{"total":178,"rows":[{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2108.10241","title":"Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning","created":"2021-08-23","cited_by_count":118,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2201.06820","title":"Recommendation Unlearning","created":"2022-01-18","cited_by_count":80,"area":null},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2108.02488","title":"Poison Ink: Robust and Invisible Backdoor Attack","created":"2021-08-05","cited_by_count":50,"area":null},{"id":"2206.10013","title":"Measuring the Effect of Training Data on Deep Learning Predictions via Randomized Experiments","created":"2022-06-20","cited_by_count":50,"area":null},{"id":"2105.01622","title":"Poisoning the Unlabeled Dataset of Semi-Supervised Learning","created":"2021-05-04","cited_by_count":44,"area":null},{"id":"2107.14569","title":"Can You Hear It? Backdoor Attacks via Ultrasonic Triggers","created":"2021-07-30","cited_by_count":44,"area":null},{"id":"2404.15381","title":"Advances and Open Challenges in Federated Foundation Models","created":"2024-04-23","cited_by_count":36,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2201.02873","title":"LoMar: A Local Defense Against Poisoning Attack on Federated Learning","created":"2022-01-08","cited_by_count":31,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2102.00837","title":"Machine learning pipeline for battery state of health estimation","created":"2021-02-01","cited_by_count":29,"area":null},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2308.04604","title":"A Survey on Decentralized Federated Learning","created":"2023-08-08","cited_by_count":27,"area":null},{"id":"2401.17319","title":"Decentralized Federated Learning: A Survey on Security and Privacy","created":"2024-01-25","cited_by_count":25,"area":null},{"id":"2104.13061","title":"Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model's Complexity","created":"2021-04-27","cited_by_count":19,"area":null},{"id":"2105.12049","title":"Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputs","created":"2021-05-25","cited_by_count":18,"area":null},{"id":"2304.09762","title":"Practical Differentially Private and Byzantine-resilient Federated Learning","created":"2023-04-15","cited_by_count":18,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2304.10655","title":"The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictions","created":"2023-04-20","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2207.01982","title":"Defending against the Label-flipping Attack in Federated Learning","created":"2022-07-05","cited_by_count":16,"area":null},{"id":"2205.11819","title":"Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free","created":"2022-05-24","cited_by_count":15,"area":null},{"id":"2207.00872","title":"FL-Defender: Combating Targeted Attacks in Federated Learning","created":"2022-07-02","cited_by_count":15,"area":null},{"id":"2308.05832","title":"FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks","created":"2023-08-10","cited_by_count":15,"area":null},{"id":"2409.01435","title":"Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregation","created":"2024-09-02","cited_by_count":15,"area":null},{"id":"2107.01854","title":"Poisoning Attack against Estimating from Pairwise Comparisons","created":"2021-07-05","cited_by_count":14,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2101.10904","title":"Untargeted Poisoning Attack Detection in Federated Learning via Behavior Attestation","created":"2021-01-24","cited_by_count":13,"area":null},{"id":"2103.15753","title":"Privacy and Trust Redefined in Federated Machine Learning","created":"2021-03-29","cited_by_count":13,"area":null},{"id":"2102.06020","title":"Making Paper Reviewing Robust to Bid Manipulation Attacks","created":"2021-02-09","cited_by_count":12,"area":null},{"id":"2105.13954","title":"A Gradient Method for Multilevel Optimization","created":"2021-05-28","cited_by_count":12,"area":null},{"id":"2205.01423","title":"Autonomy and Intelligence in the Computing Continuum: Challenges, Enablers, and Future Directions for Orchestration","created":"2022-05-03","cited_by_count":12,"area":null},{"id":"2305.07406","title":"Two-in-One: A Model Hijacking Attack Against Text Generation Models","created":"2023-05-12","cited_by_count":12,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2212.04687","title":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","created":"2022-12-09","cited_by_count":11,"area":null},{"id":"2305.16771","title":"Robust Nonparametric Regression under Poisoning Attack","created":"2023-05-26","cited_by_count":11,"area":null},{"id":"2307.07250","title":"Mitigating Adversarial Vulnerability through Causal Parameter Estimation by Adversarial Double Machine Learning","created":"2023-07-14","cited_by_count":11,"area":null},{"id":"2305.03888","title":"Energy-Latency Attacks to On-Device Neural Networks via Sponge Poisoning","created":"2023-05-06","cited_by_count":10,"area":null},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2301.09732","title":"Backdoor Attacks in Peer-to-Peer Federated Learning","created":"2023-01-23","cited_by_count":9,"area":null},{"id":"2303.03908","title":"Client-specific Property Inference against Secure Aggregation in Federated Learning","created":"2023-03-07","cited_by_count":9,"area":null},{"id":"2310.08565","title":"Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities","created":"2023-10-12","cited_by_count":9,"area":null},{"id":"2311.11995","title":"BrainWash: A Poisoning Attack to Forget in Continual Learning","created":"2023-11-20","cited_by_count":9,"area":null},{"id":"2103.03227","title":"Graph Computing for Financial Crime and Fraud Detection: Trends, Challenges and Outlook","created":"2021-03-02","cited_by_count":8,"area":null},{"id":"2106.01425","title":"GAL: Gradient Assisted Learning for Decentralized Multi-Organization Collaborations","created":"2021-06-02","cited_by_count":8,"area":null},{"id":"2207.03933","title":"A law of adversarial risk, interpolation, and label noise","created":"2022-07-08","cited_by_count":8,"area":null},{"id":"2108.00473","title":"Derivative-free Alternating Projection Algorithms for General Nonconvex-Concave Minimax Problems","created":"2021-08-01","cited_by_count":7,"area":null},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7,"area":null},{"id":"2101.11799","title":"Covert Model Poisoning Against Federated Learning: Algorithm Design and Optimization","created":"2021-01-28","cited_by_count":6,"area":null},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2301.03052","title":"AI Maintenance: A Robustness Perspective","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2307.15960","title":"Recommendation Unlearning via Matrix Correction","created":"2023-07-29","cited_by_count":6,"area":null},{"id":"2502.17526","title":"FedSV: Byzantine-Robust Federated Learning via Shapley Value","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2505.04873","title":"Federated Learning for Cyber Physical Systems: A Comprehensive Survey","created":"2025-05-08","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2102.02402","title":"SAFELearning: Enable Backdoor Detectability In Federated Learning With Secure Aggregation","created":"2021-02-04","cited_by_count":5,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2202.02510","title":"A Survey on Poisoning Attacks Against Supervised Machine Learning","created":"2022-02-05","cited_by_count":5,"area":null},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2212.00322","title":"Hijack Vertical Federated Learning Models As One Party","created":"2022-12-01","cited_by_count":5,"area":null},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2301.00912","title":"Distributed Machine Learning for UAV Swarms: Computing, Sensing, and Semantics","created":"2023-01-03","cited_by_count":5,"area":null},{"id":"2306.07381","title":"\"Private Prediction Strikes Back!'' Private Kernelized Nearest Neighbors with Individual Renyi Filter","created":"2023-06-12","cited_by_count":5,"area":null},{"id":"2311.06996","title":"AGRAMPLIFIER: Defending Federated Learning Against Poisoning Attacks Through Local Update Amplification","created":"2023-11-13","cited_by_count":5,"area":null},{"id":"2406.02883","title":"Nonlinear Transformations Against Unlearnable Datasets","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2103.01854","title":"Financial Crime & Fraud Detection Using Graph Computing: Application Considerations & Outlook","created":"2021-03-02","cited_by_count":4,"area":null},{"id":"2105.03251","title":"Exploiting Vulnerabilities in Deep Neural Networks: Adversarial and Fault-Injection Attacks","created":"2021-05-05","cited_by_count":4,"area":null},{"id":"2204.09498","title":"Backdooring Explainable Machine Learning","created":"2022-04-20","cited_by_count":4,"area":null},{"id":"2207.02337","title":"Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanisms","created":"2022-07-05","cited_by_count":4,"area":null},{"id":"2207.05978","title":"Enhanced Security and Privacy via Fragmented Federated Learning","created":"2022-07-13","cited_by_count":4,"area":null},{"id":"2207.08486","title":"Using Anomaly Detection to Detect Poisoning Attacks in Federated Learning Applications","created":"2022-07-18","cited_by_count":4,"area":null},{"id":"2211.12990","title":"Adversarial Attacks are a Surprisingly Strong Baseline for Poisoning Few-Shot Meta-Learners","created":"2022-11-23","cited_by_count":4,"area":null},{"id":"2304.06519","title":"Secure Federated Learning for Cognitive Radio Sensing","created":"2023-03-23","cited_by_count":4,"area":null},{"id":"2308.03558","title":"Mondrian: Prompt Abstraction Attack Against Large Language Models for Cheaper API Pricing","created":"2023-08-07","cited_by_count":4,"area":null},{"id":"2407.08838","title":"Deep Learning for Network Anomaly Detection under Data Contamination: Evaluating Robustness and Mitigating Performance Degradation","created":"2024-07-11","cited_by_count":4,"area":null},{"id":"2503.08976","title":"Not All Edges are Equally Robust: Evaluating the Robustness of Ranking-Based Federated Learning","created":"2025-03-12","cited_by_count":4,"area":null},{"id":"2110.04571","title":"Widen The Backdoor To Let More Attackers In","created":"2021-10-09","cited_by_count":3,"area":null},{"id":"2201.06093","title":"Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)","created":"2022-01-16","cited_by_count":3,"area":null},{"id":"2202.10377","title":"A Tutorial on Adversarial Learning Attacks and Countermeasures","created":"2022-02-21","cited_by_count":3,"area":null},{"id":"2206.03575","title":"Certifying Data-Bias Robustness in Linear Regression","created":"2022-06-07","cited_by_count":3,"area":null},{"id":"2206.07164","title":"Edge Security: Challenges and Issues","created":"2022-06-14","cited_by_count":3,"area":null},{"id":"2303.16668","title":"Protecting Federated Learning from Extreme Model Poisoning Attacks via Multidimensional Time Series Anomaly Detection","created":"2023-03-29","cited_by_count":3,"area":null},{"id":"2306.00427","title":"Out-of-distribution forgetting: vulnerability of continual learning to intra-class distribution shift","created":"2023-06-01","cited_by_count":3,"area":null},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3,"area":null},{"id":"2311.09428","title":"Beyond Detection: Unveiling Fairness Vulnerabilities in Abusive Language Models","created":"2023-11-15","cited_by_count":3,"area":null},{"id":"2402.07588","title":"Understanding Model Selection For Learning In Strategic Environments","created":"2024-02-12","cited_by_count":3,"area":null},{"id":"2404.09481","title":"SpamDam: Towards Privacy-Preserving and Adversary-Resistant SMS Spam Detection","created":"2024-04-15","cited_by_count":3,"area":null},{"id":"2404.15042","title":"Leverage Variational Graph Representation For Model Poisoning on Federated Learning","created":"2024-04-23","cited_by_count":3,"area":null}],"next_cursor":"100"}