{"total":103,"rows":[{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2207.05521","title":"Federated Unlearning: How to Efficiently Erase a Client in FL?","created":"2022-07-12","cited_by_count":95,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2208.12268","title":"FedPrompt: Communication-Efficient and Privacy Preserving Prompt Tuning in Federated Learning","created":"2022-08-25","cited_by_count":91,"area":"safety"},{"id":"2112.05224","title":"Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures","created":"2021-12-09","cited_by_count":73,"area":"safety"},{"id":"2201.09441","title":"Federated Unlearning with Knowledge Distillation","created":"2022-01-24","cited_by_count":73,"area":"safety"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2205.12709","title":"VeriFi: Towards Verifiable Federated Unlearning","created":"2022-05-25","cited_by_count":46,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2112.07668","title":"Dual-Key Multimodal Backdoors for Visual Question Answering","created":"2021-12-14","cited_by_count":37,"area":"safety"},{"id":"2109.13236","title":"FedIPR: Ownership Verification for Federated Deep Neural Network Models","created":"2021-09-27","cited_by_count":36,"area":"safety"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2401.05146","title":"Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics","created":"2024-01-10","cited_by_count":27,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2102.00655","title":"Curse or Redemption? How Data Heterogeneity Affects the Robustness of Federated Learning","created":"2021-02-01","cited_by_count":21,"area":"safety"},{"id":"2502.12176","title":"Ten Challenging Problems in Federated Foundation Models","created":"2025-02-14","cited_by_count":20,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2110.13541","title":"Qu-ANTI-zation: Exploiting Quantization Artifacts for Achieving Adversarial Outcomes","created":"2021-10-26","cited_by_count":19,"area":"safety"},{"id":"2102.05257","title":"Robust Federated Learning with Attack-Adaptive Aggregation","created":"2021-02-10","cited_by_count":17,"area":"safety"},{"id":"2302.12448","title":"Subspace based Federated Unlearning","created":"2023-02-24","cited_by_count":17,"area":"safety"},{"id":"2210.10886","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","created":"2022-10-19","cited_by_count":12,"area":"safety"},{"id":"2306.01356","title":"FedCIP: Federated Client Intellectual Property Protection with Traitor Tracking","created":"2023-06-02","cited_by_count":12,"area":"safety"},{"id":"2301.01044","title":"Analysis of Label-Flip Poisoning Attack on Machine Learning Based Malware Detector","created":"2023-01-03","cited_by_count":11,"area":"safety"},{"id":"2310.00222","title":"Source Inference Attacks: Beyond Membership Inference Attacks in Federated Learning","created":"2023-09-30","cited_by_count":11,"area":"safety"},{"id":"2405.17462","title":"Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity","created":"2024-05-23","cited_by_count":11,"area":"safety"},{"id":"2503.08704","title":"Life-Cycle Routing Vulnerabilities of LLM Router","created":"2025-03-09","cited_by_count":11,"area":"safety"},{"id":"2312.03205","title":"Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning","created":"2023-12-06","cited_by_count":10,"area":"safety"},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2102.05561","title":"Meta Federated Learning","created":"2021-02-10","cited_by_count":8,"area":"safety"},{"id":"2305.05355","title":"Turning Privacy-preserving Mechanisms against Federated Learning","created":"2023-05-09","cited_by_count":8,"area":"safety"},{"id":"2210.09305","title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning","created":"2022-10-17","cited_by_count":7,"area":"safety"},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2209.01721","title":"An Adaptive Black-box Defense against Trojan Attacks (TrojDef)","created":"2022-09-05","cited_by_count":5,"area":"safety"},{"id":"2306.02216","title":"Forgettable Federated Linear Learning with Certified Data Unlearning","created":"2023-06-03","cited_by_count":5,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2501.17396","title":"Poisoning Attacks and Defenses to Federated Unlearning","created":"2025-01-29","cited_by_count":5,"area":"safety"},{"id":"2602.15671","title":"Revisiting Backdoor Threat in Federated Instruction Tuning from a Signal Aggregation Perspective","created":"2026-02-17","cited_by_count":5,"area":"safety"},{"id":"2201.12211","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","created":"2022-01-28","cited_by_count":4,"area":"safety"},{"id":"2203.03692","title":"Low-Loss Subspace Compression for Clean Gains against Multi-Agent Backdoor Attacks","created":"2022-03-07","cited_by_count":4,"area":"safety"},{"id":"2209.01994","title":"Federated Zero-Shot Learning for Visual Recognition","created":"2022-09-05","cited_by_count":4,"area":"safety"},{"id":"2301.01142","title":"Mutual Information Regularization for Vertical Federated Learning","created":"2023-01-01","cited_by_count":4,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2303.11337","title":"Recursive Euclidean Distance Based Robust Aggregation Technique For Federated Learning","created":"2023-03-20","cited_by_count":4,"area":"safety"},{"id":"2411.11044","title":"Efficient Federated Unlearning with Adaptive Differential Privacy Preservation","created":"2024-11-17","cited_by_count":4,"area":"safety"},{"id":"2203.16463","title":"Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning","created":"2022-03-30","cited_by_count":3,"area":"safety"},{"id":"2302.00271","title":"CATFL: Certificateless Authentication-based Trustworthy Federated Learning for 6G Semantic Communications","created":"2023-02-01","cited_by_count":3,"area":"safety"},{"id":"2308.00553","title":"FLAIRS: FPGA-Accelerated Inference-Resistant & Secure Federated Learning","created":"2023-08-01","cited_by_count":3,"area":"safety"},{"id":"2401.10375","title":"Foundation Models in Federated Learning: Assessing Backdoor Vulnerabilities","created":"2024-01-18","cited_by_count":3,"area":"safety"},{"id":"2404.03180","title":"Goldfish: An Efficient Federated Unlearning Framework","created":"2024-04-04","cited_by_count":3,"area":"safety"},{"id":"2405.19990","title":"DiffPhysBA: Diffusion-based Physical Backdoor Attack against Person Re-Identification in Real-World","created":"2024-05-30","cited_by_count":3,"area":"safety"},{"id":"2410.17573","title":"Securing Federated Learning against Backdoor Threats with Foundation Model Integration","created":"2024-10-23","cited_by_count":3,"area":"safety"},{"id":"2501.02373","title":"BADTV: Unveiling Backdoor Threats in Third-Party Task Vectors","created":"2025-01-04","cited_by_count":3,"area":"safety"},{"id":"2501.13683","title":"Unlearning Clients, Features and Samples in Vertical Federated Learning","created":"2025-01-23","cited_by_count":3,"area":"safety"},{"id":"2206.08788","title":"Is Multi-Modal Necessarily Better? Robustness Evaluation of Multi-modal Fake News Detection","created":"2022-06-17","cited_by_count":2,"area":"safety"},{"id":"2210.14376","title":"Robustness of Locally Differentially Private Graph Analysis Against Poisoning","created":"2022-10-25","cited_by_count":2,"area":"safety"},{"id":"2211.14769","title":"Navigation as Attackers Wish? Towards Building Robust Embodied Agents under Federated Learning","created":"2022-11-27","cited_by_count":2,"area":"safety"},{"id":"2307.12181","title":"Security and Privacy Issues of Federated Learning","created":"2023-07-22","cited_by_count":2,"area":"safety"},{"id":"2310.04055","title":"Kick Bad Guys Out! Conditionally Activated Anomaly Detection in Federated Learning with Zero-Knowledge Proof Verification","created":"2023-10-06","cited_by_count":2,"area":"safety"},{"id":"2409.04142","title":"Context is the Key: Backdoor Attacks for In-Context Learning with Vision Transformers","created":"2024-09-06","cited_by_count":2,"area":"safety"},{"id":"2506.22506","title":"SABRE-FL: Selective and Accurate Backdoor Rejection for Federated Prompt Learning","created":"2025-06-25","cited_by_count":2,"area":"safety"},{"id":"2603.00516","title":"ProtegoFed: Backdoor-Free Federated Instruction Tuning with Interspersed Poisoned Data","created":"2026-02-28","cited_by_count":2,"area":"safety"},{"id":"2306.03600","title":"Avoid Adversarial Adaption in Federated Learning by Multi-Metric Investigations","created":"2023-06-06","cited_by_count":1,"area":"safety"},{"id":"2311.12715","title":"Attacks on fairness in Federated Learning","created":"2023-11-21","cited_by_count":1,"area":"safety"},{"id":"2312.03419","title":"Synthesizing Physical Backdoor Datasets: An Automated Framework Leveraging Deep Generative Models","created":"2023-12-06","cited_by_count":1,"area":"safety"},{"id":"2404.12778","title":"Defending against Data Poisoning Attacks in Federated Learning via User Elimination","created":"2024-04-19","cited_by_count":1,"area":"safety"},{"id":"2409.13004","title":"Data Poisoning and Leakage Analysis in Federated Learning","created":"2024-09-19","cited_by_count":1,"area":"safety"},{"id":"2502.07011","title":"DROP: Poison Dilution via Knowledge Distillation for Federated Learning","created":"2025-02-10","cited_by_count":1,"area":"safety"},{"id":"2503.09095","title":"Backdooring CLIP through Concept Confusion","created":"2025-03-12","cited_by_count":1,"area":"safety"},{"id":"2507.00423","title":"Find a Scapegoat: Poisoning Membership Inference Attack and Defense to Federated Learning","created":"2025-07-01","cited_by_count":1,"area":"safety"},{"id":"2508.10315","title":"A Vision-Language Pre-training Model-Guided Approach for Mitigating Backdoor Attacks in Federated Learning","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2508.13853","title":"FedUP: Efficient Pruning-based Federated Unlearning for Model Poisoning Attacks","created":"2025-08-19","cited_by_count":1,"area":"safety"},{"id":"2508.21004","title":"Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution","created":"2025-08-28","cited_by_count":1,"area":"safety"},{"id":"2509.18044","title":"Hybrid Reputation Aggregation: A Robust Defense Mechanism for Adversarial Federated Learning in 5G and Edge Network Environments","created":"2025-09-22","cited_by_count":1,"area":"safety"},{"id":"2603.21975","title":"SecureBreak -- A dataset towards safe and secure models","created":"2026-03-23","cited_by_count":1,"area":"safety"},{"id":"2104.08020","title":"FedCom: A Byzantine-Robust Local Model Aggregation Rule Using Data Commitment for Federated Learning","created":"2021-04-16","cited_by_count":0,"area":"safety"},{"id":"2209.06397","title":"Federated Learning based on Defending Against Data Poisoning Attacks in IoT","created":"2022-09-14","cited_by_count":0,"area":"safety"},{"id":"2211.01808","title":"Dormant Neural Trojans","created":"2022-11-02","cited_by_count":0,"area":"safety"},{"id":"2403.02437","title":"A Survey on Federated Unlearning: Challenges and Opportunities","created":"2024-03-04","cited_by_count":0,"area":"safety"},{"id":"2410.05284","title":"Hypnopaedia-Aware Machine Unlearning via Psychometrics of Artificial Mental Imagery","created":"2024-09-29","cited_by_count":0,"area":"safety"},{"id":"2502.16396","title":"FedNIA: Noise-Induced Activation Analysis for Mitigating Data Poisoning in Federated Learning","created":"2025-02-23","cited_by_count":0,"area":"safety"},{"id":"2505.09983","title":"Sybil-based Virtual Data Poisoning Attacks in Federated Learning","created":"2025-05-15","cited_by_count":0,"area":"safety"},{"id":"2508.02136","title":"FedLAD: A Linear Algebra Based Data Poisoning Defence for Federated Learning","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2512.13381","title":"Dual-Phase Federated Deep Unlearning via Weight-Aware Rollback and Reconstruction","created":"2025-12-15","cited_by_count":0,"area":"safety"},{"id":"2601.00900","title":"Noise-Aware and Dynamically Adaptive Federated Defense Framework for SAR Image Target Recognition","created":"2025-12-31","cited_by_count":0,"area":"safety"},{"id":"2602.05612","title":"ADCA: Attention-Driven Multi-Party Collusion Attack in Federated Self-Supervised Learning","created":"2026-02-05","cited_by_count":0,"area":"safety"},{"id":"2603.18538","title":"Beyond Passive Aggregation: Active Auditing and Topology-Aware Defense in Decentralized Federated Learning","created":"2026-03-19","cited_by_count":0,"area":"safety"},{"id":"2604.04800","title":"Forgetting to Witness: Efficient Federated Unlearning and Its Visible Evaluation","created":"2026-04-06","cited_by_count":0,"area":"safety"},{"id":"2605.02110","title":"Adversarial Update-Based Federated Unlearning for Poisoned Model Recovery","created":"2026-05-04","cited_by_count":0,"area":"safety"},{"id":"2605.15885","title":"FedEDAuth -- Federated Embedding Distribution Authentication for Counterfeit IC Detection","created":"2026-05-15","cited_by_count":0,"area":"safety"},{"id":"2605.16098","title":"PCDM: A Diffusion-Based Data Poisoning Attack Against Federated Learning Systems","created":"2026-05-15","cited_by_count":0,"area":"safety"},{"id":"2606.22837","title":"CLIP-guided Diffusion Model for Backdoor Generation in Sensor-based Human Activity Recognition","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2606.27511","title":"When the Aggregator Cheats: Data-Free Backdoors in Federated LLM-based QA Systems","created":"2026-06-25","cited_by_count":0,"area":"safety"},{"id":"2606.31066","title":"Secure-CHG: A Comprehensive Framework for Robust and Fair Federated Learning via Hybrid Defense and Contribution-Aware Trust","created":"2026-06-30","cited_by_count":0,"area":"safety"},{"id":"2607.27940","title":"TriShield: Zero-Utility-Loss Defense Against Privacy Backdoors in Federated Language Model Fine-Tuning via Orthogonal Gradient Projection and Optimizer State Entanglement","created":"2026-07-30","cited_by_count":0,"area":"safety"},{"id":"2607.28829","title":"When Unlearning Fails: Reliable Data Deletion under Post-Training in Agent Networks","created":"2026-07-30","cited_by_count":0,"area":"safety"},{"id":"2608.04045","title":"Robust and Personalized Federated Learning for Aircraft-Engine Prognostics under Benign and Adversarial Client Heterogeneity","created":"2026-08-04","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}