{"total":80,"rows":[{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2303.03323","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","created":"2023-03-06","cited_by_count":63,"area":"safety"},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2310.14480","title":"Attention-Enhancing Backdoor Attacks Against BERT-based Models","created":"2023-10-23","cited_by_count":32,"area":"safety"},{"id":"2208.13049","title":"TrojViT: Trojan Insertion in Vision Transformers","created":"2022-08-27","cited_by_count":31,"area":"safety"},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2310.05862","title":"Better Safe than Sorry: Pre-training CLIP against Targeted Data Poisoning and Backdoor Attacks","created":"2023-10-05","cited_by_count":19,"area":"safety"},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2301.10412","title":"BDMMT: Backdoor Sample Detection for Language Models through Model Mutation Testing","created":"2023-01-25","cited_by_count":16,"area":"safety"},{"id":"2307.10163","title":"Rethinking Backdoor Attacks","created":"2023-07-19","cited_by_count":14,"area":"safety"},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2208.03309","title":"Lethal Dose Conjecture on Data Poisoning","created":"2022-08-05","cited_by_count":12,"area":"safety"},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2412.20392","title":"Defending Multimodal Backdoored Models by Repulsive Visual Prompt Tuning","created":"2024-12-29","cited_by_count":12,"area":"safety"},{"id":"2503.08704","title":"Life-Cycle Routing Vulnerabilities of LLM Router","created":"2025-03-09","cited_by_count":11,"area":"safety"},{"id":"2211.07915","title":"Backdoor Attacks on Time Series: A Generative Approach","created":"2022-11-15","cited_by_count":10,"area":"safety"},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2311.16646","title":"Rethinking Backdoor Attacks on Dataset Distillation: A Kernel Method Perspective","created":"2023-11-28","cited_by_count":10,"area":"safety"},{"id":"2507.05113","title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2504.20829","title":"GaussTrap: Stealthy Poisoning Attacks on 3D Gaussian Splatting for Targeted Scene Confusion","created":"2025-04-29","cited_by_count":6,"area":"safety"},{"id":"2405.10612","title":"Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers","created":"2024-05-17","cited_by_count":5,"area":"safety"},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2406.10932","title":"Imperceptible Rhythm Backdoor Attacks: Exploring Rhythm Transformation for Embedding Undetectable Vulnerabilities on Speech Recognition","created":"2024-06-16","cited_by_count":5,"area":"safety"},{"id":"2407.11921","title":"IPA-NeRF: Illusory Poisoning Attack Against Neural Radiance Fields","created":"2024-07-16","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2404.11265","title":"The Victim and The Beneficiary: Exploiting a Poisoned Model to Train a Clean Model on Poisoned Data","created":"2024-04-17","cited_by_count":4,"area":"safety"},{"id":"2601.11207","title":"LoRA as Oracle","created":"2026-01-16","cited_by_count":4,"area":"safety"},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2501.02373","title":"BADTV: Unveiling Backdoor Threats in Third-Party Task Vectors","created":"2025-01-04","cited_by_count":3,"area":"safety"},{"id":"2501.17151","title":"Scanning Trojaned Models Using Out-of-Distribution Samples","created":"2025-01-28","cited_by_count":3,"area":"safety"},{"id":"2601.19448","title":"From Internal Diagnosis to External Auditing: A VLM-Driven Paradigm for Data-Free Online Backdoor Defense","created":"2026-01-27","cited_by_count":3,"area":"safety"},{"id":"2407.05112","title":"Releasing Malevolence from Benevolence: The Menace of Benign Data on Machine Unlearning","created":"2024-07-06","cited_by_count":2,"area":"safety"},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2409.08985","title":"Clean Label Attacks against SLU Systems","created":"2024-09-13","cited_by_count":2,"area":"safety"},{"id":"2505.08255","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","created":"2025-05-13","cited_by_count":2,"area":"safety"},{"id":"2505.15175","title":"A Linear Approach to Data Poisoning","created":"2025-05-21","cited_by_count":2,"area":"safety"},{"id":"2506.22506","title":"SABRE-FL: Selective and Accurate Backdoor Rejection for Federated Prompt Learning","created":"2025-06-25","cited_by_count":2,"area":"safety"},{"id":"2602.03040","title":"DF-LoGiT: Data-Free Logic-Gated Backdoor Attacks in Vision Transformers","created":"2026-02-03","cited_by_count":2,"area":"safety"},{"id":"2605.18646","title":"Language-Switching Triggers Take a Latent Detour Through Language Models","created":"2026-05-18","cited_by_count":2,"area":"safety"},{"id":"2301.00435","title":"Trojaning semi-supervised learning model via poisoning wild images on the web","created":"2023-01-01","cited_by_count":1,"area":"safety"},{"id":"2303.15564","title":"Mask and Restore: Blind Backdoor Defense at Test Time with Masked Autoencoder","created":"2023-03-27","cited_by_count":1,"area":"safety"},{"id":"2305.05503","title":"BadCS: A Backdoor Attack Framework for Code search","created":"2023-05-09","cited_by_count":1,"area":"safety"},{"id":"2306.03600","title":"Avoid Adversarial Adaption in Federated Learning by Multi-Metric Investigations","created":"2023-06-06","cited_by_count":1,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2309.01480","title":"EventTrojan: Manipulating Non-Intrusive Speech Quality Assessment via Imperceptible Events","created":"2023-09-04","cited_by_count":1,"area":"safety"},{"id":"2406.19753","title":"Attack On Prompt: Backdoor Attack in Prompt-Based Continual Learning","created":"2024-06-28","cited_by_count":1,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2410.01128","title":"Using Interleaved Ensemble Unlearning to Keep Backdoors at Bay for Finetuning Vision Transformers","created":"2024-10-01","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2602.09284","title":"X-Mark: Saliency-Guided Robust Dataset Ownership Verification for Medical Imaging","created":"2026-02-10","cited_by_count":1,"area":"safety"},{"id":"2603.10806","title":"Backdoor Directions in Vision Transformers","created":"2026-03-11","cited_by_count":1,"area":"safety"},{"id":"2211.01808","title":"Dormant Neural Trojans","created":"2022-11-02","cited_by_count":0,"area":"safety"},{"id":"2401.09740","title":"Hijacking Attacks against Neural Networks by Analyzing Training Data","created":"2024-01-18","cited_by_count":0,"area":"safety"},{"id":"2404.12852","title":"LSP Framework: A Compensatory Model for Defeating Trigger Reverse Engineering via Label Smoothing Poisoning","created":"2024-04-19","cited_by_count":0,"area":"safety"},{"id":"2502.16901","title":"Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMs","created":"2025-02-24","cited_by_count":0,"area":"safety"},{"id":"2506.08346","title":"SPBA: Utilizing Speech Large Language Model for Backdoor Attacks on Speech Classification Models","created":"2025-06-10","cited_by_count":0,"area":"safety"},{"id":"2508.15934","title":"Strategic Sample Selection for Improved Clean-Label Backdoor Attacks in Text Classification","created":"2025-08-21","cited_by_count":0,"area":"safety"},{"id":"2511.12735","title":"Backdoor Attacks on Open Vocabulary Object Detectors via Multi-Modal Prompt Tuning","created":"2025-11-16","cited_by_count":0,"area":"safety"},{"id":"2602.03316","title":"Invisible Clean-Label Backdoor Attacks for Generative Data Augmentation","created":"2026-02-03","cited_by_count":0,"area":"safety"},{"id":"2604.21416","title":"CSC: Turning the Adversary's Poison against Itself","created":"2026-04-23","cited_by_count":0,"area":"safety"},{"id":"2605.27809","title":"Density-aware Sample-specific Attack","created":"2026-05-27","cited_by_count":0,"area":"safety"},{"id":"2606.14078","title":"Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning","created":"2026-06-12","cited_by_count":0,"area":"safety"},{"id":"2608.04052","title":"When Modalities Fail to Tango: Conformal Backdoor Detection in Multimodal Contrastive Learning","created":"2026-08-04","cited_by_count":0,"area":"safety"},{"id":"2609.25579","title":"Rethinking Backdoor Repair Evaluation: Distinguishing Aggregate Clean Utility from Benign Performance Preservation","created":"2026-09-22","cited_by_count":0,"area":"safety"},{"id":"2609.31558","title":"Region-Level Black-Box Defense Against Stealthy Embedding-Space Backdoors in CLIP","created":"2026-09-25","cited_by_count":0,"area":"safety"},{"id":"2610.19766","title":"Analyzing and Mitigating Poisoning Attacks on Flow-Based Intrusion Detection","created":"2026-10-14","cited_by_count":0,"area":"safety"}],"next_cursor":null}