{"total":80,"rows":[{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2209.05364","title":"If Influence Functions are the Answer, Then What is the Question?","created":"2022-09-12","cited_by_count":144,"area":null},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2112.06409","title":"Data Collection and Quality Challenges in Deep Learning: A Data-Centric AI Perspective","created":"2021-12-13","cited_by_count":116,"area":null},{"id":"2201.08135","title":"Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challenges","created":"2022-01-20","cited_by_count":84,"area":null},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2206.10013","title":"Measuring the Effect of Training Data on Deep Learning Predictions via Randomized Experiments","created":"2022-06-20","cited_by_count":50,"area":null},{"id":"2306.06123","title":"Adversarial attacks and defenses in explainable artificial intelligence: A survey","created":"2023-06-06","cited_by_count":48,"area":null},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2112.09745","title":"Interpretable Data-Based Explanations for Fairness Debugging","created":"2021-12-17","cited_by_count":30,"area":null},{"id":"2206.15437","title":"Understanding Instance-Level Impact of Fairness Constraints","created":"2022-06-30","cited_by_count":27,"area":null},{"id":"2109.00685","title":"Excess Capacity and Backdoor Poisoning","created":"2021-09-02","cited_by_count":24,"area":null},{"id":"2102.05776","title":"Defense Against Reward Poisoning Attacks in Reinforcement Learning","created":"2021-02-10","cited_by_count":21,"area":null},{"id":"2110.08932","title":"Poisoning Attacks on Fair Machine Learning","created":"2021-10-17","cited_by_count":19,"area":null},{"id":"2302.13959","title":"Make Every Example Count: On the Stability and Utility of Self-Influence for Learning from Noisy NLP Datasets","created":"2023-02-27","cited_by_count":19,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2102.04661","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","created":"2021-02-09","cited_by_count":16,"area":null},{"id":"2210.05929","title":"Few-shot Backdoor Attacks via Neural Tangent Kernels","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2407.06754","title":"Threats and Defenses in Federated Learning Life Cycle: A Comprehensive Survey and Challenges","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2102.06020","title":"Making Paper Reviewing Robust to Bid Manipulation Attacks","created":"2021-02-09","cited_by_count":12,"area":null},{"id":"2306.13119","title":"Adversarial Resilience in Sequential Prediction via Abstention","created":"2023-06-22","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2104.12426","title":"Launching Adversarial Attacks against Network Intrusion Detection Systems for IoT","created":"2021-04-26","cited_by_count":9,"area":null},{"id":"2105.10948","title":"Regularization Can Help Mitigate Poisoning Attacks... with the Right Hyperparameters","created":"2021-05-23","cited_by_count":8,"area":null},{"id":"2108.10761","title":"Federated Learning for Privacy-Preserving Open Innovation Future on Digital Health","created":"2021-08-24","cited_by_count":8,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2312.00157","title":"Universal Backdoor Attacks","created":"2023-11-30","cited_by_count":7,"area":null},{"id":"2312.05586","title":"Deeper Understanding of Black-box Predictions via Generalized Influence Functions","created":"2023-12-09","cited_by_count":7,"area":null},{"id":"2210.04260","title":"Coresets for Wasserstein Distributionally Robust Optimization Problems","created":"2022-10-09","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2204.05472","title":"Breaking Fair Binary Classification with Optimal Flipping Attacks","created":"2022-04-12","cited_by_count":4,"area":null},{"id":"2310.13822","title":"Adversarial Attacks on Fairness of Graph Neural Networks","created":"2023-10-20","cited_by_count":4,"area":null},{"id":"2504.21730","title":"Cert-SSBD: Certified Backdoor Defense with Sample-Specific Smoothing Noises","created":"2025-04-30","cited_by_count":4,"area":null},{"id":"2506.06656","title":"Rescaled Influence Functions: Accurate Data Attribution in High Dimension","created":"2025-06-07","cited_by_count":4,"area":null},{"id":"2307.01073","title":"What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?","created":"2023-07-03","cited_by_count":3,"area":null},{"id":"2310.10744","title":"Fast Adversarial Label-Flipping Attack on Tabular Data","created":"2023-10-16","cited_by_count":3,"area":null},{"id":"2311.09428","title":"Beyond Detection: Unveiling Fairness Vulnerabilities in Abusive Language Models","created":"2023-11-15","cited_by_count":3,"area":null},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2412.21061","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","created":"2024-12-30","cited_by_count":3,"area":null},{"id":"2101.05967","title":"Responsible AI Challenges in End-to-end Machine Learning","created":"2021-01-15","cited_by_count":2,"area":null},{"id":"2305.01384","title":"Class based Influence Functions for Error Detection","created":"2023-05-02","cited_by_count":2,"area":null},{"id":"2402.16926","title":"On the (In)feasibility of ML Backdoor Detection as an Hypothesis Testing Problem","created":"2024-02-26","cited_by_count":2,"area":null},{"id":"2406.11522","title":"FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks","created":"2024-06-17","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2508.11848","title":"Adversarial Robustness in Distributed Quantum Machine Learning","created":"2025-08-16","cited_by_count":2,"area":null},{"id":"2510.09210","title":"Provable Watermarking for Data Poisoning Attacks","created":"2025-10-10","cited_by_count":2,"area":null},{"id":"2207.08050","title":"Repairing Systematic Outliers by Learning Clean Subspaces in VAEs","created":"2022-07-17","cited_by_count":1,"area":null},{"id":"2210.09503","title":"Towards Fair Classification against Poisoning Attacks","created":"2022-10-18","cited_by_count":1,"area":null},{"id":"2311.06227","title":"Does Differential Privacy Prevent Backdoor Attacks in Practice?","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2311.10919","title":"PACOL: Poisoning Attacks Against Continual Learners","created":"2023-11-18","cited_by_count":1,"area":null},{"id":"2311.11544","title":"Understanding Variation in Subpopulation Susceptibility to Poisoning Attacks","created":"2023-11-20","cited_by_count":1,"area":null},{"id":"2406.02745","title":"Measuring Stochastic Data Complexity with Boltzmann Influence Functions","created":"2024-06-04","cited_by_count":1,"area":null},{"id":"2410.08872","title":"Fragile Giants: Understanding the Susceptibility of Models to Subpopulation Attacks","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2105.14803","title":"Gradient-based Data Subversion Attack Against Binary Classifiers","created":"2021-05-31","cited_by_count":0,"area":null},{"id":"2310.16224","title":"Poison is Not Traceless: Fully-Agnostic Detection of Poisoning Attacks","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2401.17865","title":"Manipulating Predictions over Discrete Inputs in Machine Teaching","created":"2024-01-31","cited_by_count":0,"area":null},{"id":"2402.00896","title":"Privacy and Security Implications of Cloud-Based AI Services : A Survey","created":"2024-01-31","cited_by_count":0,"area":null},{"id":"2407.06485","title":"CrowdTransfer: Enabling Crowd Knowledge Transfer in AIoT Community","created":"2024-07-09","cited_by_count":0,"area":null},{"id":"2408.05976","title":"Global-to-Local Support Spectrums for Language Model Explainability","created":"2024-08-12","cited_by_count":0,"area":null},{"id":"2412.08366","title":"Backdoor attacks on DNN and GBDT -- A Case Study from the insurance domain","created":"2024-12-11","cited_by_count":0,"area":null},{"id":"2503.00140","title":"Approaching the Harm of Gradient Attacks While Only Flipping Labels","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2504.02142","title":"Like Oil and Water: Group Robustness Methods and Poisoning Defenses May Be at Odds","created":"2025-04-02","cited_by_count":0,"area":null},{"id":"2509.12649","title":"A Systematic Evaluation of Parameter-Efficient Fine-Tuning Methods for the Security of Code LLMs","created":"2025-09-16","cited_by_count":0,"area":null},{"id":"2509.26350","title":"SoK: Systematic analysis of adversarial threats against deep learning approaches for autonomous anomaly detection systems in SDN-IoT networks","created":"2025-09-30","cited_by_count":0,"area":null},{"id":"2510.07867","title":"On the Optimality of the Median-of-Means Estimator under Adversarial Contamination","created":"2025-10-09","cited_by_count":0,"area":null},{"id":"2511.19466","title":"SG-OIF: A Stability-Guided Online Influence Framework for Reliable Vision Data","created":"2025-11-21","cited_by_count":0,"area":null},{"id":"2601.22308","title":"Stealthy Poisoning Attacks Bypass Defenses in Regression Settings","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2603.29289","title":"Downsides of Smartness Across Edge-Cloud Continuum in Modern Industry","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2604.11416","title":"Exact Certification of Neural Networks and Partition Aggregation Ensembles against Label Poisoning","created":"2026-04-13","cited_by_count":0,"area":null},{"id":"2606.29064","title":"Fairness Attacks on Recommender Systems","created":"2026-06-27","cited_by_count":0,"area":null},{"id":"2610.13051","title":"Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}