{"total":116,"rows":[{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2403.13355","title":"BadEdit: Backdooring large language models by model editing","created":"2024-03-20","cited_by_count":96,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2109.08266","title":"Hard to Forget: Poisoning Attacks on Certified Machine Unlearning","created":"2021-09-17","cited_by_count":52,"area":"safety"},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2402.06659","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","created":"2024-02-05","cited_by_count":50,"area":"mllm"},{"id":"2502.08586","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","created":"2025-02-12","cited_by_count":49,"area":"agents"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36,"area":null},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2106.01810","title":"Defending Against Backdoor Attacks in Natural Language Generation","created":"2021-06-03","cited_by_count":33,"area":"safety"},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2312.12585","title":"BadRL: Sparse Targeted Backdoor Attack Against Reinforcement Learning","created":"2023-12-19","cited_by_count":30,"area":null},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2203.08398","title":"COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks","created":"2022-03-16","cited_by_count":26,"area":"offlinerl"},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2102.13624","title":"What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning","created":"2021-02-26","cited_by_count":22,"area":"safety"},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2303.08500","title":"The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models","created":"2023-03-15","cited_by_count":19,"area":"diffusion"},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2202.08578","title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks","created":"2022-02-17","cited_by_count":16,"area":"safety"},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2205.11819","title":"Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free","created":"2022-05-24","cited_by_count":15,"area":null},{"id":"2403.05750","title":"Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Text","created":"2024-03-09","cited_by_count":14,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2109.08868","title":"Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning","created":"2021-09-18","cited_by_count":12,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2210.06428","title":"Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace Subnetwork","created":"2022-10-12","cited_by_count":12,"area":null},{"id":"2212.10002","title":"Defending Against Disinformation Attacks in Open-Domain Question Answering","created":"2022-12-20","cited_by_count":12,"area":null},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11,"area":null},{"id":"2502.16184","title":"Robustness and Cybersecurity in the EU Artificial Intelligence Act","created":"2025-02-22","cited_by_count":11,"area":null},{"id":"2505.05279","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","created":"2025-05-08","cited_by_count":11,"area":null},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2403.08618","title":"SAP: Corrective Machine Unlearning with Scaled Activation Projection for Label Noise Robustness","created":"2024-03-13","cited_by_count":10,"area":"safety"},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2505.14585","title":"Context Reasoner: Incentivizing Reasoning Capability for Contextualized Privacy and Safety Compliance via Reinforcement Learning","created":"2025-05-20","cited_by_count":8,"area":"lr"},{"id":"2106.06654","title":"Disrupting Model Training with Adversarial Shortcuts","created":"2021-06-12","cited_by_count":7,"area":null},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2402.02951","title":"Dynamic Byzantine-Robust Learning: Adapting to Switching Byzantine Workers","created":"2024-02-05","cited_by_count":5,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2409.19210","title":"Learning to Obstruct Few-Shot Image Classification over Restricted Classes","created":"2024-09-28","cited_by_count":5,"area":null},{"id":"2410.11205","title":"Adversarially Guided Stateful Defense Against Backdoor Attacks in Federated Deep Learning","created":"2024-10-15","cited_by_count":5,"area":null},{"id":"2602.09987","title":"Infusion: Shaping Model Behavior by Editing Training Data via Influence Functions","created":"2026-02-10","cited_by_count":5,"area":null},{"id":"2602.15671","title":"Revisiting Backdoor Threat in Federated Instruction Tuning from a Signal Aggregation Perspective","created":"2026-02-17","cited_by_count":5,"area":"safety"},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2204.09498","title":"Backdooring Explainable Machine Learning","created":"2022-04-20","cited_by_count":4,"area":null},{"id":"2301.08751","title":"Towards Understanding How Self-training Tolerates Data Backdoor Poisoning","created":"2023-01-20","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2407.19203","title":"Clean-Label Physical Backdoor Attacks with Data Distillation","created":"2024-07-27","cited_by_count":4,"area":null},{"id":"2205.09167","title":"Backdoor Attacks on Bayesian Neural Networks using Reverse Distribution","created":"2022-05-18","cited_by_count":3,"area":null},{"id":"2312.11500","title":"A Red Teaming Framework for Securing AI in Maritime Autonomous Systems","created":"2023-12-08","cited_by_count":3,"area":"safety"},{"id":"2402.14124","title":"Fake Resume Attacks: Data Poisoning on Online Job Platforms","created":"2024-02-21","cited_by_count":3,"area":"safety"},{"id":"2405.16798","title":"Exploring Fairness in Educational Data Mining in the Context of the Right to be Forgotten","created":"2024-05-27","cited_by_count":3,"area":"safety"},{"id":"2405.18627","title":"PureGen: Universal Data Purification for Train-Time Poison Defense via Generative Model Dynamics","created":"2024-05-28","cited_by_count":3,"area":"diffusion"},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2507.06262","title":"Q-Detection: A Quantum-Classical Hybrid Poisoning Attack Detection Method","created":"2025-07-07","cited_by_count":3,"area":null},{"id":"2508.07458","title":"Towards Unveiling Predictive Uncertainty Vulnerabilities in the Context of the Right to Be Forgotten","created":"2025-08-10","cited_by_count":3,"area":"safety"},{"id":"2511.11020","title":"Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysis","created":"2025-11-14","cited_by_count":3,"area":"safety"},{"id":"2406.11522","title":"FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks","created":"2024-06-17","cited_by_count":2,"area":null},{"id":"2506.01849","title":"Trojan Horse Hunt in Time Series Forecasting for Space Operations","created":"2025-06-02","cited_by_count":2,"area":null},{"id":"2508.07066","title":"Membership Inference Attacks with False Discovery Rate Control","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2602.15927","title":"Visual Memory Injection Attacks for Multi-Turn Conversations","created":"2026-02-17","cited_by_count":2,"area":"mllm"},{"id":"2603.29328","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","created":"2026-03-31","cited_by_count":2,"area":null},{"id":"2604.23593","title":"When AI reviews science: Can we trust the referee?","created":"2026-04-26","cited_by_count":2,"area":null},{"id":"2302.04977","title":"Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines","created":"2023-02-09","cited_by_count":1,"area":null},{"id":"2302.13567","title":"Towards Audit Requirements for AI-based Systems in Mobility Applications","created":"2023-02-27","cited_by_count":1,"area":null},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2309.08549","title":"HINT: Healthy Influential-Noise based Training to Defend against Data Poisoning Attacks","created":"2023-09-15","cited_by_count":1,"area":"safety"},{"id":"2311.06227","title":"Does Differential Privacy Prevent Backdoor Attacks in Practice?","created":"2023-11-10","cited_by_count":1,"area":null},{"id":"2401.15817","title":"Transparency Attacks: How Imperceptible Image Layers Can Fool AI Perception","created":"2024-01-29","cited_by_count":1,"area":"safety"},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2506.01230","title":"Stress-Testing ML Pipelines with Adversarial Data Corruption","created":"2025-06-02","cited_by_count":1,"area":null},{"id":"2508.02422","title":"Superior resilience to poisoning and amenability to unlearning in quantum machine learning","created":"2025-08-04","cited_by_count":1,"area":"safety"},{"id":"2606.21172","title":"BadDreamer: Transferable Backdoor Attacks against Video World Models for Autonomous Driving","created":"2026-06-19","cited_by_count":1,"area":"wm"},{"id":"2105.01560","title":"Broadly Applicable Targeted Data Sample Omission Attacks","created":"2021-05-04","cited_by_count":0,"area":null},{"id":"2111.01093","title":"Correlation between image quality metrics of magnetic resonance images and the neural network segmentation accuracy","created":"2021-11-01","cited_by_count":0,"area":null},{"id":"2111.07138","title":"Towards One Shot Search Space Poisoning in Neural Architecture Search","created":"2021-11-13","cited_by_count":0,"area":null},{"id":"2209.08064","title":"A Systematic Evaluation of Node Embedding Robustness","created":"2022-09-16","cited_by_count":0,"area":null},{"id":"2211.14667","title":"Deep Fake Detection, Deterrence and Response: Challenges and Opportunities","created":"2022-11-26","cited_by_count":0,"area":null},{"id":"2212.02582","title":"Rethinking Backdoor Data Poisoning Attacks in the Context of Semi-Supervised Learning","created":"2022-12-05","cited_by_count":0,"area":"safety"},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2312.16019","title":"Survival Analysis with Adversarial Regularization","created":"2023-12-26","cited_by_count":0,"area":null},{"id":"2402.09671","title":"Exploiting Alpha Transparency In Language And Vision-Based AI Systems","created":"2024-02-15","cited_by_count":0,"area":null},{"id":"2403.16365","title":"Generating Potent Poisons and Backdoors from Scratch with Guided Diffusion","created":"2024-03-25","cited_by_count":0,"area":"diffusion"},{"id":"2405.06073","title":"Hard Work Does Not Always Pay Off: Poisoning Attacks on Neural Architecture Search","created":"2024-05-09","cited_by_count":0,"area":"safety"},{"id":"2405.19376","title":"PureEBM: Universal Poison Purification via Mid-Run Dynamics of Energy-Based Models","created":"2024-05-28","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}