{"total":73,"rows":[{"id":"2110.01167","title":"Trustworthy AI: From Principles to Practices","created":"2021-10-04","cited_by_count":207,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2110.14222","title":"Sample Selection for Fair and Robust Training","created":"2021-10-27","cited_by_count":48,"area":null},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2110.04363","title":"Certifying Robustness to Programmable Data Bias in Decision Trees","created":"2021-10-08","cited_by_count":21,"area":null},{"id":"2302.02300","title":"Run-Off Election: Improved Provable Defense against Data Poisoning Attacks","created":"2023-02-05","cited_by_count":17,"area":"safety"},{"id":"2304.10655","title":"The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictions","created":"2023-04-20","cited_by_count":17,"area":null},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2305.18377","title":"BadLabel: A Robust Perspective on Evaluating and Enhancing Label-noise Learning","created":"2023-05-28","cited_by_count":16,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2101.12031","title":"Robust Android Malware Detection System against Adversarial Attacks using Q-Learning","created":"2021-01-27","cited_by_count":12,"area":null},{"id":"2305.19607","title":"Adversarial Clean Label Backdoor Attacks and Defenses on Text Classification Systems","created":"2023-05-31","cited_by_count":11,"area":"safety"},{"id":"2208.08433","title":"Label Flipping Data Poisoning Attack Against Wearable Human Activity Recognition System","created":"2022-08-17","cited_by_count":10,"area":null},{"id":"2505.09768","title":"Self-Consuming Generative Models with Adversarially Curated Data","created":"2025-05-14","cited_by_count":10,"area":null},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2310.06372","title":"Leveraging Diffusion-Based Image Variations for Robust Training on Poisoned Data","created":"2023-10-10","cited_by_count":6,"area":"diffusion"},{"id":"2403.02983","title":"Federated Learning Under Attack: Exposing Vulnerabilities through Data Poisoning Attacks in Computer Networks","created":"2024-03-05","cited_by_count":6,"area":"safety"},{"id":"2405.17938","title":"RC-Mixup: A Data Augmentation Strategy against Noisy Data for Regression Tasks","created":"2024-05-28","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2202.02510","title":"A Survey on Poisoning Attacks Against Supervised Machine Learning","created":"2022-02-05","cited_by_count":5,"area":null},{"id":"2503.03039","title":"LLM Misalignment via Adversarial RLHF Platforms","created":"2025-03-04","cited_by_count":5,"area":"alignment"},{"id":"2204.05472","title":"Breaking Fair Binary Classification with Optimal Flipping Attacks","created":"2022-04-12","cited_by_count":4,"area":null},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2404.00076","title":"A Backdoor Approach with Inverted Labels Using Dirty Label-Flipping Attacks","created":"2024-03-29","cited_by_count":4,"area":null},{"id":"2101.00157","title":"Active Learning Under Malicious Mislabeling and Poisoning Attacks","created":"2021-01-01","cited_by_count":3,"area":"safety"},{"id":"2206.03575","title":"Certifying Data-Bias Robustness in Linear Regression","created":"2022-06-07","cited_by_count":3,"area":null},{"id":"2301.06923","title":"Explainable Data Poison Attacks on Human Emotion Evaluation Systems based on EEG Signals","created":"2023-01-17","cited_by_count":3,"area":null},{"id":"2306.01613","title":"Hyperparameter Learning under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization","created":"2023-06-02","cited_by_count":3,"area":"safety"},{"id":"2309.16487","title":"Towards Poisoning Fair Representations","created":"2023-09-28","cited_by_count":3,"area":"safety"},{"id":"2310.10744","title":"Fast Adversarial Label-Flipping Attack on Tabular Data","created":"2023-10-16","cited_by_count":3,"area":null},{"id":"2402.08290","title":"The Effect of Data Poisoning on Counterfactual Explanations","created":"2024-02-13","cited_by_count":3,"area":"safety"},{"id":"2101.05967","title":"Responsible AI Challenges in End-to-end Machine Learning","created":"2021-01-15","cited_by_count":2,"area":null},{"id":"2104.13230","title":"Influence Based Defense Against Data Poisoning Attacks in Online Learning","created":"2021-04-24","cited_by_count":2,"area":"safety"},{"id":"2209.04547","title":"Defend Data Poisoning Attacks on Voice Authentication","created":"2022-09-09","cited_by_count":2,"area":"safety"},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2411.14412","title":"Adversarial Data Poisoning Attacks on Quantum Machine Learning in the NISQ Era","created":"2024-11-21","cited_by_count":2,"area":"safety"},{"id":"2503.09302","title":"Detecting and Preventing Data Poisoning Attacks on AI Models","created":"2025-03-12","cited_by_count":2,"area":"safety"},{"id":"2108.04206","title":"Classification Auto-Encoder based Detector against Diverse Data Poisoning Attacks","created":"2021-08-09","cited_by_count":1,"area":"safety"},{"id":"2312.14461","title":"Attacking Byzantine Robust Aggregation in High Dimensions","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2403.02995","title":"Mitigating Label Flipping Attacks in Malicious URL Detectors Using Ensemble Trees","created":"2024-03-05","cited_by_count":1,"area":"safety"},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2104.06744","title":"Defending Against Adversarial Denial-of-Service Data Poisoning Attacks","created":"2021-04-14","cited_by_count":0,"area":"safety"},{"id":"2105.13530","title":"A BIC-based Mixture Model Defense against Data Poisoning Attacks on Classifiers","created":"2021-05-28","cited_by_count":0,"area":"safety"},{"id":"2105.14803","title":"Gradient-based Data Subversion Attack Against Binary Classifiers","created":"2021-05-31","cited_by_count":0,"area":null},{"id":"2306.03726","title":"Exploring Model Dynamics for Accumulative Poisoning Discovery","created":"2023-06-06","cited_by_count":0,"area":null},{"id":"2306.12377","title":"Geometric Algorithms for $k$-NN Poisoning","created":"2023-06-21","cited_by_count":0,"area":null},{"id":"2310.16224","title":"Poison is Not Traceless: Fully-Agnostic Detection of Poisoning Attacks","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2405.18549","title":"Learning from Uncertain Data: From Possible Worlds to Possible Models","created":"2024-05-28","cited_by_count":0,"area":null},{"id":"2407.07133","title":"Neuromimetic metaplasticity for adaptive continual learning","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2410.00862","title":"Timber! Poisoning Decision Trees","created":"2024-10-01","cited_by_count":0,"area":null},{"id":"2501.12516","title":"Robustness of Selected Learning Models under Label-Flipping Attack","created":"2025-01-21","cited_by_count":0,"area":null},{"id":"2502.16901","title":"Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMs","created":"2025-02-24","cited_by_count":0,"area":"safety"},{"id":"2503.00140","title":"Approaching the Harm of Gradient Attacks While Only Flipping Labels","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2510.22274","title":"SecureLearn -- An Attack-agnostic Defense for Multiclass Machine Learning Against Data Poisoning Attacks","created":"2025-10-25","cited_by_count":0,"area":"safety"},{"id":"2511.02894","title":"Adaptive and Robust Data Poisoning Detection and Sanitization in Wearable IoT Systems using Large Language Models","created":"2025-11-04","cited_by_count":0,"area":"safety"},{"id":"2511.12722","title":"On Robustness of Linear Classifiers to Targeted Data Poisoning","created":"2025-11-16","cited_by_count":0,"area":"safety"},{"id":"2512.10637","title":"Adaptive Intrusion Detection System Leveraging Dynamic Neural Models with Adversarial Learning for 5G/6G Networks","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2601.02682","title":"Topology-Independent Robustness of the Weighted Mean under Label Poisoning Attacks in Heterogeneous Decentralized Learning","created":"2026-01-06","cited_by_count":0,"area":null},{"id":"2601.03805","title":"Detecting Semantic Backdoors in a Mystery Shopping Scenario","created":"2026-01-07","cited_by_count":0,"area":null},{"id":"2604.11416","title":"Exact Certification of Neural Networks and Partition Aggregation Ensembles against Label Poisoning","created":"2026-04-13","cited_by_count":0,"area":null},{"id":"2605.15885","title":"FedEDAuth -- Federated Embedding Distribution Authentication for Counterfeit IC Detection","created":"2026-05-15","cited_by_count":0,"area":"safety"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"},{"id":"2610.13051","title":"Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}