{"list":"other","total":63,"rows":[{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1901.08573","title":"Theoretically Principled Trade-off between Robustness and Accuracy","created":"2019-01-24","cited_by_count":1517},{"id":"1805.12152","title":"Robustness May Be at Odds with Accuracy","created":"2018-05-30","cited_by_count":880},{"id":"1412.1897","title":"Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Images","created":"2014-12-05","cited_by_count":776},{"id":"1711.00117","title":"Countering Adversarial Images using Input Transformations","created":"2017-10-31","cited_by_count":520},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1801.01489","title":"All Models are Wrong, but Many are Useful: Learning a Variable's Importance by Studying an Entire Class of Prediction Models Simultaneously","created":"2018-01-04","cited_by_count":373},{"id":"1712.02976","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","created":"2017-12-08","cited_by_count":329},{"id":"1705.07809","title":"Information-theoretic analysis of generalization capability of learning algorithms","created":"2017-05-22","cited_by_count":303},{"id":"2003.10595","title":"Systematic Evaluation of Privacy Risks of Machine Learning Models","created":"2020-03-24","cited_by_count":292},{"id":"1702.04267","title":"On Detecting Adversarial Perturbations","created":"2017-02-14","cited_by_count":232},{"id":"1809.03113","title":"Certified Adversarial Robustness with Additive Noise","created":"2018-09-10","cited_by_count":180},{"id":"1909.06677","title":"Predictive Multiplicity in Classification","created":"2019-09-14","cited_by_count":166},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"1802.05251","title":"Differentially Private Empirical Risk Minimization Revisited: Faster and More General","created":"2018-02-14","cited_by_count":128},{"id":"2205.02302","title":"Machine Learning Operations (MLOps): Overview, Definition, and Architecture","created":"2022-05-04","cited_by_count":128},{"id":"1811.09310","title":"Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness against Adversarial Attack","created":"2018-11-22","cited_by_count":125},{"id":"1809.02104","title":"Are adversarial examples inevitable?","created":"2018-09-06","cited_by_count":113},{"id":"1908.01755","title":"On the Existence of Simpler Machine Learning Models","created":"2019-08-05","cited_by_count":89},{"id":"2209.08040","title":"Exploring the Whole Rashomon Set of Sparse Decision Trees","created":"2022-09-16","cited_by_count":81},{"id":"2010.01279","title":"Do Wider Neural Networks Really Help Adversarial Robustness?","created":"2020-10-03","cited_by_count":79},{"id":"2007.09339","title":"ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learning","created":"2020-07-18","cited_by_count":70},{"id":"2101.00352","title":"Characterizing Fairness Over the Set of Good Models Under Selective Labels","created":"2021-01-02","cited_by_count":65},{"id":"1812.09859","title":"Generalization Bounds for Uniformly Stable Algorithms","created":"2018-12-24","cited_by_count":56},{"id":"2407.04846","title":"Amazing Things Come From Having Many Good Models","created":"2024-07-05","cited_by_count":55},{"id":"2009.05241","title":"Improving Robustness to Model Inversion Attacks via Mutual Information Regularization","created":"2020-09-11","cited_by_count":52},{"id":"2206.01295","title":"Rashomon Capacity: A Metric for Predictive Multiplicity in Classification","created":"2022-06-02","cited_by_count":47},{"id":"1509.07892","title":"Evasion and Hardening of Tree Ensemble Classifiers","created":"2015-09-25","cited_by_count":44},{"id":"2112.00798","title":"Fast Sparse Decision Tree Optimization via Reference Ensembles","created":"2021-12-01","cited_by_count":38},{"id":"1902.01148","title":"Theoretical evidence for adversarial robustness through randomization","created":"2019-02-04","cited_by_count":33},{"id":"2310.19726","title":"A Path to Simpler Models Starts With Noise","created":"2023-10-30","cited_by_count":33},{"id":"2303.16047","title":"Exploring and Interacting with the Set of Good Sparse Generalized Additive Models","created":"2023-03-28","cited_by_count":30},{"id":"2309.13775","title":"The Rashomon Importance Distribution: Getting RID of Unstable, Single Model-based Variable Importance","created":"2023-09-24","cited_by_count":29},{"id":"2501.18624","title":"Membership Inference Attacks Against Vision-Language Models","created":"2025-01-27","cited_by_count":29},{"id":"2306.15786","title":"An Empirical Evaluation of the Rashomon Effect in Explainable Machine Learning","created":"2023-06-27","cited_by_count":25},{"id":"2302.04787","title":"On the Privacy-Robustness-Utility Trilemma in Distributed Learning","created":"2023-02-09","cited_by_count":24},{"id":"1909.05822","title":"On the Hardness of Robust Classification","created":"2019-09-12","cited_by_count":23},{"id":"2210.05846","title":"FasterRisk: Fast and Accurate Interpretable Risk Scores","created":"2022-10-12","cited_by_count":21},{"id":"1703.04318","title":"Blocking Transferability of Adversarial Examples in Black-Box Learning Systems","created":"2017-03-13","cited_by_count":19},{"id":"2302.14517","title":"Arbitrary Decisions are a Hidden Cost of Differentially Private Training","created":"2023-02-28","cited_by_count":19},{"id":"2402.00728","title":"Dropout-Based Rashomon Set Exploration for Efficient Predictive Multiplicity Estimation","created":"2024-02-01","cited_by_count":18},{"id":"2501.14959","title":"Systemizing Multiplicity: The Curious Case of Arbitrariness in Machine Learning","created":"2025-01-24","cited_by_count":17},{"id":"2012.07828","title":"Robustness Threats of Differential Privacy","created":"2020-12-14","cited_by_count":15},{"id":"2105.07985","title":"Gradient Masking and the Underestimated Robustness Threats of Differential Privacy in Deep Learning","created":"2021-05-17","cited_by_count":13},{"id":"2503.01087","title":"Rashomon Sets for Prototypical-Part Networks: Editing Interpretable Models in Real-Time","created":"2025-03-03","cited_by_count":13},{"id":"2410.08503","title":"Adversarial Training Can Provably Improve Robustness: Theoretical Analysis of Feature Learning Process Under Structured Data","created":"2024-10-11","cited_by_count":12},{"id":"2402.19232","title":"Trained Random Forests Completely Reveal your Dataset","created":"2024-02-29","cited_by_count":11},{"id":"2501.15634","title":"Be Intentional About Fairness!: Fairness, Size, and Multiplicity in the Rashomon Set","created":"2025-01-26","cited_by_count":10},{"id":"2108.13952","title":"Morphence: Moving Target Defense Against Adversarial Examples","created":"2021-08-31","cited_by_count":9},{"id":"2012.13573","title":"Robustness, Privacy, and Generalization of Adversarial Training","created":"2020-12-25","cited_by_count":8},{"id":"2404.14309","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","created":"2024-04-22","cited_by_count":8},{"id":"2412.18138","title":"What Constitutes a Less Discriminatory Algorithm?","created":"2024-12-24","cited_by_count":8},{"id":"2409.12332","title":"Perceptions of the Fairness Impacts of Multiplicity in Machine Learning","created":"2024-09-18","cited_by_count":7},{"id":"2410.06851","title":"Understanding Model Ensemble in Transferable Adversarial Attack","created":"2024-10-09","cited_by_count":7},{"id":"2306.08656","title":"Augment then Smooth: Reconciling Differential Privacy with Certified Robustness","created":"2023-06-14","cited_by_count":6},{"id":"2502.05286","title":"Fairness and Sparsity within Rashomon sets: Enumeration-Free Exploration and Characterization","created":"2025-02-07","cited_by_count":4},{"id":"2412.11066","title":"Learning Robust and Privacy-Preserving Representations via Information Theory","created":"2024-12-15","cited_by_count":3},{"id":"2510.12734","title":"Doctor Rashomon and the UNIVERSE of Madness: Variable Importance with Unobserved Confounding and the Rashomon Effect","created":"2025-10-14","cited_by_count":3},{"id":"2503.06770","title":"Unique Rashomon Sets for Robust Active Learning","created":"2025-03-09","cited_by_count":2},{"id":"2503.16183","title":"Variance-Aware Noisy Training: Hardening DNNs against Unstable Analog Computations","created":"2025-03-20","cited_by_count":2},{"id":"2504.02412","title":"Bridging the Theoretical Gap in Randomized Smoothing","created":"2025-04-03","cited_by_count":2}],"next_cursor":null}