{"list":"other","total":66,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"1608.06993","title":"Densely Connected Convolutional Networks","created":"2016-08-25","cited_by_count":6720},{"id":"1706.06083","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","created":"2017-06-19","cited_by_count":6415},{"id":"1812.04948","title":"A Style-Based Generator Architecture for Generative Adversarial Networks","created":"2018-12-12","cited_by_count":6013},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"1411.7766","title":"Deep Learning Face Attributes in the Wild","created":"2014-11-28","cited_by_count":3693},{"id":"1912.04958","title":"Analyzing and Improving the Image Quality of StyleGAN","created":"2019-12-03","cited_by_count":3588},{"id":"1607.00133","title":"Deep Learning with Differential Privacy","created":"2016-07-01","cited_by_count":2728},{"id":"2012.07805","title":"Extracting Training Data from Large Language Models","created":"2020-12-14","cited_by_count":2189},{"id":"1611.03530","title":"Understanding deep learning requires rethinking generalization","created":"2016-11-10","cited_by_count":1674},{"id":"2003.01690","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","created":"2020-03-03","cited_by_count":1451},{"id":"1912.01865","title":"StarGAN v2: Diverse Image Synthesis for Multiple Domains","created":"2019-12-04","cited_by_count":1098},{"id":"1905.02175","title":"Adversarial Examples Are Not Bugs, They Are Features","created":"2019-05-06","cited_by_count":953},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"2301.13188","title":"Extracting Training Data from Diffusion Models","created":"2023-01-30","cited_by_count":732},{"id":"2001.03994","title":"Fast is better than free: Revisiting adversarial training","created":"2020-01-12","cited_by_count":727},{"id":"2003.14053","title":"Inverting Gradients -- How easy is it to break privacy in federated learning?","created":"2020-03-31","cited_by_count":712},{"id":"1912.00049","title":"Square Attack: a query-efficient black-box adversarial attack via random search","created":"2019-11-29","cited_by_count":685},{"id":"1904.12843","title":"Adversarial Training for Free!","created":"2019-04-29","cited_by_count":643},{"id":"1910.09700","title":"Quantifying the Carbon Emissions of Machine Learning","created":"2019-10-21","cited_by_count":521},{"id":"1906.05271","title":"Does Learning Require Memorization? A Short Tale about a Long Tail","created":"2019-06-12","cited_by_count":460},{"id":"2311.17035","title":"Scalable Extraction of Training Data from (Production) Language Models","created":"2023-11-28","cited_by_count":434},{"id":"2310.16789","title":"Detecting Pretraining Data from Large Language Models","created":"2023-10-25","cited_by_count":387},{"id":"1907.02044","title":"Minimally distorted Adversarial Examples with a Fast Adaptive Boundary Attack","created":"2019-07-03","cited_by_count":334},{"id":"2205.10770","title":"Memorization Without Overfitting: Analyzing the Training Dynamics of Large Language Models","created":"2022-05-22","cited_by_count":220},{"id":"2112.00059","title":"Evaluating Gradient Inversion Attacks and Defenses in Federated Learning","created":"2021-11-30","cited_by_count":196},{"id":"1905.10291","title":"Privacy Risks of Securing Machine Learning Models against Adversarial Examples","created":"2019-05-24","cited_by_count":141},{"id":"2206.07758","title":"Reconstructing Training Data from Trained Neural Networks","created":"2022-06-15","cited_by_count":133},{"id":"2012.06421","title":"When is Memorization of Irrelevant Training Data Necessary for High-Accuracy Learning?","created":"2020-12-11","cited_by_count":104},{"id":"1607.00485","title":"Group Sparse Regularization for Deep Neural Networks","created":"2016-07-02","cited_by_count":89},{"id":"1907.12207","title":"LassoNet: A Neural Network with Feature Sparsity","created":"2019-07-29","cited_by_count":82},{"id":"2201.10787","title":"Variational Model Inversion Attacks","created":"2022-01-26","cited_by_count":75},{"id":"2010.04092","title":"Knowledge-Enriched Distributional Model Inversion Attacks","created":"2020-10-08","cited_by_count":67},{"id":"2201.12179","title":"Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks","created":"2022-01-28","cited_by_count":60},{"id":"2203.01925","title":"Label-Only Model Inversion Attacks via Boundary Repulsion","created":"2022-03-03","cited_by_count":56},{"id":"2009.05241","title":"Improving Robustness to Model Inversion Attacks via Mutual Information Regularization","created":"2020-09-11","cited_by_count":52},{"id":"2201.12383","title":"Bounding Training Data Reconstruction in Private (Deep) Learning","created":"2022-01-28","cited_by_count":46},{"id":"2308.04699","title":"GIFD: A Generative Gradient Inversion Method with Feature Domain Optimization","created":"2023-08-09","cited_by_count":45},{"id":"2201.09370","title":"Are Your Sensitive Attributes Private? Novel Model Inversion Attribute Inference Attacks on Classification Models","created":"2022-01-23","cited_by_count":43},{"id":"2304.01669","title":"Re-thinking Model Inversion Attacks Against Deep Neural Networks","created":"2023-04-04","cited_by_count":39},{"id":"2102.11673","title":"Measuring Data Leakage in Machine-Learning Models with Fisher Information","created":"2021-02-23","cited_by_count":33},{"id":"2304.04625","title":"Reinforcement Learning-Based Black-Box Model Inversion Attacks","created":"2023-04-10","cited_by_count":33},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30},{"id":"2302.09814","title":"Pseudo Label-Guided Model Inversion Attack via Conditional Generative Adversarial Network","created":"2023-02-20","cited_by_count":28},{"id":"2010.08097","title":"Consistent Feature Selection for Analytic Deep Neural Networks","created":"2020-10-16","cited_by_count":27},{"id":"2310.19342","title":"Label-Only Model Inversion Attacks via Knowledge Transfer","created":"2023-10-30","cited_by_count":21},{"id":"2401.12233","title":"Memorization in Self-Supervised Learning Improves Downstream Generalization","created":"2024-01-19","cited_by_count":18},{"id":"2407.13863","title":"A Closer Look at GAN Priors: Exploiting Intermediate Features for Enhanced Model Inversion Attacks","created":"2024-07-18","cited_by_count":18},{"id":"2502.21278","title":"Does Generation Require Memorization? Creative Diffusion Models using Ambient Diffusion","created":"2025-02-28","cited_by_count":17},{"id":"2012.07828","title":"Robustness Threats of Differential Privacy","created":"2020-12-14","cited_by_count":15},{"id":"2307.08424","title":"Unstoppable Attack: Label-Only Model Inversion via Conditional Diffusion Model","created":"2023-07-17","cited_by_count":14},{"id":"2105.07985","title":"Gradient Masking and the Underestimated Robustness Threats of Differential Privacy in Deep Learning","created":"2021-05-17","cited_by_count":13},{"id":"2310.06549","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","created":"2023-10-10","cited_by_count":13},{"id":"2405.05588","title":"Model Inversion Robustness: Can Transfer Learning Help?","created":"2024-05-09","cited_by_count":12},{"id":"1906.06449","title":"Robust or Private? Adversarial Training Makes Models More Vulnerable to Privacy Attacks","created":"2019-06-15","cited_by_count":11},{"id":"2409.01696","title":"On the Vulnerability of Skip Connections to Model Inversion Attacks","created":"2024-09-03","cited_by_count":9},{"id":"2306.13965","title":"Boosting Model Inversion Attacks with Adversarial Examples","created":"2023-06-24","cited_by_count":8},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8},{"id":"2006.00334","title":"Consistent feature selection for neural networks via Adaptive Group Lasso","created":"2020-05-30","cited_by_count":6},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6},{"id":"2211.08942","title":"Differentially Private Optimizers Can Learn Adversarially Robust Models","created":"2022-11-16","cited_by_count":6},{"id":"2410.05159","title":"MIBench: A Comprehensive Framework for Benchmarking Model Inversion Attack and Defense","created":"2024-10-07","cited_by_count":5},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5},{"id":"2507.04782","title":"Reason to Rote: Rethinking Memorization in Reasoning","created":"2025-07-07","cited_by_count":5},{"id":"2006.04622","title":"Trade-offs between membership privacy & adversarially robust learning","created":"2020-06-08","cited_by_count":3},{"id":"2404.02866","title":"Guarantees of confidentiality via Hammersley-Chapman-Robbins bounds","created":"2024-04-03","cited_by_count":3}],"next_cursor":null}