{"total":83,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"1910.05821","title":"Policy Poisoning in Batch Reinforcement Learning and Control","created":"2019-10-13","cited_by_count":70,"area":"offlinerl"},{"id":"2101.02644","title":"Data Poisoning Attacks to Deep Learning Based Recommender Systems","created":"2021-01-07","cited_by_count":43,"area":"safety"},{"id":"2109.01165","title":"Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction","created":"2021-09-01","cited_by_count":37,"area":null},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2209.10117","title":"A Comprehensive Survey on Trustworthy Recommender Systems","created":"2022-09-21","cited_by_count":32,"area":null},{"id":"2203.11491","title":"Making Recommender Systems Forget: Learning and Unlearning for Erasable Recommendation","created":"2022-03-22","cited_by_count":29,"area":"safety"},{"id":"2212.06325","title":"AFLGuard: Byzantine-robust Asynchronous Federated Learning","created":"2022-12-13","cited_by_count":29,"area":null},{"id":"2207.10307","title":"Knowledge-enhanced Black-box Attacks for Recommendations","created":"2022-07-21","cited_by_count":26,"area":null},{"id":"2301.00767","title":"A Survey on Federated Recommendation Systems","created":"2022-12-27","cited_by_count":25,"area":null},{"id":"2504.13192","title":"CheatAgent: Attacking LLM-Empowered Recommender Systems via LLM Agent","created":"2025-04-13","cited_by_count":25,"area":"agents"},{"id":"2302.10637","title":"A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy","created":"2023-02-21","cited_by_count":24,"area":null},{"id":"2102.05776","title":"Defense Against Reward Poisoning Attacks in Reinforcement Learning","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2201.12662","title":"Fair ranking: a critical review, challenges, and future directions","created":"2022-01-29","cited_by_count":21,"area":null},{"id":"2105.09384","title":"Graph Sanitation with Application to Node Classification","created":"2021-05-19","cited_by_count":20,"area":null},{"id":"2201.12686","title":"Rank List Sensitivity of Recommender Systems to Interaction Perturbations","created":"2022-01-29","cited_by_count":20,"area":null},{"id":"2204.01499","title":"FedRecAttack: Model Poisoning Attack to Federated Recommendation","created":"2022-04-01","cited_by_count":20,"area":null},{"id":"2402.14836","title":"Stealthy Attack on Large Language Model based Recommendation","created":"2024-02-18","cited_by_count":19,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2206.11433","title":"Shilling Black-box Recommender Systems by Learning to Generate Fake User Profiles","created":"2022-06-23","cited_by_count":15,"area":null},{"id":"2310.05847","title":"Making Users Indistinguishable: Attribute-wise Unlearning in Recommender Systems","created":"2023-10-06","cited_by_count":15,"area":"safety"},{"id":"2302.13851","title":"Implicit Poisoning Attacks in Two-Agent Reinforcement Learning: Adversarial Policies for Training-Time Attacks","created":"2023-02-27","cited_by_count":14,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2404.14942","title":"Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures","created":"2024-04-23","cited_by_count":14,"area":null},{"id":"2204.13594","title":"Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarios","created":"2022-04-26","cited_by_count":13,"area":null},{"id":"2102.09171","title":"Data Poisoning Attacks and Defenses to Crowdsourcing Systems","created":"2021-02-18","cited_by_count":12,"area":"safety"},{"id":"2503.23804","title":"DrunkAgent: Stealthy Memory Corruption in LLM-Powered Recommender Agents","created":"2025-03-31","cited_by_count":12,"area":"agents"},{"id":"2311.18244","title":"Unveiling Vulnerabilities of Contrastive Recommender Systems to Poisoning Attacks","created":"2023-11-30","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2107.10457","title":"Ready for Emerging Threats to Recommender Systems? A Graph Convolution-based Generative Shilling Attack","created":"2021-07-22","cited_by_count":10,"area":null},{"id":"2303.14601","title":"PORE: Provably Robust Recommender Systems against Data Poisoning Attacks","created":"2023-03-26","cited_by_count":10,"area":"safety"},{"id":"2409.11690","title":"ID-Free Not Risk-Free: LLM-Powered Agents Unveil Risks in ID-Free Recommender Systems","created":"2024-09-18","cited_by_count":10,"area":"agents"},{"id":"2311.07127","title":"Multi-agent Attacks for Black-box Social Recommendations","created":"2023-11-13","cited_by_count":9,"area":null},{"id":"2412.11441","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","created":"2024-12-16","cited_by_count":9,"area":"diffusion"},{"id":"2306.16526","title":"Shilling Black-box Review-based Recommender Systems through Fake Review Generation","created":"2023-06-27","cited_by_count":8,"area":null},{"id":"2412.12836","title":"A Survey on Recommendation Unlearning: Fundamentals, Taxonomy, Evaluation, and Open Questions","created":"2024-12-17","cited_by_count":7,"area":null},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2301.03553","title":"FedDebug: Systematic Debugging for Federated Learning Applications","created":"2023-01-09","cited_by_count":6,"area":null},{"id":"2307.15960","title":"Recommendation Unlearning via Matrix Correction","created":"2023-07-29","cited_by_count":6,"area":null},{"id":"2402.05541","title":"FedAA: A Reinforcement Learning Perspective on Adaptive Aggregation for Fair and Robust Federated Learning","created":"2024-02-08","cited_by_count":6,"area":"deeprl"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2105.10051","title":"Preventing Machine Learning Poisoning Attacks Using Authentication and Provenance","created":"2021-05-20","cited_by_count":5,"area":"safety"},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2302.07145","title":"Practical Cross-System Shilling Attacks with Limited Access to Data","created":"2023-02-14","cited_by_count":5,"area":null},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2401.12578","title":"ToDA: Target-oriented Diffusion Attacker against Recommendation System","created":"2024-01-23","cited_by_count":4,"area":"diffusion"},{"id":"2402.09023","title":"Review-Incorporated Model-Agnostic Profile Injection Attacks on Recommender Systems","created":"2024-02-14","cited_by_count":4,"area":"safety"},{"id":"2403.07933","title":"Corruption-Robust Offline Two-Player Zero-Sum Markov Games","created":"2024-03-04","cited_by_count":4,"area":null},{"id":"2303.16668","title":"Protecting Federated Learning from Extreme Model Poisoning Attacks via Multidimensional Time Series Anomaly Detection","created":"2023-03-29","cited_by_count":3,"area":null},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3,"area":null},{"id":"2502.12958","title":"Preventing the Popular Item Embedding Based Attack in Federated Recommendations","created":"2025-02-18","cited_by_count":3,"area":null},{"id":"2508.15252","title":"Retrieval-Augmented Review Generation for Poisoning Recommender Systems","created":"2025-08-21","cited_by_count":3,"area":"rag"},{"id":"2203.03560","title":"Targeted Data Poisoning Attack on News Recommendation System by Content Perturbation","created":"2022-03-04","cited_by_count":2,"area":"safety"},{"id":"2503.10228","title":"Policy Teaching via Data Poisoning in Learning from Human Preferences","created":"2025-03-13","cited_by_count":2,"area":"alignment"},{"id":"2210.13762","title":"Towards Robust Recommender Systems via Triple Cooperative Defense","created":"2022-10-25","cited_by_count":1,"area":null},{"id":"2306.07992","title":"Securing Visually-Aware Recommender Systems: An Adversarial Image Reconstruction and Detection Framework","created":"2023-06-11","cited_by_count":1,"area":null},{"id":"2310.16335","title":"Defense Against Model Extraction Attacks on Recommender Systems","created":"2023-10-25","cited_by_count":1,"area":null},{"id":"2311.09790","title":"Breaking Boundaries: Balancing Performance and Robustness in Deep Wireless Traffic Forecasting","created":"2023-11-16","cited_by_count":1,"area":null},{"id":"2505.12019","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","created":"2025-05-17","cited_by_count":1,"area":null},{"id":"2511.05845","title":"IndirectAD: Practical Data Poisoning Attacks against Recommender Systems for Item Promotion","created":"2025-11-08","cited_by_count":1,"area":"safety"},{"id":"2603.05225","title":"AI+HW 2035: Shaping the Next Decade","created":"2026-03-05","cited_by_count":1,"area":null},{"id":"2104.08020","title":"FedCom: A Byzantine-Robust Local Model Aggregation Rule Using Data Commitment for Federated Learning","created":"2021-04-16","cited_by_count":0,"area":"safety"},{"id":"2105.13530","title":"A BIC-based Mixture Model Defense against Data Poisoning Attacks on Classifiers","created":"2021-05-28","cited_by_count":0,"area":"safety"},{"id":"2109.07835","title":"Incentives in Two-sided Matching Markets with Prediction-enhanced Preference-formation","created":"2021-09-16","cited_by_count":0,"area":null},{"id":"2201.07063","title":"How to Backdoor HyperNetwork in Personalized Federated Learning?","created":"2022-01-18","cited_by_count":0,"area":null},{"id":"2208.07272","title":"Training-Time Attacks against k-Nearest Neighbors","created":"2022-08-15","cited_by_count":0,"area":null},{"id":"2211.01592","title":"Try to Avoid Attacks: A Federated Data Sanitization Defense for Healthcare IoMT Systems","created":"2022-11-03","cited_by_count":0,"area":null},{"id":"2306.03726","title":"Exploring Model Dynamics for Accumulative Poisoning Discovery","created":"2023-06-06","cited_by_count":0,"area":null},{"id":"2309.17278","title":"Toward Robust Recommendation via Real-time Vicinal Defense","created":"2023-09-29","cited_by_count":0,"area":null},{"id":"2312.11571","title":"Model Stealing Attack against Recommender System","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2401.12700","title":"Securing Recommender System via Cooperative Training","created":"2024-01-23","cited_by_count":0,"area":null},{"id":"2504.12875","title":"A Client-level Assessment of Collaborative Backdoor Poisoning in Non-IID Federated Learning","created":"2025-04-17","cited_by_count":0,"area":null},{"id":"2506.06891","title":"Robust In-Context Reinforcement Learning Under Reward Poisoning Attacks","created":"2025-06-07","cited_by_count":0,"area":"deeprl"},{"id":"2507.06258","title":"Spattack: Subgroup Poisoning Attacks on Federated Recommender Systems","created":"2025-07-07","cited_by_count":0,"area":null},{"id":"2509.11974","title":"Poison to Detect: Detection of Targeted Overfitting in Federated Learning","created":"2025-09-15","cited_by_count":0,"area":null},{"id":"2512.02852","title":"Adaptive Decentralized Federated Learning for Robust Optimization","created":"2025-12-02","cited_by_count":0,"area":null},{"id":"2604.22170","title":"Sharpness-Aware Poisoning: Enhancing Transferability of Injective Attacks on Recommender Systems","created":"2026-04-24","cited_by_count":0,"area":null},{"id":"2606.29064","title":"Fairness Attacks on Recommender Systems","created":"2026-06-27","cited_by_count":0,"area":null},{"id":"2609.09551","title":"An Efficient and Effective Agentic Group Shilling Attack on Recommender Systems","created":"2026-09-09","cited_by_count":0,"area":"agents"},{"id":"2610.14487","title":"AlignPoison: Conditional Targeted Poisoning of Generative Recommenders via Decoding-Aligned Prefixes","created":"2026-10-10","cited_by_count":0,"area":null}],"next_cursor":null}