{"total":24,"rows":[{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2204.05986","title":"Machine Learning Security against Data Poisoning: Are We There Yet?","created":"2022-04-12","cited_by_count":23,"area":"safety"},{"id":"2302.12461","title":"Analyzing And Editing Inner Mechanisms Of Backdoored Language Models","created":"2023-02-24","cited_by_count":23,"area":"safety"},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2202.08578","title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks","created":"2022-02-17","cited_by_count":16,"area":"safety"},{"id":"2310.18603","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","created":"2023-10-28","cited_by_count":14,"area":"safety"},{"id":"2602.03085","title":"The Trigger in the Haystack: Extracting and Reconstructing LLM Backdoor Triggers","created":"2026-02-03","cited_by_count":14,"area":"safety"},{"id":"2103.12399","title":"The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?","created":"2021-03-23","cited_by_count":9,"area":"safety"},{"id":"2401.01085","title":"Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control","created":"2024-01-02","cited_by_count":8,"area":"safety"},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2407.01919","title":"A Method to Facilitate Membership Inference Attacks in Deep Learning Models","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2411.14412","title":"Adversarial Data Poisoning Attacks on Quantum Machine Learning in the NISQ Era","created":"2024-11-21","cited_by_count":2,"area":"safety"},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2403.02995","title":"Mitigating Label Flipping Attacks in Malicious URL Detectors Using Ensemble Trees","created":"2024-03-05","cited_by_count":1,"area":"safety"},{"id":"2509.06896","title":"Are Targeted Data Poisoning Attacks as Effective as We Think?","created":"2025-09-08","cited_by_count":0,"area":"safety"},{"id":"2511.12722","title":"On Robustness of Linear Classifiers to Targeted Data Poisoning","created":"2025-11-16","cited_by_count":0,"area":"safety"}],"next_cursor":null}