{"total":66,"rows":[{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63,"area":null},{"id":"2205.06900","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","created":"2022-05-13","cited_by_count":55,"area":null},{"id":"2302.09923","title":"Prompt Stealing Attacks Against Text-to-Image Generation Models","created":"2023-02-20","cited_by_count":51,"area":null},{"id":"2101.06969","title":"Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attacks","created":"2021-01-18","cited_by_count":49,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2210.13865","title":"Missing Counter-Evidence Renders NLP Fact-Checking Unrealistic for Misinformation","created":"2022-10-25","cited_by_count":45,"area":null},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2304.08979","title":"In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPT","created":"2023-04-18","cited_by_count":37,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2407.10887","title":"Hey, That's My Model! Introducing Chain & Hash, An LLM Fingerprinting Technique","created":"2024-07-15","cited_by_count":37,"area":null},{"id":"2408.07362","title":"BadMerging: Backdoor Attacks Against Model Merging","created":"2024-08-14","cited_by_count":34,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2303.02242","title":"TrojText: Test-time Invisible Textual Trojan Insertion","created":"2023-03-03","cited_by_count":28,"area":null},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2403.17155","title":"Task-Agnostic Detector for Insertion-Based Backdoor Attacks","created":"2024-03-25","cited_by_count":23,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2305.18651","title":"UMD: Unsupervised Model Detection for X2X Backdoor Attacks","created":"2023-05-29","cited_by_count":18,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2106.12478","title":"Teacher Model Fingerprinting Attacks Against Transfer Learning","created":"2021-06-23","cited_by_count":16,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2402.13532","title":"Backdoor Attacks on Dense Retrieval via Public and Unintentional Triggers","created":"2024-02-21","cited_by_count":14,"area":null},{"id":"2211.15929","title":"Backdoor Vulnerabilities in Normally Trained Deep Learning Models","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2305.07406","title":"Two-in-One: A Model Hijacking Attack Against Text Generation Models","created":"2023-05-12","cited_by_count":12,"area":null},{"id":"2210.00108","title":"ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks","created":"2022-09-30","cited_by_count":9,"area":null},{"id":"2409.14119","title":"Obliviate: Neutralizing Task-agnostic Backdoors within the Parameter-efficient Fine-tuning Paradigm","created":"2024-09-21","cited_by_count":9,"area":null},{"id":"2410.02182","title":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","created":"2024-10-03","cited_by_count":9,"area":null},{"id":"2408.08671","title":"Towards Physical World Backdoor Attacks against Skeleton Action Recognition","created":"2024-08-16","cited_by_count":7,"area":null},{"id":"2302.01740","title":"SoK: A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification","created":"2023-02-03","cited_by_count":6,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2410.11205","title":"Adversarially Guided Stateful Defense Against Backdoor Attacks in Federated Deep Learning","created":"2024-10-15","cited_by_count":5,"area":null},{"id":"2308.03558","title":"Mondrian: Prompt Abstraction Attack Against Large Language Models for Cheaper API Pricing","created":"2023-08-07","cited_by_count":4,"area":null},{"id":"2310.08320","title":"Defending Our Privacy With Backdoors","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2212.08121","title":"Backdoor Attack Detection in Computer Vision by Applying Matrix Factorization on the Weights of Deep Networks","created":"2022-12-15","cited_by_count":3,"area":null},{"id":"2401.01537","title":"The Art of Deception: Robust Backdoor Attack using Dynamic Stacking of Triggers","created":"2024-01-03","cited_by_count":3,"area":null},{"id":"2205.14246","title":"Defending Against Stealthy Backdoor Attacks","created":"2022-05-27","cited_by_count":2,"area":null},{"id":"2309.05679","title":"Good-looking but Lacking Faithfulness: Understanding Local Explanation Methods through Trend-based Testing","created":"2023-09-09","cited_by_count":2,"area":null},{"id":"2503.12058","title":"Revisiting Training-Inference Trigger Intensity in Backdoor Attacks","created":"2025-03-15","cited_by_count":2,"area":null},{"id":"2212.06264","title":"Data Leakage via Access Patterns of Sparse Features in Deep Learning-based Recommendation Systems","created":"2022-12-12","cited_by_count":1,"area":null},{"id":"2307.01225","title":"Alert-ME: An Explainability-Driven Defense Against Adversarial Examples in Transformer-Based Text Classification","created":"2023-07-03","cited_by_count":1,"area":null},{"id":"2407.17870","title":"Is the Digital Forensics and Incident Response Pipeline Ready for Text-Based Threats in LLM Era?","created":"2024-07-25","cited_by_count":1,"area":null},{"id":"2408.00129","title":"Vera Verto: Multimodal Hijacking Attack","created":"2024-07-31","cited_by_count":1,"area":null},{"id":"2410.19427","title":"Expose Before You Defend: Unifying and Enhancing Backdoor Defenses via Exposed Models","created":"2024-10-25","cited_by_count":1,"area":null},{"id":"2412.20476","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","created":"2024-12-29","cited_by_count":1,"area":null},{"id":"2501.01263","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2505.04977","title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","created":"2025-05-08","cited_by_count":1,"area":null},{"id":"2505.11586","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2510.06629","title":"Unsupervised Backdoor Detection and Mitigation for Spiking Neural Networks","created":"2025-10-08","cited_by_count":1,"area":null},{"id":"2511.14301","title":"SteganoBackdoor: Evading Data-Poisoning Defenses via Steganographic Backdoors","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2605.27631","title":"Poison with Style: A Practical Poisoning Attack on Code Large Language Models","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2406.16925","title":"Analyzing Multi-Head Attention on Trojan BERT Models","created":"2024-06-12","cited_by_count":0,"area":null},{"id":"2502.13459","title":"Poisoned Source Code Detection in Code Models","created":"2025-02-19","cited_by_count":0,"area":null},{"id":"2502.18592","title":"DeBUGCN -- Detecting Backdoors in CNNs Using Graph Convolutional Networks","created":"2025-02-25","cited_by_count":0,"area":null},{"id":"2511.06072","title":"CatBack: Universal Backdoor Attacks on Tabular Data via Categorical Encoding","created":"2025-11-08","cited_by_count":0,"area":null},{"id":"2601.15474","title":"BadImplant: Injection-based Multi-Targeted Graph Backdoor Attack","created":"2026-01-21","cited_by_count":0,"area":null},{"id":"2602.07200","title":"BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuron","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2603.09772","title":"Removing the Trigger, Not the Backdoor: Alternative Triggers and Latent Backdoors","created":"2026-03-10","cited_by_count":0,"area":null},{"id":"2603.11949","title":"Delayed Backdoor Attacks: Exploring the Temporal Dimension as a New Attack Surface in Pre-Trained Models","created":"2026-03-12","cited_by_count":0,"area":null},{"id":"2605.21146","title":"Detecting Trojaned DNNs via Spectral Regression Analysis","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2607.01208","title":"Distill to Detect: Exposing Stealth Biases in LLMs through Cartridge Distillation","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2607.25227","title":"Decision-Level Hijacking: Injecting Cognitive Bias into Large Language Models via Bit-Flip Attacks","created":"2026-07-28","cited_by_count":0,"area":null}],"next_cursor":null}