{"total":77,"rows":[{"id":"2101.05930","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","created":"2021-01-15","cited_by_count":324,"area":null},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263,"area":null},{"id":"2108.13888","title":"Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning","created":"2021-08-31","cited_by_count":113,"area":null},{"id":"2103.15543","title":"Be Careful about Poisoned Word Embeddings: Exploring the Vulnerability of the Embedding Layers in NLP Models","created":"2021-03-29","cited_by_count":105,"area":"safety"},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63,"area":null},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59,"area":null},{"id":"2108.02488","title":"Poison Ink: Robust and Invisible Backdoor Attack","created":"2021-08-05","cited_by_count":50,"area":null},{"id":"2303.18191","title":"Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency","created":"2023-03-27","cited_by_count":46,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2210.12873","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","created":"2022-10-23","cited_by_count":37,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2106.01810","title":"Defending Against Backdoor Attacks in Natural Language Generation","created":"2021-06-03","cited_by_count":33,"area":"safety"},{"id":"2210.09194","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","created":"2022-10-17","cited_by_count":33,"area":null},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26,"area":null},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2104.07395","title":"Robust Backdoor Attacks against Deep Neural Networks in Real Physical World","created":"2021-04-15","cited_by_count":20,"area":null},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2301.10908","title":"Distilling Cognitive Backdoor Patterns within an Image","created":"2023-01-26","cited_by_count":20,"area":null},{"id":"2401.15295","title":"Shortcuts Everywhere and Nowhere: Exploring Multi-Trigger Backdoor Attacks","created":"2024-01-27","cited_by_count":19,"area":null},{"id":"2204.09975","title":"Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation","created":"2022-04-21","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2402.02739","title":"DisDet: Exploring Detectability of Backdoor Attack on Diffusion Models","created":"2024-02-05","cited_by_count":17,"area":"diffusion"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2111.05077","title":"Enhancing Backdoor Attacks with Multi-Level MMD Regularization","created":"2021-11-09","cited_by_count":15,"area":null},{"id":"2205.11819","title":"Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free","created":"2022-05-24","cited_by_count":15,"area":null},{"id":"2301.06241","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","created":"2023-01-16","cited_by_count":15,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2210.10886","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","created":"2022-10-19","cited_by_count":12,"area":"safety"},{"id":"2210.17029","title":"Poison Attack and Defense on Deep Source Code Processing Models","created":"2022-10-31","cited_by_count":11,"area":"safety"},{"id":"2306.00816","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","created":"2023-06-01","cited_by_count":9,"area":null},{"id":"2302.14353","title":"A semantic backdoor attack against Graph Convolutional Networks","created":"2023-02-28","cited_by_count":8,"area":null},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2209.01721","title":"An Adaptive Black-box Defense against Trojan Attacks (TrojDef)","created":"2022-09-05","cited_by_count":5,"area":"safety"},{"id":"2401.01911","title":"Backdoor Attack on Unpaired Medical Image-Text Foundation Models: A Pilot Study on MedCLIP","created":"2024-01-01","cited_by_count":5,"area":"safety"},{"id":"2405.14781","title":"Unified Neural Backdoor Removal with Only Few Clean Samples through Unlearning and Relearning","created":"2024-05-23","cited_by_count":5,"area":null},{"id":"2411.08460","title":"Trap-MID: Trapdoor-based Defense against Model Inversion Attacks","created":"2024-11-13","cited_by_count":5,"area":null},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2503.21305","title":"DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data","created":"2025-03-27","cited_by_count":5,"area":null},{"id":"2603.12989","title":"Test-Time Attention Purification for Backdoored Large Vision Language Models","created":"2026-03-13","cited_by_count":5,"area":"mllm"},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2208.06537","title":"Defense against Backdoor Attacks via Identifying and Purifying Bad Neurons","created":"2022-08-13","cited_by_count":4,"area":null},{"id":"2208.10608","title":"RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN","created":"2022-08-22","cited_by_count":4,"area":null},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2406.10573","title":"Graph Neural Backdoor: Fundamentals, Methodologies, Applications, and Future Directions","created":"2024-06-15","cited_by_count":4,"area":null},{"id":"2203.15506","title":"Trojan Horse Training for Breaking Defenses against Backdoor Attacks in Deep Learning","created":"2022-03-25","cited_by_count":3,"area":null},{"id":"2304.14483","title":"Adversary Aware Continual Learning","created":"2023-04-27","cited_by_count":3,"area":"safety"},{"id":"2411.07114","title":"TinyML Security: Exploring Vulnerabilities in Resource-Constrained Machine Learning Systems","created":"2024-11-11","cited_by_count":3,"area":null},{"id":"2402.15653","title":"Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm","created":"2024-02-23","cited_by_count":2,"area":null},{"id":"2411.19075","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2505.22829","title":"Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergies","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2508.11848","title":"Adversarial Robustness in Distributed Quantum Machine Learning","created":"2025-08-16","cited_by_count":2,"area":null},{"id":"2204.04329","title":"An Adaptive Black-box Backdoor Detection Method for Deep Neural Networks","created":"2022-04-08","cited_by_count":1,"area":null},{"id":"2308.16684","title":"Everyone Can Attack: Repurpose Lossy Compression as a Natural Backdoor Attack","created":"2023-08-31","cited_by_count":1,"area":null},{"id":"2405.20727","title":"GANcrop: A Contrastive Defense Against Backdoor Attacks in Federated Learning","created":"2024-05-31","cited_by_count":1,"area":null},{"id":"2410.19427","title":"Expose Before You Defend: Unifying and Enhancing Backdoor Defenses via Exposed Models","created":"2024-10-25","cited_by_count":1,"area":null},{"id":"2601.04247","title":"Beyond Immediate Activation: Temporally Decoupled Backdoor Attacks on Time Series Forecasting","created":"2026-01-06","cited_by_count":1,"area":null},{"id":"2202.01179","title":"AntidoteRT: Run-time Detection and Correction of Poison Attacks on Neural Networks","created":"2022-01-31","cited_by_count":0,"area":"safety"},{"id":"2212.02582","title":"Rethinking Backdoor Data Poisoning Attacks in the Context of Semi-Supervised Learning","created":"2022-12-05","cited_by_count":0,"area":"safety"},{"id":"2306.01983","title":"Mitigating Backdoor Attack Via Prerequisite Transformation","created":"2023-06-03","cited_by_count":0,"area":null},{"id":"2312.07389","title":"Eroding Trust In Aerial Imagery: Comprehensive Analysis and Evaluation Of Adversarial Attacks In Geospatial Systems","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2410.01272","title":"\"No Matter What You Do\": Purifying GNN Models via Backdoor Unlearning","created":"2024-10-02","cited_by_count":0,"area":null},{"id":"2412.06149","title":"An Effective and Resilient Backdoor Attack Framework against Deep Neural Networks and Vision Transformers","created":"2024-12-09","cited_by_count":0,"area":"safety"},{"id":"2504.21052","title":"SFIBA: Spatial-based Full-target Invisible Backdoor Attacks","created":"2025-04-29","cited_by_count":0,"area":null},{"id":"2511.13545","title":"Robust Defense Strategies for Multimodal Contrastive Learning: Efficient Fine-tuning Against Backdoor Attacks","created":"2025-11-17","cited_by_count":0,"area":"safety"},{"id":"2604.20047","title":"PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2609.07147","title":"Fine-grained Distributed Backdoor Attacks in Federated Learning","created":"2026-09-07","cited_by_count":0,"area":null},{"id":"2610.09941","title":"Purifying Backdoored Large Vision-Language Models by Removing Hijacked Directions","created":"2026-10-07","cited_by_count":0,"area":"mllm"}],"next_cursor":null}