{"total":97,"rows":[{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153,"area":null},{"id":"2208.11857","title":"Shortcut Learning of Large Language Models in Natural Language Understanding","created":"2022-08-25","cited_by_count":85,"area":null},{"id":"2103.06922","title":"Towards Interpreting and Mitigating Shortcut Learning Behavior of NLU Models","created":"2021-03-11","cited_by_count":78,"area":null},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2106.04690","title":"Handcrafted Backdoors in Deep Neural Networks","created":"2021-06-08","cited_by_count":63,"area":null},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2302.14677","title":"Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger","created":"2023-02-28","cited_by_count":40,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2303.11470","title":"Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarking","created":"2023-03-20","cited_by_count":37,"area":null},{"id":"2103.16074","title":"PointBA: Towards Backdoor Attacks in 3D Point Cloud","created":"2021-03-30","cited_by_count":35,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2405.10757","title":"Rethinking Graph Backdoor Attacks: A Distribution-Preserving Perspective","created":"2024-05-17","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2411.12701","title":"When Backdoors Speak: Understanding LLM Backdoor Attacks Through Model-Generated Explanations","created":"2024-11-19","cited_by_count":20,"area":"safety"},{"id":"2310.18633","title":"Setting the Trap: Capturing and Defeating Backdoors in Pretrained Language Models through Honeypots","created":"2023-10-28","cited_by_count":19,"area":"safety"},{"id":"2104.15129","title":"Stealthy Backdoors as Compression Artifacts","created":"2021-04-30","cited_by_count":18,"area":null},{"id":"2111.10991","title":"Backdoor Attack through Frequency Domain","created":"2021-11-22","cited_by_count":18,"area":null},{"id":"2308.04466","title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers","created":"2023-08-08","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2111.05077","title":"Enhancing Backdoor Attacks with Multi-Level MMD Regularization","created":"2021-11-09","cited_by_count":15,"area":null},{"id":"2111.04394","title":"Get a Model! Model Hijacking Attack Against Machine Learning Models","created":"2021-11-08","cited_by_count":14,"area":null},{"id":"2104.05996","title":"Fall of Giants: How popular text-based MLaaS fall against a simple evasion attack","created":"2021-04-13","cited_by_count":13,"area":null},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2212.04687","title":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","created":"2022-12-09","cited_by_count":11,"area":null},{"id":"2211.07915","title":"Backdoor Attacks on Time Series: A Generative Approach","created":"2022-11-15","cited_by_count":10,"area":"safety"},{"id":"2312.03205","title":"Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning","created":"2023-12-06","cited_by_count":10,"area":"safety"},{"id":"2312.09665","title":"FlowMur: A Stealthy and Practical Audio Backdoor Attack with Limited Knowledge","created":"2023-12-15","cited_by_count":10,"area":null},{"id":"2210.00108","title":"ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks","created":"2022-09-30","cited_by_count":9,"area":null},{"id":"2312.11057","title":"DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models","created":"2023-12-18","cited_by_count":9,"area":"diffusion"},{"id":"2201.06202","title":"Neighboring Backdoor Attacks on Graph Convolutional Network","created":"2022-01-17","cited_by_count":7,"area":null},{"id":"2406.09836","title":"Robustness Inspired Graph Backdoor Defense","created":"2024-06-14","cited_by_count":7,"area":null},{"id":"2408.08671","title":"Towards Physical World Backdoor Attacks against Skeleton Action Recognition","created":"2024-08-16","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2509.11173","title":"Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers","created":"2025-09-14","cited_by_count":7,"area":null},{"id":"2111.05528","title":"Lightweight machine unlearning in neural network","created":"2021-11-10","cited_by_count":6,"area":"safety"},{"id":"2308.04406","title":"XGBD: Explanation-Guided Graph Backdoor Detection","created":"2023-08-08","cited_by_count":6,"area":null},{"id":"2501.01090","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","created":"2025-01-02","cited_by_count":6,"area":null},{"id":"2504.20829","title":"GaussTrap: Stealthy Poisoning Attacks on 3D Gaussian Splatting for Targeted Scene Confusion","created":"2025-04-29","cited_by_count":6,"area":"safety"},{"id":"2212.00322","title":"Hijack Vertical Federated Learning Models As One Party","created":"2022-12-01","cited_by_count":5,"area":null},{"id":"2303.12054","title":"Influencer Backdoor Attack on Semantic Segmentation","created":"2023-03-21","cited_by_count":5,"area":null},{"id":"2309.08953","title":"Robust Backdoor Attacks on Object Detection in Real World","created":"2023-09-16","cited_by_count":5,"area":null},{"id":"2407.11921","title":"IPA-NeRF: Illusory Poisoning Attack Against Neural Radiance Fields","created":"2024-07-16","cited_by_count":5,"area":"safety"},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2110.03175","title":"Fingerprinting Multi-exit Deep Neural Network Models via Inference Time","created":"2021-10-07","cited_by_count":4,"area":null},{"id":"2204.09498","title":"Backdooring Explainable Machine Learning","created":"2022-04-20","cited_by_count":4,"area":null},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2310.10659","title":"Exploiting Machine Unlearning for Backdoor Attacks in Deep Learning System","created":"2023-09-12","cited_by_count":4,"area":null},{"id":"2404.00076","title":"A Backdoor Approach with Inverted Labels Using Dirty Label-Flipping Attacks","created":"2024-03-29","cited_by_count":4,"area":null},{"id":"2504.21730","title":"Cert-SSBD: Certified Backdoor Defense with Sample-Specific Smoothing Noises","created":"2025-04-30","cited_by_count":4,"area":null},{"id":"2107.10742","title":"Multi-modal Residual Perceptron Network for Audio-Video Emotion Recognition","created":"2021-07-21","cited_by_count":3,"area":null},{"id":"2201.08786","title":"FedComm: Federated Learning as a Medium for Covert Communication","created":"2022-01-21","cited_by_count":3,"area":null},{"id":"2205.15944","title":"Hide and Seek: on the Stealthiness of Attacks against Deep Learning Systems","created":"2022-05-31","cited_by_count":3,"area":null},{"id":"2206.07164","title":"Edge Security: Challenges and Issues","created":"2022-06-14","cited_by_count":3,"area":null},{"id":"2303.01504","title":"Backdoor for Debias: Mitigating Model Bias with Backdoor Attack-based Artificial Bias","created":"2023-03-01","cited_by_count":3,"area":null},{"id":"2304.10985","title":"INK: Inheritable Natural Backdoor Attack Against Model Distillation","created":"2023-04-21","cited_by_count":3,"area":null},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2410.18267","title":"Backdoor in Seconds: Unlocking Vulnerabilities in Large Pre-trained Models via Model Editing","created":"2024-10-23","cited_by_count":3,"area":null},{"id":"2411.03022","title":"Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras","created":"2024-11-05","cited_by_count":3,"area":null},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2109.12459","title":"Two Souls in an Adversarial Image: Towards Universal Adversarial Example Detection using Multi-view Inconsistency","created":"2021-09-25","cited_by_count":2,"area":null},{"id":"2203.09289","title":"PiDAn: A Coherence Optimization Approach for Backdoor Attack Detection and Mitigation in Deep Neural Networks","created":"2022-03-17","cited_by_count":2,"area":null},{"id":"2206.04677","title":"On the Permanence of Backdoors in Evolving Models","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2509.20714","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","created":"2025-09-25","cited_by_count":2,"area":null},{"id":"2510.14299","title":"TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening","created":"2025-10-16","cited_by_count":2,"area":null},{"id":"2601.21902","title":"Hardware-Triggered Backdoors","created":"2026-01-29","cited_by_count":2,"area":null},{"id":"2202.10582","title":"Debiasing Backdoor Attack: A Benign Application of Backdoor Attack in Eliminating Data Bias","created":"2022-02-18","cited_by_count":1,"area":null},{"id":"2305.18384","title":"Backdoor Attacks Against Incremental Learners: An Empirical Evaluation Study","created":"2023-05-28","cited_by_count":1,"area":null},{"id":"2409.13004","title":"Data Poisoning and Leakage Analysis in Federated Learning","created":"2024-09-19","cited_by_count":1,"area":"safety"},{"id":"2411.12914","title":"Trojan Cleansing with Neural Collapse","created":"2024-11-19","cited_by_count":1,"area":"safety"},{"id":"2501.01263","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","created":"2025-01-02","cited_by_count":1,"area":null},{"id":"2503.17578","title":"Large Language Models Can Verbatim Reproduce Long Malicious Sequences","created":"2025-03-21","cited_by_count":1,"area":"safety"},{"id":"2511.05845","title":"IndirectAD: Practical Data Poisoning Attacks against Recommender Systems for Item Promotion","created":"2025-11-08","cited_by_count":1,"area":"safety"},{"id":"2603.18103","title":"STEP: Detecting Audio Backdoor Attacks via Stability-based Trigger Exposure Profiling","created":"2026-03-18","cited_by_count":1,"area":null},{"id":"2605.30189","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2208.06592","title":"Confidence Matters: Inspecting Backdoors in Deep Neural Networks via Distribution Transfer","created":"2022-08-13","cited_by_count":0,"area":null},{"id":"2304.00083","title":"A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference","created":"2023-03-31","cited_by_count":0,"area":null},{"id":"2305.17688","title":"Amplification trojan network: Attack deep neural networks by amplifying their inherent weakness","created":"2023-05-28","cited_by_count":0,"area":null},{"id":"2403.12568","title":"Memory-Efficient and Secure DNN Inference on TrustZone-enabled Consumer IoT Devices","created":"2024-03-19","cited_by_count":0,"area":null},{"id":"2406.12929","title":"RMF: A Risk Measurement Framework for Machine Learning Models","created":"2024-06-15","cited_by_count":0,"area":null},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2503.21236","title":"Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashing","created":"2025-03-27","cited_by_count":0,"area":"safety"},{"id":"2506.10722","title":"TED-LaST: Towards Robust Backdoor Defense Against Adaptive Attacks","created":"2025-06-12","cited_by_count":0,"area":null},{"id":"2508.10243","title":"Pruning and Malicious Injection: A Retraining-Free Backdoor Attack on Transformer Models","created":"2025-08-14","cited_by_count":0,"area":"safety"},{"id":"2510.19145","title":"HAMLOCK: HArdware-Model LOgically Combined attacK","created":"2025-10-22","cited_by_count":0,"area":"safety"},{"id":"2511.13356","title":"Enhancing All-to-X Backdoor Attacks with Optimized Target Class Mapping","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2512.10402","title":"The Eminence in Shadow: Exploiting Feature Boundary Ambiguity for Robust Backdoor Attacks","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2603.11949","title":"Delayed Backdoor Attacks: Exploring the Temporal Dimension as a New Attack Surface in Pre-Trained Models","created":"2026-03-12","cited_by_count":0,"area":null},{"id":"2604.04488","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","created":"2026-04-06","cited_by_count":0,"area":"mllm"},{"id":"2607.15697","title":"SpeechGuard: Online Defense against Backdoor Attacks on Speech Recognition Models","created":"2026-07-17","cited_by_count":0,"area":"safety"},{"id":"2607.15724","title":"Natural Backdoor Attacks on Speech Recognition Models","created":"2026-07-17","cited_by_count":0,"area":"safety"},{"id":"2610.13051","title":"Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}