{"total":93,"rows":[{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130,"area":null},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"1910.05821","title":"Policy Poisoning in Batch Reinforcement Learning and Control","created":"2019-10-13","cited_by_count":70,"area":"offlinerl"},{"id":"2102.09159","title":"Robust and Differentially Private Mean Estimation","created":"2021-02-18","cited_by_count":66,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2105.07381","title":"Undistillable: Making A Nasty Teacher That CANNOT teach students","created":"2021-05-16","cited_by_count":36,"area":"distill"},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2212.09360","title":"AI Security for Geoscience and Remote Sensing: Challenges and Future Trends","created":"2022-12-19","cited_by_count":23,"area":null},{"id":"2102.05776","title":"Defense Against Reward Poisoning Attacks in Reinforcement Learning","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17,"area":null},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2308.05832","title":"FLShield: A Validation Based Federated Learning Framework to Defend Against Poisoning Attacks","created":"2023-08-10","cited_by_count":15,"area":null},{"id":"2302.13851","title":"Implicit Poisoning Attacks in Two-Agent Reinforcement Learning: Adversarial Policies for Training-Time Attacks","created":"2023-02-27","cited_by_count":14,"area":null},{"id":"2102.09171","title":"Data Poisoning Attacks and Defenses to Crowdsourcing Systems","created":"2021-02-18","cited_by_count":12,"area":"safety"},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2201.09650","title":"What You See is Not What the Network Infers: Detecting Adversarial Examples Based on Semantic Contradiction","created":"2022-01-24","cited_by_count":11,"area":null},{"id":"2305.16771","title":"Robust Nonparametric Regression under Poisoning Attack","created":"2023-05-26","cited_by_count":11,"area":null},{"id":"2505.05279","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","created":"2025-05-08","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10,"area":null},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2301.09732","title":"Backdoor Attacks in Peer-to-Peer Federated Learning","created":"2023-01-23","cited_by_count":9,"area":null},{"id":"2303.03908","title":"Client-specific Property Inference against Secure Aggregation in Federated Learning","created":"2023-03-07","cited_by_count":9,"area":null},{"id":"2102.02729","title":"Adversarial Attacks and Defenses in Physiological Computing: A Systematic Review","created":"2021-02-04","cited_by_count":8,"area":null},{"id":"2105.10948","title":"Regularization Can Help Mitigate Poisoning Attacks... with the Right Hyperparameters","created":"2021-05-23","cited_by_count":8,"area":null},{"id":"2210.07376","title":"ScionFL: Efficient and Robust Secure Quantized Aggregation","created":"2022-10-13","cited_by_count":8,"area":null},{"id":"2105.15035","title":"Machine Learning for Security in Vehicular Networks: A Comprehensive Survey","created":"2021-05-31","cited_by_count":7,"area":null},{"id":"2411.15673","title":"Semantic Shield: Defending Vision-Language Models Against Backdooring and Poisoning via Fine-grained Knowledge Alignment","created":"2024-11-23","cited_by_count":7,"area":"mllm"},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2109.11249","title":"FooBaR: Fault Fooling Backdoor Attack on Neural Network Training","created":"2021-09-23","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2407.15855","title":"Data Poisoning Attacks in Intelligent Transportation Systems: A Survey","created":"2024-07-06","cited_by_count":5,"area":null},{"id":"2409.19210","title":"Learning to Obstruct Few-Shot Image Classification over Restricted Classes","created":"2024-09-28","cited_by_count":5,"area":null},{"id":"2201.12211","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","created":"2022-01-28","cited_by_count":4,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2403.07933","title":"Corruption-Robust Offline Two-Player Zero-Sum Markov Games","created":"2024-03-04","cited_by_count":4,"area":null},{"id":"2407.08838","title":"Deep Learning for Network Anomaly Detection under Data Contamination: Evaluating Robustness and Mitigating Performance Degradation","created":"2024-07-11","cited_by_count":4,"area":null},{"id":"2110.04571","title":"Widen The Backdoor To Let More Attackers In","created":"2021-10-09","cited_by_count":3,"area":null},{"id":"2303.16668","title":"Protecting Federated Learning from Extreme Model Poisoning Attacks via Multidimensional Time Series Anomaly Detection","created":"2023-03-29","cited_by_count":3,"area":null},{"id":"2306.01613","title":"Hyperparameter Learning under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization","created":"2023-06-02","cited_by_count":3,"area":"safety"},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3,"area":null},{"id":"2104.13230","title":"Influence Based Defense Against Data Poisoning Attacks in Online Learning","created":"2021-04-24","cited_by_count":2,"area":"safety"},{"id":"2207.03576","title":"Robustness Evaluation of Deep Unsupervised Learning Algorithms for Intrusion Detection Systems","created":"2022-06-25","cited_by_count":2,"area":null},{"id":"2305.09684","title":"Decision-based iterative fragile watermarking for model integrity verification","created":"2023-05-13","cited_by_count":2,"area":"safety"},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2403.11687","title":"Nonsmooth Implicit Differentiation: Deterministic and Stochastic Convergence Rates","created":"2024-03-18","cited_by_count":2,"area":null},{"id":"2503.10228","title":"Policy Teaching via Data Poisoning in Learning from Human Preferences","created":"2025-03-13","cited_by_count":2,"area":"alignment"},{"id":"2102.05867","title":"Adversarial Poisoning Attacks and Defense for General Multi-Class Models Based On Synthetic Reduced Nearest Neighbors","created":"2021-02-11","cited_by_count":1,"area":"safety"},{"id":"2107.02897","title":"Bi-Level Poisoning Attack Model and Countermeasure for Appliance Consumption Data of Smart Homes","created":"2021-07-01","cited_by_count":1,"area":null},{"id":"2107.09937","title":"Fast and Scalable Adversarial Training of Kernel SVM via Doubly Stochastic Gradients","created":"2021-07-21","cited_by_count":1,"area":null},{"id":"2108.04206","title":"Classification Auto-Encoder based Detector against Diverse Data Poisoning Attacks","created":"2021-08-09","cited_by_count":1,"area":"safety"},{"id":"2211.08804","title":"Analysis and Detectability of Offline Data Poisoning Attacks on Linear Dynamical Systems","created":"2022-11-16","cited_by_count":1,"area":"safety"},{"id":"2307.08288","title":"Systematic Testing of the Data-Poisoning Robustness of KNN","created":"2023-07-17","cited_by_count":1,"area":"safety"},{"id":"2311.09790","title":"Breaking Boundaries: Balancing Performance and Robustness in Deep Wireless Traffic Forecasting","created":"2023-11-16","cited_by_count":1,"area":null},{"id":"2311.10919","title":"PACOL: Poisoning Attacks Against Continual Learners","created":"2023-11-18","cited_by_count":1,"area":null},{"id":"2410.08872","title":"Fragile Giants: Understanding the Susceptibility of Models to Subpopulation Attacks","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2502.07011","title":"DROP: Poison Dilution via Knowledge Distillation for Federated Learning","created":"2025-02-10","cited_by_count":1,"area":"safety"},{"id":"2505.12019","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","created":"2025-05-17","cited_by_count":1,"area":null},{"id":"2507.08623","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","created":"2025-07-11","cited_by_count":1,"area":"safety"},{"id":"2512.19058","title":"6DAttack: Backdoor Attacks in the 6DoF Pose Estimation","created":"2025-12-22","cited_by_count":1,"area":null},{"id":"2607.14921","title":"Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks","created":"2026-07-16","cited_by_count":1,"area":null},{"id":"2104.06744","title":"Defending Against Adversarial Denial-of-Service Data Poisoning Attacks","created":"2021-04-14","cited_by_count":0,"area":"safety"},{"id":"2105.14803","title":"Gradient-based Data Subversion Attack Against Binary Classifiers","created":"2021-05-31","cited_by_count":0,"area":null},{"id":"2106.10324","title":"Group-Structured Adversarial Training","created":"2021-06-18","cited_by_count":0,"area":null},{"id":"2106.14406","title":"Poisoning the Search Space in Neural Architecture Search","created":"2021-06-28","cited_by_count":0,"area":null},{"id":"2107.02894","title":"Adversarial Machine Learning for Cybersecurity and Computer Vision: Current Developments and Challenges","created":"2021-06-30","cited_by_count":0,"area":null},{"id":"2207.11575","title":"Testing the Robustness of Learned Index Structures","created":"2022-07-23","cited_by_count":0,"area":null},{"id":"2209.06397","title":"Federated Learning based on Defending Against Data Poisoning Attacks in IoT","created":"2022-09-14","cited_by_count":0,"area":"safety"},{"id":"2211.01592","title":"Try to Avoid Attacks: A Federated Data Sanitization Defense for Healthcare IoMT Systems","created":"2022-11-03","cited_by_count":0,"area":null},{"id":"2302.09420","title":"RobustNLP: A Technique to Defend NLP Models Against Backdoor Attacks","created":"2023-02-18","cited_by_count":0,"area":"safety"},{"id":"2310.16224","title":"Poison is Not Traceless: Fully-Agnostic Detection of Poisoning Attacks","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2406.02253","title":"PuFace: Defending against Facial Cloaking Attacks for Facial Recognition Models","created":"2024-06-04","cited_by_count":0,"area":null},{"id":"2410.00862","title":"Timber! Poisoning Decision Trees","created":"2024-10-01","cited_by_count":0,"area":null},{"id":"2508.01276","title":"Defending Against Beta Poisoning Attacks in Machine Learning Models","created":"2025-08-02","cited_by_count":0,"area":null},{"id":"2512.10637","title":"Adaptive Intrusion Detection System Leveraging Dynamic Neural Models with Adversarial Learning for 5G/6G Networks","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2601.22308","title":"Stealthy Poisoning Attacks Bypass Defenses in Regression Settings","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2602.07358","title":"UTOPIA: Unlearnable Tabular Data via Decoupled Shortcut Embedding","created":"2026-02-07","cited_by_count":0,"area":null},{"id":"2603.28281","title":"Corruption-robust Offline Multi-agent Reinforcement Learning From Human Feedback","created":"2026-03-30","cited_by_count":0,"area":"alignment"}],"next_cursor":null}