{"list":"other","total":56,"rows":[{"id":"1512.03385","title":"Deep Residual Learning for Image Recognition","created":"2015-12-10","cited_by_count":52096},{"id":"2010.11929","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","created":"2020-10-22","cited_by_count":30186},{"id":"1503.02531","title":"Distilling the Knowledge in a Neural Network","created":"2015-03-09","cited_by_count":10324},{"id":"2304.07193","title":"DINOv2: Learning Robust Visual Features without Supervision","created":"2023-04-14","cited_by_count":7974},{"id":"1703.05175","title":"Prototypical Networks for Few-shot Learning","created":"2017-03-15","cited_by_count":3015},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1804.06872","title":"Co-teaching: Robust Training of Deep Neural Networks with Extremely Noisy Labels","created":"2018-04-18","cited_by_count":1059},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1511.04508","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","created":"2015-11-14","cited_by_count":678},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"1811.00636","title":"Spectral Signatures in Backdoor Attacks","created":"2018-11-01","cited_by_count":484},{"id":"1902.06531","title":"STRIP: A Defence Against Trojan Attacks on Deep Neural Networks","created":"2019-02-18","cited_by_count":459},{"id":"1811.03728","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","created":"2018-11-09","cited_by_count":456},{"id":"2203.11932","title":"Dataset Distillation by Matching Training Trajectories","created":"2022-03-22","cited_by_count":442},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"1911.00068","title":"Confident Learning: Estimating Uncertainty in Dataset Labels","created":"2019-10-31","cited_by_count":413},{"id":"1910.00033","title":"Hidden Trigger Backdoor Attacks","created":"2019-09-30","cited_by_count":371},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324},{"id":"1706.03691","title":"Certified Defenses for Data Poisoning Attacks","created":"2017-06-09","cited_by_count":303},{"id":"1912.02771","title":"Label-Consistent Backdoor Attacks","created":"2019-12-05","cited_by_count":296},{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290},{"id":"2001.10528","title":"Identifying Mislabeled Data using the Area Under the Margin Ranking","created":"2020-01-28","cited_by_count":261},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"2107.13034","title":"Dataset Distillation with Infinitely Wide Convolutional Networks","created":"2021-07-27","cited_by_count":218},{"id":"2005.03823","title":"Blind Backdoors in Deep Learning Models","created":"2020-05-08","cited_by_count":182},{"id":"2009.02276","title":"Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching","created":"2020-09-04","cited_by_count":163},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153},{"id":"1812.00292","title":"SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems","created":"2018-12-02","cited_by_count":152},{"id":"1906.10842","title":"Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs","created":"2019-06-26","cited_by_count":146},{"id":"1811.00741","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","created":"2018-11-02","cited_by_count":135},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130},{"id":"2003.08904","title":"RAB: Provable Robustness Against Backdoor Attacks","created":"2020-03-19","cited_by_count":118},{"id":"2006.12557","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","created":"2020-06-22","cited_by_count":116},{"id":"1910.02551","title":"Soft-Label Dataset Distillation and Text Dataset Distillation","created":"2019-10-06","cited_by_count":107},{"id":"2006.08131","title":"An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks","created":"2020-06-15","cited_by_count":97},{"id":"2302.03251","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","created":"2023-02-07","cited_by_count":97},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94},{"id":"2002.11750","title":"On Certifying Robustness against Backdoor Attacks via Randomized Smoothing","created":"2020-02-26","cited_by_count":77},{"id":"1905.13409","title":"Bypassing Backdoor Detection Algorithms in Deep Learning","created":"2019-05-31","cited_by_count":74},{"id":"1803.00992","title":"Label Sanitization against Label Flipping Poisoning Attacks","created":"2018-03-02","cited_by_count":73},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59},{"id":"2110.06283","title":"Detecting Corrupted Labels Without Training a Model to Predict","created":"2021-10-12","cited_by_count":58},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29},{"id":"1908.04473","title":"On Defending Against Label Flipping Attacks on Malware Detection Systems","created":"2019-08-13","cited_by_count":22},{"id":"2502.01385","title":"Detecting Backdoor Samples in Contrastive Language Image Pretraining","created":"2025-02-03","cited_by_count":19},{"id":"2301.01044","title":"Analysis of Label-Flip Poisoning Attack on Machine Learning Based Malware Detector","created":"2023-01-03","cited_by_count":11},{"id":"2312.06230","title":"Activation Gradient based Poisoned Sample Detection Against Backdoor Attacks","created":"2023-12-11","cited_by_count":11},{"id":"2208.08433","title":"Label Flipping Data Poisoning Attack Against Wearable Human Activity Recognition System","created":"2022-08-17","cited_by_count":10},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6},{"id":"2206.10673","title":"Natural Backdoor Datasets","created":"2022-06-21","cited_by_count":5},{"id":"2511.13143","title":"SoK: The Last Line of Defense: On Backdoor Defense Evaluation","created":"2025-11-17","cited_by_count":5},{"id":"2411.11525","title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization","created":"2024-11-18","cited_by_count":3},{"id":"2403.02995","title":"Mitigating Label Flipping Attacks in Malicious URL Detectors Using Ensemble Trees","created":"2024-03-05","cited_by_count":1},{"id":"2509.22873","title":"AntiFLipper: A Secure and Efficient Defense Against Label-Flipping Attacks in Federated Learning","created":"2025-09-26","cited_by_count":1}],"next_cursor":null}