{"total":69,"rows":[{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2403.05030","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","created":"2024-03-08","cited_by_count":88,"area":"safety"},{"id":"2310.00076","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","created":"2023-09-29","cited_by_count":81,"area":"safety"},{"id":"2307.03694","title":"Scalable Membership Inference Attacks via Quantile Regression","created":"2023-07-07","cited_by_count":65,"area":"safety"},{"id":"2303.15180","title":"Detecting Backdoors in Pre-trained Encoders","created":"2023-03-23","cited_by_count":55,"area":"safety"},{"id":"2102.10496","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","created":"2021-02-21","cited_by_count":49,"area":"safety"},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2403.01267","title":"Dissecting Language Models: Machine Unlearning via Selective Pruning","created":"2024-03-02","cited_by_count":42,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2504.10957","title":"When is Task Vector Provably Effective for Model Editing? A Generalization Analysis of Nonlinear Transformers","created":"2025-04-15","cited_by_count":38,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2202.11202","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","created":"2022-02-22","cited_by_count":34,"area":"safety"},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2211.08229","title":"CorruptEncoder: Data Poisoning based Backdoor Attacks to Contrastive Learning","created":"2022-11-15","cited_by_count":29,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2302.10894","title":"Red Teaming Deep Neural Networks with Feature Synthesis Tools","created":"2023-02-08","cited_by_count":21,"area":"safety"},{"id":"2105.06209","title":"DeepObliviate: A Powerful Charm for Erasing Data Residual Memory in Deep Neural Networks","created":"2021-05-13","cited_by_count":19,"area":"safety"},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2503.05657","title":"NoT: Federated Unlearning via Weight Negation","created":"2025-03-07","cited_by_count":15,"area":"safety"},{"id":"2406.09173","title":"Potion: Towards Poison Unlearning","created":"2024-06-13","cited_by_count":14,"area":"safety"},{"id":"2206.08477","title":"Backdoor Attacks on Vision Transformers","created":"2022-06-16","cited_by_count":13,"area":"safety"},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2503.18314","title":"LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertainty","created":"2025-03-24","cited_by_count":13,"area":"safety"},{"id":"2505.22310","title":"From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularization","created":"2025-05-28","cited_by_count":12,"area":"safety"},{"id":"2105.05381","title":"Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective","created":"2021-05-12","cited_by_count":10,"area":"safety"},{"id":"2311.15268","title":"Unlearning via Sparse Representations","created":"2023-11-26","cited_by_count":10,"area":"safety"},{"id":"2507.05113","title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2111.11870","title":"DBIA: Data-free Backdoor Injection Attack against Transformer Networks","created":"2021-11-22","cited_by_count":9,"area":"safety"},{"id":"2306.01272","title":"DeepfakeArt Challenge: A Benchmark Dataset for Generative AI Art Forgery and Data Poisoning Detection","created":"2023-06-02","cited_by_count":9,"area":"safety"},{"id":"2402.06674","title":"Impact of Dataset Properties on Membership Inference Vulnerability of Deep Transfer Learning","created":"2024-02-07","cited_by_count":7,"area":"safety"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2210.16023","title":"LegoNet: A Fast and Exact Unlearning Architecture","created":"2022-10-28","cited_by_count":6,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2504.15827","title":"DualOptim: Enhancing Efficacy and Stability in Machine Unlearning with Dual Optimizers","created":"2025-04-22","cited_by_count":6,"area":"safety"},{"id":"2601.13578","title":"FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearning","created":"2026-01-20","cited_by_count":6,"area":"safety"},{"id":"2405.10425","title":"Data Selection for Transfer Unlearning","created":"2024-05-16","cited_by_count":5,"area":"safety"},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2310.07632","title":"Prompt Backdoors in Visual Prompt Learning","created":"2023-10-11","cited_by_count":4,"area":"safety"},{"id":"2402.14977","title":"Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models","created":"2024-02-22","cited_by_count":4,"area":"safety"},{"id":"2407.12069","title":"Unlearning Personal Data from a Single Image","created":"2024-07-16","cited_by_count":4,"area":"safety"},{"id":"2410.06814","title":"Defending Membership Inference Attacks via Privacy-aware Sparsity Tuning","created":"2024-10-09","cited_by_count":4,"area":"safety"},{"id":"2410.23693","title":"Zero-shot Class Unlearning via Layer-wise Relevance Analysis and Neuronal Path Perturbation","created":"2024-10-31","cited_by_count":4,"area":"safety"},{"id":"2509.16391","title":"CoUn: Empowering Machine Unlearning via Contrastive Learning","created":"2025-09-19","cited_by_count":4,"area":"safety"},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2411.08443","title":"Machine Unlearning on Pre-trained Models by Residual Feature Alignment Using LoRA","created":"2024-11-13","cited_by_count":3,"area":"safety"},{"id":"2503.09330","title":"Group-robust Machine Unlearning","created":"2025-03-12","cited_by_count":3,"area":"safety"},{"id":"2306.05670","title":"One-Shot Machine Unlearning with Mnemonic Code","created":"2023-06-09","cited_by_count":2,"area":"safety"},{"id":"2502.06374","title":"Hyperparameters in Score-Based Membership Inference Attacks","created":"2025-02-10","cited_by_count":2,"area":"safety"},{"id":"2503.07482","title":"How does Bayesian Sampling help Membership Inference Attacks?","created":"2025-03-10","cited_by_count":2,"area":"safety"},{"id":"2603.16489","title":"Unlearning for One-Step Generative Models via Unbalanced Optimal Transport","created":"2026-03-17","cited_by_count":2,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2312.14182","title":"Find the Lady: Permutation and Re-Synchronization of Deep Neural Networks","created":"2023-12-19","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2505.10351","title":"A Unified and Scalable Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2025-05-15","cited_by_count":1,"area":"safety"},{"id":"2512.15335","title":"Bits for Privacy: Evaluating Post-Training Quantization via Membership Inference","created":"2025-12-17","cited_by_count":1,"area":"safety"},{"id":"2604.11720","title":"On the Robustness of Watermarking for Autoregressive Image Generation","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2303.17080","title":"Mole Recruitment: Poisoning of Image Classifiers via Selective Batch Sampling","created":"2023-03-30","cited_by_count":0,"area":"safety"},{"id":"2401.09740","title":"Hijacking Attacks against Neural Networks by Analyzing Training Data","created":"2024-01-18","cited_by_count":0,"area":"safety"},{"id":"2503.21236","title":"Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashing","created":"2025-03-27","cited_by_count":0,"area":"safety"},{"id":"2510.07022","title":"Federated Unlearning in the Wild: Rethinking Fairness and Data Discrepancy","created":"2025-10-08","cited_by_count":0,"area":"safety"},{"id":"2511.22936","title":"Robust Image Self-Recovery against Tampering using Watermark Generation with Pixel Shuffling","created":"2025-11-28","cited_by_count":0,"area":"safety"},{"id":"2603.22987","title":"A Critical Review on the Effectiveness and Privacy Threats of Membership Inference Attacks","created":"2026-03-24","cited_by_count":0,"area":"safety"},{"id":"2605.11592","title":"SoK: Unlearnability and Unlearning for Model Dememorization","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2605.29454","title":"A Full-Pipeline Framework for Evaluating Membership Inference Attacks in Machine Learning","created":"2026-05-28","cited_by_count":0,"area":"safety"},{"id":"2607.17550","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","created":"2026-07-20","cited_by_count":0,"area":"safety"},{"id":"2608.04052","title":"When Modalities Fail to Tango: Conformal Backdoor Detection in Multimodal Contrastive Learning","created":"2026-08-04","cited_by_count":0,"area":"safety"}],"next_cursor":null}