{"total":122,"rows":[{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73,"area":null},{"id":"2301.02344","title":"TrojanPuzzle: Covertly Poisoning Code-Suggestion Models","created":"2023-01-06","cited_by_count":60,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2106.04928","title":"Reliable Adversarial Distillation with Unreliable Teachers","created":"2021-06-09","cited_by_count":56,"area":"distill"},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2103.16074","title":"PointBA: Towards Backdoor Attacks in 3D Point Cloud","created":"2021-03-30","cited_by_count":35,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2201.11006","title":"An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications","created":"2022-01-26","cited_by_count":29,"area":null},{"id":"2203.08147","title":"Energy-Latency Attacks via Sponge Poisoning","created":"2022-03-14","cited_by_count":29,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2203.08398","title":"COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks","created":"2022-03-16","cited_by_count":26,"area":"offlinerl"},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2204.05986","title":"Machine Learning Security against Data Poisoning: Are We There Yet?","created":"2022-04-12","cited_by_count":23,"area":"safety"},{"id":"2302.12461","title":"Analyzing And Editing Inner Mechanisms Of Backdoored Language Models","created":"2023-02-24","cited_by_count":23,"area":"safety"},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2206.09707","title":"The Role of Machine Learning in Cybersecurity","created":"2022-06-20","cited_by_count":22,"area":null},{"id":"2304.00078","title":"A Meta-Summary of Challenges in Building Products with ML Components -- Collecting Experiences from 4758+ Practitioners","created":"2023-03-31","cited_by_count":22,"area":null},{"id":"2207.05164","title":"Machine Learning Security in Industry: A Quantitative Survey","created":"2022-07-11","cited_by_count":21,"area":null},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2202.08578","title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks","created":"2022-02-17","cited_by_count":16,"area":"safety"},{"id":"2310.18603","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","created":"2023-10-28","cited_by_count":14,"area":"safety"},{"id":"2505.19504","title":"DOGe: Defensive Output Generation for LLM Protection Against Knowledge Distillation","created":"2025-05-26","cited_by_count":14,"area":"distill"},{"id":"2602.03085","title":"The Trigger in the Haystack: Extracting and Reconstructing LLM Backdoor Triggers","created":"2026-02-03","cited_by_count":14,"area":"safety"},{"id":"2112.07467","title":"AI Ethics Principles in Practice: Perspectives of Designers and Developers","created":"2021-12-14","cited_by_count":12,"area":null},{"id":"2207.05366","title":"Image and Model Transformation with Secret Key for Vision Transformer","created":"2022-07-12","cited_by_count":12,"area":null},{"id":"2202.03493","title":"DeepStability: A Study of Unstable Numerical Methods and Their Solutions in Deep Learning","created":"2022-02-07","cited_by_count":11,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2303.16004","title":"A Survey on Malware Detection with Graph Representation Learning","created":"2023-03-28","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2308.06819","title":"SoK: Realistic Adversarial Attacks and Defenses for Intelligent Network Intrusion Detection","created":"2023-08-13","cited_by_count":10,"area":null},{"id":"2103.12399","title":"The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?","created":"2021-03-23","cited_by_count":9,"area":"safety"},{"id":"2205.14842","title":"Efficient Reward Poisoning Attacks on Online Deep Reinforcement Learning","created":"2022-05-30","cited_by_count":9,"area":null},{"id":"2207.00091","title":"Threat Assessment in Machine Learning based Systems","created":"2022-06-30","cited_by_count":9,"area":null},{"id":"2308.06703","title":"Understanding the robustness difference between stochastic gradient descent and adaptive gradient methods","created":"2023-08-13","cited_by_count":8,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2310.08571","title":"Bucks for Buckets (B4B): Active Defenses Against Stealing Encoders","created":"2023-10-12","cited_by_count":8,"area":null},{"id":"2401.01085","title":"Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control","created":"2024-01-02","cited_by_count":8,"area":"safety"},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2208.13904","title":"Reducing Certified Regression to Certified Classification for General Poisoning Attacks","created":"2022-08-29","cited_by_count":7,"area":null},{"id":"2210.13660","title":"Multi-SpacePhish: Extending the Evasion-space of Adversarial Attacks against Phishing Website Detectors using Machine Learning","created":"2022-10-24","cited_by_count":7,"area":null},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null},{"id":"2107.01806","title":"Evaluating the Cybersecurity Risk of Real World, Machine Learning Production Systems","created":"2021-07-05","cited_by_count":6,"area":null},{"id":"2301.03052","title":"AI Maintenance: A Robustness Perspective","created":"2023-01-08","cited_by_count":6,"area":null},{"id":"2312.06718","title":"Large Scale Foundation Models for Intelligent Manufacturing Applications: A Survey","created":"2023-12-11","cited_by_count":6,"area":null},{"id":"2410.08111","title":"Active Fourier Auditor for Estimating Distributional Properties of ML Models","created":"2024-10-10","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2101.10865","title":"On managing vulnerabilities in AI/ML systems","created":"2021-01-22","cited_by_count":5,"area":null},{"id":"2303.02874","title":"Adversarial Sampling for Fairness Testing in Deep Neural Network","created":"2023-03-06","cited_by_count":5,"area":null},{"id":"2307.10587","title":"A Deep Dive into the Disparity of Word Error Rates Across Thousands of NPTEL MOOC Videos","created":"2023-07-20","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2410.11205","title":"Adversarially Guided Stateful Defense Against Backdoor Attacks in Federated Deep Learning","created":"2024-10-15","cited_by_count":5,"area":null},{"id":"2109.07171","title":"Balancing detectability and performance of attacks on the control channel of Markov Decision Processes","created":"2021-09-15","cited_by_count":4,"area":null},{"id":"2301.08751","title":"Towards Understanding How Self-training Tolerates Data Backdoor Poisoning","created":"2023-01-20","cited_by_count":4,"area":null},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2311.17453","title":"Privacy Measurement in Tabular Synthetic Data: State of the Art and Future Research Directions","created":"2023-11-29","cited_by_count":4,"area":null},{"id":"2406.08050","title":"Adversarial Evasion Attack Efficiency against Large Language Models","created":"2024-06-12","cited_by_count":4,"area":null},{"id":"2504.21730","title":"Cert-SSBD: Certified Backdoor Defense with Sample-Specific Smoothing Noises","created":"2025-04-30","cited_by_count":4,"area":null},{"id":"2506.13024","title":"Position: Certified Robustness Does Not (Yet) Imply Model Security","created":"2025-06-16","cited_by_count":4,"area":null},{"id":"2603.26105","title":"Are LLM-Enhanced Graph Neural Networks Robust against Poisoning Attacks?","created":"2026-03-27","cited_by_count":4,"area":null},{"id":"2104.02425","title":"The Duo of Artificial Intelligence and Big Data for Industry 4.0: Review of Applications, Techniques, Challenges, and Future Research Directions","created":"2021-04-06","cited_by_count":3,"area":null},{"id":"2301.04299","title":"SoK: Adversarial Machine Learning Attacks and Defences in Multi-Agent Reinforcement Learning","created":"2023-01-11","cited_by_count":3,"area":null},{"id":"2302.00775","title":"Model Monitoring and Robustness of In-Use Machine Learning Models: Quantifying Data Distribution Shifts Using Population Stability Index","created":"2023-02-01","cited_by_count":3,"area":null},{"id":"2306.01655","title":"Poisoning Network Flow Classifiers","created":"2023-06-02","cited_by_count":3,"area":null},{"id":"2306.09951","title":"You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks","created":"2023-06-16","cited_by_count":3,"area":null},{"id":"2308.01840","title":"URET: Universal Robustness Evaluation Toolkit (for Evasion)","created":"2023-08-03","cited_by_count":3,"area":null},{"id":"2406.11458","title":"Adversaries With Incentives: A Strategic Alternative to Adversarial Robustness","created":"2024-06-17","cited_by_count":3,"area":null},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2409.17328","title":"The poison of dimensionality","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2507.06262","title":"Q-Detection: A Quantum-Classical Hybrid Poisoning Attack Detection Method","created":"2025-07-07","cited_by_count":3,"area":null},{"id":"2101.12097","title":"Adversarial Machine Learning Attacks on Condition-Based Maintenance Capabilities","created":"2021-01-28","cited_by_count":2,"area":null},{"id":"2108.12001","title":"Understanding the Logit Distributions of Adversarially-Trained Deep Neural Networks","created":"2021-08-26","cited_by_count":2,"area":null},{"id":"2203.02958","title":"Towards a Responsible AI Development Lifecycle: Lessons From Information Security","created":"2022-03-06","cited_by_count":2,"area":null},{"id":"2206.04677","title":"On the Permanence of Backdoors in Evolving Models","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2401.06513","title":"ML-On-Rails: Safeguarding Machine Learning Models in Software Systems A Case Study","created":"2024-01-12","cited_by_count":2,"area":null},{"id":"2407.01110","title":"SecGenAI: Enhancing Security of Cloud-based Generative AI Applications within Australian Critical Technologies of National Interest","created":"2024-07-01","cited_by_count":2,"area":null},{"id":"2411.14412","title":"Adversarial Data Poisoning Attacks on Quantum Machine Learning in the NISQ Era","created":"2024-11-21","cited_by_count":2,"area":"safety"},{"id":"2503.06529","title":"AnywhereDoor: Multi-Target Backdoor Attacks on Object Detection","created":"2025-03-09","cited_by_count":2,"area":null},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2204.08977","title":"Disappeared Command: Spoofing Attack On Automatic Speech Recognition Systems with Sound Masking","created":"2022-04-19","cited_by_count":1,"area":null},{"id":"2209.02052","title":"RX-ADS: Interpretable Anomaly Detection using Adversarial ML for Electric Vehicle CAN data","created":"2022-09-05","cited_by_count":1,"area":null},{"id":"2210.12952","title":"Ares: A System-Oriented Wargame Framework for Adversarial ML","created":"2022-10-24","cited_by_count":1,"area":null},{"id":"2302.04977","title":"Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines","created":"2023-02-09","cited_by_count":1,"area":null},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2305.11581","title":"Trustworthy, responsible, ethical AI in manufacturing and supply chains: synthesis and emerging research questions","created":"2023-05-19","cited_by_count":1,"area":null},{"id":"2401.09852","title":"Enhancing the Fairness and Performance of Edge Cameras with Explainable AI","created":"2024-01-18","cited_by_count":1,"area":null},{"id":"2403.02995","title":"Mitigating Label Flipping Attacks in Malicious URL Detectors Using Ensemble Trees","created":"2024-03-05","cited_by_count":1,"area":"safety"},{"id":"2407.07662","title":"Mitigating Backdoor Attacks using Activation-Guided Model Editing","created":"2024-07-10","cited_by_count":1,"area":null},{"id":"2410.08872","title":"Fragile Giants: Understanding the Susceptibility of Models to Subpopulation Attacks","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2410.12076","title":"Taking off the Rose-Tinted Glasses: A Critical Look at Adversarial ML Through the Lens of Evasion Attacks","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2105.03726","title":"Mental Models of Adversarial Machine Learning","created":"2021-05-08","cited_by_count":0,"area":null},{"id":"2306.03726","title":"Exploring Model Dynamics for Accumulative Poisoning Discovery","created":"2023-06-06","cited_by_count":0,"area":null}],"next_cursor":"100"}