{"list":"other","total":53,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1912.01703","title":"PyTorch: An Imperative Style, High-Performance Deep Learning Library","created":"2019-12-03","cited_by_count":20305},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1702.01135","title":"Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks","created":"2017-02-03","cited_by_count":744},{"id":"1708.06131","title":"Evasion Attacks against Machine Learning at Test Time","created":"2017-08-21","cited_by_count":689},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"2109.12298","title":"Opacus: User-Friendly Differential Privacy Library in PyTorch","created":"2021-09-25","cited_by_count":383},{"id":"1906.04584","title":"Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers","created":"2019-06-09","cited_by_count":330},{"id":"1311.0776","title":"The Composition Theorem for Differential Privacy","created":"2013-11-04","cited_by_count":297},{"id":"1807.01647","title":"Privacy Amplification by Subsampling: Tight Analyses via Couplings and Divergences","created":"2018-07-04","cited_by_count":242},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194},{"id":"2106.02848","title":"Numerical Composition of Differential Privacy","created":"2021-06-05","cited_by_count":180},{"id":"2002.08118","title":"Randomized Smoothing of All Shapes and Sizes","created":"2020-02-19","cited_by_count":147},{"id":"2003.08904","title":"RAB: Provable Robustness Against Backdoor Attacks","created":"2020-03-19","cited_by_count":118},{"id":"2006.14768","title":"Deep Partition Aggregation: Provable Defense against General Poisoning Attacks","created":"2020-06-26","cited_by_count":115},{"id":"2001.02378","title":"MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius","created":"2020-01-08","cited_by_count":114},{"id":"2002.03018","title":"Certified Robustness to Label-Flipping Attacks via Randomized Smoothing","created":"2020-02-07","cited_by_count":108},{"id":"2009.04131","title":"SoK: Certified Robustness for Deep Neural Networks","created":"2020-09-09","cited_by_count":105},{"id":"1911.07116","title":"Robust Anomaly Detection and Backdoor Attack Detection Via Differential Privacy","created":"2019-11-16","cited_by_count":95},{"id":"2008.04495","title":"Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks","created":"2020-08-11","cited_by_count":94},{"id":"2402.09154","title":"Attacking Large Language Models with Projected Gradient Descent","created":"2024-02-14","cited_by_count":94},{"id":"2106.08567","title":"Optimal Accounting of Differential Privacy via Characteristic Function","created":"2021-06-16","cited_by_count":86},{"id":"2009.03561","title":"Local and Central Differential Privacy for Robustness and Privacy in Federated Learning","created":"2020-09-08","cited_by_count":78},{"id":"2002.11750","title":"On Certifying Robustness against Backdoor Attacks via Randomized Smoothing","created":"2020-02-26","cited_by_count":77},{"id":"2003.09416","title":"Quantum noise protects quantum classifiers against adversaries","created":"2020-03-20","cited_by_count":68},{"id":"1906.04948","title":"Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers","created":"2019-06-12","cited_by_count":65},{"id":"2012.03765","title":"Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks","created":"2020-12-07","cited_by_count":60},{"id":"2008.12952","title":"Efficient Robustness Certificates for Discrete Data: Sparsity-Aware Randomized Smoothing for Graphs, Images and More","created":"2020-08-29","cited_by_count":56},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52},{"id":"2207.04380","title":"Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributions","created":"2022-07-10","cited_by_count":52},{"id":"2002.09169","title":"Black-Box Certification with Randomized Smoothing: A Functional Optimization Based Framework","created":"2020-02-21","cited_by_count":46},{"id":"2006.07134","title":"Tight Differential Privacy for Discrete-Valued Mechanisms and for the Subsampled Gaussian Mechanism Using FFT","created":"2020-06-12","cited_by_count":43},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34},{"id":"2102.12412","title":"Computing Differential Privacy Guarantees for Heterogeneous Compositions Using FFT","created":"2021-02-24","cited_by_count":20},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18},{"id":"2310.15526","title":"Privacy Amplification for Matrix Mechanisms","created":"2023-10-24","cited_by_count":17},{"id":"2207.04381","title":"Faster Privacy Accounting via Evolving Discretization","created":"2022-07-10","cited_by_count":15},{"id":"2209.04030","title":"Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks","created":"2022-09-08","cited_by_count":12},{"id":"2301.02039","title":"Randomized Message-Interception Smoothing: Gray-box Certificates for Graph Neural Networks","created":"2023-01-05","cited_by_count":10},{"id":"2310.16221","title":"Hierarchical Randomized Smoothing","created":"2023-10-24","cited_by_count":9},{"id":"2406.10427","title":"Adaptive Randomized Smoothing: Certified Adversarial Robustness for Multi-Step Defences","created":"2024-06-14","cited_by_count":9},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5},{"id":"2302.11628","title":"Provable Robustness Against a Union of $\\ell_0$ Adversarial Attacks","created":"2023-02-22","cited_by_count":5},{"id":"2410.09878","title":"Provably Reliable Conformal Prediction Sets in the Presence of Data Poisoning","created":"2024-10-13","cited_by_count":4},{"id":"2504.21730","title":"Cert-SSBD: Certified Backdoor Defense with Sample-Specific Smoothing Noises","created":"2025-04-30","cited_by_count":4},{"id":"2403.04867","title":"Unified Mechanism-Specific Amplification by Subsampling and Group Privacy Amplification","created":"2024-03-07","cited_by_count":3},{"id":"2502.02410","title":"Privacy Amplification by Structured Subsampling for Deep Differentially Private Time Series Forecasting","created":"2025-02-04","cited_by_count":3},{"id":"2602.17284","title":"Efficient privacy loss accounting for subsampling and random allocation","created":"2026-02-19","cited_by_count":3}],"next_cursor":null}