{"total":119,"rows":[{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161,"area":"safety"},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2307.14692","title":"Backdoor Attacks for In-Context Learning with Language Models","created":"2023-07-27","cited_by_count":96,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2112.05224","title":"Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures","created":"2021-12-09","cited_by_count":73,"area":"safety"},{"id":"2303.03323","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","created":"2023-03-06","cited_by_count":63,"area":"safety"},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49,"area":"safety"},{"id":"2110.12925","title":"CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoning","created":"2021-10-25","cited_by_count":47,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2406.06822","title":"An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection","created":"2024-06-10","cited_by_count":40,"area":"safety"},{"id":"2110.08335","title":"Trigger Hunting with a Topological Prior for Trojan Detection","created":"2021-10-15","cited_by_count":39,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2308.14401","title":"CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models","created":"2023-08-28","cited_by_count":34,"area":"safety"},{"id":"2208.13049","title":"TrojViT: Trojan Insertion in Vision Transformers","created":"2022-08-27","cited_by_count":31,"area":"safety"},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2102.00655","title":"Curse or Redemption? How Data Heterogeneity Affects the Robustness of Federated Learning","created":"2021-02-01","cited_by_count":21,"area":"safety"},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2106.07798","title":"Poisoning Deep Reinforcement Learning Agents with In-Distribution Triggers","created":"2021-06-14","cited_by_count":20,"area":"safety"},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2303.09732","title":"Rethinking White-Box Watermarks on Deep Learning Models under Neural Structural Obfuscation","created":"2023-03-17","cited_by_count":20,"area":"safety"},{"id":"2110.13541","title":"Qu-ANTI-zation: Exploiting Quantization Artifacts for Achieving Adversarial Outcomes","created":"2021-10-26","cited_by_count":19,"area":"safety"},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2305.17506","title":"Backdooring Neural Code Search","created":"2023-05-27","cited_by_count":19,"area":"safety"},{"id":"2310.05862","title":"Better Safe than Sorry: Pre-training CLIP against Targeted Data Poisoning and Backdoor Attacks","created":"2023-10-05","cited_by_count":19,"area":"safety"},{"id":"2109.02836","title":"Trojan Signatures in DNN Weights","created":"2021-09-07","cited_by_count":17,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2307.10163","title":"Rethinking Backdoor Attacks","created":"2023-07-19","cited_by_count":14,"area":"safety"},{"id":"2108.01644","title":"The Devil is in the GAN: Backdoor Attacks and Defenses in Deep Generative Models","created":"2021-08-03","cited_by_count":12,"area":"safety"},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2405.07667","title":"Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models","created":"2024-05-13","cited_by_count":12,"area":"safety"},{"id":"2210.17029","title":"Poison Attack and Defense on Deep Source Code Processing Models","created":"2022-10-31","cited_by_count":11,"area":"safety"},{"id":"2311.16646","title":"Rethinking Backdoor Attacks on Dataset Distillation: A Kernel Method Perspective","created":"2023-11-28","cited_by_count":10,"area":"safety"},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2408.08143","title":"Unlearnable Examples Detection via Iterative Filtering","created":"2024-08-15","cited_by_count":9,"area":"safety"},{"id":"2501.15563","title":"PCAP-Backdoor: Backdoor Poisoning Generator for Network Traffic in CPS/IoT Environments","created":"2025-01-26","cited_by_count":9,"area":"safety"},{"id":"2210.06894","title":"Dim-Krum: Backdoor-Resistant Federated Learning for NLP with Dimension-wise Krum-Based Aggregation","created":"2022-10-13","cited_by_count":8,"area":"safety"},{"id":"2410.09101","title":"Data Taggants: Dataset Ownership Verification via Harmless Targeted Data Poisoning","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2502.15830","title":"Show Me Your Code! Kill Code Poisoning: A Lightweight Method Based on Code Naturalness","created":"2025-02-20","cited_by_count":8,"area":"safety"},{"id":"2501.01593","title":"BLAST: A Stealthy Backdoor Leverage Attack against Cooperative Multi-Agent Deep Reinforcement Learning based Systems","created":"2025-01-03","cited_by_count":7,"area":"safety"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2510.10265","title":"Backdoor Collapse: Eliminating Unknown Threats via Known Backdoor Aggregation in Language Models","created":"2025-10-11","cited_by_count":6,"area":"safety"},{"id":"2408.04683","title":"Eliminating Backdoors in Neural Code Models for Secure Code Understanding","created":"2024-08-08","cited_by_count":5,"area":"safety"},{"id":"2201.12211","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","created":"2022-01-28","cited_by_count":4,"area":"safety"},{"id":"2203.03692","title":"Low-Loss Subspace Compression for Clean Gains against Multi-Agent Backdoor Attacks","created":"2022-03-07","cited_by_count":4,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2310.07632","title":"Prompt Backdoors in Visual Prompt Learning","created":"2023-10-11","cited_by_count":4,"area":"safety"},{"id":"2404.11265","title":"The Victim and The Beneficiary: Exploiting a Poisoned Model to Train a Clean Model on Poisoned Data","created":"2024-04-17","cited_by_count":4,"area":"safety"},{"id":"2405.11466","title":"Measuring Impacts of Poisoning on Model Parameters and Embeddings for Large Language Models of Code","created":"2024-05-19","cited_by_count":4,"area":"safety"},{"id":"2601.11207","title":"LoRA as Oracle","created":"2026-01-16","cited_by_count":4,"area":"safety"},{"id":"2304.14483","title":"Adversary Aware Continual Learning","created":"2023-04-27","cited_by_count":3,"area":"safety"},{"id":"2306.01613","title":"Hyperparameter Learning under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization","created":"2023-06-02","cited_by_count":3,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2501.02373","title":"BADTV: Unveiling Backdoor Threats in Third-Party Task Vectors","created":"2025-01-04","cited_by_count":3,"area":"safety"},{"id":"2504.11990","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","created":"2025-04-16","cited_by_count":3,"area":"safety"},{"id":"2201.09774","title":"Hiding Behind Backdoors: Self-Obfuscation Against Generative Models","created":"2022-01-24","cited_by_count":2,"area":"safety"},{"id":"2206.08788","title":"Is Multi-Modal Necessarily Better? Robustness Evaluation of Multi-modal Fake News Detection","created":"2022-06-17","cited_by_count":2,"area":"safety"},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2410.14102","title":"Beyond Dataset Watermarking: Model-Level Copyright Protection for Code Summarization Models","created":"2024-10-18","cited_by_count":2,"area":"safety"},{"id":"2410.20136","title":"CodePurify: Defend Backdoor Attacks on Neural Code Models via Entropy-based Purification","created":"2024-10-26","cited_by_count":2,"area":"safety"},{"id":"2602.03040","title":"DF-LoGiT: Data-Free Logic-Gated Backdoor Attacks in Vision Transformers","created":"2026-02-03","cited_by_count":2,"area":"safety"},{"id":"2605.18646","title":"Language-Switching Triggers Take a Latent Detour Through Language Models","created":"2026-05-18","cited_by_count":2,"area":"safety"},{"id":"2301.00435","title":"Trojaning semi-supervised learning model via poisoning wild images on the web","created":"2023-01-01","cited_by_count":1,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2305.15394","title":"Differentially-Private Decision Trees and Provable Robustness to Data Poisoning","created":"2023-05-24","cited_by_count":1,"area":"safety"},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2309.08549","title":"HINT: Healthy Influential-Noise based Training to Defend against Data Poisoning Attacks","created":"2023-09-15","cited_by_count":1,"area":"safety"},{"id":"2312.03419","title":"Synthesizing Physical Backdoor Datasets: An Automated Framework Leveraging Deep Generative Models","created":"2023-12-06","cited_by_count":1,"area":"safety"},{"id":"2402.12936","title":"Measuring Impacts of Poisoning on Model Parameters and Neuron Activations: A Case Study of Poisoning CodeBERT","created":"2024-02-20","cited_by_count":1,"area":"safety"},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2406.04809","title":"A Survey of Fragile Model Watermarking","created":"2024-06-07","cited_by_count":1,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2411.03445","title":"Solving Trojan Detection Competitions with Linear Weight Classification","created":"2024-11-05","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2411.12914","title":"Trojan Cleansing with Neural Collapse","created":"2024-11-19","cited_by_count":1,"area":"safety"},{"id":"2506.01825","title":"Backdoors in Code Summarizers: How Bad Is It?","created":"2025-06-02","cited_by_count":1,"area":"safety"},{"id":"2508.21636","title":"Detecting Stealthy Data Poisoning Attacks in AI Code Generators","created":"2025-08-29","cited_by_count":1,"area":"safety"},{"id":"2510.01157","title":"Where Do Backdoors Live? A Component-Level Analysis of Backdoor Propagation in Speech Language Models","created":"2025-10-01","cited_by_count":1,"area":"safety"},{"id":"2606.26036","title":"Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2202.01179","title":"AntidoteRT: Run-time Detection and Correction of Poison Attacks on Neural Networks","created":"2022-01-31","cited_by_count":0,"area":"safety"},{"id":"2210.08956","title":"A Novel Membership Inference Attack against Dynamic Neural Networks by Utilizing Policy Networks Information","created":"2022-10-17","cited_by_count":0,"area":"safety"},{"id":"2210.11264","title":"Detecting Backdoors in Deep Text Classifiers","created":"2022-10-11","cited_by_count":0,"area":"safety"},{"id":"2211.01808","title":"Dormant Neural Trojans","created":"2022-11-02","cited_by_count":0,"area":"safety"},{"id":"2212.02582","title":"Rethinking Backdoor Data Poisoning Attacks in the Context of Semi-Supervised Learning","created":"2022-12-05","cited_by_count":0,"area":"safety"},{"id":"2309.16827","title":"Post-Training Overfitting Mitigation in DNN Classifiers","created":"2023-09-28","cited_by_count":0,"area":"safety"},{"id":"2404.12852","title":"LSP Framework: A Compensatory Model for Defeating Trigger Reverse Engineering via Label Smoothing Poisoning","created":"2024-04-19","cited_by_count":0,"area":"safety"},{"id":"2405.19376","title":"PureEBM: Universal Poison Purification via Mid-Run Dynamics of Energy-Based Models","created":"2024-05-28","cited_by_count":0,"area":"safety"},{"id":"2406.12605","title":"Attack and Defense of Deep Learning Models in the Field of Web Attack Detection","created":"2024-06-18","cited_by_count":0,"area":"safety"},{"id":"2408.04194","title":"FDI: Attack Neural Code Generation Systems through User Feedback Channel","created":"2024-08-08","cited_by_count":0,"area":"safety"},{"id":"2410.05284","title":"Hypnopaedia-Aware Machine Unlearning via Psychometrics of Artificial Mental Imagery","created":"2024-09-29","cited_by_count":0,"area":"safety"},{"id":"2412.06149","title":"An Effective and Resilient Backdoor Attack Framework against Deep Neural Networks and Vision Transformers","created":"2024-12-09","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}