{"total":151,"rows":[{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2102.05123","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","created":"2021-02-09","cited_by_count":98,"area":null},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2303.05762","title":"TrojDiff: Trojan Attacks on Diffusion Models with Diverse Targets","created":"2023-03-10","cited_by_count":88,"area":"diffusion"},{"id":"2111.00197","title":"Backdoor Pre-trained Models Can Transfer to All","created":"2021-10-30","cited_by_count":86,"area":null},{"id":"2205.13383","title":"BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning","created":"2022-05-26","cited_by_count":86,"area":null},{"id":"2104.09667","title":"Manipulating SGD with Data Ordering Attacks","created":"2021-04-19","cited_by_count":74,"area":"safety"},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63,"area":null},{"id":"2303.15180","title":"Detecting Backdoors in Pre-trained Encoders","created":"2023-03-23","cited_by_count":55,"area":"safety"},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2303.18191","title":"Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency","created":"2023-03-27","cited_by_count":46,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2111.07608","title":"Property Inference Attacks Against GANs","created":"2021-11-15","cited_by_count":33,"area":"safety"},{"id":"2210.09194","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","created":"2022-10-17","cited_by_count":33,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2203.08147","title":"Energy-Latency Attacks via Sponge Poisoning","created":"2022-03-14","cited_by_count":29,"area":null},{"id":"2206.07840","title":"Architectural Backdoors in Neural Networks","created":"2022-06-15","cited_by_count":25,"area":null},{"id":"2407.15098","title":"SeqMIA: Sequential-Metric Based Membership Inference Attack","created":"2024-07-21","cited_by_count":23,"area":"safety"},{"id":"2211.03117","title":"Going In Style: Audio Backdoors Through Stylistic Transformations","created":"2022-11-06","cited_by_count":21,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2501.18617","title":"DarkMind: Latent Chain-of-Thought Backdoor in Customized LLMs","created":"2025-01-24","cited_by_count":20,"area":"lr"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2207.00425","title":"Transferable Graph Backdoor Attack","created":"2022-06-21","cited_by_count":19,"area":null},{"id":"2104.15129","title":"Stealthy Backdoors as Compression Artifacts","created":"2021-04-30","cited_by_count":18,"area":null},{"id":"2111.10991","title":"Backdoor Attack through Frequency Domain","created":"2021-11-22","cited_by_count":18,"area":null},{"id":"2302.06279","title":"Sneaky Spikes: Uncovering Stealthy Backdoor Attacks in Spiking Neural Networks with Neuromorphic Data","created":"2023-02-13","cited_by_count":18,"area":null},{"id":"2308.04466","title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers","created":"2023-08-08","cited_by_count":18,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2211.12044","title":"Backdoor Cleansing with Unlabeled Data","created":"2022-11-22","cited_by_count":17,"area":null},{"id":"2402.02739","title":"DisDet: Exploring Detectability of Backdoor Attack on Diffusion Models","created":"2024-02-05","cited_by_count":17,"area":"diffusion"},{"id":"2211.11030","title":"Adversarial Cheap Talk","created":"2022-11-20","cited_by_count":16,"area":null},{"id":"2111.05077","title":"Enhancing Backdoor Attacks with Multi-Level MMD Regularization","created":"2021-11-09","cited_by_count":15,"area":null},{"id":"2301.06241","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","created":"2023-01-16","cited_by_count":15,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2201.00672","title":"Compression-Resistant Backdoor Attack against Deep Neural Networks","created":"2022-01-03","cited_by_count":14,"area":null},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2310.11397","title":"Last One Standing: A Comparative Analysis of Security and Privacy of Soft Prompt Tuning, LoRA, and In-Context Learning","created":"2023-10-17","cited_by_count":14,"area":"safety"},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2211.15929","title":"Backdoor Vulnerabilities in Normally Trained Deep Learning Models","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2409.13864","title":"Persistent Backdoor Attacks in Continual Learning","created":"2024-09-20","cited_by_count":13,"area":null},{"id":"2305.07406","title":"Two-in-One: A Model Hijacking Attack Against Text Generation Models","created":"2023-05-12","cited_by_count":12,"area":null},{"id":"2411.16746","title":"LoBAM: LoRA-Based Backdoor Attack on Model Merging","created":"2024-11-23","cited_by_count":12,"area":null},{"id":"2402.06957","title":"Architectural Neural Backdoors from First Principles","created":"2024-02-10","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2212.05428","title":"ezDPS: An Efficient and Zero-Knowledge Machine Learning Inference Pipeline","created":"2022-12-11","cited_by_count":10,"area":null},{"id":"2407.03160","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","created":"2024-07-03","cited_by_count":10,"area":"safety"},{"id":"2101.02562","title":"DeepPoison: Feature Transfer Based Stealthy Poisoning Attack","created":"2021-01-06","cited_by_count":9,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2401.01085","title":"Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control","created":"2024-01-02","cited_by_count":8,"area":"safety"},{"id":"2105.04839","title":"Poisoning MorphNet for Clean-Label Backdoor Attack to Point Clouds","created":"2021-05-11","cited_by_count":7,"area":null},{"id":"2202.12154","title":"Towards Effective and Robust Neural Trojan Defenses via Input Filtering","created":"2022-02-24","cited_by_count":7,"area":null},{"id":"2210.01632","title":"Backdoor Attacks in the Supply Chain of Masked Image Modeling","created":"2022-10-04","cited_by_count":7,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2308.11521","title":"Self-Deception: Reverse Penetrating the Semantic Firewall of Large Language Models","created":"2023-08-16","cited_by_count":7,"area":"safety"},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2201.04677","title":"When Machine Learning Meets Spectrum Sharing Security: Methodologies and Challenges","created":"2022-01-12","cited_by_count":6,"area":null},{"id":"2302.01740","title":"SoK: A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification","created":"2023-02-03","cited_by_count":6,"area":null},{"id":"2407.07221","title":"Tracing Back the Malicious Clients in Poisoning Attacks to Federated Learning","created":"2024-07-09","cited_by_count":6,"area":null},{"id":"2409.18214","title":"Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey","created":"2024-09-26","cited_by_count":6,"area":"diffusion"},{"id":"2510.08094","title":"DarkHash: A Data-Free Backdoor Attack Against Deep Hashing","created":"2025-10-09","cited_by_count":6,"area":null},{"id":"2102.10369","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","created":"2021-02-20","cited_by_count":5,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2106.07214","title":"Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence Functions","created":"2021-06-14","cited_by_count":5,"area":null},{"id":"2203.02079","title":"Dynamic Backdoors with Global Average Pooling","created":"2022-03-04","cited_by_count":5,"area":null},{"id":"2301.04554","title":"Universal Detection of Backdoor Attacks via Density-based Clustering and Centroids Analysis","created":"2023-01-11","cited_by_count":5,"area":null},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2307.07328","title":"Boosting Backdoor Attack with A Learnable Poisoning Sample Selection Strategy","created":"2023-07-14","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2503.21305","title":"DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data","created":"2025-03-27","cited_by_count":5,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2105.03251","title":"Exploiting Vulnerabilities in Deep Neural Networks: Adversarial and Fault-Injection Attacks","created":"2021-05-05","cited_by_count":4,"area":null},{"id":"2204.09498","title":"Backdooring Explainable Machine Learning","created":"2022-04-20","cited_by_count":4,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2402.14977","title":"Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models","created":"2024-02-22","cited_by_count":4,"area":"safety"},{"id":"2407.10825","title":"Wicked Oddities: Selectively Poisoning for Effective Clean-Label Backdoor Attacks","created":"2024-07-15","cited_by_count":4,"area":null},{"id":"2403.17787","title":"Evaluating the Efficacy of Prompt-Engineered Large Multimodal Models Versus Fine-Tuned Vision Transformers in Image-Based Security Applications","created":"2024-03-26","cited_by_count":3,"area":"mllm"},{"id":"2411.04811","title":"Defending Deep Regression Models against Backdoor Attacks","created":"2024-11-07","cited_by_count":3,"area":null},{"id":"2501.02373","title":"BADTV: Unveiling Backdoor Threats in Third-Party Task Vectors","created":"2025-01-04","cited_by_count":3,"area":"safety"},{"id":"2506.18756","title":"Semantic-Preserving Prompt Hijacking: A Black-Box Adversarial Attack on Auto-Prompt Optimization","created":"2025-05-26","cited_by_count":3,"area":null},{"id":"2108.10132","title":"TRAPDOOR: Repurposing backdoors to detect dataset bias in machine learning-based genomic analysis","created":"2021-08-14","cited_by_count":2,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2402.15653","title":"Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm","created":"2024-02-23","cited_by_count":2,"area":null},{"id":"2407.11372","title":"UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening","created":"2024-07-16","cited_by_count":2,"area":null},{"id":"2411.19075","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2508.18235","title":"Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillation","created":"2025-08-20","cited_by_count":2,"area":"diffusion"}],"next_cursor":"100"}