{"total":50,"rows":[{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222,"area":"safety"},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2207.05521","title":"Federated Unlearning: How to Efficiently Erase a Client in FL?","created":"2022-07-12","cited_by_count":95,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94,"area":"safety"},{"id":"2106.06361","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","created":"2021-06-11","cited_by_count":89,"area":"safety"},{"id":"2111.07970","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","created":"2021-11-15","cited_by_count":66,"area":"safety"},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2110.12925","title":"CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoning","created":"2021-10-25","cited_by_count":47,"area":"safety"},{"id":"2406.06822","title":"An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection","created":"2024-06-10","cited_by_count":40,"area":"safety"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2308.14401","title":"CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models","created":"2023-08-28","cited_by_count":34,"area":"safety"},{"id":"2404.12916","title":"Physical Backdoor Attack can Jeopardize Driving with Vision-Large-Language Models","created":"2024-04-19","cited_by_count":33,"area":"safety"},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2202.08578","title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks","created":"2022-02-17","cited_by_count":16,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2205.11803","title":"WeDef: Weakly Supervised Backdoor Defense for Text Classification","created":"2022-05-24","cited_by_count":15,"area":"safety"},{"id":"2305.16503","title":"IMBERT: Making BERT Immune to Insertion-based Backdoor Attacks","created":"2023-05-25","cited_by_count":15,"area":"safety"},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2407.11282","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","created":"2024-07-15","cited_by_count":13,"area":"safety"},{"id":"2211.07915","title":"Backdoor Attacks on Time Series: A Generative Approach","created":"2022-11-15","cited_by_count":10,"area":"safety"},{"id":"2306.15875","title":"Fake the Real: Backdoor Attack on Deep Speech Classification via Voice Conversion","created":"2023-06-28","cited_by_count":10,"area":"safety"},{"id":"2111.11870","title":"DBIA: Data-free Backdoor Injection Attack against Transformer Networks","created":"2021-11-22","cited_by_count":9,"area":"safety"},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8,"area":"safety"},{"id":"2305.04547","title":"Diffusion Theory as a Scalpel: Detecting and Purifying Poisonous Dimensions in Pre-trained Language Models Caused by Backdoor or Bias","created":"2023-05-08","cited_by_count":8,"area":"safety"},{"id":"2403.03846","title":"Can Distillation Mitigate Backdoor Attacks in Pre-trained Encoders?","created":"2024-03-06","cited_by_count":6,"area":"safety"},{"id":"2406.10932","title":"Imperceptible Rhythm Backdoor Attacks: Exploring Rhythm Transformation for Embedding Undetectable Vulnerabilities on Speech Recognition","created":"2024-06-16","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2310.07632","title":"Prompt Backdoors in Visual Prompt Learning","created":"2023-10-11","cited_by_count":4,"area":"safety"},{"id":"2405.00491","title":"On the Relevance of Byzantine Robust Optimization Against Data Poisoning","created":"2024-05-01","cited_by_count":2,"area":"safety"},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2603.02436","title":"TraceGuard: Process-Guided Firewall against Reasoning Backdoors in Large Language Models","created":"2026-03-02","cited_by_count":2,"area":"safety"},{"id":"2301.00435","title":"Trojaning semi-supervised learning model via poisoning wild images on the web","created":"2023-01-01","cited_by_count":1,"area":"safety"},{"id":"2305.05503","title":"BadCS: A Backdoor Attack Framework for Code search","created":"2023-05-09","cited_by_count":1,"area":"safety"},{"id":"2309.01480","title":"EventTrojan: Manipulating Non-Intrusive Speech Quality Assessment via Imperceptible Events","created":"2023-09-04","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2209.06397","title":"Federated Learning based on Defending Against Data Poisoning Attacks in IoT","created":"2022-09-14","cited_by_count":0,"area":"safety"},{"id":"2212.02582","title":"Rethinking Backdoor Data Poisoning Attacks in the Context of Semi-Supervised Learning","created":"2022-12-05","cited_by_count":0,"area":"safety"},{"id":"2311.04009","title":"AGNES: Abstraction-guided Framework for Deep Neural Networks Security","created":"2023-11-07","cited_by_count":0,"area":"safety"},{"id":"2406.12605","title":"Attack and Defense of Deep Learning Models in the Field of Web Attack Detection","created":"2024-06-18","cited_by_count":0,"area":"safety"},{"id":"2506.08346","title":"SPBA: Utilizing Speech Large Language Model for Backdoor Attacks on Speech Classification Models","created":"2025-06-10","cited_by_count":0,"area":"safety"},{"id":"2512.22046","title":"Backdoor Attacks on Prompt-Driven Video Segmentation Foundation Models","created":"2025-12-26","cited_by_count":0,"area":"safety"},{"id":"2603.17174","title":"Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2605.31246","title":"BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning","created":"2026-05-29","cited_by_count":0,"area":"safety"},{"id":"2609.01023","title":"AKRASIA: Stealthy Backdoor Attack on Reasoning-based Code LLMs","created":"2026-09-01","cited_by_count":0,"area":"safety"}],"next_cursor":null}