{"total":84,"rows":[{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324,"area":null},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222,"area":"safety"},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153,"area":null},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73,"area":null},{"id":"2201.09538","title":"Backdoor Defense with Machine Unlearning","created":"2022-01-24","cited_by_count":65,"area":null},{"id":"2108.02488","title":"Poison Ink: Robust and Invisible Backdoor Attack","created":"2021-08-05","cited_by_count":50,"area":null},{"id":"2205.14497","title":"BadDet: Backdoor Attacks on Object Detection","created":"2022-05-28","cited_by_count":45,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2106.01810","title":"Defending Against Backdoor Attacks in Natural Language Generation","created":"2021-06-03","cited_by_count":33,"area":"safety"},{"id":"2210.09194","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","created":"2022-10-17","cited_by_count":33,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2503.23751","title":"Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks","created":"2025-03-31","cited_by_count":28,"area":"safety"},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2209.05244","title":"Universal Backdoor Attacks Detection via Adaptive Adversarial Probe","created":"2022-09-12","cited_by_count":16,"area":null},{"id":"2301.10412","title":"BDMMT: Backdoor Sample Detection for Language Models through Model Mutation Testing","created":"2023-01-25","cited_by_count":16,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2301.06241","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","created":"2023-01-16","cited_by_count":15,"area":null},{"id":"2502.17100","title":"Generative Models in Decision Making: A Survey","created":"2025-02-24","cited_by_count":15,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2409.13864","title":"Persistent Backdoor Attacks in Continual Learning","created":"2024-09-20","cited_by_count":13,"area":null},{"id":"2303.00215","title":"Single Image Backdoor Inversion via Robust Smoothed Classifiers","created":"2023-03-01","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2409.14119","title":"Obliviate: Neutralizing Task-agnostic Backdoors within the Parameter-efficient Fine-tuning Paradigm","created":"2024-09-21","cited_by_count":9,"area":null},{"id":"2501.15563","title":"PCAP-Backdoor: Backdoor Poisoning Generator for Network Traffic in CPS/IoT Environments","created":"2025-01-26","cited_by_count":9,"area":"safety"},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8,"area":"safety"},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2202.12154","title":"Towards Effective and Robust Neural Trojan Defenses via Input Filtering","created":"2022-02-24","cited_by_count":7,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2408.08671","title":"Towards Physical World Backdoor Attacks against Skeleton Action Recognition","created":"2024-08-16","cited_by_count":7,"area":null},{"id":"2105.14259","title":"Detecting Backdoor in Deep Neural Networks via Intentional Adversarial Perturbations","created":"2021-05-29","cited_by_count":6,"area":null},{"id":"2307.05422","title":"Differential Analysis of Triggers and Benign Features for Black-Box DNN Backdoor Detection","created":"2023-07-11","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2306.08009","title":"DHBE: Data-free Holistic Backdoor Erasing in Deep Neural Networks via Restricted Adversarial Distillation","created":"2023-06-13","cited_by_count":5,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2407.10825","title":"Wicked Oddities: Selectively Poisoning for Effective Clean-Label Backdoor Attacks","created":"2024-07-15","cited_by_count":4,"area":null},{"id":"2111.13188","title":"BioLeaF: A Bio-plausible Learning Framework for Training of Spiking Neural Networks","created":"2021-11-14","cited_by_count":3,"area":null},{"id":"2111.14309","title":"A General Framework for Defending Against Backdoor Attacks via Influence Graph","created":"2021-11-29","cited_by_count":3,"area":null},{"id":"2304.10985","title":"INK: Inheritable Natural Backdoor Attack Against Model Distillation","created":"2023-04-21","cited_by_count":3,"area":null},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2411.04811","title":"Defending Deep Regression Models against Backdoor Attacks","created":"2024-11-07","cited_by_count":3,"area":null},{"id":"2603.15656","title":"Attribution-Guided Model Rectification of Unreliable Neural Network Behaviors","created":"2026-03-08","cited_by_count":3,"area":null},{"id":"2203.09289","title":"PiDAn: A Coherence Optimization Approach for Backdoor Attack Detection and Mitigation in Deep Neural Networks","created":"2022-03-17","cited_by_count":2,"area":null},{"id":"2206.04677","title":"On the Permanence of Backdoors in Evolving Models","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2212.10318","title":"Learned-Database Systems Security","created":"2022-12-20","cited_by_count":2,"area":null},{"id":"2402.15653","title":"Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm","created":"2024-02-23","cited_by_count":2,"area":null},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2411.19075","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2503.08829","title":"Seal Your Backdoor with Variational Defense","created":"2025-03-11","cited_by_count":2,"area":null},{"id":"2503.12058","title":"Revisiting Training-Inference Trigger Intensity in Backdoor Attacks","created":"2025-03-15","cited_by_count":2,"area":null},{"id":"2205.04411","title":"Model-Contrastive Learning for Backdoor Defense","created":"2022-05-09","cited_by_count":1,"area":null},{"id":"2210.06509","title":"Understanding Impacts of Task Similarity on Backdoor Attack and Detection","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2306.17441","title":"Efficient Backdoor Removal Through Natural Gradient Fine-tuning","created":"2023-06-30","cited_by_count":1,"area":null},{"id":"2407.07662","title":"Mitigating Backdoor Attacks using Activation-Guided Model Editing","created":"2024-07-10","cited_by_count":1,"area":null},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2501.01263","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2506.19533","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","created":"2025-06-24","cited_by_count":1,"area":null},{"id":"2101.08177","title":"On Provable Backdoor Defense in Collaborative Learning","created":"2021-01-19","cited_by_count":0,"area":null},{"id":"2211.01808","title":"Dormant Neural Trojans","created":"2022-11-02","cited_by_count":0,"area":"safety"},{"id":"2212.02582","title":"Rethinking Backdoor Data Poisoning Attacks in the Context of Semi-Supervised Learning","created":"2022-12-05","cited_by_count":0,"area":"safety"},{"id":"2307.09649","title":"Application of BadNets in Spam Filters","created":"2023-07-18","cited_by_count":0,"area":"safety"},{"id":"2308.09487","title":"DFB: A Data-Free, Low-Budget, and High-Efficacy Clean-Label Backdoor Attack","created":"2023-08-18","cited_by_count":0,"area":null},{"id":"2405.16488","title":"Partial train and isolate, mitigate backdoor attack","created":"2024-05-26","cited_by_count":0,"area":null},{"id":"2406.13073","title":"Let the Noise Speak: Harnessing Noise for a Unified Defense Against Adversarial and Backdoor Attacks","created":"2024-06-18","cited_by_count":0,"area":null},{"id":"2408.08920","title":"A Survey of Trojan Attacks and Defenses to Deep Neural Networks","created":"2024-08-15","cited_by_count":0,"area":null},{"id":"2412.16905","title":"Backdoor Attack with Invisible Triggers Based on Model Architecture Modification","created":"2024-12-22","cited_by_count":0,"area":null},{"id":"2502.10490","title":"A Robust Attack: Displacement Backdoor Attack","created":"2025-02-14","cited_by_count":0,"area":null},{"id":"2502.20306","title":"SecureGaze: Defending Gaze Estimation Against Backdoor Attacks","created":"2025-02-27","cited_by_count":0,"area":null},{"id":"2604.20047","title":"PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2605.18907","title":"Lightweight and Fast Backdoor Model Detection","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2606.14078","title":"Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning","created":"2026-06-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}