{"total":125,"rows":[{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2102.09159","title":"Robust and Differentially Private Mean Estimation","created":"2021-02-18","cited_by_count":66,"area":null},{"id":"2205.12173","title":"Byzantine Machine Learning Made Easy by Resilient Averaging of Momentums","created":"2022-05-24","cited_by_count":63,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2106.06630","title":"Corruption-Robust Offline Reinforcement Learning","created":"2021-06-11","cited_by_count":51,"area":"offlinerl"},{"id":"2109.06141","title":"On Tilted Losses in Machine Learning: Theory and Applications","created":"2021-09-13","cited_by_count":43,"area":null},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2402.03502","title":"How Does Unlabeled Data Provably Help Out-of-Distribution Detection?","created":"2024-02-05","cited_by_count":36,"area":null},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33,"area":"safety"},{"id":"2102.05800","title":"Robust Policy Gradient against Strong Data Corruption","created":"2021-02-11","cited_by_count":30,"area":null},{"id":"2205.11765","title":"Byzantine-Robust Federated Learning with Optimal Statistical Rates and Privacy Guarantees","created":"2022-05-24","cited_by_count":30,"area":null},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2106.09689","title":"Statistical Query Lower Bounds for List-Decodable Linear Regression","created":"2021-06-17","cited_by_count":25,"area":null},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2206.03441","title":"Robust Sparse Mean Estimation via Sum of Squares","created":"2022-06-07","cited_by_count":24,"area":null},{"id":"2301.09508","title":"BayBFed: Bayesian Backdoor Defense for Federated Learning","created":"2023-01-23","cited_by_count":23,"area":null},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23,"area":"safety"},{"id":"2102.05776","title":"Defense Against Reward Poisoning Attacks in Reinforcement Learning","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2106.08537","title":"Clustering Mixture Models in Almost-Linear Time via List-Decodable Mean Estimation","created":"2021-06-16","cited_by_count":21,"area":null},{"id":"2108.09805","title":"Efficient Algorithms for Learning from Coarse Labels","created":"2021-08-22","cited_by_count":21,"area":null},{"id":"2110.04363","title":"Certifying Robustness to Programmable Data Bias in Decision Trees","created":"2021-10-08","cited_by_count":21,"area":null},{"id":"2204.12399","title":"Streaming Algorithms for High-Dimensional Robust Statistics","created":"2022-04-26","cited_by_count":21,"area":null},{"id":"2106.08882","title":"Robust Training in High Dimensions via Block Coordinate Geometric Median Descent","created":"2021-06-16","cited_by_count":20,"area":null},{"id":"2102.06004","title":"Fairness-Aware PAC Learning from Corrupted Data","created":"2021-02-11","cited_by_count":18,"area":null},{"id":"2102.05257","title":"Robust Federated Learning with Attack-Adaptive Aggregation","created":"2021-02-10","cited_by_count":17,"area":"safety"},{"id":"2302.02300","title":"Run-Off Election: Improved Provable Defense against Data Poisoning Attacks","created":"2023-02-05","cited_by_count":17,"area":"safety"},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2106.11938","title":"Robust Regression Revisited: Acceleration and Improved Estimation Rates","created":"2021-06-22","cited_by_count":15,"area":null},{"id":"2102.02171","title":"Outlier-Robust Learning of Ising Models Under Dobrushin's Condition","created":"2021-02-03","cited_by_count":14,"area":null},{"id":"2109.11515","title":"Outlier-Robust Sparse Estimation via Non-Convex Optimization","created":"2021-09-23","cited_by_count":14,"area":null},{"id":"2105.08709","title":"Learning and Certification under Instance-targeted Poisoning","created":"2021-05-18","cited_by_count":13,"area":null},{"id":"2206.00165","title":"Byzantine-Robust Online and Offline Distributed Reinforcement Learning","created":"2022-06-01","cited_by_count":13,"area":null},{"id":"2211.16333","title":"Outlier-Robust Sparse Mean Estimation for Heavy-Tailed Distributions","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2104.09665","title":"Learning GMMs with Nearly Optimal Robustness Guarantees","created":"2021-04-19","cited_by_count":12,"area":null},{"id":"2207.11903","title":"Minimax Rates for Robust Community Detection","created":"2022-07-25","cited_by_count":12,"area":null},{"id":"2208.03309","title":"Lethal Dose Conjecture on Data Poisoning","created":"2022-08-05","cited_by_count":12,"area":"safety"},{"id":"2208.10521","title":"Estimation Contracts for Outlier-Robust Geometric Perception","created":"2022-08-22","cited_by_count":11,"area":null},{"id":"2305.16771","title":"Robust Nonparametric Regression under Poisoning Attack","created":"2023-05-26","cited_by_count":11,"area":null},{"id":"2109.04623","title":"ReLU Regression with Massart Noise","created":"2021-09-10","cited_by_count":10,"area":null},{"id":"2201.12594","title":"Robust Imitation Learning from Corrupted Demonstrations","created":"2022-01-29","cited_by_count":10,"area":"offlinerl"},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2305.02544","title":"Nearly-Linear Time and Streaming Algorithms for Outlier-Robust PCA","created":"2023-05-04","cited_by_count":10,"area":null},{"id":"2410.21194","title":"SoS Certifiability of Subgaussian Distributions and its Algorithmic Applications","created":"2024-10-28","cited_by_count":10,"area":null},{"id":"2411.04376","title":"Game-Theoretic Defenses for Robust Conformal Prediction Against Adversarial Attacks in Medical Imaging","created":"2024-11-07","cited_by_count":10,"area":null},{"id":"2301.13273","title":"Near Optimal Private and Robust Linear Regression","created":"2023-01-30","cited_by_count":9,"area":null},{"id":"2105.10948","title":"Regularization Can Help Mitigate Poisoning Attacks... with the Right Hyperparameters","created":"2021-05-23","cited_by_count":8,"area":null},{"id":"2111.05320","title":"Robust Estimation for Random Graphs","created":"2021-11-09","cited_by_count":8,"area":null},{"id":"2108.11769","title":"Byzantine Fault-Tolerance in Federated Local SGD under 2f-Redundancy","created":"2021-08-26","cited_by_count":7,"area":null},{"id":"2312.01547","title":"Near-Optimal Algorithms for Gaussians with Huber Contamination: Mean Estimation and Linear Regression","created":"2023-12-04","cited_by_count":7,"area":null},{"id":"2505.20177","title":"The Power of Iterative Filtering for Supervised Learning with (Heavy) Contamination","created":"2025-05-26","cited_by_count":7,"area":null},{"id":"2205.14284","title":"Provably Auditing Ordinary Least Squares in Low Dimensions","created":"2022-05-28","cited_by_count":6,"area":null},{"id":"2303.10434","title":"Byzantine-Resilient Federated Learning at Edge","created":"2023-03-18","cited_by_count":6,"area":null},{"id":"2403.09940","title":"Global Convergence Guarantees for Federated Policy Gradient Methods with Adversaries","created":"2024-03-15","cited_by_count":6,"area":"deeprl"},{"id":"2502.14772","title":"Efficient Multivariate Robust Mean Estimation Under Mean-Shift Contamination","created":"2025-02-20","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2211.12743","title":"Efficient List-Decodable Regression using Batches","created":"2022-11-23","cited_by_count":5,"area":null},{"id":"2307.10999","title":"Private Federated Learning with Autotuned Compression","created":"2023-07-20","cited_by_count":5,"area":null},{"id":"2107.01881","title":"Robust Online Convex Optimization in the Presence of Outliers","created":"2021-07-05","cited_by_count":4,"area":null},{"id":"2202.05453","title":"Robust estimation algorithms don't need to know the corruption level","created":"2022-02-11","cited_by_count":4,"area":null},{"id":"2403.07933","title":"Corruption-Robust Offline Two-Player Zero-Sum Markov Games","created":"2024-03-04","cited_by_count":4,"area":null},{"id":"2406.17814","title":"Distribution Learnability and Robustness","created":"2024-06-25","cited_by_count":4,"area":null},{"id":"2102.06735","title":"Learning Deep Neural Networks under Agnostic Corrupted Supervision","created":"2021-02-12","cited_by_count":3,"area":null},{"id":"2201.13372","title":"Robust supervised learning with coordinate gradient descent","created":"2022-01-31","cited_by_count":3,"area":null},{"id":"2202.01269","title":"Robust Estimation for Nonparametric Families via Generative Adversarial Networks","created":"2022-02-02","cited_by_count":3,"area":null},{"id":"2306.01613","title":"Hyperparameter Learning under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization","created":"2023-06-02","cited_by_count":3,"area":"safety"},{"id":"2307.01073","title":"What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?","created":"2023-07-03","cited_by_count":3,"area":null},{"id":"2309.01973","title":"Linear Regression using Heterogeneous Data Batches","created":"2023-09-05","cited_by_count":3,"area":null},{"id":"2310.15932","title":"Online Robust Mean Estimation","created":"2023-10-24","cited_by_count":3,"area":null},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2411.02764","title":"Fast, robust approximate message passing","created":"2024-11-05","cited_by_count":3,"area":null},{"id":"2512.17254","title":"Practical Framework for Privacy-Preserving and Byzantine-robust Federated Learning","created":"2025-12-19","cited_by_count":3,"area":null},{"id":"2104.13230","title":"Influence Based Defense Against Data Poisoning Attacks in Online Learning","created":"2021-04-24","cited_by_count":2,"area":"safety"},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2403.10547","title":"Robust Second-Order Nonconvex Optimization and Its Application to Low Rank Matrix Sensing","created":"2024-03-12","cited_by_count":2,"area":null},{"id":"2405.00491","title":"On the Relevance of Byzantine Robust Optimization Against Data Poisoning","created":"2024-05-01","cited_by_count":2,"area":"safety"},{"id":"2406.17277","title":"Securing Voice Authentication Applications Against Targeted Data Poisoning","created":"2024-06-25","cited_by_count":2,"area":"safety"},{"id":"2410.10623","title":"Robust Gradient Descent for Phase Retrieval","created":"2024-10-14","cited_by_count":2,"area":null},{"id":"2410.18075","title":"ProFL: Performative Robust Optimal Federated Learning","created":"2024-10-23","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2412.02670","title":"The Broader Landscape of Robustness in Algorithmic Statistics","created":"2024-12-03","cited_by_count":2,"area":null},{"id":"2105.05555","title":"Robust Learning of Fixed-Structure Bayesian Networks in Nearly-Linear Time","created":"2021-05-12","cited_by_count":1,"area":null},{"id":"2110.03070","title":"Robust Generalized Method of Moments: A Finite Sample Viewpoint","created":"2021-10-06","cited_by_count":1,"area":null},{"id":"2112.06380","title":"Robust Voting Rules from Algorithmic Robust Statistics","created":"2021-12-13","cited_by_count":1,"area":null},{"id":"2207.08050","title":"Repairing Systematic Outliers by Learning Clean Subspaces in VAEs","created":"2022-07-17","cited_by_count":1,"area":null},{"id":"2209.02856","title":"A spectral least-squares-type method for heavy-tailed corrupted regression with unknown covariance \\& heterogeneous noise","created":"2022-09-06","cited_by_count":1,"area":null},{"id":"2210.09503","title":"Towards Fair Classification against Poisoning Attacks","created":"2022-10-18","cited_by_count":1,"area":null},{"id":"2301.13192","title":"Robust empirical risk minimization via Newton's method","created":"2023-01-30","cited_by_count":1,"area":null},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2306.17441","title":"Efficient Backdoor Removal Through Natural Gradient Fine-tuning","created":"2023-06-30","cited_by_count":1,"area":null},{"id":"2312.14712","title":"Balancing Privacy, Robustness, and Efficiency in Machine Learning","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2506.09640","title":"Evasion Attacks Against Bayesian Predictive Models","created":"2025-06-11","cited_by_count":1,"area":null},{"id":"2507.10718","title":"Distributionally Robust Optimization with Adversarial Data Contamination","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2508.15051","title":"Robust Estimation Under Heterogeneous Corruption Rates","created":"2025-08-20","cited_by_count":1,"area":null},{"id":"2509.05137","title":"On the Learnability of Distribution Classes with Adaptive Adversaries","created":"2025-09-05","cited_by_count":1,"area":null}],"next_cursor":"100"}