{"total":81,"rows":[{"id":"2302.04222","title":"Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models","created":"2023-02-08","cited_by_count":205,"area":"diffusion"},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2407.20859","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","created":"2024-07-30","cited_by_count":81,"area":"agents"},{"id":"2106.06916","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","created":"2021-06-13","cited_by_count":52,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2106.06469","title":"Topological Detection of Trojaned Neural Networks","created":"2021-06-11","cited_by_count":34,"area":null},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2201.02873","title":"LoMar: A Local Defense Against Poisoning Attack on Federated Learning","created":"2022-01-08","cited_by_count":31,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2203.04160","title":"Robustly-reliable learners under poisoning attacks","created":"2022-03-08","cited_by_count":20,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2510.25025","title":"Secure Retrieval-Augmented Generation against Poisoning Attacks","created":"2025-10-28","cited_by_count":19,"area":"rag"},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2103.00671","title":"Robust learning under clean-label attack","created":"2021-03-01","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2309.01866","title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting","created":"2023-09-05","cited_by_count":10,"area":null},{"id":"2110.04488","title":"Demystifying the Transferability of Adversarial Attacks in Computer Networks","created":"2021-10-09","cited_by_count":9,"area":null},{"id":"2301.09732","title":"Backdoor Attacks in Peer-to-Peer Federated Learning","created":"2023-01-23","cited_by_count":9,"area":null},{"id":"2109.07028","title":"Avengers Ensemble! Improving Transferability of Authorship Obfuscation","created":"2021-09-15","cited_by_count":8,"area":null},{"id":"2109.11125","title":"Adversarial Transfer Attacks With Unknown Data and Class Overlap","created":"2021-09-23","cited_by_count":8,"area":null},{"id":"2111.10085","title":"Mate! Are You Really Aware? An Explainability-Guided Testing Framework for Robustness of Malware Detectors","created":"2021-11-19","cited_by_count":7,"area":null},{"id":"2509.11173","title":"Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers","created":"2025-09-14","cited_by_count":7,"area":null},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2402.05541","title":"FedAA: A Reinforcement Learning Perspective on Adaptive Aggregation for Fair and Robust Federated Learning","created":"2024-02-08","cited_by_count":6,"area":"deeprl"},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2110.14814","title":"Ensemble Federated Adversarial Training with Non-IID data","created":"2021-10-26","cited_by_count":5,"area":null},{"id":"2202.02510","title":"A Survey on Poisoning Attacks Against Supervised Machine Learning","created":"2022-02-05","cited_by_count":5,"area":null},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2302.11328","title":"PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks","created":"2023-02-22","cited_by_count":5,"area":null},{"id":"2306.15363","title":"Your Attack Is Too DUMB: Formalizing Attacker Scenarios for Adversarial Transferability","created":"2023-06-27","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2410.10572","title":"Regularized Robustly Reliable Learners and Instance Targeted Attacks","created":"2024-10-14","cited_by_count":5,"area":"safety"},{"id":"2207.08486","title":"Using Anomaly Detection to Detect Poisoning Attacks in Federated Learning Applications","created":"2022-07-18","cited_by_count":4,"area":null},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2202.07568","title":"StratDef: Strategic Defense Against Adversarial Attacks in ML-based Malware Detection","created":"2022-02-15","cited_by_count":3,"area":null},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3,"area":null},{"id":"2311.09428","title":"Beyond Detection: Unveiling Fairness Vulnerabilities in Abusive Language Models","created":"2023-11-15","cited_by_count":3,"area":null},{"id":"2312.06423","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","created":"2023-12-11","cited_by_count":3,"area":null},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2102.11502","title":"Oriole: Thwarting Privacy against Trustworthy Deep Learning Models","created":"2021-02-23","cited_by_count":2,"area":null},{"id":"2205.03894","title":"VPN: Verification of Poisoning in Neural Networks","created":"2022-05-08","cited_by_count":2,"area":"safety"},{"id":"2211.03489","title":"Resilience of Wireless Ad Hoc Federated Learning against Model Poisoning Attacks","created":"2022-11-07","cited_by_count":2,"area":null},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2409.07415","title":"SoK: Security and Privacy Risks of Healthcare AI","created":"2024-09-11","cited_by_count":2,"area":null},{"id":"2202.02902","title":"Redactor: A Data-centric and Individualized Defense Against Inference Attacks","created":"2022-02-07","cited_by_count":1,"area":null},{"id":"2209.08412","title":"Characterizing Internal Evasion Attacks in Federated Learning","created":"2022-09-17","cited_by_count":1,"area":null},{"id":"2306.03600","title":"Avoid Adversarial Adaption in Federated Learning by Multi-Metric Investigations","created":"2023-06-06","cited_by_count":1,"area":"safety"},{"id":"2307.08288","title":"Systematic Testing of the Data-Poisoning Robustness of KNN","created":"2023-07-17","cited_by_count":1,"area":"safety"},{"id":"2402.13700","title":"On the Conflict of Robustness and Learning in Collaborative Machine Learning","created":"2024-02-21","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2404.12778","title":"Defending against Data Poisoning Attacks in Federated Learning via User Elimination","created":"2024-04-19","cited_by_count":1,"area":"safety"},{"id":"2502.07011","title":"DROP: Poison Dilution via Knowledge Distillation for Federated Learning","created":"2025-02-10","cited_by_count":1,"area":"safety"},{"id":"2505.10903","title":"On the Security Risks of ML-based Malware Detection Systems: A Survey","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2505.12019","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","created":"2025-05-17","cited_by_count":1,"area":null},{"id":"2505.17092","title":"Covert Attacks on Machine Learning Training in Passively Secure MPC","created":"2025-05-21","cited_by_count":1,"area":null},{"id":"2105.01560","title":"Broadly Applicable Targeted Data Sample Omission Attacks","created":"2021-05-04","cited_by_count":0,"area":null},{"id":"2105.14803","title":"Gradient-based Data Subversion Attack Against Binary Classifiers","created":"2021-05-31","cited_by_count":0,"area":null},{"id":"2112.13144","title":"SoK: A Study of the Security on Voice Processing Systems","created":"2021-12-24","cited_by_count":0,"area":null},{"id":"2201.07063","title":"How to Backdoor HyperNetwork in Personalized Federated Learning?","created":"2022-01-18","cited_by_count":0,"area":null},{"id":"2202.06250","title":"Privacy protection based on mask template","created":"2022-02-13","cited_by_count":0,"area":null},{"id":"2203.02121","title":"Adversarial Patterns: Building Robust Android Malware Classifiers","created":"2022-03-04","cited_by_count":0,"area":null},{"id":"2209.06397","title":"Federated Learning based on Defending Against Data Poisoning Attacks in IoT","created":"2022-09-14","cited_by_count":0,"area":"safety"},{"id":"2311.03373","title":"Unscrambling the Rectification of Adversarial Attacks Transferability across Computer Networks","created":"2023-10-26","cited_by_count":0,"area":null},{"id":"2412.10186","title":"MIBP-Cert: Certified Training against Data Perturbations with Mixed-Integer Bilinear Programs","created":"2024-12-13","cited_by_count":0,"area":null},{"id":"2502.02290","title":"FRAUD-RLA: A new reinforcement learning adversarial attack against credit card fraud detection","created":"2025-02-04","cited_by_count":0,"area":null},{"id":"2504.02142","title":"Like Oil and Water: Group Robustness Methods and Poisoning Defenses May Be at Odds","created":"2025-04-02","cited_by_count":0,"area":null},{"id":"2504.12875","title":"A Client-level Assessment of Collaborative Backdoor Poisoning in Non-IID Federated Learning","created":"2025-04-17","cited_by_count":0,"area":null},{"id":"2510.07867","title":"On the Optimality of the Median-of-Means Estimator under Adversarial Contamination","created":"2025-10-09","cited_by_count":0,"area":null},{"id":"2511.12722","title":"On Robustness of Linear Classifiers to Targeted Data Poisoning","created":"2025-11-16","cited_by_count":0,"area":"safety"},{"id":"2511.12827","title":"Efficient Adversarial Malware Defense via Trust-Based Raw Override and Confidence-Adaptive Bit-Depth Reduction","created":"2025-11-16","cited_by_count":0,"area":null},{"id":"2601.22308","title":"Stealthy Poisoning Attacks Bypass Defenses in Regression Settings","created":"2026-01-29","cited_by_count":0,"area":null}],"next_cursor":null}