{"total":197,"rows":[{"id":"2107.06917","title":"A Field Guide to Federated Optimization","created":"2021-07-14","cited_by_count":315,"area":null},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2212.04612","title":"Training Data Influence Analysis and Estimation: A Survey","created":"2022-12-09","cited_by_count":135,"area":null},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130,"area":null},{"id":"2507.14805","title":"Subliminal Learning: Language models transmit behavioral traits via hidden signals in data","created":"2025-07-20","cited_by_count":95,"area":null},{"id":"2101.06570","title":"Membership Inference Attack on Graph Neural Networks","created":"2021-01-17","cited_by_count":81,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2311.16153","title":"Identifying and Mitigating Vulnerabilities in LLM-Integrated Applications","created":"2023-11-07","cited_by_count":54,"area":null},{"id":"2105.01622","title":"Poisoning the Unlabeled Dataset of Semi-Supervised Learning","created":"2021-05-04","cited_by_count":44,"area":null},{"id":"2101.02559","title":"Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead","created":"2021-01-04","cited_by_count":41,"area":null},{"id":"2112.14889","title":"Few-shot Backdoor Defense Using Shapley Estimation","created":"2021-12-30","cited_by_count":41,"area":null},{"id":"2302.14677","title":"Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger","created":"2023-02-28","cited_by_count":40,"area":null},{"id":"2312.01350","title":"Honesty Is the Best Policy: Defining and Mitigating AI Deception","created":"2023-12-03","cited_by_count":40,"area":null},{"id":"2107.12045","title":"How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Review","created":"2021-07-26","cited_by_count":39,"area":null},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2506.00979","title":"Ivy-Fake: A Unified Explainable Framework and Benchmark for Image and Video AIGC Detection","created":"2025-06-01","cited_by_count":34,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2109.05872","title":"Byzantine-robust Federated Learning through Collaborative Malicious Gradient Filtering","created":"2021-09-13","cited_by_count":30,"area":null},{"id":"2112.09745","title":"Interpretable Data-Based Explanations for Fairness Debugging","created":"2021-12-17","cited_by_count":30,"area":null},{"id":"2205.11765","title":"Byzantine-Robust Federated Learning with Optimal Statistical Rates and Privacy Guarantees","created":"2022-05-24","cited_by_count":30,"area":null},{"id":"2210.00584","title":"FLCert: Provably Secure Federated Learning against Poisoning Attacks","created":"2022-10-02","cited_by_count":30,"area":null},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2106.09689","title":"Statistical Query Lower Bounds for List-Decodable Linear Regression","created":"2021-06-17","cited_by_count":25,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2207.02842","title":"When does Bias Transfer in Transfer Learning?","created":"2022-07-06","cited_by_count":23,"area":null},{"id":"2102.05776","title":"Defense Against Reward Poisoning Attacks in Reinforcement Learning","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2106.08537","title":"Clustering Mixture Models in Almost-Linear Time via List-Decodable Mean Estimation","created":"2021-06-16","cited_by_count":21,"area":null},{"id":"2107.07240","title":"Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting","created":"2021-07-15","cited_by_count":21,"area":null},{"id":"2110.04363","title":"Certifying Robustness to Programmable Data Bias in Decision Trees","created":"2021-10-08","cited_by_count":21,"area":null},{"id":"2204.12399","title":"Streaming Algorithms for High-Dimensional Robust Statistics","created":"2022-04-26","cited_by_count":21,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2201.12686","title":"Rank List Sensitivity of Recommender Systems to Interaction Perturbations","created":"2022-01-29","cited_by_count":20,"area":null},{"id":"2309.17310","title":"Leave-one-out Distinguishability in Machine Learning","created":"2023-09-29","cited_by_count":20,"area":null},{"id":"2110.08932","title":"Poisoning Attacks on Fair Machine Learning","created":"2021-10-17","cited_by_count":19,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2102.06004","title":"Fairness-Aware PAC Learning from Corrupted Data","created":"2021-02-11","cited_by_count":18,"area":null},{"id":"2106.09082","title":"Zeroth-Order Methods for Convex-Concave Minmax Problems: Applications to Decision-Dependent Risk Minimization","created":"2021-06-16","cited_by_count":18,"area":null},{"id":"2310.14848","title":"Zero-Knowledge Proof-based Verifiable Decentralized Machine Learning in Communication Network: A Comprehensive Survey","created":"2023-10-23","cited_by_count":18,"area":null},{"id":"2304.10655","title":"The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictions","created":"2023-04-20","cited_by_count":17,"area":null},{"id":"2306.14306","title":"Adaptive Sharpness-Aware Pruning for Robust Sparse Networks","created":"2023-06-25","cited_by_count":17,"area":null},{"id":"2205.00359","title":"Adapting and Evaluating Influence-Estimation Methods for Gradient-Boosted Decision Trees","created":"2022-04-30","cited_by_count":16,"area":null},{"id":"2207.01982","title":"Defending against the Label-flipping Attack in Federated Learning","created":"2022-07-05","cited_by_count":16,"area":null},{"id":"2103.00671","title":"Robust learning under clean-label attack","created":"2021-03-01","cited_by_count":15,"area":null},{"id":"2207.00872","title":"FL-Defender: Combating Targeted Attacks in Federated Learning","created":"2022-07-02","cited_by_count":15,"area":null},{"id":"2210.05929","title":"Few-shot Backdoor Attacks via Neural Tangent Kernels","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2404.04500","title":"Trustless Audits without Revealing Data or Models","created":"2024-04-06","cited_by_count":15,"area":null},{"id":"2109.11515","title":"Outlier-Robust Sparse Estimation via Non-Convex Optimization","created":"2021-09-23","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2406.04606","title":"Helpful or Harmful Data? Fine-tuning-free Shapley Attribution for Explaining Language Model Predictions","created":"2024-06-07","cited_by_count":14,"area":null},{"id":"2103.15753","title":"Privacy and Trust Redefined in Federated Machine Learning","created":"2021-03-29","cited_by_count":13,"area":null},{"id":"2105.08709","title":"Learning and Certification under Instance-targeted Poisoning","created":"2021-05-18","cited_by_count":13,"area":null},{"id":"2206.05245","title":"List-Decodable Sparse Mean Estimation via Difference-of-Pairs Filtering","created":"2022-06-10","cited_by_count":13,"area":null},{"id":"2212.09006","title":"A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairness","created":"2022-12-18","cited_by_count":13,"area":null},{"id":"2307.10184","title":"A Dual Stealthy Backdoor: From Both Spatial and Frequency Perspectives","created":"2023-07-03","cited_by_count":13,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2208.10967","title":"The Value of Out-of-Distribution Data","created":"2022-08-23","cited_by_count":12,"area":null},{"id":"2411.00489","title":"Human-inspired Perspectives: A Survey on AI Long-term Memory","created":"2024-11-01","cited_by_count":12,"area":null},{"id":"2412.07277","title":"Backdoor Attacks against No-Reference Image Quality Assessment Models via a Scalable Trigger","created":"2024-12-10","cited_by_count":12,"area":null},{"id":"2105.08619","title":"On the Robustness of Domain Constraints","created":"2021-05-18","cited_by_count":11,"area":null},{"id":"2201.09650","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","created":"2022-01-24","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2305.16771","title":"Robust Nonparametric Regression under Poisoning Attack","created":"2023-05-26","cited_by_count":11,"area":null},{"id":"2306.13119","title":"Adversarial Resilience in Sequential Prediction via Abstention","created":"2023-06-22","cited_by_count":11,"area":null},{"id":"2412.01646","title":"Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior","created":"2024-12-02","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2109.04623","title":"ReLU Regression with Massart Noise","created":"2021-09-10","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2207.05641","title":"Backdoor Attacks on Crowd Counting","created":"2022-07-12","cited_by_count":10,"area":null},{"id":"2304.03370","title":"Reliable learning in challenging environments","created":"2023-04-06","cited_by_count":10,"area":null},{"id":"2403.19326","title":"MedBN: Robust Test-Time Adaptation against Malicious Test Samples","created":"2024-03-28","cited_by_count":10,"area":null},{"id":"2411.04376","title":"Game-Theoretic Defenses for Robust Conformal Prediction Against Adversarial Attacks in Medical Imaging","created":"2024-11-07","cited_by_count":10,"area":null},{"id":"2102.01815","title":"TAD: Trigger Approximation based Black-box Trojan Detection for AI","created":"2021-02-03","cited_by_count":9,"area":null},{"id":"2302.01326","title":"Federated Analytics: A survey","created":"2023-02-02","cited_by_count":9,"area":null},{"id":"2302.07832","title":"Deep Anomaly Detection under Labeling Budget Constraints","created":"2023-02-15","cited_by_count":9,"area":null},{"id":"2105.10948","title":"Regularization Can Help Mitigate Poisoning Attacks... with the Right Hyperparameters","created":"2021-05-23","cited_by_count":8,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7,"area":null},{"id":"2308.09318","title":"Towards Attack-tolerant Federated Learning via Critical Parameter Analysis","created":"2023-08-18","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2505.20177","title":"The Power of Iterative Filtering for Supervised Learning with (Heavy) Contamination","created":"2025-05-26","cited_by_count":7,"area":null},{"id":"2102.01979","title":"Key Technology Considerations in Developing and Deploying Machine Learning Models in Clinical Radiology Practice","created":"2021-02-03","cited_by_count":6,"area":null},{"id":"2106.14956","title":"Robust Distributed Optimization With Randomly Corrupted Gradients","created":"2021-06-28","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2301.03553","title":"FedDebug: Systematic Debugging for Federated Learning Applications","created":"2023-01-09","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2104.13794","title":"Finding High-Value Training Data Subset through Differentiable Convex Programming","created":"2021-04-28","cited_by_count":5,"area":null},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2109.10935","title":"Robust Generalization of Quadratic Neural Networks via Function Identification","created":"2021-09-22","cited_by_count":5,"area":null},{"id":"2205.01184","title":"Performance Weighting for Robust Federated Learning Against Corrupted Sources","created":"2022-05-02","cited_by_count":5,"area":null},{"id":"2205.11736","title":"Towards a Defense Against Federated Backdoor Attacks Under Continuous Training","created":"2022-05-24","cited_by_count":5,"area":null},{"id":"2207.07941","title":"MixTailor: Mixed Gradient Aggregation for Robust Learning Against Tailored Attacks","created":"2022-07-16","cited_by_count":5,"area":null},{"id":"2209.14093","title":"Securing Federated Learning against Overwhelming Collusive Attackers","created":"2022-09-28","cited_by_count":5,"area":null},{"id":"2211.00928","title":"Neural Active Learning on Heteroskedastic Distributions","created":"2022-11-02","cited_by_count":5,"area":null}],"next_cursor":"100"}