06-07","cited_by_count":37},{"id":"2109.01165","title":"Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction","created":"2021-09-01","cited_by_count":37},{"id":"2105.07381","title":"Undistillable: Making A Nasty Teacher That CANNOT teach students","created":"2021-05-16","cited_by_count":36},{"id":"2107.08909","title":"MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AI","created":"2021-07-19","cited_by_count":35},{"id":"1907.10406","title":"Open DNN Box by Power Side-Channel Attack","created":"2019-07-21","cited_by_count":28},{"id":"2010.11158","title":"Black-Box Ripper: Copying black-box models using generative evolutionary algorithms","created":"2020-10-21","cited_by_count":26},{"id":"2009.09560","title":"ES Attack: Model Stealing against Deep Neural Networks without Data Hurdles","created":"2020-09-21","cited_by_count":25},{"id":"2105.00623","title":"Black-Box Dissector: Towards Erasing-based Hard-Label Model Stealing Attack","created":"2021-05-03","cited_by_count":25},{"id":"1912.07721","title":"Adversarial Model Extraction on Graph Neural Networks","created":"2019-12-16","cited_by_count":23},{"id":"2106.09947","title":"Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples","created":"2021-06-18","cited_by_count":23},{"id":"1905.09165","title":"A framework for the extraction of Deep Neural Networks by leveraging public data","created":"2019-05-22","cited_by_count":22},{"id":"2207.05164","title":"Machine Learning Security in Industry: A Quantitative Survey","created":"2022-07-11","cited_by_count":21},{"id":"2309.10058","title":"Dual Student Networks for Data-Free Model Stealing","created":"2023-09-18","cited_by_count":17},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17},{"id":"1809.04913","title":"Query-Efficient Black-Box Attack by Active Learning","created":"2018-09-13","cited_by_count":15},{"id":"2302.08466","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","created":"2023-02-16","cited_by_count":11},{"id":"2104.05921","title":"Thief, Beware of What Get You There: Towards Understanding Model Extraction Attack","created":"2021-04-13","cited_by_count":9},{"id":"1912.03959","title":"Stealing Knowledge from Protected Deep Neural Networks Using Composite Unlabeled Data","created":"2019-12-09","cited_by_count":8},{"id":"1912.08987","title":"Model Weight Theft With Just Noise Inputs: The Curious Case of the Petulant Attacker","created":"2019-12-19","cited_by_count":8},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6},{"id":"2309.00023","title":"Continual Learning From a Stream of APIs","created":"2023-08-31","cited_by_count":6},{"id":"2311.04588","title":"Army of Thieves: Enhancing Black-Box Model Extraction via Ensemble based sample selection","created":"2023-11-08","cited_by_count":6},{"id":"2306.04192","title":"Extracting Cloud-based Model with Prior Knowledge","created":"2023-06-07","cited_by_count":5},{"id":"2404.00108","title":"Efficient Data-Free Model Stealing with Label Diversity","created":"2024-03-29","cited_by_count":4},{"id":"2105.15010","title":"Query Attack by Multi-Identity Surrogates","created":"2021-05-31","cited_by_count":3},{"id":"2310.00096","title":"Towards Few-Call Model Stealing via Active Self-Paced Knowledge Distillation and Diffusion-Based Image Generation","created":"2023-09-29","cited_by_count":2},{"id":"2305.13584","title":"A Model Stealing Attack Against Multi-Exit Networks","created":"2023-05-23","cited_by_count":1}],"next_cursor":null}