{"total":70,"rows":[{"id":"2212.04612","title":"Training Data Influence Analysis and Estimation: A Survey","created":"2022-12-09","cited_by_count":135,"area":null},{"id":"2404.01099","title":"What is in Your Safe Data? Identifying Benign Data that Breaks Safety","created":"2024-04-01","cited_by_count":118,"area":"safety"},{"id":"2307.14692","title":"Backdoor Attacks for In-Context Learning with Language Models","created":"2023-07-27","cited_by_count":96,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2101.11073","title":"Property Inference From Poisoning","created":"2021-01-26","cited_by_count":60,"area":null},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2405.12186","title":"Training Data Attribution via Approximate Unrolled Differentiation","created":"2024-05-20","cited_by_count":34,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2112.09745","title":"Interpretable Data-Based Explanations for Fairness Debugging","created":"2021-12-17","cited_by_count":30,"area":null},{"id":"2204.05986","title":"Machine Learning Security against Data Poisoning: Are We There Yet?","created":"2022-04-12","cited_by_count":23,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2406.10630","title":"Emerging Safety Attack and Defense in Federated Instruction Tuning of Large Language Models","created":"2024-06-15","cited_by_count":18,"area":"alignment"},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2210.02713","title":"On Optimal Learning Under Targeted Data Poisoning","created":"2022-10-06","cited_by_count":14,"area":"safety"},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2306.13339","title":"TrustGuard: GNN-based Robust and Explainable Trust Evaluation with Dynamicity Support","created":"2023-06-23","cited_by_count":12,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2402.11750","title":"In-Context Learning Demonstration Selection via Influence Analysis","created":"2024-02-19","cited_by_count":11,"area":null},{"id":"2103.12399","title":"The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?","created":"2021-03-23","cited_by_count":9,"area":"safety"},{"id":"2204.14017","title":"Backdoor Attacks in Federated Learning by Rare Embeddings and Gradient Ensembling","created":"2022-04-29","cited_by_count":9,"area":null},{"id":"2106.01425","title":"GAL: Gradient Assisted Learning for Decentralized Multi-Organization Collaborations","created":"2021-06-02","cited_by_count":8,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2410.13995","title":"Adversarial Inception Backdoor Attacks against Reinforcement Learning","created":"2024-10-17","cited_by_count":8,"area":"deeprl"},{"id":"2505.18513","title":"Enhancing Training Data Attribution with Representational Optimization","created":"2025-05-24","cited_by_count":8,"area":null},{"id":"2202.02817","title":"BEAS: Blockchain Enabled Asynchronous & Secure Federated Machine Learning","created":"2022-02-06","cited_by_count":7,"area":null},{"id":"2505.00195","title":"Algorithmic Collective Action with Two Collectives","created":"2025-04-30","cited_by_count":7,"area":null},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2205.02414","title":"Subverting Fair Image Search with Generative Adversarial Perturbations","created":"2022-05-05","cited_by_count":5,"area":null},{"id":"2212.00322","title":"Hijack Vertical Federated Learning Models As One Party","created":"2022-12-01","cited_by_count":5,"area":null},{"id":"2212.06750","title":"FairRoad: Achieving Fairness for Recommender Systems with Optimized Antidote Data","created":"2022-12-13","cited_by_count":5,"area":null},{"id":"2507.08983","title":"Exploiting Leaderboards for Large-Scale Distribution of Malicious Models","created":"2025-07-11","cited_by_count":5,"area":null},{"id":"2410.17492","title":"BadFair: Backdoored Fairness Attacks with Group-conditioned Triggers","created":"2024-10-23","cited_by_count":4,"area":null},{"id":"2505.05707","title":"Crowding Out The Noise: Algorithmic Collective Action Under Differential Privacy","created":"2025-05-09","cited_by_count":4,"area":null},{"id":"2101.00157","title":"Active Learning Under Malicious Mislabeling and Poisoning Attacks","created":"2021-01-01","cited_by_count":3,"area":"safety"},{"id":"2307.01073","title":"What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?","created":"2023-07-03","cited_by_count":3,"area":null},{"id":"2309.16487","title":"Towards Poisoning Fair Representations","created":"2023-09-28","cited_by_count":3,"area":"safety"},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2409.17328","title":"The poison of dimensionality","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2310.08015","title":"Why Train More? Effective and Efficient Membership Inference via Memorization","created":"2023-10-12","cited_by_count":2,"area":"safety"},{"id":"2312.10508","title":"TrojFair: Trojan Fairness Attacks","created":"2023-12-16","cited_by_count":2,"area":null},{"id":"2405.00614","title":"Multigroup Robustness","created":"2024-05-01","cited_by_count":2,"area":null},{"id":"2407.09958","title":"Partner in Crime: Boosting Targeted Poisoning Attacks against Federated Learning","created":"2024-07-13","cited_by_count":2,"area":null},{"id":"2506.03075","title":"Agnostic Learning under Targeted Poisoning: Optimal Rates and the Role of Randomness","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2507.06931","title":"DICE: Data Influence Cascade in Decentralized Learning","created":"2025-07-09","cited_by_count":2,"area":null},{"id":"2508.07066","title":"Membership Inference Attacks with False Discovery Rate Control","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2602.05089","title":"Beware Untrusted Simulators -- Reward-Free Backdoor Attacks in Reinforcement Learning","created":"2026-02-04","cited_by_count":2,"area":"deeprl"},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2302.04977","title":"Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines","created":"2023-02-09","cited_by_count":1,"area":null},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2311.11544","title":"Understanding Variation in Subpopulation Susceptibility to Poisoning Attacks","created":"2023-11-20","cited_by_count":1,"area":null},{"id":"2410.08872","title":"Fragile Giants: Understanding the Susceptibility of Models to Subpopulation Attacks","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2505.17092","title":"Covert Attacks on Machine Learning Training in Passively Secure MPC","created":"2025-05-21","cited_by_count":1,"area":null},{"id":"2506.01230","title":"Stress-Testing ML Pipelines with Adversarial Data Corruption","created":"2025-06-02","cited_by_count":1,"area":null},{"id":"2510.09260","title":"GREAT: Generalizable Backdoor Attacks in RLHF via Emotion-Aware Trigger Synthesis","created":"2025-10-10","cited_by_count":1,"area":"alignment"},{"id":"2606.05165","title":"STRIDE: Training Data Attribution via Sparse Recovery from Subset Perturbations","created":"2026-06-03","cited_by_count":1,"area":null},{"id":"2103.11441","title":"TextFlint: Unified Multilingual Robustness Evaluation Toolkit for Natural Language Processing","created":"2021-03-21","cited_by_count":0,"area":null},{"id":"2302.08973","title":"Measuring Equality in Machine Learning Security Defenses: A Case Study in Speech Recognition","created":"2023-02-17","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2401.17865","title":"Manipulating Predictions over Discrete Inputs in Machine Teaching","created":"2024-01-31","cited_by_count":0,"area":null},{"id":"2408.08920","title":"A Survey of Trojan Attacks and Defenses to Deep Neural Networks","created":"2024-08-15","cited_by_count":0,"area":null},{"id":"2504.02142","title":"Like Oil and Water: Group Robustness Methods and Poisoning Defenses May Be at Odds","created":"2025-04-02","cited_by_count":0,"area":null},{"id":"2509.12649","title":"A Systematic Evaluation of Parameter-Efficient Fine-Tuning Methods for the Security of Code LLMs","created":"2025-09-16","cited_by_count":0,"area":null},{"id":"2510.07620","title":"DGTEN: A Robust Deep Gaussian based Graph Neural Network for Dynamic Trust Evaluation with Uncertainty-Quantification Support","created":"2025-10-08","cited_by_count":0,"area":null},{"id":"2510.22274","title":"SecureLearn -- An Attack-agnostic Defense for Multiclass Machine Learning Against Data Poisoning Attacks","created":"2025-10-25","cited_by_count":0,"area":"safety"},{"id":"2606.16242","title":"Rapid Poison: Practical Poisoning Attacks Against the Rapid Response Framework","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2607.17550","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","created":"2026-07-20","cited_by_count":0,"area":"safety"}],"next_cursor":null}