{"list":"other","total":74,"rows":[{"id":"1409.1556","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","created":"2014-09-04","cited_by_count":15364},{"id":"1412.6572","title":"Explaining and Harnessing Adversarial Examples","created":"2014-12-20","cited_by_count":7364},{"id":"1605.07146","title":"Wide Residual Networks","created":"2016-05-23","cited_by_count":3070},{"id":"1610.05820","title":"Membership Inference Attacks against Machine Learning Models","created":"2016-10-18","cited_by_count":2281},{"id":"1610.02413","title":"Equality of Opportunity in Supervised Learning","created":"2016-10-07","cited_by_count":2007},{"id":"2004.07780","title":"Shortcut Learning in Deep Neural Networks","created":"2020-04-16","cited_by_count":1969},{"id":"1902.10811","title":"Do ImageNet Classifiers Generalize to ImageNet?","created":"2019-02-13","cited_by_count":1515},{"id":"2010.01412","title":"Sharpness-Aware Minimization for Efficiently Improving Generalization","created":"2020-10-03","cited_by_count":1417},{"id":"2012.07421","title":"WILDS: A Benchmark of in-the-Wild Distribution Shifts","created":"2020-12-14","cited_by_count":1375},{"id":"1609.04836","title":"On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minima","created":"2016-09-15","cited_by_count":1352},{"id":"1902.02918","title":"Certified Adversarial Robustness via Randomized Smoothing","created":"2019-02-08","cited_by_count":1340},{"id":"1803.02324","title":"Annotation Artifacts in Natural Language Inference Data","created":"2018-03-06","cited_by_count":671},{"id":"1703.11008","title":"Computing Nonvacuous Generalization Bounds for Deep (Stochastic) Neural Networks with Many More Parameters than Training Data","created":"2017-03-31","cited_by_count":533},{"id":"1912.02178","title":"Fantastic Generalization Measures and Where to Find Them","created":"2019-12-04","cited_by_count":513},{"id":"1802.03471","title":"Certified Robustness to Adversarial Examples with Differential Privacy","created":"2018-02-09","cited_by_count":468},{"id":"1703.04933","title":"Sharp Minima Can Generalize For Deep Nets","created":"2017-03-15","cited_by_count":466},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"2103.14749","title":"Pervasive Label Errors in Test Sets Destabilize Machine Learning Benchmarks","created":"2021-03-26","cited_by_count":395},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"2102.11600","title":"ASAM: Adaptive Sharpness-Aware Minimization for Scale-Invariant Learning of Deep Neural Networks","created":"2021-02-23","cited_by_count":293},{"id":"2110.11216","title":"User-friendly introduction to PAC-Bayes bounds","created":"2021-10-21","cited_by_count":239},{"id":"2002.03329","title":"Better Theory for SGD in the Nonconvex World","created":"2020-02-09","cited_by_count":158},{"id":"2206.06232","title":"Towards Understanding Sharpness-Aware Minimization","created":"2022-06-13","cited_by_count":146},{"id":"2210.11369","title":"On Feature Learning in the Presence of Spurious Correlations","created":"2022-10-20","cited_by_count":145},{"id":"1805.12514","title":"Scaling provable adversarial defenses","created":"2018-05-31","cited_by_count":143},{"id":"2007.10760","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","created":"2020-07-21","cited_by_count":123},{"id":"1911.02151","title":"Information-Theoretic Generalization Bounds for SGLD via Data-Dependent Estimates","created":"2019-11-06","cited_by_count":119},{"id":"2007.12911","title":"Tighter risk certificates for neural networks","created":"2020-07-25","cited_by_count":112},{"id":"1411.2664","title":"Preserving Statistical Validity in Adaptive Data Analysis","created":"2014-11-10","cited_by_count":103},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102},{"id":"1902.00744","title":"Asymmetric Valleys: Beyond Sharp and Flat Local Minima","created":"2019-02-02","cited_by_count":90},{"id":"2001.00939","title":"Relative Flatness and Generalization","created":"2020-01-03","cited_by_count":88},{"id":"2102.00931","title":"Information-Theoretic Generalization Bounds for Stochastic Gradient Descent","created":"2021-02-01","cited_by_count":84},{"id":"2010.11924","title":"In Search of Robust Measures of Generalization","created":"2020-10-22","cited_by_count":79},{"id":"2502.05374","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","created":"2025-02-07","cited_by_count":79},{"id":"1902.00423","title":"Do We Train on Test Data? Purging CIFAR of Near-Duplicates","created":"2019-02-01","cited_by_count":62},{"id":"2309.04381","title":"Generalization Bounds: Perspectives from Information Theory and PAC-Bayes","created":"2023-09-08","cited_by_count":61},{"id":"2403.12350","title":"Friendly Sharpness-Aware Minimization","created":"2024-03-19","cited_by_count":53},{"id":"1905.13344","title":"Deterministic PAC-Bayesian generalization bounds for deep networks via generalizing noise-resilience","created":"2019-05-30","cited_by_count":51},{"id":"1904.06963","title":"The Impact of Neural Network Overparameterization on Gradient Confusion and Stochastic Gradient Descent","created":"2019-04-15","cited_by_count":46},{"id":"1806.03281","title":"Blind Justice: Fairness with Encrypted Sensitive Attributes","created":"2018-06-08","cited_by_count":41},{"id":"2002.10657","title":"Coherent Gradients: An Approach to Understanding Generalization in Gradient Descent-based Optimization","created":"2020-02-25","cited_by_count":41},{"id":"2307.11007","title":"Sharpness Minimization Algorithms Do Not Only Minimize Sharpness To Achieve Better Generalization","created":"2023-07-20","cited_by_count":39},{"id":"2305.16292","title":"Sharpness-Aware Minimization Leads to Low-Rank Features","created":"2023-05-25","cited_by_count":38},{"id":"2404.01231","title":"Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models","created":"2024-04-01","cited_by_count":30},{"id":"2105.09557","title":"Power-law escape rate of SGD","created":"2021-05-20","cited_by_count":29},{"id":"2310.07269","title":"Why Does Sharpness-Aware Minimization Generalize Better Than SGD?","created":"2023-10-11","cited_by_count":28},{"id":"2206.04823","title":"Membership Inference via Backdooring","created":"2022-06-10","cited_by_count":27},{"id":"2307.05831","title":"Memorization Through the Lens of Curvature of Loss Function Around Samples","created":"2023-07-11","cited_by_count":27},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26},{"id":"1903.08778","title":"Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes","created":"2019-03-20","cited_by_count":25},{"id":"2106.02588","title":"Stochastic gradient descent with noise of machine learning type. Part II: Continuous time analysis","created":"2021-06-04","cited_by_count":25},{"id":"2111.12273","title":"Sharpness-aware Quantization for Deep Neural Networks","created":"2021-11-24","cited_by_count":25},{"id":"2106.03542","title":"How Tight Can PAC-Bayes be in the Small Data Regime?","created":"2021-06-07","cited_by_count":24},{"id":"2410.10373","title":"Sharpness-Aware Minimization Efficiently Selects Flatter Minima Late in Training","created":"2024-10-14","cited_by_count":24},{"id":"2405.03676","title":"Why is SAM Robust to Label Noise?","created":"2024-05-06","cited_by_count":21},{"id":"2307.16273","title":"zkDL: Efficient Zero-Knowledge Proofs of Deep Learning Training","created":"2023-07-30","cited_by_count":20},{"id":"2310.14848","title":"Zero-Knowledge Proof-based Verifiable Decentralized Machine Learning in Communication Network: A Comprehensive Survey","created":"2023-10-23","cited_by_count":18},{"id":"2202.12267","title":"Inflation of test accuracy due to data leakage in deep learning-based classification of OCT images","created":"2022-02-21","cited_by_count":17},{"id":"2209.08615","title":"Membership Inference Attacks and Generalization: A Causal Perspective","created":"2022-09-18","cited_by_count":17},{"id":"2402.08508","title":"A PAC-Bayesian Link Between Generalisation and Flat Minima","created":"2024-02-13","cited_by_count":13},{"id":"2402.12572","title":"FairProof : Confidential and Certifiable Fairness for Neural Networks","created":"2024-02-19","cited_by_count":13},{"id":"2410.02159","title":"Mitigating Memorization In Language Models","created":"2024-10-03","cited_by_count":12},{"id":"2312.06230","title":"Activation Gradient based Poisoned Sample Detection Against Backdoor Attacks","created":"2023-12-11","cited_by_count":11},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10},{"id":"2405.20439","title":"Sharpness-Aware Minimization Enhances Feature Quality via Balanced Learning","created":"2024-05-30","cited_by_count":9},{"id":"2506.13715","title":"Sharpness-Aware Machine Unlearning","created":"2025-06-16","cited_by_count":9},{"id":"2309.06061","title":"Verifiable Fairness: Privacy-preserving Computation of Fairness for Machine Learning Systems","created":"2023-09-12","cited_by_count":7},{"id":"2402.13285","title":"Leveraging PAC-Bayes Theory and Gibbs Distributions for Generalization Bounds with Complexity Measures","created":"2024-02-19","cited_by_count":7},{"id":"2410.02777","title":"Secure and Confidential Certificates of Online Fairness","created":"2024-09-17","cited_by_count":7},{"id":"2110.05524","title":"Generalization Techniques Empirically Outperform Differential Privacy against Membership Inference","created":"2021-10-11","cited_by_count":5},{"id":"2505.07997","title":"FairZK: A Scalable System to Prove Machine Learning Fairness in Zero-Knowledge","created":"2025-05-12","cited_by_count":5},{"id":"2506.16666","title":"The Hitchhiker's Guide to Efficient, End-to-End, and Tight DP Auditing","created":"2025-06-20","cited_by_count":5},{"id":"2511.17378","title":"A Unified Stability Analysis of SAM vs SGD: Role of Data Coherence and Emergence of Simplicity Bias","created":"2025-11-21","cited_by_count":2}],"next_cursor":null}