{"total":108,"rows":[{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2202.00622","title":"Datamodels: Predicting Predictions from Training Data","created":"2022-02-01","cited_by_count":189,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2106.09992","title":"Exploring Counterfactual Explanations Through the Lens of Adversarial Examples: A Theoretical and Empirical Analysis","created":"2021-06-18","cited_by_count":52,"area":null},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2106.06946","title":"Boosting Randomized Smoothing with Variance Reduced Classifiers","created":"2021-06-13","cited_by_count":47,"area":null},{"id":"2112.06274","title":"SparseFed: Mitigating Model Poisoning Attacks in Federated Learning with Sparsification","created":"2021-12-12","cited_by_count":46,"area":null},{"id":"2112.14889","title":"Few-shot Backdoor Defense Using Shapley Estimation","created":"2021-12-30","cited_by_count":41,"area":null},{"id":"2103.10834","title":"Improved, Deterministic Smoothing for L_1 Certified Robustness","created":"2021-03-17","cited_by_count":39,"area":null},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2401.17319","title":"Decentralized Federated Learning: A Survey on Security and Privacy","created":"2024-01-25","cited_by_count":25,"area":null},{"id":"2110.04363","title":"Certifying Robustness to Programmable Data Bias in Decision Trees","created":"2021-10-08","cited_by_count":21,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2404.13588","title":"Machine Unlearning via Null Space Calibration","created":"2024-04-21","cited_by_count":21,"area":"safety"},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18,"area":"safety"},{"id":"2302.02300","title":"Run-Off Election: Improved Provable Defense against Data Poisoning Attacks","created":"2023-02-05","cited_by_count":17,"area":"safety"},{"id":"2304.10655","title":"The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictions","created":"2023-04-20","cited_by_count":17,"area":null},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2302.12758","title":"Defending Against Backdoor Attacks by Layer-wise Feature Analysis","created":"2023-02-24","cited_by_count":16,"area":null},{"id":"2402.06244","title":"Quantifying and Enhancing Multi-modal Robustness with Modality Preference","created":"2024-02-09","cited_by_count":16,"area":null},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2210.02713","title":"On Optimal Learning Under Targeted Data Poisoning","created":"2022-10-06","cited_by_count":14,"area":"safety"},{"id":"2306.03048","title":"From Robustness to Explainability and Back Again","created":"2023-06-05","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2105.08709","title":"Learning and Certification under Instance-targeted Poisoning","created":"2021-05-18","cited_by_count":13,"area":null},{"id":"2310.17498","title":"CBD: A Certified Backdoor Detector Based on Local Dominant Probability","created":"2023-10-26","cited_by_count":13,"area":null},{"id":"2310.18762","title":"Purify++: Improving Diffusion-Purification with Advanced Diffusion Models and Control of Randomness","created":"2023-10-28","cited_by_count":13,"area":"diffusion"},{"id":"2505.17646","title":"Unveiling the Basin-Like Loss Landscape in Large Language Models","created":"2025-05-23","cited_by_count":13,"area":null},{"id":"2208.03309","title":"Lethal Dose Conjecture on Data Poisoning","created":"2022-08-05","cited_by_count":12,"area":"safety"},{"id":"2209.04030","title":"Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks","created":"2022-09-08","cited_by_count":12,"area":null},{"id":"2305.19521","title":"Incremental Randomized Smoothing Certification","created":"2023-05-31","cited_by_count":12,"area":null},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2212.09000","title":"Confidence-aware Training of Smoothed Classifiers for Certified Robustness","created":"2022-12-18","cited_by_count":9,"area":null},{"id":"2312.03979","title":"Node-aware Bi-smoothing: Certified Robustness against Graph Injection Attacks","created":"2023-12-07","cited_by_count":8,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7,"area":null},{"id":"2211.14207","title":"Invariance-Aware Randomized Smoothing Certificates","created":"2022-11-25","cited_by_count":7,"area":null},{"id":"2307.08722","title":"Certifying the Fairness of KNN in the Presence of Dataset Bias","created":"2023-07-17","cited_by_count":7,"area":null},{"id":"2310.02533","title":"Quantifying and mitigating the impact of label errors on model disparity metrics","created":"2023-10-04","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2305.03531","title":"Random Smoothing Regularization in Kernel Gradient Descent Learning","created":"2023-05-05","cited_by_count":6,"area":null},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2503.03039","title":"LLM Misalignment via Adversarial RLHF Platforms","created":"2025-03-04","cited_by_count":5,"area":"alignment"},{"id":"2204.05472","title":"Breaking Fair Binary Classification with Optimal Flipping Attacks","created":"2022-04-12","cited_by_count":4,"area":null},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2404.00076","title":"A Backdoor Approach with Inverted Labels Using Dirty Label-Flipping Attacks","created":"2024-03-29","cited_by_count":4,"area":null},{"id":"2410.09878","title":"Provably Reliable Conformal Prediction Sets in the Presence of Data Poisoning","created":"2024-10-13","cited_by_count":4,"area":"safety"},{"id":"2602.16944","title":"Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming","created":"2026-02-18","cited_by_count":4,"area":"safety"},{"id":"2201.04770","title":"Certifiable Robustness for Nearest Neighbor Classifiers","created":"2022-01-13","cited_by_count":3,"area":null},{"id":"2206.03575","title":"Certifying Data-Bias Robustness in Linear Regression","created":"2022-06-07","cited_by_count":3,"area":null},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2409.17328","title":"The poison of dimensionality","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2502.08932","title":"On the Promise for Assurance of Differentiable Neurosymbolic Reasoning Paradigms","created":"2025-02-13","cited_by_count":3,"area":"lr"},{"id":"2502.16737","title":"Keeping up with dynamic attackers: Certifying robustness to adaptive online data poisoning","created":"2025-02-23","cited_by_count":3,"area":"safety"},{"id":"2111.15487","title":"FROB: Few-shot ROBust Model for Classification and Out-of-Distribution Detection","created":"2021-11-30","cited_by_count":2,"area":null},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2302.00747","title":"Universal Soldier: Using Universal Adversarial Perturbations for Detecting Backdoor Attacks","created":"2023-02-01","cited_by_count":2,"area":null},{"id":"2402.03481","title":"FINEST: Stabilizing Recommendations by Rank-Preserving Fine-Tuning","created":"2024-02-05","cited_by_count":2,"area":null},{"id":"2406.11522","title":"FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks","created":"2024-06-17","cited_by_count":2,"area":null},{"id":"2503.18503","title":"Deterministic Certification of Graph Neural Networks against Graph Poisoning Attacks with Arbitrary Perturbations","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2506.03075","title":"Agnostic Learning under Targeted Poisoning: Optimal Rates and the Role of Randomness","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2509.25979","title":"Reconcile Certified Robustness and Accuracy for DNN-based Smoothed Majority Vote Classifier","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2206.00913","title":"Improving the Robustness and Generalization of Deep Neural Network with Confidence Threshold Reduction","created":"2022-06-02","cited_by_count":1,"area":null},{"id":"2305.15394","title":"Differentially-Private Decision Trees and Provable Robustness to Data Poisoning","created":"2023-05-24","cited_by_count":1,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2307.08288","title":"Systematic Testing of the Data-Poisoning Robustness of KNN","created":"2023-07-17","cited_by_count":1,"area":"safety"},{"id":"2311.10919","title":"PACOL: Poisoning Attacks Against Continual Learners","created":"2023-11-18","cited_by_count":1,"area":null},{"id":"2312.10911","title":"The Pros and Cons of Adversarial Robustness","created":"2023-12-18","cited_by_count":1,"area":null},{"id":"2312.14461","title":"Attacking Byzantine Robust Aggregation in High Dimensions","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2502.07011","title":"DROP: Poison Dilution via Knowledge Distillation for Federated Learning","created":"2025-02-10","cited_by_count":1,"area":"safety"},{"id":"2507.22813","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","created":"2025-07-30","cited_by_count":1,"area":"diffusion"},{"id":"2602.10457","title":"Analyzing Fairness of Neural Network Prediction via Counterfactual Dataset Generation","created":"2026-02-11","cited_by_count":1,"area":null},{"id":"2112.00434","title":"Training Experimentally Robust and Interpretable Binarized Regression Models Using Mixed-Integer Programming","created":"2021-12-01","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2306.12377","title":"Geometric Algorithms for $k$-NN Poisoning","created":"2023-06-21","cited_by_count":0,"area":null},{"id":"2310.16224","title":"Poison is Not Traceless: Fully-Agnostic Detection of Poisoning Attacks","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2405.06073","title":"Hard Work Does Not Always Pay Off: Poisoning Attacks on Neural Architecture Search","created":"2024-05-09","cited_by_count":0,"area":"safety"},{"id":"2405.18549","title":"Learning from Uncertain Data: From Possible Worlds to Possible Models","created":"2024-05-28","cited_by_count":0,"area":null},{"id":"2410.00862","title":"Timber! Poisoning Decision Trees","created":"2024-10-01","cited_by_count":0,"area":null},{"id":"2410.05284","title":"Hypnopaedia-Aware Machine Unlearning via Psychometrics of Artificial Mental Imagery","created":"2024-09-29","cited_by_count":0,"area":"safety"},{"id":"2412.10186","title":"MIBP-Cert: Certified Training against Data Perturbations with Mixed-Integer Bilinear Programs","created":"2024-12-13","cited_by_count":0,"area":null},{"id":"2502.16901","title":"Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMs","created":"2025-02-24","cited_by_count":0,"area":"safety"},{"id":"2503.17172","title":"Principal Eigenvalue Regularization for Improved Worst-Class Certified Robustness of Smoothed Classifiers","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2506.05402","title":"Lorica: A Synergistic Fine-Tuning Framework for Advancing Personalized Adversarial Robustness","created":"2025-06-04","cited_by_count":0,"area":null},{"id":"2511.12722","title":"On Robustness of Linear Classifiers to Targeted Data Poisoning","created":"2025-11-16","cited_by_count":0,"area":"safety"},{"id":"2512.20865","title":"Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attacks","created":"2025-12-24","cited_by_count":0,"area":"safety"},{"id":"2602.00183","title":"RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance","created":"2026-01-30","cited_by_count":0,"area":null}],"next_cursor":"100"}