{"total":60,"rows":[{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36,"area":null},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2312.12585","title":"BadRL: Sparse Targeted Backdoor Attack Against Reinforcement Learning","created":"2023-12-19","cited_by_count":30,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2205.11819","title":"Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free","created":"2022-05-24","cited_by_count":15,"area":null},{"id":"2403.05750","title":"Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Text","created":"2024-03-09","cited_by_count":14,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2109.08868","title":"Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning","created":"2021-09-18","cited_by_count":12,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2210.06428","title":"Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace Subnetwork","created":"2022-10-12","cited_by_count":12,"area":null},{"id":"2212.10002","title":"Defending Against Disinformation Attacks in Open-Domain Question Answering","created":"2022-12-20","cited_by_count":12,"area":null},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11,"area":null},{"id":"2502.16184","title":"Robustness and Cybersecurity in the EU Artificial Intelligence Act","created":"2025-02-22","cited_by_count":11,"area":null},{"id":"2505.05279","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","created":"2025-05-08","cited_by_count":11,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2106.06654","title":"Disrupting Model Training with Adversarial Shortcuts","created":"2021-06-12","cited_by_count":7,"area":null},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2402.02951","title":"Dynamic Byzantine-Robust Learning: Adapting to Switching Byzantine Workers","created":"2024-02-05","cited_by_count":5,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2409.19210","title":"Learning to Obstruct Few-Shot Image Classification over Restricted Classes","created":"2024-09-28","cited_by_count":5,"area":null},{"id":"2410.11205","title":"Adversarially Guided Stateful Defense Against Backdoor Attacks in Federated Deep Learning","created":"2024-10-15","cited_by_count":5,"area":null},{"id":"2602.09987","title":"Infusion: Shaping Model Behavior by Editing Training Data via Influence Functions","created":"2026-02-10","cited_by_count":5,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2204.09498","title":"Backdooring Explainable Machine Learning","created":"2022-04-20","cited_by_count":4,"area":null},{"id":"2301.08751","title":"Towards Understanding How Self-training Tolerates Data Backdoor Poisoning","created":"2023-01-20","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2407.19203","title":"Clean-Label Physical Backdoor Attacks with Data Distillation","created":"2024-07-27","cited_by_count":4,"area":null},{"id":"2205.09167","title":"Backdoor Attacks on Bayesian Neural Networks using Reverse Distribution","created":"2022-05-18","cited_by_count":3,"area":null},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2507.06262","title":"Q-Detection: A Quantum-Classical Hybrid Poisoning Attack Detection Method","created":"2025-07-07","cited_by_count":3,"area":null},{"id":"2406.11522","title":"FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks","created":"2024-06-17","cited_by_count":2,"area":null},{"id":"2506.01849","title":"Trojan Horse Hunt in Time Series Forecasting for Space Operations","created":"2025-06-02","cited_by_count":2,"area":null},{"id":"2603.29328","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","created":"2026-03-31","cited_by_count":2,"area":null},{"id":"2604.23593","title":"When AI reviews science: Can we trust the referee?","created":"2026-04-26","cited_by_count":2,"area":null},{"id":"2302.04977","title":"Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines","created":"2023-02-09","cited_by_count":1,"area":null},{"id":"2302.13567","title":"Towards Audit Requirements for AI-based Systems in Mobility Applications","created":"2023-02-27","cited_by_count":1,"area":null},{"id":"2311.06227","title":"Does Differential Privacy Prevent Backdoor Attacks in Practice?","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2506.01230","title":"Stress-Testing ML Pipelines with Adversarial Data Corruption","created":"2025-06-02","cited_by_count":1,"area":null},{"id":"2105.01560","title":"Broadly Applicable Targeted Data Sample Omission Attacks","created":"2021-05-04","cited_by_count":0,"area":null},{"id":"2111.01093","title":"Correlation between image quality metrics of magnetic resonance images and the neural network segmentation accuracy","created":"2021-11-01","cited_by_count":0,"area":null},{"id":"2111.07138","title":"Towards One Shot Search Space Poisoning in Neural Architecture Search","created":"2021-11-13","cited_by_count":0,"area":null},{"id":"2209.08064","title":"A Systematic Evaluation of Node Embedding Robustness","created":"2022-09-16","cited_by_count":0,"area":null},{"id":"2211.14667","title":"Deep Fake Detection, Deterrence and Response: Challenges and Opportunities","created":"2022-11-26","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2312.16019","title":"Survival Analysis with Adversarial Regularization","created":"2023-12-26","cited_by_count":0,"area":null},{"id":"2402.09671","title":"Exploiting Alpha Transparency In Language And Vision-Based AI Systems","created":"2024-02-15","cited_by_count":0,"area":null},{"id":"2412.08366","title":"Backdoor attacks on DNN and GBDT -- A Case Study from the insurance domain","created":"2024-12-11","cited_by_count":0,"area":null},{"id":"2507.13629","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2601.18998","title":"Malicious Repurposing of Open Science Artefacts by Using Large Language Models","created":"2026-01-26","cited_by_count":0,"area":null},{"id":"2602.07358","title":"UTOPIA: Unlearnable Tabular Data via Decoupled Shortcut Embedding","created":"2026-02-07","cited_by_count":0,"area":null},{"id":"2602.15154","title":"Loss Knows Best: Detecting Annotation Errors in Videos via Loss Trajectories","created":"2026-02-16","cited_by_count":0,"area":null},{"id":"2610.13051","title":"Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}