{"total":49,"rows":[{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2110.12925","title":"CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoning","created":"2021-10-25","cited_by_count":47,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2406.17216","title":"Machine Unlearning Fails to Remove Data Poisoning Attacks","created":"2024-06-25","cited_by_count":37,"area":"safety"},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33,"area":"safety"},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2408.08143","title":"Unlearnable Examples Detection via Iterative Filtering","created":"2024-08-15","cited_by_count":9,"area":"safety"},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2403.09603","title":"Optimistic Verifiable Training by Controlling Hardware Nondeterminism","created":"2024-03-14","cited_by_count":7,"area":"safety"},{"id":"2105.10051","title":"Preventing Machine Learning Poisoning Attacks Using Authentication and Provenance","created":"2021-05-20","cited_by_count":5,"area":"safety"},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2404.04714","title":"Data Poisoning Attacks on Off-Policy Policy Evaluation Methods","created":"2024-04-06","cited_by_count":4,"area":"safety"},{"id":"2306.01613","title":"Hyperparameter Learning under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization","created":"2023-06-02","cited_by_count":3,"area":"safety"},{"id":"2309.16487","title":"Towards Poisoning Fair Representations","created":"2023-09-28","cited_by_count":3,"area":"safety"},{"id":"2402.08290","title":"The Effect of Data Poisoning on Counterfactual Explanations","created":"2024-02-13","cited_by_count":3,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2104.13230","title":"Influence Based Defense Against Data Poisoning Attacks in Online Learning","created":"2021-04-24","cited_by_count":2,"area":"safety"},{"id":"2209.04547","title":"Defend Data Poisoning Attacks on Voice Authentication","created":"2022-09-09","cited_by_count":2,"area":"safety"},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2410.21453","title":"Inverting Gradient Attacks Makes Powerful Data Poisoning","created":"2024-10-28","cited_by_count":2,"area":"safety"},{"id":"2411.14412","title":"Adversarial Data Poisoning Attacks on Quantum Machine Learning in the NISQ Era","created":"2024-11-21","cited_by_count":2,"area":"safety"},{"id":"2108.04206","title":"Classification Auto-Encoder based Detector against Diverse Data Poisoning Attacks","created":"2021-08-09","cited_by_count":1,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2307.08288","title":"Systematic Testing of the Data-Poisoning Robustness of KNN","created":"2023-07-17","cited_by_count":1,"area":"safety"},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2209.06397","title":"Federated Learning based on Defending Against Data Poisoning Attacks in IoT","created":"2022-09-14","cited_by_count":0,"area":"safety"},{"id":"2403.10313","title":"Interactive Trimming against Evasive Online Data Manipulation Attacks: A Game-Theoretic Approach","created":"2024-03-15","cited_by_count":0,"area":"safety"},{"id":"2405.06073","title":"Hard Work Does Not Always Pay Off: Poisoning Attacks on Neural Architecture Search","created":"2024-05-09","cited_by_count":0,"area":"safety"},{"id":"2509.06896","title":"Are Targeted Data Poisoning Attacks as Effective as We Think?","created":"2025-09-08","cited_by_count":0,"area":"safety"},{"id":"2510.22274","title":"SecureLearn -- An Attack-agnostic Defense for Multiclass Machine Learning Against Data Poisoning Attacks","created":"2025-10-25","cited_by_count":0,"area":"safety"},{"id":"2512.20865","title":"Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attacks","created":"2025-12-24","cited_by_count":0,"area":"safety"},{"id":"2609.32288","title":"A Solvable Theory of Pre-training Data Poisoning: Regime-Dependent Scaling Exponents","created":"2026-09-26","cited_by_count":0,"area":"safety"},{"id":"2610.01788","title":"SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples","created":"2026-10-01","cited_by_count":0,"area":"safety"}],"next_cursor":null}