{"total":17,"rows":[{"id":"2404.01099","title":"What is in Your Safe Data? Identifying Benign Data that Breaks Safety","created":"2024-04-01","cited_by_count":118,"area":"safety"},{"id":"2307.14692","title":"Backdoor Attacks for In-Context Learning with Language Models","created":"2023-07-27","cited_by_count":96,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2204.05986","title":"Machine Learning Security against Data Poisoning: Are We There Yet?","created":"2022-04-12","cited_by_count":23,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2210.02713","title":"On Optimal Learning Under Targeted Data Poisoning","created":"2022-10-06","cited_by_count":14,"area":"safety"},{"id":"2103.12399","title":"The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?","created":"2021-03-23","cited_by_count":9,"area":"safety"},{"id":"2101.00157","title":"Active Learning Under Malicious Mislabeling and Poisoning Attacks","created":"2021-01-01","cited_by_count":3,"area":"safety"},{"id":"2309.16487","title":"Towards Poisoning Fair Representations","created":"2023-09-28","cited_by_count":3,"area":"safety"},{"id":"2310.08015","title":"Why Train More? Effective and Efficient Membership Inference via Memorization","created":"2023-10-12","cited_by_count":2,"area":"safety"},{"id":"2508.07066","title":"Membership Inference Attacks with False Discovery Rate Control","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2510.22274","title":"SecureLearn -- An Attack-agnostic Defense for Multiclass Machine Learning Against Data Poisoning Attacks","created":"2025-10-25","cited_by_count":0,"area":"safety"},{"id":"2606.16242","title":"Rapid Poison: Practical Poisoning Attacks Against the Rapid Response Framework","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2607.17550","title":"(A)iSpy: Parasitic Trojans for Machine Learning Infrastructure","created":"2026-07-20","cited_by_count":0,"area":"safety"}],"next_cursor":null}