{"total":225,"rows":[{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2302.09880","title":"Towards Unbounded Machine Unlearning","created":"2023-02-20","cited_by_count":268,"area":"safety"},{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2108.10241","title":"Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning","created":"2021-08-23","cited_by_count":118,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2201.06640","title":"Towards Adversarial Evaluations for Inexact Machine Unlearning","created":"2022-01-17","cited_by_count":84,"area":"safety"},{"id":"2201.06820","title":"Recommendation Unlearning","created":"2022-01-18","cited_by_count":80,"area":null},{"id":"2104.09667","title":"Manipulating SGD with Data Ordering Attacks","created":"2021-04-19","cited_by_count":74,"area":"safety"},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2108.02488","title":"Poison Ink: Robust and Invisible Backdoor Attack","created":"2021-08-05","cited_by_count":50,"area":null},{"id":"2206.10013","title":"Measuring the Effect of Training Data on Deep Learning Predictions via Randomized Experiments","created":"2022-06-20","cited_by_count":50,"area":null},{"id":"2105.01622","title":"Poisoning the Unlabeled Dataset of Semi-Supervised Learning","created":"2021-05-04","cited_by_count":44,"area":null},{"id":"2107.14569","title":"Can You Hear It? Backdoor Attacks via Ultrasonic Triggers","created":"2021-07-30","cited_by_count":44,"area":null},{"id":"2209.15266","title":"Data Poisoning Attacks Against Multimodal Encoders","created":"2022-09-30","cited_by_count":41,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2404.15381","title":"Advances and Open Challenges in Federated Foundation Models","created":"2024-04-23","cited_by_count":36,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33,"area":"safety"},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2201.02873","title":"LoMar: A Local Defense Against Poisoning Attack on Federated Learning","created":"2022-01-08","cited_by_count":31,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2102.00837","title":"Machine learning pipeline for battery state of health estimation","created":"2021-02-01","cited_by_count":29,"area":null},{"id":"2504.21668","title":"Traceback of Poisoning Attacks to Retrieval-Augmented Generation","created":"2025-04-30","cited_by_count":28,"area":"rag"},{"id":"2208.11180","title":"Auditing Membership Leakages of Multi-Exit Networks","created":"2022-08-23","cited_by_count":27,"area":null},{"id":"2308.04604","title":"A Survey on Decentralized Federated Learning","created":"2023-08-08","cited_by_count":27,"area":null},{"id":"2401.17319","title":"Decentralized Federated Learning: A Survey on Security and Privacy","created":"2024-01-25","cited_by_count":25,"area":null},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2104.13061","title":"Property Inference Attacks on Convolutional Neural Networks: Influence and Implications of Target Model's Complexity","created":"2021-04-27","cited_by_count":19,"area":null},{"id":"2105.06209","title":"DeepObliviate: A Powerful Charm for Erasing Data Residual Memory in Deep Neural Networks","created":"2021-05-13","cited_by_count":19,"area":"safety"},{"id":"2105.12049","title":"Honest-but-Curious Nets: Sensitive Attributes of Private Inputs Can Be Secretly Coded into the Classifiers' Outputs","created":"2021-05-25","cited_by_count":18,"area":null},{"id":"2304.09762","title":"Practical Differentially Private and Byzantine-resilient Federated Learning","created":"2023-04-15","cited_by_count":18,"area":null},{"id":"2406.10630","title":"Emerging Safety Attack and Defense in Federated Instruction Tuning of Large Language Models","created":"2024-06-15","cited_by_count":18,"area":"alignment"},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2304.10655","title":"The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictions","created":"2023-04-20","cited_by_count":17,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2207.01982","title":"Defending against the Label-flipping Attack in Federated Learning","created":"2022-07-05","cited_by_count":16,"area":null},{"id":"2205.11819","title":"Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free","created":"2022-05-24","cited_by_count":15,"area":null},{"id":"2207.00872","title":"FL-Defender: Combating Targeted Attacks in Federated Learning","created":"2022-07-02","cited_by_count":15,"area":null},{"id":"2308.05832","title":"FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks","created":"2023-08-10","cited_by_count":15,"area":null},{"id":"2406.06186","title":"A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks","created":"2024-06-10","cited_by_count":15,"area":"safety"},{"id":"2409.01435","title":"Achieving Byzantine-Resilient Federated Learning via Layer-Adaptive Sparsified Model Aggregation","created":"2024-09-02","cited_by_count":15,"area":null},{"id":"2107.01854","title":"Poisoning Attack against Estimating from Pairwise Comparisons","created":"2021-07-05","cited_by_count":14,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2101.10904","title":"Untargeted Poisoning Attack Detection in Federated Learning via Behavior Attestation","created":"2021-01-24","cited_by_count":13,"area":null},{"id":"2103.15753","title":"Privacy and Trust Redefined in Federated Machine Learning","created":"2021-03-29","cited_by_count":13,"area":null},{"id":"2102.06020","title":"Making Paper Reviewing Robust to Bid Manipulation Attacks","created":"2021-02-09","cited_by_count":12,"area":null},{"id":"2102.09171","title":"Data Poisoning Attacks and Defenses to Crowdsourcing Systems","created":"2021-02-18","cited_by_count":12,"area":"safety"},{"id":"2105.13954","title":"A Gradient Method for Multilevel Optimization","created":"2021-05-28","cited_by_count":12,"area":null},{"id":"2205.01423","title":"Autonomy and Intelligence in the Computing Continuum: Challenges, Enablers, and Future Directions for Orchestration","created":"2022-05-03","cited_by_count":12,"area":null},{"id":"2305.07406","title":"Two-in-One: A Model Hijacking Attack Against Text Generation Models","created":"2023-05-12","cited_by_count":12,"area":null},{"id":"2107.03919","title":"Understanding the Limits of Unsupervised Domain Adaptation via Data Poisoning","created":"2021-07-08","cited_by_count":11,"area":"safety"},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2212.04687","title":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","created":"2022-12-09","cited_by_count":11,"area":null},{"id":"2305.16771","title":"Robust Nonparametric Regression under Poisoning Attack","created":"2023-05-26","cited_by_count":11,"area":null},{"id":"2307.07250","title":"Mitigating Adversarial Vulnerability through Causal Parameter Estimation by Adversarial Double Machine Learning","created":"2023-07-14","cited_by_count":11,"area":null},{"id":"2305.03888","title":"Energy-Latency Attacks to On-Device Neural Networks via Sponge Poisoning","created":"2023-05-06","cited_by_count":10,"area":null},{"id":"2403.08618","title":"SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise Robustness","created":"2024-03-13","cited_by_count":10,"area":"safety"},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2301.09732","title":"Backdoor Attacks in Peer-to-Peer Federated Learning","created":"2023-01-23","cited_by_count":9,"area":null},{"id":"2303.03908","title":"Client-specific Property Inference against Secure Aggregation in Federated Learning","created":"2023-03-07","cited_by_count":9,"area":null},{"id":"2310.08565","title":"Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities","created":"2023-10-12","cited_by_count":9,"area":null},{"id":"2311.11995","title":"BrainWash: A Poisoning Attack to Forget in Continual Learning","created":"2023-11-20","cited_by_count":9,"area":null},{"id":"2103.03227","title":"Graph Computing for Financial Crime and Fraud Detection: Trends, Challenges and Outlook","created":"2021-03-02","cited_by_count":8,"area":null},{"id":"2106.01425","title":"GAL: Gradient Assisted Learning for Decentralized Multi-Organization Collaborations","created":"2021-06-02","cited_by_count":8,"area":null},{"id":"2207.03933","title":"A law of adversarial risk, interpolation, and label noise","created":"2022-07-08","cited_by_count":8,"area":null},{"id":"2108.00473","title":"Derivative-free Alternating Projection Algorithms for General Nonconvex-Concave Minimax Problems","created":"2021-08-01","cited_by_count":7,"area":null},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7,"area":null},{"id":"2101.11799","title":"Covert Model Poisoning Against Federated Learning: Algorithm Design and Optimization","created":"2021-01-28","cited_by_count":6,"area":null},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2301.03052","title":"AI Maintenance: A Robustness Perspective","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2307.15960","title":"Recommendation Unlearning via Matrix Correction","created":"2023-07-29","cited_by_count":6,"area":null},{"id":"2402.05541","title":"FedAA: A Reinforcement Learning Perspective on Adaptive Aggregation for Fair and Robust Federated Learning","created":"2024-02-08","cited_by_count":6,"area":"deeprl"},{"id":"2502.17526","title":"FedSV: Byzantine-Robust Federated Learning via Shapley Value","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2505.04873","title":"Federated Learning for Cyber Physical Systems: A Comprehensive Survey","created":"2025-05-08","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2102.02402","title":"SAFELearning: Enable Backdoor Detectability In Federated Learning With Secure Aggregation","created":"2021-02-04","cited_by_count":5,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2202.02510","title":"A Survey on Poisoning Attacks Against Supervised Machine Learning","created":"2022-02-05","cited_by_count":5,"area":null},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2212.00322","title":"Hijack Vertical Federated Learning Models As One Party","created":"2022-12-01","cited_by_count":5,"area":null},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2301.00912","title":"Distributed Machine Learning for UAV Swarms: Computing, Sensing, and Semantics","created":"2023-01-03","cited_by_count":5,"area":null},{"id":"2306.07381","title":"\"Private Prediction Strikes Back!'' Private Kernelized Nearest Neighbors with Individual Renyi Filter","created":"2023-06-12","cited_by_count":5,"area":null},{"id":"2311.06996","title":"AGRAMPLIFIER: Defending Federated Learning Against Poisoning Attacks Through Local Update Amplification","created":"2023-11-13","cited_by_count":5,"area":null},{"id":"2406.02883","title":"Nonlinear Transformations Against Unlearnable Datasets","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2503.03039","title":"LLM Misalignment via Adversarial RLHF Platforms","created":"2025-03-04","cited_by_count":5,"area":"alignment"},{"id":"2103.01854","title":"Financial Crime & Fraud Detection Using Graph Computing: Application Considerations & Outlook","created":"2021-03-02","cited_by_count":4,"area":null}],"next_cursor":"100"}