{"total":77,"rows":[{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222,"area":"safety"},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2103.15543","title":"Be Careful about Poisoned Word Embeddings: Exploring the Vulnerability of the Embedding Layers in NLP Models","created":"2021-03-29","cited_by_count":105,"area":"safety"},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2106.06361","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","created":"2021-06-11","cited_by_count":89,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2303.15180","title":"Detecting Backdoors in Pre-trained Encoders","created":"2023-03-23","cited_by_count":55,"area":"safety"},{"id":"2102.10496","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","created":"2021-02-21","cited_by_count":49,"area":"safety"},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2211.08229","title":"CorruptEncoder: Data Poisoning based Backdoor Attacks to Contrastive Learning","created":"2022-11-15","cited_by_count":29,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2106.07798","title":"Poisoning Deep Reinforcement Learning Agents with In-Distribution Triggers","created":"2021-06-14","cited_by_count":20,"area":"safety"},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2208.10445","title":"Membership-Doctor: Comprehensive Assessment of Membership Inference Against Machine Learning Models","created":"2022-08-22","cited_by_count":16,"area":"safety"},{"id":"2305.16503","title":"IMBERT: Making BERT Immune to Insertion-based Backdoor Attacks","created":"2023-05-25","cited_by_count":15,"area":"safety"},{"id":"2411.11683","title":"Robot Collapse: Supply Chain Backdoor Attacks Against VLM-based Robotic Manipulation","created":"2024-11-18","cited_by_count":15,"area":"safety"},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2210.10886","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","created":"2022-10-19","cited_by_count":12,"area":"safety"},{"id":"2211.07915","title":"Backdoor Attacks on Time Series: A Generative Approach","created":"2022-11-15","cited_by_count":10,"area":"safety"},{"id":"2311.16646","title":"Rethinking Backdoor Attacks on Dataset Distillation: A Kernel Method Perspective","created":"2023-11-28","cited_by_count":10,"area":"safety"},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2408.08143","title":"Unlearnable Examples Detection via Iterative Filtering","created":"2024-08-15","cited_by_count":9,"area":"safety"},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8,"area":"safety"},{"id":"2508.02175","title":"Hidden in the Noise: Unveiling Backdoors in Audio LLMs Alignment through Latent Acoustic Pattern Triggers","created":"2025-08-04","cited_by_count":8,"area":"safety"},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2111.05528","title":"Lightweight machine unlearning in neural network","created":"2021-11-10","cited_by_count":6,"area":"safety"},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2403.03846","title":"Can Distillation Mitigate Backdoor Attacks in Pre-trained Encoders?","created":"2024-03-06","cited_by_count":6,"area":"safety"},{"id":"2408.17354","title":"Forget to Flourish: Leveraging Machine-Unlearning on Pretrained Language Models for Privacy Leakage","created":"2024-08-30","cited_by_count":6,"area":"safety"},{"id":"2504.20829","title":"GaussTrap: Stealthy Poisoning Attacks on 3D Gaussian Splatting for Targeted Scene Confusion","created":"2025-04-29","cited_by_count":6,"area":"safety"},{"id":"2406.10932","title":"Imperceptible Rhythm Backdoor Attacks: Exploring Rhythm Transformation for Embedding Undetectable Vulnerabilities on Speech Recognition","created":"2024-06-16","cited_by_count":5,"area":"safety"},{"id":"2407.11921","title":"IPA-NeRF: Illusory Poisoning Attack Against Neural Radiance Fields","created":"2024-07-16","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2404.11265","title":"The Victim and The Beneficiary: Exploiting a Poisoned Model to Train a Clean Model on Poisoned Data","created":"2024-04-17","cited_by_count":4,"area":"safety"},{"id":"2405.19990","title":"DiffPhysBA: Diffusion-based Physical Backdoor Attack against Person Re-Identification in Real-World","created":"2024-05-30","cited_by_count":3,"area":"safety"},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2411.11039","title":"FedUHB: Accelerating Federated Unlearning via Polyak Heavy Ball Method","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2408.11587","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","created":"2024-08-21","cited_by_count":2,"area":"safety"},{"id":"2410.22678","title":"Backdoor Attack Against Vision Transformers via Attention Gradient-Based Image Erosion","created":"2024-10-30","cited_by_count":2,"area":"safety"},{"id":"2602.03040","title":"DF-LoGiT: Data-Free Logic-Gated Backdoor Attacks in Vision Transformers","created":"2026-02-03","cited_by_count":2,"area":"safety"},{"id":"2201.02993","title":"Rethink the Evaluation for Attack Strength of Backdoor Attacks in Natural Language Processing","created":"2022-01-09","cited_by_count":1,"area":"safety"},{"id":"2301.00435","title":"Trojaning semi-supervised learning model via poisoning wild images on the web","created":"2023-01-01","cited_by_count":1,"area":"safety"},{"id":"2303.15564","title":"Mask and Restore: Blind Backdoor Defense at Test Time with Masked Autoencoder","created":"2023-03-27","cited_by_count":1,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2411.12914","title":"Trojan Cleansing with Neural Collapse","created":"2024-11-19","cited_by_count":1,"area":"safety"},{"id":"2503.09095","title":"Backdooring CLIP through Concept Confusion","created":"2025-03-12","cited_by_count":1,"area":"safety"},{"id":"2512.23171","title":"Certifying the Right to Be Forgotten: Primal-Dual Optimization for Sample and Label Unlearning in Vertical Federated Learning","created":"2025-12-29","cited_by_count":1,"area":"safety"},{"id":"2202.01179","title":"AntidoteRT: Run-time Detection and Correction of Poison Attacks on Neural Networks","created":"2022-01-31","cited_by_count":0,"area":"safety"},{"id":"2211.01808","title":"Dormant Neural Trojans","created":"2022-11-02","cited_by_count":0,"area":"safety"},{"id":"2409.19442","title":"Trigger-Based Fragile Model Watermarking for Image Transformation Networks","created":"2024-09-28","cited_by_count":0,"area":"safety"},{"id":"2506.08346","title":"SPBA: Utilizing Speech Large Language Model for Backdoor Attacks on Speech Classification Models","created":"2025-06-10","cited_by_count":0,"area":"safety"},{"id":"2508.05409","title":"From Detection to Correction: Backdoor-Resilient Face Recognition via Vision-Language Trigger Detection and Noise-Based Neutralization","created":"2025-08-07","cited_by_count":0,"area":"safety"},{"id":"2508.10243","title":"Pruning and Malicious Injection: A Retraining-Free Backdoor Attack on Transformer Models","created":"2025-08-14","cited_by_count":0,"area":"safety"},{"id":"2512.24665","title":"HeteroHBA: A Generative Structure-Manipulating Backdoor Attack on Heterogeneous Graphs","created":"2025-12-31","cited_by_count":0,"area":"safety"},{"id":"2602.03316","title":"Invisible Clean-Label Backdoor Attacks for Generative Data Augmentation","created":"2026-02-03","cited_by_count":0,"area":"safety"},{"id":"2603.17174","title":"Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2603.20339","title":"Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphs","created":"2026-03-20","cited_by_count":0,"area":"safety"},{"id":"2604.12232","title":"TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2604.20047","title":"PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2606.14078","title":"Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning","created":"2026-06-12","cited_by_count":0,"area":"safety"},{"id":"2607.01702","title":"Pmeta-TLA: Backdoor Attacks for Speech Classification Models via Meta-Learning with Timbre Leakage Attack","created":"2026-07-02","cited_by_count":0,"area":"safety"},{"id":"2607.01729","title":"DRL-CLBA: A Clean Label Backdoor Attack for Speech Classification via DDPG Reinforcement Learning","created":"2026-07-02","cited_by_count":0,"area":"safety"},{"id":"2607.15697","title":"SpeechGuard: Online Defense against Backdoor Attacks on Speech Recognition Models","created":"2026-07-17","cited_by_count":0,"area":"safety"},{"id":"2607.15724","title":"Natural Backdoor Attacks on Speech Recognition Models","created":"2026-07-17","cited_by_count":0,"area":"safety"},{"id":"2609.01023","title":"AKRASIA: Stealthy Backdoor Attack on Reasoning-based Code LLMs","created":"2026-09-01","cited_by_count":0,"area":"safety"},{"id":"2609.39047","title":"BadAction: Backdoor Attacks on Interactive Video Generation via Action-Guided Triggers","created":"2026-09-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}