{"total":103,"rows":[{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2108.13888","title":"Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning","created":"2021-08-31","cited_by_count":113,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98,"area":null},{"id":"2105.10123","title":"Backdoor Attacks on Self-Supervised Learning","created":"2021-05-21","cited_by_count":90,"area":null},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2104.02361","title":"Backdoor Attack in the Physical World","created":"2021-04-06","cited_by_count":84,"area":null},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73,"area":null},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57,"area":null},{"id":"2310.16608","title":"Performative Prediction: Past and Future","created":"2023-10-25","cited_by_count":53,"area":null},{"id":"2101.06896","title":"DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injection","created":"2021-01-18","cited_by_count":44,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2101.02559","title":"Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead","created":"2021-01-04","cited_by_count":41,"area":null},{"id":"2205.13616","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","created":"2022-05-26","cited_by_count":40,"area":null},{"id":"2103.16074","title":"PointBA: Towards Backdoor Attacks in 3D Point Cloud","created":"2021-03-30","cited_by_count":35,"area":null},{"id":"2201.13178","title":"Few-Shot Backdoor Attacks on Visual Object Tracking","created":"2022-01-31","cited_by_count":35,"area":null},{"id":"2106.06469","title":"Topological Detection of Trojaned Neural Networks","created":"2021-06-11","cited_by_count":34,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2210.09194","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","created":"2022-10-17","cited_by_count":33,"area":null},{"id":"2211.05638","title":"Untargeted Backdoor Attack against Object Detection","created":"2022-11-02","cited_by_count":28,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2212.09360","title":"AI Security for Geoscience and Remote Sensing: Challenges and Future Trends","created":"2022-12-19","cited_by_count":23,"area":null},{"id":"2502.18508","title":"REFINE: Inversion-Free Backdoor Defense via Model Reprogramming","created":"2025-02-22","cited_by_count":22,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2304.01482","title":"Defending Against Patch-based Backdoor Attacks on Self-Supervised Learning","created":"2023-04-04","cited_by_count":20,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2211.10530","title":"Provable Defense against Backdoor Policies in Reinforcement Learning","created":"2022-11-18","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2302.12758","title":"Defending Against Backdoor Attacks by Layer-wise Feature Analysis","created":"2023-02-24","cited_by_count":16,"area":null},{"id":"2111.05077","title":"Enhancing Backdoor Attacks with Multi-Level MMD Regularization","created":"2021-11-09","cited_by_count":15,"area":null},{"id":"2301.06241","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","created":"2023-01-16","cited_by_count":15,"area":null},{"id":"2302.13851","title":"Implicit Poisoning Attacks in Two-Agent Reinforcement Learning: Adversarial Policies for Training-Time Attacks","created":"2023-02-27","cited_by_count":14,"area":null},{"id":"2103.10274","title":"TOP: Backdoor Detection in Neural Networks via Transferability of Perturbation","created":"2021-03-18","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2412.07277","title":"Backdoor Attacks against No-Reference Image Quality Assessment Models via a Scalable Trigger","created":"2024-12-10","cited_by_count":12,"area":null},{"id":"2202.06312","title":"Progressive Backdoor Erasing via connecting Backdoor and Adversarial Attacks","created":"2022-02-13","cited_by_count":11,"area":null},{"id":"2204.06273","title":"Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures","created":"2022-04-13","cited_by_count":11,"area":null},{"id":"2211.01806","title":"BATT: Backdoor Attack with Transformation-based Triggers","created":"2022-11-02","cited_by_count":11,"area":null},{"id":"2412.01646","title":"Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior","created":"2024-12-02","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2206.01102","title":"A temporal chrominance trigger for clean-label backdoor attack against anti-spoof rebroadcast detection","created":"2022-06-02","cited_by_count":10,"area":null},{"id":"2405.17929","title":"Towards Unified Robustness Against Both Backdoor and Adversarial Attacks","created":"2024-05-28","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2310.08565","title":"Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities","created":"2023-10-12","cited_by_count":9,"area":null},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2302.02023","title":"TextShield: Beyond Successfully Detecting Adversarial Sentences in Text Classification","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8,"area":null},{"id":"2504.13938","title":"Never Start from Scratch: Expediting On-Device LLM Personalization via Explainable Model Selection","created":"2025-04-15","cited_by_count":8,"area":null},{"id":"2202.12154","title":"Towards Effective and Robust Neural Trojan Defenses via Input Filtering","created":"2022-02-24","cited_by_count":7,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2312.04902","title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","created":"2023-12-08","cited_by_count":7,"area":null},{"id":"2105.14259","title":"Detecting Backdoor in Deep Neural Networks via Intentional Adversarial Perturbations","created":"2021-05-29","cited_by_count":6,"area":null},{"id":"2401.15883","title":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability","created":"2024-01-29","cited_by_count":6,"area":null},{"id":"2403.18136","title":"Identifying Backdoored Graphs in Graph Neural Network Training: An Explanation-Based Approach with Novel Metrics","created":"2024-03-26","cited_by_count":6,"area":null},{"id":"2510.08094","title":"DarkHash: A Data-Free Backdoor Attack Against Deep Hashing","created":"2025-10-09","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2303.12054","title":"Influencer Backdoor Attack on Semantic Segmentation","created":"2023-03-21","cited_by_count":5,"area":null},{"id":"2503.04963","title":"Energy-Latency Attacks: A New Adversarial Threat to Deep Learning","created":"2025-03-06","cited_by_count":5,"area":null},{"id":"2101.04319","title":"DeepiSign: Invisible Fragile Watermark to Protect the Integrityand Authenticity of CNN","created":"2021-01-12","cited_by_count":4,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2207.02337","title":"Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanisms","created":"2022-07-05","cited_by_count":4,"area":null},{"id":"2208.10608","title":"RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN","created":"2022-08-22","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2203.15506","title":"Trojan Horse Training for Breaking Defenses against Backdoor Attacks in Deep Learning","created":"2022-03-25","cited_by_count":3,"area":null},{"id":"2304.10985","title":"INK: Inheritable Natural Backdoor Attack Against Model Distillation","created":"2023-04-21","cited_by_count":3,"area":null},{"id":"2407.10052","title":"Augmented Neural Fine-Tuning for Efficient Backdoor Purification","created":"2024-07-14","cited_by_count":3,"area":null},{"id":"2503.05794","title":"CBW: Towards Dataset Ownership Verification for Speaker Verification via Clustering-based Backdoor Watermarking","created":"2025-03-02","cited_by_count":3,"area":null},{"id":"2302.00747","title":"Universal Soldier: Using Universal Adversarial Perturbations for Detecting Backdoor Attacks","created":"2023-02-01","cited_by_count":2,"area":null},{"id":"2309.07428","title":"Physical Invisible Backdoor Based on Camera Imaging","created":"2023-09-14","cited_by_count":2,"area":null},{"id":"2312.10508","title":"TrojFair: Trojan Fairness Attacks","created":"2023-12-16","cited_by_count":2,"area":null},{"id":"2402.16926","title":"On the (In)feasibility of ML Backdoor Detection as an Hypothesis Testing Problem","created":"2024-02-26","cited_by_count":2,"area":null},{"id":"2409.00863","title":"Fisher Information guided Purification against Backdoor Attacks","created":"2024-09-01","cited_by_count":2,"area":null},{"id":"2503.12058","title":"Revisiting Training-Inference Trigger Intensity in Backdoor Attacks","created":"2025-03-15","cited_by_count":2,"area":null},{"id":"2510.26420","title":"SSCL-BW: Sample-Specific Clean-Label Backdoor Watermarking for Dataset Ownership Verification","created":"2025-10-30","cited_by_count":2,"area":null},{"id":"2205.13613","title":"Circumventing Backdoor Defenses That Are Based on Latent Separability","created":"2022-05-26","cited_by_count":1,"area":null},{"id":"2207.03895","title":"Defense Against Multi-target Trojan Attacks","created":"2022-07-08","cited_by_count":1,"area":null},{"id":"2306.17441","title":"Efficient Backdoor Removal Through Natural Gradient Fine-tuning","created":"2023-06-30","cited_by_count":1,"area":null},{"id":"2308.16684","title":"Everyone Can Attack: Repurpose Lossy Compression as a Natural Backdoor Attack","created":"2023-08-31","cited_by_count":1,"area":null},{"id":"2407.07662","title":"Mitigating Backdoor Attacks using Activation-Guided Model Editing","created":"2024-07-10","cited_by_count":1,"area":null},{"id":"2409.02251","title":"NoiseAttack: An Evasive Sample-Specific Multi-Targeted Backdoor Attack Through White Gaussian Noise","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2502.18547","title":"Steganography Beyond Space-Time with Chain of Multimodal AI","created":"2025-02-25","cited_by_count":1,"area":null},{"id":"2504.00170","title":"Backdoor Detection through Replicated Execution of Outsourced Training","created":"2025-03-31","cited_by_count":1,"area":null},{"id":"2505.12019","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","created":"2025-05-17","cited_by_count":1,"area":null},{"id":"2506.19533","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","created":"2025-06-24","cited_by_count":1,"area":null},{"id":"2107.01707","title":"Towards Scheduling Federated Deep Learning using Meta-Gradients for Inter-Hospital Learning","created":"2021-07-04","cited_by_count":0,"area":null},{"id":"2202.06250","title":"Privacy protection based on mask template","created":"2022-02-13","cited_by_count":0,"area":null},{"id":"2206.04793","title":"Securing AI-based Healthcare Systems using Blockchain Technology: A State-of-the-Art Systematic Literature Review and Future Research Directions","created":"2022-05-30","cited_by_count":0,"area":null},{"id":"2207.05937","title":"Game of Trojans: A Submodular Byzantine Approach","created":"2022-07-13","cited_by_count":0,"area":null},{"id":"2310.18987","title":"Path Analysis for Effective Fault Localization in Deep Neural Networks","created":"2023-10-29","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2401.15002","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-01-26","cited_by_count":0,"area":null},{"id":"2403.02950","title":"A general approach to enhance the survivability of backdoor attacks by decision path coupling","created":"2024-03-05","cited_by_count":0,"area":null},{"id":"2405.18671","title":"Watermarking Counterfactual Explanations","created":"2024-05-29","cited_by_count":0,"area":null},{"id":"2406.13073","title":"Let the Noise Speak: Harnessing Noise for a Unified Defense Against Adversarial and Backdoor Attacks","created":"2024-06-18","cited_by_count":0,"area":null},{"id":"2408.08920","title":"A Survey of Trojan Attacks and Defenses to Deep Neural Networks","created":"2024-08-15","cited_by_count":0,"area":null}],"next_cursor":"100"}