{"total":89,"rows":[{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263,"area":null},{"id":"2301.07014","title":"Dataset Distillation: A Comprehensive Review","created":"2023-01-17","cited_by_count":127,"area":null},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63,"area":null},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63,"area":null},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2206.10013","title":"Measuring the Effect of Training Data on Deep Learning Predictions via Randomized Experiments","created":"2022-06-20","cited_by_count":50,"area":null},{"id":"2303.18191","title":"Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency","created":"2023-03-27","cited_by_count":46,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2205.13616","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","created":"2022-05-26","cited_by_count":40,"area":null},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39,"area":null},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2210.07346","title":"An Embarrassingly Simple Backdoor Attack on Self-supervised Learning","created":"2022-10-13","cited_by_count":31,"area":null},{"id":"2108.09187","title":"Quantization Backdoors to Deep Learning Commercial Frameworks","created":"2021-08-20","cited_by_count":29,"area":null},{"id":"2302.11408","title":"ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms","created":"2023-02-22","cited_by_count":29,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2304.12961","title":"Chameleon: Adapting to Peer Images for Planting Durable Backdoors in Federated Learning","created":"2023-04-25","cited_by_count":21,"area":null},{"id":"2301.10908","title":"Distilling Cognitive Backdoor Patterns within an Image","created":"2023-01-26","cited_by_count":20,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2302.12758","title":"Defending Against Backdoor Attacks by Layer-wise Feature Analysis","created":"2023-02-24","cited_by_count":16,"area":null},{"id":"2301.06241","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","created":"2023-01-16","cited_by_count":15,"area":null},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2503.15293","title":"Test-Time Backdoor Detection for Object Detection Models","created":"2025-03-19","cited_by_count":14,"area":null},{"id":"2211.15929","title":"Backdoor Vulnerabilities in Normally Trained Deep Learning Models","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2204.06273","title":"Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures","created":"2022-04-13","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2212.04687","title":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","created":"2022-12-09","cited_by_count":11,"area":null},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11,"area":null},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11,"area":null},{"id":"2310.10780","title":"Demystifying Poisoning Backdoor Attacks from a Statistical Perspective","created":"2023-10-16","cited_by_count":10,"area":null},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2312.04902","title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","created":"2023-12-08","cited_by_count":7,"area":null},{"id":"2501.05928","title":"Towards Backdoor Stealthiness in Model Parameter Space","created":"2025-01-10","cited_by_count":7,"area":null},{"id":"2509.11173","title":"Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers","created":"2025-09-14","cited_by_count":7,"area":null},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2205.11736","title":"Towards a Defense Against Federated Backdoor Attacks Under Continuous Training","created":"2022-05-24","cited_by_count":5,"area":null},{"id":"2206.00145","title":"CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defences","created":"2022-05-31","cited_by_count":5,"area":null},{"id":"2301.04554","title":"Universal Detection of Backdoor Attacks via Density-based Clustering and Centroids Analysis","created":"2023-01-11","cited_by_count":5,"area":null},{"id":"2406.05826","title":"PSBD: Prediction Shift Uncertainty Unlocks Backdoor Detection","created":"2024-06-09","cited_by_count":5,"area":null},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2111.11157","title":"NTD: Non-Transferability Enabled Backdoor Detection","created":"2021-11-22","cited_by_count":3,"area":null},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3,"area":null},{"id":"2402.17465","title":"Model X-ray:Detecting Backdoored Models via Decision Boundary","created":"2024-02-27","cited_by_count":3,"area":null},{"id":"2411.11525","title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization","created":"2024-11-18","cited_by_count":3,"area":null},{"id":"2510.09647","title":"Rounding-Guided Backdoor Injection in Deep Learning Model Quantization","created":"2025-10-05","cited_by_count":3,"area":null},{"id":"2108.10132","title":"TRAPDOOR: Repurposing backdoors to detect dataset bias in machine learning-based genomic analysis","created":"2021-08-14","cited_by_count":2,"area":null},{"id":"2109.12459","title":"Two Souls in an Adversarial Image: Towards Universal Adversarial Example Detection using Multi-view Inconsistency","created":"2021-09-25","cited_by_count":2,"area":null},{"id":"2203.09289","title":"PiDAn: A Coherence Optimization Approach for Backdoor Attack Detection and Mitigation in Deep Neural Networks","created":"2022-03-17","cited_by_count":2,"area":null},{"id":"2503.12058","title":"Revisiting Training-Inference Trigger Intensity in Backdoor Attacks","created":"2025-03-15","cited_by_count":2,"area":null},{"id":"2510.14299","title":"TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening","created":"2025-10-16","cited_by_count":2,"area":null},{"id":"2112.13064","title":"CatchBackdoor: Backdoor Detection via Critical Trojan Neural Path Fuzzing","created":"2021-12-24","cited_by_count":1,"area":null},{"id":"2205.04411","title":"Model-Contrastive Learning for Backdoor Defense","created":"2022-05-09","cited_by_count":1,"area":null},{"id":"2205.13613","title":"Circumventing Backdoor Defenses That Are Based on Latent Separability","created":"2022-05-26","cited_by_count":1,"area":null},{"id":"2210.06509","title":"Understanding Impacts of Task Similarity on Backdoor Attack and Detection","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2302.04977","title":"Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines","created":"2023-02-09","cited_by_count":1,"area":null},{"id":"2402.08695","title":"Game of Trojans: Adaptive Adversaries Against Output-based Trojaned-Model Detectors","created":"2024-02-12","cited_by_count":1,"area":null},{"id":"2402.09082","title":"Detection Latencies of Anomaly Detectors: An Overlooked Perspective ?","created":"2024-02-14","cited_by_count":1,"area":null},{"id":"2408.11679","title":"BadVim: Unveiling Backdoor Threats in Visual State Space Model","created":"2024-08-21","cited_by_count":1,"area":null},{"id":"2505.12019","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","created":"2025-05-17","cited_by_count":1,"area":null},{"id":"2506.17350","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","created":"2025-06-20","cited_by_count":1,"area":null},{"id":"2603.18103","title":"STEP: Detecting Audio Backdoor Attacks via Stability-based Trigger Exposure Profiling","created":"2026-03-18","cited_by_count":1,"area":null},{"id":"2210.12179","title":"Neural Architectural Backdoors","created":"2022-10-21","cited_by_count":0,"area":null},{"id":"2303.12589","title":"Do Backdoors Assist Membership Inference Attacks?","created":"2023-03-22","cited_by_count":0,"area":null},{"id":"2304.08411","title":"Evil from Within: Machine Learning Backdoors through Hardware Trojans","created":"2023-04-17","cited_by_count":0,"area":null},{"id":"2401.15002","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-01-26","cited_by_count":0,"area":null},{"id":"2403.02950","title":"A general approach to enhance the survivability of backdoor attacks by decision path coupling","created":"2024-03-05","cited_by_count":0,"area":null},{"id":"2406.16125","title":"CBPF: Filtering Poisoned Data Based on Composite Backdoor Attack","created":"2024-06-23","cited_by_count":0,"area":null},{"id":"2408.08920","title":"A Survey of Trojan Attacks and Defenses to Deep Neural Networks","created":"2024-08-15","cited_by_count":0,"area":null},{"id":"2504.15674","title":"TrojanDam: Detection-Free Backdoor Defense in Federated Learning through Proactive Model Robustification utilizing OOD Data","created":"2025-04-22","cited_by_count":0,"area":null},{"id":"2506.01444","title":"Variance-Based Defense Against Blended Backdoor Attacks","created":"2025-06-02","cited_by_count":0,"area":null},{"id":"2506.10722","title":"TED-LaST: Towards Robust Backdoor Defense Against Adaptive Attacks","created":"2025-06-12","cited_by_count":0,"area":null},{"id":"2508.01932","title":"Proactive Disentangled Modeling of Trigger-Object Pairings for Backdoor Defense","created":"2025-08-03","cited_by_count":0,"area":null},{"id":"2605.01298","title":"Checkerboard: Closed-Form and Data-Independent Trigger Design for Clean-Label Backdoor Attacks","created":"2026-05-02","cited_by_count":0,"area":null},{"id":"2605.18907","title":"Lightweight and Fast Backdoor Model Detection","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.18908","title":"Fast and Lightweight Backdoor Detection via Head Random Probing","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.21146","title":"Detecting Trojaned DNNs via Spectral Regression Analysis","created":"2026-05-20","cited_by_count":0,"area":null}],"next_cursor":null}