{"total":89,"rows":[{"id":"2209.15179","title":"Physical Adversarial Attack meets Computer Vision: A Decade Survey","created":"2022-09-30","cited_by_count":67,"area":null},{"id":"2112.01148","title":"FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis","created":"2021-12-02","cited_by_count":61,"area":null},{"id":"2205.08305","title":"A Study of the Attention Abnormality in Trojaned BERTs","created":"2022-05-13","cited_by_count":48,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2303.12993","title":"Backdoor Defense via Adaptively Splitting Poisoned Dataset","created":"2023-03-23","cited_by_count":43,"area":null},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2303.02213","title":"Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions","created":"2023-03-03","cited_by_count":33,"area":null},{"id":"2203.00858","title":"Physical Backdoor Attacks to Lane Detection Systems in Autonomous Driving","created":"2022-03-02","cited_by_count":31,"area":null},{"id":"2104.07395","title":"Robust Backdoor Attacks against Deep Neural Networks in Real Physical World","created":"2021-04-15","cited_by_count":20,"area":null},{"id":"2301.10908","title":"Distilling Cognitive Backdoor Patterns within an Image","created":"2023-01-26","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2204.09975","title":"Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation","created":"2022-04-21","cited_by_count":18,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2211.12044","title":"Backdoor Cleansing with Unlabeled Data","created":"2022-11-22","cited_by_count":17,"area":null},{"id":"2201.00672","title":"Compression-Resistant Backdoor Attack against Deep Neural Networks","created":"2022-01-03","cited_by_count":14,"area":null},{"id":"2204.06273","title":"Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures","created":"2022-04-13","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2212.04687","title":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","created":"2022-12-09","cited_by_count":11,"area":null},{"id":"2207.05641","title":"Backdoor Attacks on Crowd Counting","created":"2022-07-12","cited_by_count":10,"area":null},{"id":"2303.00215","title":"Single Image Backdoor Inversion via Robust Smoothed Classifiers","created":"2023-03-01","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2306.00816","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","created":"2023-06-01","cited_by_count":9,"area":null},{"id":"2306.04984","title":"G$^2$uardFL: Safeguarding Federated Learning Against Backdoor Attacks through Attributed Client Graph Clustering","created":"2023-06-08","cited_by_count":9,"area":null},{"id":"2209.02339","title":"TransCAB: Transferable Clean-Annotation Backdoor to Object Detection with Natural Trigger in Real-World","created":"2022-09-06","cited_by_count":8,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2202.12154","title":"Towards Effective and Robust Neural Trojan Defenses via Input Filtering","created":"2022-02-24","cited_by_count":7,"area":null},{"id":"2312.04902","title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","created":"2023-12-08","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2501.06650","title":"SafeSplit: A Novel Defense Against Client-Side Backdoor Attacks in Split Learning (Full Version)","created":"2025-01-11","cited_by_count":7,"area":null},{"id":"2208.04946","title":"Attention Hijacking in Trojan Transformers","created":"2022-08-09","cited_by_count":6,"area":null},{"id":"2307.05422","title":"Differential Analysis of Triggers and Benign Features for Black-Box DNN Backdoor Detection","created":"2023-07-11","cited_by_count":6,"area":null},{"id":"2401.15883","title":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability","created":"2024-01-29","cited_by_count":6,"area":null},{"id":"2206.00145","title":"CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defences","created":"2022-05-31","cited_by_count":5,"area":null},{"id":"2206.10673","title":"Natural Backdoor Datasets","created":"2022-06-21","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2407.15855","title":"Data Poisoning Attacks in Intelligent Transportation Systems: A Survey","created":"2024-07-06","cited_by_count":5,"area":null},{"id":"2411.12220","title":"DeTrigger: A Gradient-Centric Approach to Backdoor Attack Mitigation in Federated Learning","created":"2024-11-19","cited_by_count":5,"area":null},{"id":"2503.21305","title":"DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data","created":"2025-03-27","cited_by_count":5,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2211.10933","title":"Invisible Backdoor Attack with Dynamic Triggers against Person Re-identification","created":"2022-11-20","cited_by_count":4,"area":null},{"id":"2211.16192","title":"Be Careful with Rotation: A Uniform Backdoor Pattern for 3D Shape","created":"2022-11-28","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2407.19203","title":"Clean-Label Physical Backdoor Attacks with Data Distillation","created":"2024-07-27","cited_by_count":4,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2407.06838","title":"Event Trojan: Asynchronous Event-based Backdoor Attacks","created":"2024-07-09","cited_by_count":3,"area":null},{"id":"2410.18267","title":"Backdoor in Seconds: Unlocking Vulnerabilities in Large Pre-trained Models via Model Editing","created":"2024-10-23","cited_by_count":3,"area":null},{"id":"2411.03022","title":"Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras","created":"2024-11-05","cited_by_count":3,"area":null},{"id":"2206.04677","title":"On the Permanence of Backdoors in Evolving Models","created":"2022-06-08","cited_by_count":2,"area":null},{"id":"2208.10231","title":"An anomaly detection approach for backdoored neural networks: face recognition as a case study","created":"2022-08-22","cited_by_count":2,"area":null},{"id":"2210.01834","title":"Invariant Aggregator for Defending against Federated Backdoor Attacks","created":"2022-10-04","cited_by_count":2,"area":null},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2404.11357","title":"Detector Collapse: Physical-World Backdooring Object Detection to Catastrophic Overload or Blindness in Autonomous Driving","created":"2024-04-17","cited_by_count":2,"area":null},{"id":"2412.03441","title":"PBP: Post-training Backdoor Purification for Malware Classifiers","created":"2024-12-04","cited_by_count":2,"area":null},{"id":"2510.14299","title":"TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening","created":"2025-10-16","cited_by_count":2,"area":null},{"id":"2603.29328","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","created":"2026-03-31","cited_by_count":2,"area":null},{"id":"2607.05522","title":"Rendering-Aware Bayesian 3D Gaussian Splatting with Native Uncertainty and Adaptive Complexity Control","created":"2026-07-06","cited_by_count":2,"area":null},{"id":"2110.13414","title":"Semantic Host-free Trojan Attack","created":"2021-10-26","cited_by_count":1,"area":null},{"id":"2312.03085","title":"ScAR: Scaling Adversarial Robustness for LiDAR Object Detection","created":"2023-12-05","cited_by_count":1,"area":null},{"id":"2402.08695","title":"Game of Trojans: Adaptive Adversaries Against Output-based Trojaned-Model Detectors","created":"2024-02-12","cited_by_count":1,"area":null},{"id":"2402.18718","title":"Model Pairing Using Embedding Translation for Backdoor Attack Detection on Open-Set Classification Tasks","created":"2024-02-28","cited_by_count":1,"area":null},{"id":"2403.13018","title":"Invisible Backdoor Attack Through Singular Value Decomposition","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2406.17425","title":"CuDA2: An approach for Incorporating Traitor Agents into Cooperative Multi-Agent Systems","created":"2024-06-25","cited_by_count":1,"area":null},{"id":"2407.05396","title":"Evolutionary Trigger Detection and Lightweight Model Repair Based Backdoor Defense","created":"2024-07-07","cited_by_count":1,"area":null},{"id":"2409.02251","title":"NoiseAttack: An Evasive Sample-Specific Multi-Targeted Backdoor Attack Through White Gaussian Noise","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2505.12045","title":"FIGhost: Fluorescent Ink-based Stealthy and Flexible Backdoor Attacks on Physical Traffic Sign Recognition","created":"2025-05-17","cited_by_count":1,"area":null},{"id":"2206.03583","title":"Contributor-Aware Defenses Against Adversarial Backdoor Attacks","created":"2022-05-28","cited_by_count":0,"area":null},{"id":"2208.06592","title":"Confidence Matters: Inspecting Backdoors in Deep Neural Networks via Distribution Transfer","created":"2022-08-13","cited_by_count":0,"area":null},{"id":"2211.05410","title":"Robust Smart Home Face Recognition under Starving Federated Data","created":"2022-11-10","cited_by_count":0,"area":null},{"id":"2302.13056","title":"SATBA: An Invisible Backdoor Attack Based On Spatial Attention","created":"2023-02-25","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2312.07389","title":"Eroding Trust In Aerial Imagery: Comprehensive Analysis and Evaluation Of Adversarial Attacks In Geospatial Systems","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2402.17486","title":"MGE: A Training-Free and Efficient Model Generation and Enhancement Scheme","created":"2024-02-27","cited_by_count":0,"area":null},{"id":"2406.13411","title":"Composite Concept Extraction through Backdooring","created":"2024-06-19","cited_by_count":0,"area":null},{"id":"2410.14723","title":"BeniFul: Backdoor Defense via Middle Feature Analysis for Deep Neural Networks","created":"2024-10-15","cited_by_count":0,"area":null},{"id":"2502.18592","title":"DeBUGCN -- Detecting Backdoors in CNNs Using Graph Convolutional Networks","created":"2025-02-25","cited_by_count":0,"area":null},{"id":"2502.20306","title":"SecureGaze: Defending Gaze Estimation Against Backdoor Attacks","created":"2025-02-27","cited_by_count":0,"area":null},{"id":"2503.01758","title":"Zero-Trust Artificial Intelligence Model Security Based on Moving Target Defense and Content Disarm and Reconstruction","created":"2025-03-03","cited_by_count":0,"area":null},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2505.03084","title":"Adversarial Attacks in Multimodal Systems: A Practitioner's Survey","created":"2025-05-06","cited_by_count":0,"area":null},{"id":"2505.16154","title":"BadDepth: Backdoor Attacks Against Monocular Depth Estimation in the Physical World","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2507.01607","title":"SoK: On the Survivability of Backdoor Attacks on Unconstrained Face Recognition Systems","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2512.14158","title":"CIS-BA: Continuous Interaction Space Based Backdoor Attack for Object Detection in the Real-World","created":"2025-12-16","cited_by_count":0,"area":null},{"id":"2605.23411","title":"Sample-wise Targeted Adversarial Attacks on Test-time Adaptation","created":"2026-05-22","cited_by_count":0,"area":null},{"id":"2606.25858","title":"Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks","created":"2026-06-24","cited_by_count":0,"area":null},{"id":"2609.03139","title":"Beyond Small Patches: Black-Box Detection and Purification of Diverse Backdoor Triggers","created":"2026-09-02","cited_by_count":0,"area":null},{"id":"2609.27115","title":"Damnatio Memoriae: Adversarially and Selectively Forgetting Identities in the Embedding Space of Face Recognition Models","created":"2026-09-22","cited_by_count":0,"area":null}],"next_cursor":null}