{"total":169,"rows":[{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263,"area":null},{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222,"area":"safety"},{"id":"2101.04898","title":"Unlearnable Examples: Making Personal Data Unexploitable","created":"2021-01-13","cited_by_count":193,"area":null},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166,"area":null},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153,"area":null},{"id":"2104.11315","title":"SPECTRE: Defending Against Backdoor Attacks Using Robust Statistics","created":"2021-04-22","cited_by_count":130,"area":null},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2204.05255","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","created":"2022-04-11","cited_by_count":103,"area":null},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98,"area":null},{"id":"2207.05521","title":"Federated Unlearning: How to Efficiently Erase a Client in FL?","created":"2022-07-12","cited_by_count":95,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94,"area":"safety"},{"id":"2106.06361","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","created":"2021-06-11","cited_by_count":89,"area":"safety"},{"id":"2104.02361","title":"Backdoor Attack in the Physical World","created":"2021-04-06","cited_by_count":84,"area":null},{"id":"2401.12242","title":"BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models","created":"2024-01-20","cited_by_count":80,"area":"lr"},{"id":"2103.13127","title":"Black-box Detection of Backdoor Attacks with Limited Information and Data","created":"2021-03-24","cited_by_count":73,"area":null},{"id":"2311.16194","title":"BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP","created":"2023-11-26","cited_by_count":67,"area":"mllm"},{"id":"2111.07970","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","created":"2021-11-15","cited_by_count":66,"area":"safety"},{"id":"2108.02432","title":"Token Shift Transformer for Video Classification","created":"2021-08-05","cited_by_count":61,"area":null},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2205.08305","title":"A Study of the Attention Abnormality in Trojaned BERTs","created":"2022-05-13","cited_by_count":48,"area":null},{"id":"2110.12925","title":"CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoning","created":"2021-10-25","cited_by_count":47,"area":"safety"},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46,"area":null},{"id":"2205.14497","title":"BadDet: Backdoor Attacks on Object Detection","created":"2022-05-28","cited_by_count":45,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2303.12993","title":"Backdoor Defense via Adaptively Splitting Poisoned Dataset","created":"2023-03-23","cited_by_count":43,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2406.06822","title":"An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection","created":"2024-06-10","cited_by_count":40,"area":"safety"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2103.16074","title":"PointBA: Towards Backdoor Attacks in 3D Point Cloud","created":"2021-03-30","cited_by_count":35,"area":null},{"id":"2201.13178","title":"Few-Shot Backdoor Attacks on Visual Object Tracking","created":"2022-01-31","cited_by_count":35,"area":null},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2308.14401","title":"CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models","created":"2023-08-28","cited_by_count":34,"area":"safety"},{"id":"2404.12916","title":"Physical Backdoor Attack can Jeopardize Driving with Vision-Large-Language Models","created":"2024-04-19","cited_by_count":33,"area":"safety"},{"id":"2203.00858","title":"Physical Backdoor Attacks to Lane Detection Systems in Autonomous Driving","created":"2022-03-02","cited_by_count":31,"area":null},{"id":"2210.07346","title":"An Embarrassingly Simple Backdoor Attack on Self-supervised Learning","created":"2022-10-13","cited_by_count":31,"area":null},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2207.00278","title":"BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label","created":"2022-07-01","cited_by_count":28,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2103.14938","title":"IoU Attack: Towards Temporally Coherent Black-Box Adversarial Attack for Visual Object Tracking","created":"2021-03-27","cited_by_count":25,"area":null},{"id":"2210.04688","title":"BAFFLE: Hiding Backdoors in Offline Reinforcement Learning Datasets","created":"2022-10-07","cited_by_count":25,"area":"offlinerl"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2301.10908","title":"Distilling Cognitive Backdoor Patterns within an Image","created":"2023-01-26","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2401.01377","title":"Does Few-shot Learning Suffer from Backdoor Attacks?","created":"2023-12-31","cited_by_count":20,"area":null},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2111.10991","title":"Backdoor Attack through Frequency Domain","created":"2021-11-22","cited_by_count":18,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2410.02195","title":"BACKTIME: Backdoor Attacks on Multivariate Time Series Forecasting","created":"2024-10-03","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2202.08578","title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks","created":"2022-02-17","cited_by_count":16,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2209.05244","title":"Universal Backdoor Attacks Detection via Adaptive Adversarial Probe","created":"2022-09-12","cited_by_count":16,"area":null},{"id":"2402.13459","title":"Learning to Poison Large Language Models for Downstream Manipulation","created":"2024-02-21","cited_by_count":16,"area":"lr"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2205.11803","title":"WeDef: Weakly Supervised Backdoor Defense for Text Classification","created":"2022-05-24","cited_by_count":15,"area":"safety"},{"id":"2205.11819","title":"Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free","created":"2022-05-24","cited_by_count":15,"area":null},{"id":"2210.05929","title":"Few-shot Backdoor Attacks via Neural Tangent Kernels","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2305.16503","title":"IMBERT: Making BERT Immune to Insertion-based Backdoor Attacks","created":"2023-05-25","cited_by_count":15,"area":"safety"},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2407.11282","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","created":"2024-07-15","cited_by_count":13,"area":"safety"},{"id":"2409.13864","title":"Persistent Backdoor Attacks in Continual Learning","created":"2024-09-20","cited_by_count":13,"area":null},{"id":"2109.08868","title":"Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning","created":"2021-09-18","cited_by_count":12,"area":null},{"id":"2211.14952","title":"Federated Learning Attacks and Defenses: A Survey","created":"2022-11-27","cited_by_count":12,"area":null},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11,"area":null},{"id":"2206.01102","title":"A temporal chrominance trigger for clean-label backdoor attack against anti-spoof rebroadcast detection","created":"2022-06-02","cited_by_count":10,"area":null},{"id":"2207.05641","title":"Backdoor Attacks on Crowd Counting","created":"2022-07-12","cited_by_count":10,"area":null},{"id":"2211.07915","title":"Backdoor Attacks on Time Series: A Generative Approach","created":"2022-11-15","cited_by_count":10,"area":"safety"},{"id":"2304.08847","title":"BadVFL: Backdoor Attacks in Vertical Federated Learning","created":"2023-04-18","cited_by_count":10,"area":null},{"id":"2306.15875","title":"Fake the Real: Backdoor Attack on Deep Speech Classification via Voice Conversion","created":"2023-06-28","cited_by_count":10,"area":"safety"},{"id":"2310.10780","title":"Demystifying Poisoning Backdoor Attacks from a Statistical Perspective","created":"2023-10-16","cited_by_count":10,"area":null},{"id":"2111.11870","title":"DBIA: Data-free Backdoor Injection Attack against Transformer Networks","created":"2021-11-22","cited_by_count":9,"area":"safety"},{"id":"2112.03695","title":"Safe Distillation Box","created":"2021-12-05","cited_by_count":9,"area":"distill"},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8,"area":"safety"},{"id":"2106.01425","title":"GAL: Gradient Assisted Learning for Decentralized Multi-Organization Collaborations","created":"2021-06-02","cited_by_count":8,"area":null},{"id":"2305.04547","title":"Diffusion Theory as a Scalpel: Detecting and Purifying Poisonous Dimensions in Pre-trained Language Models Caused by Backdoor or Bias","created":"2023-05-08","cited_by_count":8,"area":"safety"},{"id":"2309.06981","title":"MASTERKEY: Practical Backdoor Attack Against Speaker Verification Systems","created":"2023-09-13","cited_by_count":8,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2105.04839","title":"Poisoning MorphNet for Clean-Label Backdoor Attack to Point Clouds","created":"2021-05-11","cited_by_count":7,"area":null},{"id":"2206.04881","title":"Enhancing Clean Label Backdoor Attack with Two-phase Specific Triggers","created":"2022-06-10","cited_by_count":7,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2306.08386","title":"Efficient Backdoor Attacks for Deep Neural Networks in Real-world Scenarios","created":"2023-06-14","cited_by_count":7,"area":null},{"id":"2310.09744","title":"Explore the Effect of Data Selection on Poison Efficiency in Backdoor Attacks","created":"2023-10-15","cited_by_count":7,"area":null},{"id":"2208.04946","title":"Attention Hijacking in Trojan Transformers","created":"2022-08-09","cited_by_count":6,"area":null}],"next_cursor":"100"}