{"total":78,"rows":[{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2106.09352","title":"Large Scale Private Learning via Low-rank Reparametrization","created":"2021-06-17","cited_by_count":88,"area":null},{"id":"2102.12677","title":"Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learning","created":"2021-02-25","cited_by_count":86,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2108.04417","title":"Privacy-Preserving Machine Learning: Methods, Challenges and Directions","created":"2021-08-10","cited_by_count":58,"area":null},{"id":"2203.11481","title":"Mixed Differential Privacy in Computer Vision","created":"2022-03-22","cited_by_count":54,"area":null},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2101.02644","title":"Data Poisoning Attacks to Deep Learning Based Recommender Systems","created":"2021-01-07","cited_by_count":43,"area":"safety"},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2210.08643","title":"A General Framework for Auditing Differentially Private Machine Learning","created":"2022-10-16","cited_by_count":25,"area":null},{"id":"2401.17319","title":"Decentralized Federated Learning: A Survey on Security and Privacy","created":"2024-01-25","cited_by_count":25,"area":null},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2102.00655","title":"Curse or Redemption? How Data Heterogeneity Affects the Robustness of Federated Learning","created":"2021-02-01","cited_by_count":21,"area":"safety"},{"id":"2208.13663","title":"Understanding the Limits of Poisoning Attacks in Episodic Reinforcement Learning","created":"2022-08-29","cited_by_count":21,"area":null},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2211.12044","title":"Backdoor Cleansing with Unlabeled Data","created":"2022-11-22","cited_by_count":17,"area":null},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2103.00671","title":"Robust learning under clean-label attack","created":"2021-03-01","cited_by_count":15,"area":null},{"id":"2107.01854","title":"Poisoning Attack against Estimating from Pairwise Comparisons","created":"2021-07-05","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2311.12850","title":"PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretraining","created":"2023-10-19","cited_by_count":13,"area":"diffusion"},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2208.03309","title":"Lethal Dose Conjecture on Data Poisoning","created":"2022-08-05","cited_by_count":12,"area":"safety"},{"id":"2209.04030","title":"Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks","created":"2022-09-08","cited_by_count":12,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2411.04376","title":"Game-Theoretic Defenses for Robust Conformal Prediction Against Adversarial Attacks in Medical Imaging","created":"2024-11-07","cited_by_count":10,"area":null},{"id":"2205.11782","title":"Fine-grained Poisoning Attack to Local Differential Privacy Protocols for Mean and Variance Estimation","created":"2022-05-24","cited_by_count":9,"area":"safety"},{"id":"2311.16065","title":"A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective","created":"2023-11-27","cited_by_count":9,"area":null},{"id":"2102.05561","title":"Meta Federated Learning","created":"2021-02-10","cited_by_count":8,"area":"safety"},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2301.12595","title":"Adversarial Attacks on Adversarial Bandits","created":"2023-01-30","cited_by_count":6,"area":null},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2110.03991","title":"Combining Differential Privacy and Byzantine Resilience in Distributed SGD","created":"2021-10-08","cited_by_count":4,"area":null},{"id":"2207.02337","title":"Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanisms","created":"2022-07-05","cited_by_count":4,"area":null},{"id":"2209.07716","title":"Renyi Differential Privacy of Propose-Test-Release and Applications to Private and Robust Machine Learning","created":"2022-09-16","cited_by_count":4,"area":null},{"id":"2303.11337","title":"Recursive Euclidean Distance Based Robust Aggregation Technique For Federated Learning","created":"2023-03-20","cited_by_count":4,"area":"safety"},{"id":"2505.05707","title":"Crowding Out The Noise: Algorithmic Collective Action Under Differential Privacy","created":"2025-05-09","cited_by_count":4,"area":null},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2405.18627","title":"PureGen: Universal Data Purification for Train-Time Poison Defense via Generative Model Dynamics","created":"2024-05-28","cited_by_count":3,"area":"diffusion"},{"id":"2409.17328","title":"The poison of dimensionality","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2501.09320","title":"Cooperative Decentralized Backdoor Attacks on Vertical Federated Learning","created":"2025-01-16","cited_by_count":3,"area":null},{"id":"2503.12314","title":"Empirical Privacy Variance","created":"2025-03-16","cited_by_count":3,"area":null},{"id":"2505.20621","title":"Multi-level Certified Defense Against Poisoning Attacks in Offline Reinforcement Learning","created":"2025-05-27","cited_by_count":3,"area":"offlinerl"},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2302.00747","title":"Universal Soldier: Using Universal Adversarial Perturbations for Detecting Backdoor Attacks","created":"2023-02-01","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2305.15394","title":"Differentially-Private Decision Trees and Provable Robustness to Data Poisoning","created":"2023-05-24","cited_by_count":1,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2307.08288","title":"Systematic Testing of the Data-Poisoning Robustness of KNN","created":"2023-07-17","cited_by_count":1,"area":"safety"},{"id":"2311.06227","title":"Does Differential Privacy Prevent Backdoor Attacks in Practice?","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2312.14712","title":"Balancing Privacy, Robustness, and Efficiency in Machine Learning","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2407.03144","title":"Venomancer: Towards Imperceptible and Target-on-Demand Backdoor Attacks in Federated Learning","created":"2024-07-03","cited_by_count":1,"area":null},{"id":"2409.13004","title":"Data Poisoning and Leakage Analysis in Federated Learning","created":"2024-09-19","cited_by_count":1,"area":"safety"},{"id":"2509.12386","title":"Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks","created":"2025-09-15","cited_by_count":1,"area":null},{"id":"2509.19921","title":"On the Fragility of Contribution Score Computation in Federated Learning","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2105.01560","title":"Broadly Applicable Targeted Data Sample Omission Attacks","created":"2021-05-04","cited_by_count":0,"area":null},{"id":"2105.13530","title":"A BIC-based Mixture Model Defense against Data Poisoning Attacks on Classifiers","created":"2021-05-28","cited_by_count":0,"area":"safety"},{"id":"2202.06250","title":"Privacy protection based on mask template","created":"2022-02-13","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2401.08458","title":"Security and Privacy Issues and Solutions in Federated Learning for Digital Healthcare","created":"2024-01-16","cited_by_count":0,"area":null},{"id":"2405.19376","title":"PureEBM: Universal Poison Purification via Mid-Run Dynamics of Energy-Based Models","created":"2024-05-28","cited_by_count":0,"area":"safety"},{"id":"2502.16396","title":"FedNIA: Noise-Induced Activation Analysis for Mitigating Data Poisoning in Federated Learning","created":"2025-02-23","cited_by_count":0,"area":"safety"},{"id":"2512.20865","title":"Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attacks","created":"2025-12-24","cited_by_count":0,"area":"safety"}],"next_cursor":null}