{"total":83,"rows":[{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2308.07061","title":"Machine Unlearning: Solutions and Challenges","created":"2023-08-14","cited_by_count":93,"area":"safety"},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2110.12925","title":"CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoning","created":"2021-10-25","cited_by_count":47,"area":"safety"},{"id":"2101.02644","title":"Data Poisoning Attacks to Deep Learning Based Recommender Systems","created":"2021-01-07","cited_by_count":43,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2406.17216","title":"Machine Unlearning Fails to Remove Data Poisoning Attacks","created":"2024-06-25","cited_by_count":37,"area":"safety"},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33,"area":"safety"},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2406.16257","title":"Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning","created":"2024-06-24","cited_by_count":27,"area":"safety"},{"id":"2604.09378","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","created":"2026-04-10","cited_by_count":27,"area":"safety"},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2204.05986","title":"Machine Learning Security against Data Poisoning: Are We There Yet?","created":"2022-04-12","cited_by_count":23,"area":"safety"},{"id":"2102.00655","title":"Curse or Redemption? How Data Heterogeneity Affects the Robustness of Federated Learning","created":"2021-02-01","cited_by_count":21,"area":"safety"},{"id":"2107.05243","title":"Putting words into the system's mouth: A targeted attack on neural machine translation using monolingual data poisoning","created":"2021-07-12","cited_by_count":21,"area":"safety"},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2203.04160","title":"Robustly-reliable learners under poisoning attacks","created":"2022-03-08","cited_by_count":20,"area":"safety"},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18,"area":"safety"},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2210.02713","title":"On Optimal Learning Under Targeted Data Poisoning","created":"2022-10-06","cited_by_count":14,"area":"safety"},{"id":"2402.09225","title":"Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics","created":"2024-02-14","cited_by_count":13,"area":"safety"},{"id":"2208.03309","title":"Lethal Dose Conjecture on Data Poisoning","created":"2022-08-05","cited_by_count":12,"area":"safety"},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2403.08618","title":"SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise Robustness","created":"2024-03-13","cited_by_count":10,"area":"safety"},{"id":"2408.08143","title":"Unlearnable Examples Detection via Iterative Filtering","created":"2024-08-15","cited_by_count":9,"area":"safety"},{"id":"2502.19567","title":"Atlas: A Framework for ML Lifecycle Provenance & Transparency","created":"2025-02-26","cited_by_count":8,"area":"safety"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2404.04714","title":"Data Poisoning Attacks on Off-Policy Policy Evaluation Methods","created":"2024-04-06","cited_by_count":4,"area":"safety"},{"id":"2602.16944","title":"Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming","created":"2026-02-18","cited_by_count":4,"area":"safety"},{"id":"2306.01613","title":"Hyperparameter Learning under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization","created":"2023-06-02","cited_by_count":3,"area":"safety"},{"id":"2312.11500","title":"A Red Teaming Framework for Securing AI in Maritime Autonomous Systems","created":"2023-12-08","cited_by_count":3,"area":"safety"},{"id":"2402.08290","title":"The Effect of Data Poisoning on Counterfactual Explanations","created":"2024-02-13","cited_by_count":3,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2502.16737","title":"Keeping up with dynamic attackers: Certifying robustness to adaptive online data poisoning","created":"2025-02-23","cited_by_count":3,"area":"safety"},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2104.13230","title":"Influence Based Defense Against Data Poisoning Attacks in Online Learning","created":"2021-04-24","cited_by_count":2,"area":"safety"},{"id":"2205.03894","title":"VPN: Verification of Poisoning in Neural Networks","created":"2022-05-08","cited_by_count":2,"area":"safety"},{"id":"2209.04547","title":"Defend Data Poisoning Attacks on Voice Authentication","created":"2022-09-09","cited_by_count":2,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2410.21453","title":"Inverting Gradient Attacks Makes Powerful Data Poisoning","created":"2024-10-28","cited_by_count":2,"area":"safety"},{"id":"2411.14412","title":"Adversarial Data Poisoning Attacks on Quantum Machine Learning in the NISQ Era","created":"2024-11-21","cited_by_count":2,"area":"safety"},{"id":"2502.18518","title":"Swallowing the Poison Pills: Insights from Vulnerability Disparity Among LLMs","created":"2025-02-23","cited_by_count":2,"area":"safety"},{"id":"2505.15175","title":"A Linear Approach to Data Poisoning","created":"2025-05-21","cited_by_count":2,"area":"safety"},{"id":"2601.21564","title":"Representation Unlearning: Forgetting through Information Compression","created":"2026-01-29","cited_by_count":2,"area":"safety"},{"id":"2602.03040","title":"DF-LoGiT: Data-Free Logic-Gated Backdoor Attacks in Vision Transformers","created":"2026-02-03","cited_by_count":2,"area":"safety"},{"id":"2108.04206","title":"Classification Auto-Encoder based Detector against Diverse Data Poisoning Attacks","created":"2021-08-09","cited_by_count":1,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2305.15394","title":"Differentially-Private Decision Trees and Provable Robustness to Data Poisoning","created":"2023-05-24","cited_by_count":1,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2307.08288","title":"Systematic Testing of the Data-Poisoning Robustness of KNN","created":"2023-07-17","cited_by_count":1,"area":"safety"},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2405.16707","title":"Visualizing the Shadows: Unveiling Data Poisoning Behaviors in Federated Learning","created":"2024-05-26","cited_by_count":1,"area":"safety"},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2507.01752","title":"Tuning without Peeking: Provable Generalization Bounds and Robust LLM Post-Training","created":"2025-07-02","cited_by_count":1,"area":"safety"},{"id":"2104.08020","title":"FedCom: A Byzantine-Robust Local Model Aggregation Rule Using Data Commitment for Federated Learning","created":"2021-04-16","cited_by_count":0,"area":"safety"},{"id":"2105.13530","title":"A BIC-based Mixture Model Defense against Data Poisoning Attacks on Classifiers","created":"2021-05-28","cited_by_count":0,"area":"safety"},{"id":"2202.01179","title":"AntidoteRT: Run-time Detection and Correction of Poison Attacks on Neural Networks","created":"2022-01-31","cited_by_count":0,"area":"safety"},{"id":"2209.06397","title":"Federated Learning based on Defending Against Data Poisoning Attacks in IoT","created":"2022-09-14","cited_by_count":0,"area":"safety"},{"id":"2302.09420","title":"RobustNLP: A Technique to Defend NLP Models Against Backdoor Attacks","created":"2023-02-18","cited_by_count":0,"area":"safety"},{"id":"2309.13579","title":"Seeing Is Not Always Believing: Invisible Collision Attack and Defence on Pre-Trained Models","created":"2023-09-24","cited_by_count":0,"area":"safety"},{"id":"2403.07611","title":"Efficient Knowledge Deletion from Trained Models through Layer-wise Partial Machine Unlearning","created":"2024-03-12","cited_by_count":0,"area":"safety"},{"id":"2403.10313","title":"Interactive Trimming against Evasive Online Data Manipulation Attacks: A Game-Theoretic Approach","created":"2024-03-15","cited_by_count":0,"area":"safety"},{"id":"2405.06073","title":"Hard Work Does Not Always Pay Off: Poisoning Attacks on Neural Architecture Search","created":"2024-05-09","cited_by_count":0,"area":"safety"},{"id":"2405.19376","title":"PureEBM: Universal Poison Purification via Mid-Run Dynamics of Energy-Based Models","created":"2024-05-28","cited_by_count":0,"area":"safety"},{"id":"2503.21236","title":"Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashing","created":"2025-03-27","cited_by_count":0,"area":"safety"},{"id":"2507.11092","title":"MT4DP: Data Poisoning Attack Detection for DL-based Code Search Models via Metamorphic Testing","created":"2025-07-15","cited_by_count":0,"area":"safety"},{"id":"2508.02312","title":"Data Security in Large Language Models: Risks, Defense, and Directions","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2511.18660","title":"Subtract the Corruption: Training-Data-Free Corrective Machine Unlearning using Task Arithmetic","created":"2025-11-24","cited_by_count":0,"area":"safety"},{"id":"2601.01289","title":"dataRLsec: Safety, Security, and Reliability With Robust Offline Reinforcement Learning for DPAs","created":"2026-01-03","cited_by_count":0,"area":"safety"},{"id":"2602.17088","title":"MeGU: Machine-Guided Unlearning with Target Feature Disentanglement","created":"2026-02-19","cited_by_count":0,"area":"safety"},{"id":"2604.12232","title":"TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2604.12548","title":"DeepSeek Robustness Against Semantic-Character Dual-Space Mutated Prompt Injection","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2610.01788","title":"SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples","created":"2026-10-01","cited_by_count":0,"area":"safety"}],"next_cursor":null}