[55] O. Russakovsky, J. Deng, H. Su, J. Krause, S. Satheesh, S. Ma, Z. Huang, A. Karpathy, A. Khosla, M. Bernstein et al., "Imagenet large scale visual recognition challenge," International journal of computer vision, vol. 115, pp. 211-252, 2015. 2, 6, 7
[56] O. M. Parkhi, A. Vedaldi, A. Zisserman, and C. Jawahar, "Cats and dogs," in 2012 IEEE conference on computer vision and pattern recognition. IEEE, 2012, pp. 3498-3505. 2, 5, 7, 22
[57] J. Krause, M. Stark, J. Deng, and L. Fei-Fei, “3d object representations for fine-grained categorization,” in Proceedings of the IEEE international conference on computer vision workshops, 2013, pp. 554–561. 2, 7
[58] H. Salman, A. Ilyas, L. Engstrom, A. Kapoor, and A. Madry, “Do adversarially robust imagenet models transfer better?” Advances in Neural Information Processing Systems, vol. 33, pp. 3533–3545, 2020. 3, 4, 9
[59] P. K. Agarwal, S. Har-Peled, and K. R. Varadarajan, “Approximating extent measures of points,” Journal of the ACM (JACM), vol. 51, no. 4, pp. 606–635, 2004. 3
[60] S. Har-Peled and S. Mazumdar, "On coresets for k-means and k-median clustering," in Proceedings of the thirty-sixth annual ACM symposium on Theory of computing, 2004, pp. 291-300.
[61] D. Feldman, M. Schmidt, and C. Sohler, “Turning big data into tiny data: Constant-size coresets for k-means, pca, and projective clustering,” SIAM Journal on Computing, vol. 49, no. 3, pp. 601–657, 2020. 3
[62] S. Basu, P. Pope, and S. Feizi, “Influence functions in deep learning are fragile,” arXiv preprint arXiv:2006.14651, 2020. 3
[63] J. Jia, Y. Zhang, D. Song, S. Liu, and A. Hero, "Robustness-preserving lifelong learning via dataset condensation," in ICASSP 2023-2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). IEEE, 2023, pp. 1-5. 3
[64] Y. Xie, H. Lu, J. Yan, X. Yang, M. Tomizuka, and W. Zhan, "Active finetuning: Exploiting annotation budget in the pretraining-finetuning paradigm," arXiv preprint arXiv:2303.14382, 2023. 3
[65] A. Ghorbani and J. Zou, "Data shapley: Equitable valuation of data for machine learning," in International Conference on Machine Learning. PMLR, 2019, pp. 2242-2251. 3
[66] R. Jia, D. Dao, B. Wang, F. A. Hubis, N. Hynes, N. M. Gürel, B. Li, C. Zhang, D. Song, and C. J. Spanos, “Towards efficient data valuation based on the shapley value,” in The 22nd International Conference on Artificial Intelligence and Statistics. PMLR, 2019, pp. 1167–1176. 3
[67] R. Jia, D. Dao, B. Wang, F. A. Hubis, N. M. Gurel, B. Li, C. Zhang, C. J. Spanos, and D. Song, "Efficient task-specific data valuation for nearest neighbor algorithms," arXiv preprint arXiv:1908.08619, 2019. 3
[68] J. Lin, A. Zhang, M. Lécuyer, J. Li, A. Panda, and S. Sen, “Measuring the effect of training data on deep learning predictions via randomized experiments,” in International Conference on Machine Learning. PMLR, 2022, pp. 13468-13504. 3
[69] K. Guu, A. Webson, E. Pavlick, L. Dixon, I. Tenney, and T. Bolukbasi, "Simfluence: Modeling the influence of individual training examples by simulating training runs," arXiv preprint arXiv:2303.08114, 2023.
[70] Z. Hammoudeh and D. Lowd, "Identifying a training-set attack's target using renormalized influence estimation," in Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022, pp. 1367-1381. 3
[71] S. M. Park, K. Georgiev, A. Ilyas, G. Leclerc, and A. Madry, "Trak: Attributing model behavior at scale," arXiv preprint arXiv:2303.14186, 2023. 3