| Advances and open problems in federated learning P Kairouz, HB McMahan Foundations and trends in machine learning 14 (1-2), 1-210, 2021 | 14034 | 2021 |
| Measuring massive multitask language understanding D Hendrycks, C Burns, S Basart, A Zou, M Mazeika, D Song, J Steinhardt arXiv preprint arXiv:2009.03300, 2020 | 11518 | 2020 |
| Measuring mathematical problem solving with the math dataset D Hendrycks, C Burns, S Kadavath, A Arora, S Basart, E Tang, D Song, ... arXiv preprint arXiv:2103.03874, 2021 | 6803 | 2021 |
| Practical techniques for searches on encrypted data DX Song, D Wagner, A Perrig Proceeding 2000 IEEE symposium on security and privacy. S&P 2000, 44-55, 2000 | 5537 | 2000 |
| Extracting training data from large language models N Carlini, F Tramer, E Wallace, M Jagielski, A Herbert-Voss, K Lee, ... 30th USENIX security symposium (USENIX Security 21), 2633-2650, 2021 | 4868 | 2021 |
| Robust physical-world attacks on deep learning visual classification K Eykholt, I Evtimov, E Fernandes, B Li, A Rahmati, C Xiao, A Prakash, ... 2018 IEEE/CVF conference on computer vision and pattern recognition, 1625-1634, 2018 | 4345* | 2018 |
| Random key predistribution schemes for sensor networks H Chan, A Perrig, D Song 2003 Symposium on Security and Privacy, 2003., 197-213, 2003 | 4308 | 2003 |
| Provable data possession at untrusted stores G Ateniese, R Burns, R Curtmola, J Herring, L Kissner, Z Peterson, ... Proceedings of the 14th ACM conference on Computer and communications …, 2007 | 3997 | 2007 |
| The many faces of robustness: A critical analysis of out-of-distribution generalization D Hendrycks, S Basart, N Mu, S Kadavath, F Wang, E Dorundo, R Desai, ... 2021 IEEE/CVF International Conference on Computer Vision (ICCV), 8320-8329, 2021 | 3347 | 2021 |
| Targeted backdoor attacks on deep learning systems using data poisoning X Chen, C Liu, B Li, K Lu, D Song arXiv preprint arXiv:1712.05526, 2017 | 3187 | 2017 |
| Model-contrastive federated learning Q Li, B He, D Song 2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR …, 2021 | 2823 | 2021 |
| Natural adversarial examples D Hendrycks, K Zhao, S Basart, J Steinhardt, D Song Proceedings of the IEEE/CVF conference on computer vision and pattern …, 2021 | 2711 | 2021 |
| Delving into transferable adversarial examples and black-box attacks Y Liu, X Chen, C Liu, D Song arXiv preprint arXiv:1611.02770, 2016 | 2616 | 2016 |
| Dynamic taint analysis for automatic detection, analysis, and signaturegeneration of exploits on commodity software. J Newsome, DX Song NDSS 5, 3-4, 2005 | 2550 | 2005 |
| Android permissions demystified AP Felt, E Chin, S Hanna, D Song, D Wagner Proceedings of the 18th ACM conference on Computer and communications …, 2011 | 2255 | 2011 |
| The sybil attack in sensor networks: analysis & defenses J Newsome, E Shi, D Song, A Perrig Proceedings of the 3rd international symposium on Information processing in …, 2004 | 2138 | 2004 |
| On Scaling Decentralized Blockchains: (A Position Paper) K Croman, C Decker, I Eyal, AE Gencer, A Juels, A Kosba, A Miller, ... International conference on financial cryptography and data security, 106-125, 2016 | 2110 | 2016 |
| The secret sharer: Evaluating and testing unintended memorization in neural networks N Carlini, C Liu, Ú Erlingsson, J Kos, D Song 28th USENIX security symposium (USENIX security 19), 267-284, 2019 | 2028 | 2019 |
| Representation engineering: A top-down approach to ai transparency A Zou, L Phan, S Chen, J Campbell, P Guo, R Ren, A Pan, X Yin, ... arXiv preprint arXiv:2310.01405, 2023 | 1539 | 2023 |
| Measuring coding challenge competence with apps D Hendrycks, S Basart, S Kadavath, M Mazeika, A Arora, E Guo, C Burns, ... arXiv preprint arXiv:2105.09938, 2021 | 1438 | 2021 |
