{"total":83,"rows":[{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2205.13383","title":"BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning","created":"2022-05-26","cited_by_count":86,"area":null},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2205.06900","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","created":"2022-05-13","cited_by_count":55,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2105.01622","title":"Poisoning the Unlabeled Dataset of Semi-Supervised Learning","created":"2021-05-04","cited_by_count":44,"area":null},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2202.11202","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","created":"2022-02-22","cited_by_count":34,"area":"safety"},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2204.05986","title":"Machine Learning Security against Data Poisoning: Are We There Yet?","created":"2022-04-12","cited_by_count":23,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2102.00655","title":"Curse or Redemption? How Data Heterogeneity Affects the Robustness of Federated Learning","created":"2021-02-01","cited_by_count":21,"area":"safety"},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2304.01482","title":"Defending Against Patch-based Backdoor Attacks on Self-Supervised Learning","created":"2023-04-04","cited_by_count":20,"area":null},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18,"area":"safety"},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2202.10627","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","created":"2022-02-22","cited_by_count":16,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2310.17498","title":"CBD: A Certified Backdoor Detector Based on Local Dominant Probability","created":"2023-10-26","cited_by_count":13,"area":null},{"id":"2311.12850","title":"PrivImage: Differentially Private Synthetic Image Generation using Diffusion Models with Semantic-Aware Pretraining","created":"2023-10-19","cited_by_count":13,"area":"diffusion"},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2208.03309","title":"Lethal Dose Conjecture on Data Poisoning","created":"2022-08-05","cited_by_count":12,"area":"safety"},{"id":"2209.04030","title":"Unraveling the Connections between Privacy and Certified Robustness in Federated Learning Against Poisoning Attacks","created":"2022-09-08","cited_by_count":12,"area":null},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11,"area":null},{"id":"2406.00588","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","created":"2024-06-02","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2301.09732","title":"Backdoor Attacks in Peer-to-Peer Federated Learning","created":"2023-01-23","cited_by_count":9,"area":null},{"id":"2406.15093","title":"ECLIPSE: Expunging Clean-label Indiscriminate Poisons via Sparse Diffusion Purification","created":"2024-06-21","cited_by_count":9,"area":null},{"id":"2408.08143","title":"Unlearnable Examples Detection via Iterative Filtering","created":"2024-08-15","cited_by_count":9,"area":"safety"},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2503.06453","title":"Efficient Input-level Backdoor Defense on Text-to-Image Synthesis via Neuron Activation Variation","created":"2025-03-09","cited_by_count":8,"area":"diffusion"},{"id":"2210.06704","title":"COLLIDER: A Robust Training Framework for Backdoor Data","created":"2022-10-13","cited_by_count":6,"area":null},{"id":"2211.08942","title":"Differentially Private Optimizers Can Learn Adversarially Robust Models","created":"2022-11-16","cited_by_count":6,"area":null},{"id":"2306.15755","title":"Adversarial Backdoor Attack by Naturalistic Data Poisoning on Trajectory Prediction in Autonomous Driving","created":"2023-06-27","cited_by_count":6,"area":null},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2503.07501","title":"Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond","created":"2025-03-10","cited_by_count":6,"area":null},{"id":"2106.07214","title":"Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence Functions","created":"2021-06-14","cited_by_count":5,"area":null},{"id":"2208.12911","title":"Network-Level Adversaries in Federated Learning","created":"2022-08-27","cited_by_count":4,"area":null},{"id":"2211.10933","title":"Invisible Backdoor Attack with Dynamic Triggers against Person Re-identification","created":"2022-11-20","cited_by_count":4,"area":null},{"id":"2503.22413","title":"Instance-Level Data-Use Auditing of Visual ML Models","created":"2025-03-28","cited_by_count":4,"area":"safety"},{"id":"2509.16950","title":"Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving","created":"2025-09-21","cited_by_count":4,"area":"safety"},{"id":"2602.16944","title":"Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming","created":"2026-02-18","cited_by_count":4,"area":"safety"},{"id":"2111.14309","title":"A General Framework for Defending Against Backdoor Attacks via Influence Graph","created":"2021-11-29","cited_by_count":3,"area":null},{"id":"2405.18627","title":"PureGen: Universal Data Purification for Train-Time Poison Defense via Generative Model Dynamics","created":"2024-05-28","cited_by_count":3,"area":"diffusion"},{"id":"2407.10052","title":"Augmented Neural Fine-Tuning for Efficient Backdoor Purification","created":"2024-07-14","cited_by_count":3,"area":null},{"id":"2409.17328","title":"The poison of dimensionality","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2409.00863","title":"Fisher Information guided Purification against Backdoor Attacks","created":"2024-09-01","cited_by_count":2,"area":null},{"id":"2412.03441","title":"PBP: Post-training Backdoor Purification for Malware Classifiers","created":"2024-12-04","cited_by_count":2,"area":null},{"id":"2108.04206","title":"Classification Auto-Encoder based Detector against Diverse Data Poisoning Attacks","created":"2021-08-09","cited_by_count":1,"area":"safety"},{"id":"2302.04977","title":"Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines","created":"2023-02-09","cited_by_count":1,"area":null},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2305.15394","title":"Differentially-Private Decision Trees and Provable Robustness to Data Poisoning","created":"2023-05-24","cited_by_count":1,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2306.17441","title":"Efficient Backdoor Removal Through Natural Gradient Fine-tuning","created":"2023-06-30","cited_by_count":1,"area":null},{"id":"2311.06227","title":"Does Differential Privacy Prevent Backdoor Attacks in Practice?","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2312.14461","title":"Attacking Byzantine Robust Aggregation in High Dimensions","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2407.07662","title":"Mitigating Backdoor Attacks using Activation-Guided Model Editing","created":"2024-07-10","cited_by_count":1,"area":null},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2509.12386","title":"Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks","created":"2025-09-15","cited_by_count":1,"area":null},{"id":"2605.14587","title":"Angel or Demon: Investigating the Plasticity Interventions' Impact on Backdoor Threats in Deep Reinforcement Learning","created":"2026-05-14","cited_by_count":1,"area":"deeprl"},{"id":"2105.13530","title":"A BIC-based Mixture Model Defense against Data Poisoning Attacks on Classifiers","created":"2021-05-28","cited_by_count":0,"area":"safety"},{"id":"2201.07063","title":"How to Backdoor HyperNetwork in Personalized Federated Learning?","created":"2022-01-18","cited_by_count":0,"area":null},{"id":"2301.02615","title":"Silent Killer: A Stealthy, Clean-Label, Black-Box Backdoor Attack","created":"2023-01-05","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2403.16365","title":"Generating Potent Poisons and Backdoors from Scratch with Guided Diffusion","created":"2024-03-25","cited_by_count":0,"area":"diffusion"},{"id":"2405.06073","title":"Hard Work Does Not Always Pay Off: Poisoning Attacks on Neural Architecture Search","created":"2024-05-09","cited_by_count":0,"area":"safety"},{"id":"2405.19376","title":"PureEBM: Universal Poison Purification via Mid-Run Dynamics of Energy-Based Models","created":"2024-05-28","cited_by_count":0,"area":"safety"},{"id":"2411.01490","title":"Anomalous Client Detection in Federated Learning","created":"2024-11-03","cited_by_count":0,"area":null},{"id":"2504.12875","title":"A Client-level Assessment of Collaborative Backdoor Poisoning in Non-IID Federated Learning","created":"2025-04-17","cited_by_count":0,"area":null},{"id":"2507.04106","title":"Addressing The Devastating Effects Of Single-Task Data Poisoning In Exemplar-Free Continual Learning","created":"2025-07-05","cited_by_count":0,"area":"safety"},{"id":"2604.21416","title":"CSC: Turning the Adversary's Poison against Itself","created":"2026-04-23","cited_by_count":0,"area":"safety"}],"next_cursor":null}