{"total":120,"rows":[{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161,"area":"safety"},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2112.05224","title":"Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures","created":"2021-12-09","cited_by_count":73,"area":"safety"},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73,"area":"safety"},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2110.08335","title":"Trigger Hunting with a Topological Prior for Trojan Detection","created":"2021-10-15","cited_by_count":39,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2102.05257","title":"Robust Federated Learning with Attack-Adaptive Aggregation","created":"2021-02-10","cited_by_count":17,"area":"safety"},{"id":"2109.02836","title":"Trojan Signatures in DNN Weights","created":"2021-09-07","cited_by_count":17,"area":"safety"},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2301.10412","title":"BDMMT: Backdoor Sample Detection for Language Models through Model Mutation Testing","created":"2023-01-25","cited_by_count":16,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2206.08477","title":"Backdoor Attacks on Vision Transformers","created":"2022-06-16","cited_by_count":13,"area":"safety"},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2408.09878","title":"Transferring Backdoors between Large Language Models by Knowledge Distillation","created":"2024-08-19","cited_by_count":12,"area":"safety"},{"id":"2311.16646","title":"Rethinking Backdoor Attacks on Dataset Distillation: A Kernel Method Perspective","created":"2023-11-28","cited_by_count":10,"area":"safety"},{"id":"2508.01365","title":"ConfGuard: A Simple and Effective Backdoor Detection for Large Language Models","created":"2025-08-02","cited_by_count":9,"area":"safety"},{"id":"2210.06894","title":"Dim-Krum: Backdoor-Resistant Federated Learning for NLP with Dimension-wise Krum-Based Aggregation","created":"2022-10-13","cited_by_count":8,"area":"safety"},{"id":"2305.04547","title":"Diffusion Theory as a Scalpel: Detecting and Purifying Poisonous Dimensions in Pre-trained Language Models Caused by Backdoor or Bias","created":"2023-05-08","cited_by_count":8,"area":"safety"},{"id":"2401.01085","title":"Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control","created":"2024-01-02","cited_by_count":8,"area":"safety"},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2310.00626","title":"GhostEncoder: Stealthy Backdoor Attacks with Dynamic Triggers to Pre-trained Encoders in Self-supervised Learning","created":"2023-10-01","cited_by_count":6,"area":"safety"},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2504.11182","title":"Exploring Backdoor Attack and Defense for LLM-empowered Recommendations","created":"2025-04-15","cited_by_count":6,"area":"safety"},{"id":"2209.01721","title":"An Adaptive Black-box Defense against Trojan Attacks (TrojDef)","created":"2022-09-05","cited_by_count":5,"area":"safety"},{"id":"2401.01911","title":"Backdoor Attack on Unpaired Medical Image-Text Foundation Models: A Pilot Study on MedCLIP","created":"2024-01-01","cited_by_count":5,"area":"safety"},{"id":"2402.18945","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","created":"2024-02-29","cited_by_count":5,"area":"safety"},{"id":"2405.10612","title":"Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers","created":"2024-05-17","cited_by_count":5,"area":"safety"},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2407.04151","title":"Securing Multi-turn Conversational Language Models From Distributed Backdoor Triggers","created":"2024-07-04","cited_by_count":5,"area":"safety"},{"id":"2505.15656","title":"Be Careful When Fine-tuning On Open-Source LLMs: Your Fine-tuning Data Could Be Secretly Stolen!","created":"2025-05-21","cited_by_count":5,"area":"safety"},{"id":"2201.12211","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","created":"2022-01-28","cited_by_count":4,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2310.07632","title":"Prompt Backdoors in Visual Prompt Learning","created":"2023-10-11","cited_by_count":4,"area":"safety"},{"id":"2310.12665","title":"SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models","created":"2023-10-19","cited_by_count":4,"area":"safety"},{"id":"2402.14977","title":"Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models","created":"2024-02-22","cited_by_count":4,"area":"safety"},{"id":"2405.12786","title":"Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective","created":"2024-05-21","cited_by_count":4,"area":"safety"},{"id":"2408.06063","title":"TruVRF: Towards Triple-Granularity Verification on Machine Unlearning","created":"2024-08-12","cited_by_count":4,"area":"safety"},{"id":"2304.14483","title":"Adversary Aware Continual Learning","created":"2023-04-27","cited_by_count":3,"area":"safety"},{"id":"2308.04617","title":"Improved Activation Clipping for Universal Backdoor Mitigation and Test-Time Detection","created":"2023-08-08","cited_by_count":3,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2504.11990","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","created":"2025-04-16","cited_by_count":3,"area":"safety"},{"id":"2505.23015","title":"Detecting Stealthy Backdoor Samples based on Intra-class Distance for Large Language Models","created":"2025-05-29","cited_by_count":3,"area":"safety"},{"id":"2510.04347","title":"Unmasking Backdoors: An Explainable Defense via Gradient-Attention Anomaly Scoring for Pre-trained Language Models","created":"2025-10-05","cited_by_count":3,"area":"safety"},{"id":"2602.04195","title":"Semantic Consensus Decoding: Backdoor Defense for Verilog Code Generation","created":"2026-02-04","cited_by_count":3,"area":"safety"},{"id":"2205.03894","title":"VPN: Verification of Poisoning in Neural Networks","created":"2022-05-08","cited_by_count":2,"area":"safety"},{"id":"2209.04547","title":"Defend Data Poisoning Attacks on Voice Authentication","created":"2022-09-09","cited_by_count":2,"area":"safety"},{"id":"2407.05112","title":"Releasing Malevolence from Benevolence: The Menace of Benign Data on Machine Unlearning","created":"2024-07-06","cited_by_count":2,"area":"safety"},{"id":"2505.14531","title":"SifterNet: A Generalized and Model-Agnostic Trigger Purification Approach","created":"2025-05-20","cited_by_count":2,"area":"safety"},{"id":"2602.17168","title":"BadCLIP++: Stealthy and Persistent Backdoors in Multimodal Contrastive Learning","created":"2026-02-19","cited_by_count":2,"area":"safety"},{"id":"2301.00435","title":"Trojaning semi-supervised learning model via poisoning wild images on the web","created":"2023-01-01","cited_by_count":1,"area":"safety"},{"id":"2303.15564","title":"Mask and Restore: Blind Backdoor Defense at Test Time with Masked Autoencoder","created":"2023-03-27","cited_by_count":1,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2312.03419","title":"Synthesizing Physical Backdoor Datasets: An Automated Framework Leveraging Deep Generative Models","created":"2023-12-06","cited_by_count":1,"area":"safety"},{"id":"2406.19753","title":"Attack On Prompt: Backdoor Attack in Prompt-Based Continual Learning","created":"2024-06-28","cited_by_count":1,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2411.03445","title":"Solving Trojan Detection Competitions with Linear Weight Classification","created":"2024-11-05","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2502.00652","title":"Reformulation is All You Need: Addressing Malicious Text Features in DNNs","created":"2025-02-02","cited_by_count":1,"area":"safety"},{"id":"2502.01152","title":"Gradient Norm-based Fine-Tuning for Backdoor Defense in Automatic Speech Recognition","created":"2025-02-03","cited_by_count":1,"area":"safety"},{"id":"2601.21695","title":"AtPatch: Debugging Transformers via Hot-Fixing Over-Attention","created":"2026-01-29","cited_by_count":1,"area":"safety"},{"id":"2602.05401","title":"BadTemplate: A Training-Free Backdoor Attack via Chat Template Against Large Language Models","created":"2026-02-05","cited_by_count":1,"area":"safety"},{"id":"2603.05921","title":"BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviation","created":"2026-03-06","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2604.18970","title":"Mechanistic Anomaly Detection via Functional Attribution","created":"2026-04-21","cited_by_count":1,"area":"safety"},{"id":"2605.20641","title":"Trusted Weights, Treacherous Optimizations? Optimization-Triggered Backdoor Attacks on LLMs","created":"2026-05-20","cited_by_count":1,"area":"safety"},{"id":"2606.12896","title":"PolicyGuard: Towards Test-time and Step-level Adversary (Backdoor) Defense for Reinforcement Learning Agent","created":"2026-06-11","cited_by_count":1,"area":"safety"},{"id":"2606.26036","title":"Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2607.26849","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","created":"2026-07-29","cited_by_count":1,"area":"safety"},{"id":"2202.01179","title":"AntidoteRT: Run-time Detection and Correction of Poison Attacks on Neural Networks","created":"2022-01-31","cited_by_count":0,"area":"safety"},{"id":"2210.11264","title":"Detecting Backdoors in Deep Text Classifiers","created":"2022-10-11","cited_by_count":0,"area":"safety"},{"id":"2302.04457","title":"Imperceptible Sample-Specific Backdoor to DNN with Denoising Autoencoder","created":"2023-02-09","cited_by_count":0,"area":"safety"},{"id":"2401.09740","title":"Hijacking Attacks against Neural Networks by Analyzing Training Data","created":"2024-01-18","cited_by_count":0,"area":"safety"},{"id":"2410.05284","title":"Hypnopaedia-Aware Machine Unlearning via Psychometrics of Artificial Mental Imagery","created":"2024-09-29","cited_by_count":0,"area":"safety"},{"id":"2507.11092","title":"MT4DP: Data Poisoning Attack Detection for DL-based Code Search Models via Metamorphic Testing","created":"2025-07-15","cited_by_count":0,"area":"safety"},{"id":"2507.19905","title":"ConSeg: Contextual Backdoor Attack Against Semantic Segmentation","created":"2025-07-26","cited_by_count":0,"area":"safety"},{"id":"2508.05409","title":"From Detection to Correction: Backdoor-Resilient Face Recognition via Vision-Language Trigger Detection and Noise-Based Neutralization","created":"2025-08-07","cited_by_count":0,"area":"safety"},{"id":"2508.10243","title":"Pruning and Malicious Injection: A Retraining-Free Backdoor Attack on Transformer Models","created":"2025-08-14","cited_by_count":0,"area":"safety"},{"id":"2509.05318","title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models","created":"2025-08-30","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}