{"total":74,"rows":[{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2202.00622","title":"Datamodels: Predicting Predictions from Training Data","created":"2022-02-01","cited_by_count":189,"area":null},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2106.09992","title":"Exploring Counterfactual Explanations Through the Lens of Adversarial Examples: A Theoretical and Empirical Analysis","created":"2021-06-18","cited_by_count":52,"area":null},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2112.06274","title":"SparseFed: Mitigating Model Poisoning Attacks in Federated Learning with Sparsification","created":"2021-12-12","cited_by_count":46,"area":null},{"id":"2112.14889","title":"Few-shot Backdoor Defense Using Shapley Estimation","created":"2021-12-30","cited_by_count":41,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2401.17319","title":"Decentralized Federated Learning: A Survey on Security and Privacy","created":"2024-01-25","cited_by_count":25,"area":null},{"id":"2110.04363","title":"Certifying Robustness to Programmable Data Bias in Decision Trees","created":"2021-10-08","cited_by_count":21,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2304.10655","title":"The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictions","created":"2023-04-20","cited_by_count":17,"area":null},{"id":"2302.12758","title":"Defending Against Backdoor Attacks by Layer-wise Feature Analysis","created":"2023-02-24","cited_by_count":16,"area":null},{"id":"2402.06244","title":"Quantifying and Enhancing Multi-modal Robustness with Modality Preference","created":"2024-02-09","cited_by_count":16,"area":null},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2306.03048","title":"From Robustness to Explainability and Back Again","created":"2023-06-05","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2105.08709","title":"Learning and Certification under Instance-targeted Poisoning","created":"2021-05-18","cited_by_count":13,"area":null},{"id":"2310.17498","title":"CBD: A Certified Backdoor Detector Based on Local Dominant Probability","created":"2023-10-26","cited_by_count":13,"area":null},{"id":"2505.17646","title":"Unveiling the Basin-Like Loss Landscape in Large Language Models","created":"2025-05-23","cited_by_count":13,"area":null},{"id":"2209.04030","title":"Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks","created":"2022-09-08","cited_by_count":12,"area":null},{"id":"2305.19521","title":"Incremental Randomized Smoothing Certification","created":"2023-05-31","cited_by_count":12,"area":null},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2312.03979","title":"Node-aware Bi-smoothing: Certified Robustness against Graph Injection Attacks","created":"2023-12-07","cited_by_count":8,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7,"area":null},{"id":"2211.14207","title":"Invariance-Aware Randomized Smoothing Certificates","created":"2022-11-25","cited_by_count":7,"area":null},{"id":"2307.08722","title":"Certifying the Fairness of KNN in the Presence of Dataset Bias","created":"2023-07-17","cited_by_count":7,"area":null},{"id":"2310.02533","title":"Quantifying and mitigating the impact of label errors on model disparity metrics","created":"2023-10-04","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2305.03531","title":"Random Smoothing Regularization in Kernel Gradient Descent Learning","created":"2023-05-05","cited_by_count":6,"area":null},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2204.05472","title":"Breaking Fair Binary Classification with Optimal Flipping Attacks","created":"2022-04-12","cited_by_count":4,"area":null},{"id":"2404.00076","title":"A Backdoor Approach with Inverted Labels Using Dirty Label-Flipping Attacks","created":"2024-03-29","cited_by_count":4,"area":null},{"id":"2201.04770","title":"Certifiable Robustness for Nearest Neighbor Classifiers","created":"2022-01-13","cited_by_count":3,"area":null},{"id":"2206.03575","title":"Certifying Data-Bias Robustness in Linear Regression","created":"2022-06-07","cited_by_count":3,"area":null},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2409.17328","title":"The poison of dimensionality","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2111.15487","title":"FROB: Few-shot ROBust Model for Classification and Out-of-Distribution Detection","created":"2021-11-30","cited_by_count":2,"area":null},{"id":"2302.00747","title":"Universal Soldier: Using Universal Adversarial Perturbations for Detecting Backdoor Attacks","created":"2023-02-01","cited_by_count":2,"area":null},{"id":"2402.03481","title":"FINEST: Stabilizing Recommendations by Rank-Preserving Fine-Tuning","created":"2024-02-05","cited_by_count":2,"area":null},{"id":"2406.11522","title":"FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks","created":"2024-06-17","cited_by_count":2,"area":null},{"id":"2503.18503","title":"Deterministic Certification of Graph Neural Networks against Graph Poisoning Attacks with Arbitrary Perturbations","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2506.03075","title":"Agnostic Learning under Targeted Poisoning: Optimal Rates and the Role of Randomness","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2509.25979","title":"Reconcile Certified Robustness and Accuracy for DNN-based Smoothed Majority Vote Classifier","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2206.00913","title":"Improving the Robustness and Generalization of Deep Neural Network with Confidence Threshold Reduction","created":"2022-06-02","cited_by_count":1,"area":null},{"id":"2311.10919","title":"PACOL: Poisoning Attacks Against Continual Learners","created":"2023-11-18","cited_by_count":1,"area":null},{"id":"2312.10911","title":"The Pros and Cons of Adversarial Robustness","created":"2023-12-18","cited_by_count":1,"area":null},{"id":"2312.14461","title":"Attacking Byzantine Robust Aggregation in High Dimensions","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2602.10457","title":"Analyzing Fairness of Neural Network Prediction via Counterfactual Dataset Generation","created":"2026-02-11","cited_by_count":1,"area":null},{"id":"2112.00434","title":"Training Experimentally Robust and Interpretable Binarized Regression Models Using Mixed-Integer Programming","created":"2021-12-01","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2306.12377","title":"Geometric Algorithms for $k$-NN Poisoning","created":"2023-06-21","cited_by_count":0,"area":null},{"id":"2310.16224","title":"Poison is Not Traceless: Fully-Agnostic Detection of Poisoning Attacks","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2405.18549","title":"Learning from Uncertain Data: From Possible Worlds to Possible Models","created":"2024-05-28","cited_by_count":0,"area":null},{"id":"2410.00862","title":"Timber! Poisoning Decision Trees","created":"2024-10-01","cited_by_count":0,"area":null},{"id":"2412.10186","title":"MIBP-Cert: Certified Training against Data Perturbations with Mixed-Integer Bilinear Programs","created":"2024-12-13","cited_by_count":0,"area":null},{"id":"2503.17172","title":"Principal Eigenvalue Regularization for Improved Worst-Class Certified Robustness of Smoothed Classifiers","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2506.05402","title":"Lorica: A Synergistic Fine-Tuning Framework for Advancing Personalized Adversarial Robustness","created":"2025-06-04","cited_by_count":0,"area":null},{"id":"2602.00183","title":"RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance","created":"2026-01-30","cited_by_count":0,"area":null},{"id":"2604.11416","title":"Exact Certification of Neural Networks and Partition Aggregation Ensembles against Label Poisoning","created":"2026-04-13","cited_by_count":0,"area":null},{"id":"2605.16440","title":"Semantic Smoothing via Novel View Synthesis for Robust SAR Image Classification","created":"2026-05-15","cited_by_count":0,"area":null},{"id":"2605.21780","title":"Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2607.01280","title":"Fixed-Set Robustness in Programming by Example: Example Corruption and Semantic Partition Recovery","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2610.03142","title":"CalCErt: Bin-wise Certification of Confidence Calibration in Medical Image Classification","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.05810","title":"Online AutoML: Evaluating Poisoning Attacks on Cost-Utility Adversarial Training Defence Strategy for IoT Networks","created":"2026-10-05","cited_by_count":0,"area":null}],"next_cursor":null}