{"total":93,"rows":[{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73,"area":null},{"id":"2301.02344","title":"TrojanPuzzle: Covertly Poisoning Code-Suggestion Models","created":"2023-01-06","cited_by_count":60,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2103.16074","title":"PointBA: Towards Backdoor Attacks in 3D Point Cloud","created":"2021-03-30","cited_by_count":35,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2203.08147","title":"Energy-Latency Attacks via Sponge Poisoning","created":"2022-03-14","cited_by_count":29,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2206.09707","title":"The Role of Machine Learning in Cybersecurity","created":"2022-06-20","cited_by_count":22,"area":null},{"id":"2304.00078","title":"A Meta-Summary of Challenges in Building Products with ML Components -- Collecting Experiences from 4758+ Practitioners","created":"2023-03-31","cited_by_count":22,"area":null},{"id":"2207.05164","title":"Machine Learning Security in Industry: A Quantitative Survey","created":"2022-07-11","cited_by_count":21,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2112.07467","title":"AI Ethics Principles in Practice: Perspectives of Designers and Developers","created":"2021-12-14","cited_by_count":12,"area":null},{"id":"2207.05366","title":"Image and Model Transformation with Secret Key for Vision Transformer","created":"2022-07-12","cited_by_count":12,"area":null},{"id":"2202.03493","title":"DeepStability: A Study of Unstable Numerical Methods and Their Solutions in Deep Learning","created":"2022-02-07","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2303.16004","title":"A Survey on Malware Detection with Graph Representation Learning","created":"2023-03-28","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null},{"id":"2205.14842","title":"Efficient Reward Poisoning Attacks on Online Deep Reinforcement Learning","created":"2022-05-30","cited_by_count":9,"area":null},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9,"area":null},{"id":"2308.06703","title":"Understanding the robustness difference between stochastic gradient descent and adaptive gradient methods","created":"2023-08-13","cited_by_count":8,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2310.08571","title":"Bucks for Buckets (B4B): Active Defenses Against Stealing Encoders","created":"2023-10-12","cited_by_count":8,"area":null},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7,"area":null},{"id":"2210.13660","title":"Multi-SpacePhish: Extending the Evasion-space of Adversarial Attacks against Phishing Website Detectors using Machine Learning","created":"2022-10-24","cited_by_count":7,"area":null},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2301.03052","title":"AI Maintenance: A Robustness Perspective","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2312.06718","title":"Large Scale Foundation Models for Intelligent Manufacturing Applications: A Survey","created":"2023-12-11","cited_by_count":6,"area":null},{"id":"2410.08111","title":"Active Fourier Auditor for Estimating Distributional Properties of ML Models","created":"2024-10-10","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2101.10865","title":"On managing vulnerabilities in AI/ML systems","created":"2021-01-22","cited_by_count":5,"area":null},{"id":"2303.02874","title":"Adversarial Sampling for Fairness Testing in Deep Neural Network","created":"2023-03-06","cited_by_count":5,"area":null},{"id":"2307.10587","title":"A Deep Dive into the Disparity of Word Error Rates Across Thousands of NPTEL MOOC Videos","created":"2023-07-20","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2410.11205","title":"Adversarially Guided Stateful Defense Against Backdoor Attacks in Federated Deep Learning","created":"2024-10-15","cited_by_count":5,"area":null},{"id":"2109.07171","title":"Balancing detectability and performance of attacks on the control channel of Markov Decision Processes","created":"2021-09-15","cited_by_count":4,"area":null},{"id":"2301.08751","title":"Towards Understanding How Self-training Tolerates Data Backdoor Poisoning","created":"2023-01-20","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2311.17453","title":"Privacy Measurement in Tabular Synthetic Data: State of the Art and Future Research Directions","created":"2023-11-29","cited_by_count":4,"area":null},{"id":"2406.08050","title":"Adversarial Evasion Attack Efficiency against Large Language Models","created":"2024-06-12","cited_by_count":4,"area":null},{"id":"2504.21730","title":"Cert-SSBD: Certified Backdoor Defense with Sample-Specific Smoothing Noises","created":"2025-04-30","cited_by_count":4,"area":null},{"id":"2506.13024","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","created":"2025-06-16","cited_by_count":4,"area":null},{"id":"2603.26105","title":"Are LLM-Enhanced Graph Neural Networks Robust against Poisoning Attacks?","created":"2026-03-27","cited_by_count":4,"area":null},{"id":"2104.02425","title":"The Duo of Artificial Intelligence and Big Data for Industry 4.0: Review of Applications, Techniques, Challenges, and Future Research Directions","created":"2021-04-06","cited_by_count":3,"area":null},{"id":"2301.04299","title":"SoK: Adversarial Machine Learning Attacks and Defences in Multi-Agent Reinforcement Learning","created":"2023-01-11","cited_by_count":3,"area":null},{"id":"2302.00775","title":"Model Monitoring and Robustness of In-Use Machine Learning Models: Quantifying Data Distribution Shifts Using Population Stability Index","created":"2023-02-01","cited_by_count":3,"area":null},{"id":"2306.01655","title":"Poisoning Network Flow Classifiers","created":"2023-06-02","cited_by_count":3,"area":null},{"id":"2306.09951","title":"You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks","created":"2023-06-16","cited_by_count":3,"area":null},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2406.11458","title":"Adversaries With Incentives: A Strategic Alternative to Adversarial Robustness","created":"2024-06-17","cited_by_count":3,"area":null},{"id":"2409.17328","title":"The poison of dimensionality","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2507.06262","title":"Q-Detection: A Quantum-Classical Hybrid Poisoning Attack Detection Method","created":"2025-07-07","cited_by_count":3,"area":null},{"id":"2101.12097","title":"Adversarial Machine Learning Attacks on Condition-Based Maintenance Capabilities","created":"2021-01-28","cited_by_count":2,"area":null},{"id":"2108.12001","title":"Understanding the Logit Distributions of Adversarially-Trained Deep Neural Networks","created":"2021-08-26","cited_by_count":2,"area":null},{"id":"2203.02958","title":"Towards a Responsible AI Development Lifecycle: Lessons From Information Security","created":"2022-03-06","cited_by_count":2,"area":null},{"id":"2206.04677","title":"On the Permanence of Backdoors in Evolving Models","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2401.06513","title":"ML-On-Rails: Safeguarding Machine Learning Models in Software Systems A Case Study","created":"2024-01-12","cited_by_count":2,"area":null},{"id":"2407.01110","title":"SecGenAI: Enhancing Security of Cloud-based Generative AI Applications within Australian Critical Technologies of National Interest","created":"2024-07-01","cited_by_count":2,"area":null},{"id":"2503.06529","title":"AnywhereDoor: Multi-Target Backdoor Attacks on Object Detection","created":"2025-03-09","cited_by_count":2,"area":null},{"id":"2204.08977","title":"Disappeared Command: Spoofing Attack On Automatic Speech Recognition Systems with Sound Masking","created":"2022-04-19","cited_by_count":1,"area":null},{"id":"2209.02052","title":"RX-ADS: Interpretable Anomaly Detection using Adversarial ML for Electric Vehicle CAN data","created":"2022-09-05","cited_by_count":1,"area":null},{"id":"2210.12952","title":"Ares: A System-Oriented Wargame Framework for Adversarial ML","created":"2022-10-24","cited_by_count":1,"area":null},{"id":"2302.04977","title":"Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines","created":"2023-02-09","cited_by_count":1,"area":null},{"id":"2305.11581","title":"Trustworthy, responsible, ethical AI in manufacturing and supply chains: synthesis and emerging research questions","created":"2023-05-19","cited_by_count":1,"area":null},{"id":"2401.09852","title":"Enhancing the Fairness and Performance of Edge Cameras with Explainable AI","created":"2024-01-18","cited_by_count":1,"area":null},{"id":"2407.07662","title":"Mitigating Backdoor Attacks using Activation-Guided Model Editing","created":"2024-07-10","cited_by_count":1,"area":null},{"id":"2410.08872","title":"Fragile Giants: Understanding the Susceptibility of Models to Subpopulation Attacks","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2410.12076","title":"Taking off the Rose-Tinted Glasses: A Critical Look at Adversarial ML Through the Lens of Evasion Attacks","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2105.03726","title":"Mental Models of Adversarial Machine Learning","created":"2021-05-08","cited_by_count":0,"area":null},{"id":"2306.03726","title":"Exploring Model Dynamics for Accumulative Poisoning Discovery","created":"2023-06-06","cited_by_count":0,"area":null},{"id":"2306.14609","title":"The race to robustness: exploiting fragile models for urban camouflage and the imperative for machine learning security","created":"2023-06-26","cited_by_count":0,"area":null},{"id":"2306.16127","title":"MLSMM: Machine Learning Security Maturity Model","created":"2023-06-28","cited_by_count":0,"area":null},{"id":"2312.13863","title":"Manipulating Trajectory Prediction with Backdoors","created":"2023-12-21","cited_by_count":0,"area":null},{"id":"2312.16957","title":"Attack Tree Analysis for Adversarial Evasion Attacks","created":"2023-12-28","cited_by_count":0,"area":null},{"id":"2407.08159","title":"Model-agnostic clean-label backdoor mitigation in cybersecurity environments","created":"2024-07-11","cited_by_count":0,"area":null},{"id":"2411.14243","title":"AnywhereDoor: Multi-Target Backdoor Attacks on Object Detection","created":"2024-11-21","cited_by_count":0,"area":null},{"id":"2412.17595","title":"V$^2$-SfMLearner: Learning Monocular Depth and Ego-motion for Multimodal Wireless Capsule Endoscopy","created":"2024-12-23","cited_by_count":0,"area":null},{"id":"2503.06559","title":"MMARD: Improving the Min-Max Optimization Process in Adversarial Robustness Distillation","created":"2025-03-09","cited_by_count":0,"area":null},{"id":"2506.10620","title":"Assessing the Resilience of Automotive Intrusion Detection Systems to Adversarial Manipulation","created":"2025-06-12","cited_by_count":0,"area":null},{"id":"2506.19464","title":"Assessing Risk of Stealing Proprietary Models for Medical Imaging Tasks","created":"2025-06-24","cited_by_count":0,"area":null},{"id":"2506.19871","title":"An Attack Method for Medical Insurance Claim Fraud Detection based on Generative Adversarial Network","created":"2025-06-22","cited_by_count":0,"area":null},{"id":"2506.20576","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","created":"2025-06-25","cited_by_count":0,"area":null},{"id":"2508.01276","title":"Defending Against Beta Poisoning Attacks in Machine Learning Models","created":"2025-08-02","cited_by_count":0,"area":null},{"id":"2512.13501","title":"Behavior-Aware and Generalizable Defense Against Black-Box Adversarial Attacks for ML-Based IDS","created":"2025-12-15","cited_by_count":0,"area":null},{"id":"2601.01839","title":"The Machine Learning Canvas: Empirical Findings on Why Strategy Matters More Than AI Code Generation","created":"2026-01-05","cited_by_count":0,"area":null},{"id":"2602.04753","title":"Comparative Insights on Adversarial Machine Learning from Industry and Academia: A User-Study Approach","created":"2026-02-04","cited_by_count":0,"area":null},{"id":"2606.15493","title":"Model Stealing Through the Lens of Model Multiplicity","created":"2026-06-13","cited_by_count":0,"area":null},{"id":"2607.15970","title":"Code-Poisoning Property Inference Attacks","created":"2026-07-17","cited_by_count":0,"area":null}],"next_cursor":null}