{"total":33,"rows":[{"id":"2404.01099","title":"What is in Your Safe Data? Identifying Benign Data that Breaks Safety","created":"2024-04-01","cited_by_count":118,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2406.17216","title":"Machine Unlearning Fails to Remove Data Poisoning Attacks","created":"2024-06-25","cited_by_count":37,"area":"safety"},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2202.08578","title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks","created":"2022-02-17","cited_by_count":16,"area":"safety"},{"id":"2208.03309","title":"Lethal Dose Conjecture on Data Poisoning","created":"2022-08-05","cited_by_count":12,"area":"safety"},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2310.05141","title":"Transferable Availability Poisoning Attacks","created":"2023-10-08","cited_by_count":5,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2309.08549","title":"HINT: Healthy Influential-Noise based Training to Defend against Data Poisoning Attacks","created":"2023-09-15","cited_by_count":1,"area":"safety"},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2212.02582","title":"Rethinking Backdoor Data Poisoning Attacks in the Context of Semi-Supervised Learning","created":"2022-12-05","cited_by_count":0,"area":"safety"},{"id":"2405.06073","title":"Hard Work Does Not Always Pay Off: Poisoning Attacks on Neural Architecture Search","created":"2024-05-09","cited_by_count":0,"area":"safety"},{"id":"2405.19376","title":"PureEBM: Universal Poison Purification via Mid-Run Dynamics of Energy-Based Models","created":"2024-05-28","cited_by_count":0,"area":"safety"},{"id":"2509.06896","title":"Are Targeted Data Poisoning Attacks as Effective as We Think?","created":"2025-09-08","cited_by_count":0,"area":"safety"},{"id":"2509.25792","title":"PUREVQ-GAN: Defending Data Poisoning Attacks through Vector-Quantized Bottlenecks","created":"2025-09-30","cited_by_count":0,"area":"safety"},{"id":"2512.20865","title":"Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attacks","created":"2025-12-24","cited_by_count":0,"area":"safety"},{"id":"2610.01788","title":"SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples","created":"2026-10-01","cited_by_count":0,"area":"safety"}],"next_cursor":null}