{"total":50,"rows":[{"id":"2212.04612","title":"Training Data Influence Analysis and Estimation: A Survey","created":"2022-12-09","cited_by_count":135,"area":null},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2109.01165","title":"Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction","created":"2021-09-01","cited_by_count":37,"area":null},{"id":"2110.10926","title":"PipAttack: Poisoning Federated Recommender Systems forManipulating Item Promotion","created":"2021-10-21","cited_by_count":37,"area":null},{"id":"2405.12186","title":"Training Data Attribution via Approximate Unrolled Differentiation","created":"2024-05-20","cited_by_count":34,"area":null},{"id":"2209.10117","title":"A Comprehensive Survey on Trustworthy Recommender Systems","created":"2022-09-21","cited_by_count":32,"area":null},{"id":"2212.06325","title":"AFLGuard: Byzantine-robust Asynchronous Federated Learning","created":"2022-12-13","cited_by_count":29,"area":null},{"id":"2207.10307","title":"Knowledge-enhanced Black-box Attacks for Recommendations","created":"2022-07-21","cited_by_count":26,"area":null},{"id":"2201.12686","title":"Rank List Sensitivity of Recommender Systems to Interaction Perturbations","created":"2022-01-29","cited_by_count":20,"area":null},{"id":"2204.01499","title":"FedRecAttack: Model Poisoning Attack to Federated Recommendation","created":"2022-04-01","cited_by_count":20,"area":null},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2402.14836","title":"Stealthy Attack on Large Language Model based Recommendation","created":"2024-02-18","cited_by_count":19,"area":null},{"id":"2210.07441","title":"Characterizing the Influence of Graph Elements","created":"2022-10-14","cited_by_count":16,"area":null},{"id":"2402.11637","title":"Poisoning Federated Recommender Systems with Fake Users","created":"2024-02-18","cited_by_count":15,"area":null},{"id":"2404.14942","title":"Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures","created":"2024-04-23","cited_by_count":14,"area":null},{"id":"2101.08521","title":"Out-of-Distribution Generalization Analysis via Influence Function","created":"2021-01-21","cited_by_count":11,"area":null},{"id":"2207.11237","title":"Defending Substitution-Based Profile Pollution Attacks on Sequential Recommenders","created":"2022-07-19","cited_by_count":11,"area":null},{"id":"2402.11750","title":"In-Context Learning Demonstration Selection via Influence Analysis","created":"2024-02-19","cited_by_count":11,"area":null},{"id":"2107.10457","title":"Ready for Emerging Threats to Recommender Systems? A Graph Convolution-based Generative Shilling Attack","created":"2021-07-22","cited_by_count":10,"area":null},{"id":"2101.03042","title":"Towards a Robust and Trustworthy Machine Learning System Development: An Engineering Perspective","created":"2021-01-08","cited_by_count":9,"area":null},{"id":"2311.07127","title":"Multi-agent Attacks for Black-box Social Recommendations","created":"2023-11-13","cited_by_count":9,"area":null},{"id":"2304.09515","title":"Secure Split Learning against Property Inference, Data Reconstruction, and Feature Space Hijacking Attacks","created":"2023-04-19","cited_by_count":8,"area":null},{"id":"2306.16526","title":"Shilling Black-box Review-based Recommender Systems through Fake Review Generation","created":"2023-06-27","cited_by_count":8,"area":null},{"id":"2505.18513","title":"Enhancing Training Data Attribution with Representational Optimization","created":"2025-05-24","cited_by_count":8,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2307.15960","title":"Recommendation Unlearning via Matrix Correction","created":"2023-07-29","cited_by_count":6,"area":null},{"id":"2402.12118","title":"Sparse, Efficient and Explainable Data Attribution with DualXDA","created":"2024-02-19","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2407.15855","title":"Data Poisoning Attacks in Intelligent Transportation Systems: A Survey","created":"2024-07-06","cited_by_count":5,"area":null},{"id":"2602.09987","title":"Infusion: Shaping Model Behavior by Editing Training Data via Influence Functions","created":"2026-02-10","cited_by_count":5,"area":null},{"id":"2205.09673","title":"Detect Professional Malicious User with Metric Learning in Recommender Systems","created":"2022-05-19","cited_by_count":3,"area":null},{"id":"2211.11534","title":"Towards Adversarially Robust Recommendation from Adaptive Fraudster Detection","created":"2022-11-08","cited_by_count":3,"area":null},{"id":"2305.20043","title":"Deception by Omission: Using Adversarial Missingness to Poison Causal Structure Learning","created":"2023-05-31","cited_by_count":3,"area":null},{"id":"2502.12958","title":"Preventing the Popular Item Embedding Based Attack in Federated Recommendations","created":"2025-02-18","cited_by_count":3,"area":null},{"id":"2508.14648","title":"Understanding Data Influence with Differential Approximation","created":"2025-08-20","cited_by_count":3,"area":null},{"id":"2504.09026","title":"Detecting Instruction Fine-tuning Attacks using Influence Function","created":"2025-04-12","cited_by_count":2,"area":null},{"id":"2210.13762","title":"Towards Robust Recommender Systems via Triple Cooperative Defense","created":"2022-10-25","cited_by_count":1,"area":null},{"id":"2305.20002","title":"Representer Point Selection for Explaining Regularized High-dimensional Models","created":"2023-05-31","cited_by_count":1,"area":null},{"id":"2306.07992","title":"Securing Visually-Aware Recommender Systems: An Adversarial Image Reconstruction and Detection Framework","created":"2023-06-11","cited_by_count":1,"area":null},{"id":"2510.26185","title":"Accumulative SGD Influence Estimation for Data Attribution","created":"2025-10-30","cited_by_count":1,"area":null},{"id":"2606.05165","title":"STRIDE: Training Data Attribution via Sparse Recovery from Subset Perturbations","created":"2026-06-03","cited_by_count":1,"area":null},{"id":"2210.07817","title":"Discussion about Attacks and Defenses for Fair and Robust Recommendation System Design","created":"2022-09-28","cited_by_count":0,"area":null},{"id":"2309.17278","title":"Toward Robust Recommendation via Real-time Vicinal Defense","created":"2023-09-29","cited_by_count":0,"area":null},{"id":"2401.12700","title":"Securing Recommender System via Cooperative Training","created":"2024-01-23","cited_by_count":0,"area":null},{"id":"2405.17627","title":"Salutary Labeling with Zero Human Annotation","created":"2024-05-27","cited_by_count":0,"area":null},{"id":"2507.06258","title":"Spattack: Subgroup Poisoning Attacks on Federated Recommender Systems","created":"2025-07-07","cited_by_count":0,"area":null},{"id":"2604.22170","title":"Sharpness-Aware Poisoning: Enhancing Transferability of Injective Attacks on Recommender Systems","created":"2026-04-24","cited_by_count":0,"area":null},{"id":"2606.29064","title":"Fairness Attacks on Recommender Systems","created":"2026-06-27","cited_by_count":0,"area":null},{"id":"2610.14487","title":"AlignPoison: Conditional Targeted Poisoning of Generative Recommenders via Decoding-Aligned Prefixes","created":"2026-10-10","cited_by_count":0,"area":null}],"next_cursor":null}