{"total":112,"rows":[{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2110.02467","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","created":"2021-10-06","cited_by_count":85,"area":"safety"},{"id":"2201.06640","title":"Towards Adversarial Evaluations for Inexact Machine Unlearning","created":"2022-01-17","cited_by_count":84,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2112.05224","title":"Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures","created":"2021-12-09","cited_by_count":73,"area":"safety"},{"id":"2303.03323","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","created":"2023-03-06","cited_by_count":63,"area":"safety"},{"id":"2310.20448","title":"A Survey on Federated Unlearning: Challenges, Methods, and Future Directions","created":"2023-10-31","cited_by_count":63,"area":"safety"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2305.06360","title":"Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy","created":"2023-05-10","cited_by_count":51,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2405.04825","title":"Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution","created":"2024-05-08","cited_by_count":40,"area":"safety"},{"id":"2403.13682","title":"Threats, Attacks, and Defenses in Machine Unlearning: A Survey","created":"2024-03-20","cited_by_count":39,"area":"safety"},{"id":"2112.07668","title":"Dual-Key Multimodal Backdoors for Visual Question Answering","created":"2021-12-14","cited_by_count":37,"area":"safety"},{"id":"2404.12916","title":"Physical Backdoor Attack can Jeopardize Driving with Vision-Large-Language Models","created":"2024-04-19","cited_by_count":33,"area":"safety"},{"id":"2302.04116","title":"Training-free Lexical Backdoor Attacks on Language Models","created":"2023-02-08","cited_by_count":31,"area":"safety"},{"id":"2211.07160","title":"FedTracker: Furnishing Ownership Verification and Traceability for Federated Learning Model","created":"2022-11-14","cited_by_count":30,"area":"safety"},{"id":"2303.15127","title":"Learning the Unlearnable: Adversarial Augmentations Suppress Unlearnable Example Attacks","created":"2023-03-27","cited_by_count":30,"area":"safety"},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2604.09378","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","created":"2026-04-10","cited_by_count":27,"area":"safety"},{"id":"2302.12461","title":"Analyzing And Editing Inner Mechanisms Of Backdoored Language Models","created":"2023-02-24","cited_by_count":23,"area":"safety"},{"id":"2310.18633","title":"Setting the Trap: Capturing and Defeating Backdoors in Pretrained Language Models through Honeypots","created":"2023-10-28","cited_by_count":19,"area":"safety"},{"id":"2506.07596","title":"TwinBreak: Jailbreaking LLM Security Alignments based on Twin Prompts","created":"2025-06-09","cited_by_count":19,"area":"safety"},{"id":"2110.08247","title":"Textual Backdoor Attacks Can Be More Harmful via Two Simple Tricks","created":"2021-10-15","cited_by_count":18,"area":"safety"},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2301.10412","title":"BDMMT: Backdoor Sample Detection for Language Models through Model Mutation Testing","created":"2023-01-25","cited_by_count":16,"area":"safety"},{"id":"2408.07440","title":"BAPLe: Backdoor Attacks on Medical Foundational Models using Prompt Learning","created":"2024-08-14","cited_by_count":16,"area":"safety"},{"id":"2205.11803","title":"WeDef: Weakly Supervised Backdoor Defense for Text Classification","created":"2022-05-24","cited_by_count":15,"area":"safety"},{"id":"2307.10163","title":"Rethinking Backdoor Attacks","created":"2023-07-19","cited_by_count":14,"area":"safety"},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2210.10886","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","created":"2022-10-19","cited_by_count":12,"area":"safety"},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2411.19530","title":"Quantized Delta Weight Is Safety Keeper","created":"2024-11-29","cited_by_count":12,"area":"safety"},{"id":"2403.14339","title":"$\\nabla \\tau$: Gradient-based and Task-Agnostic machine Unlearning","created":"2024-03-21","cited_by_count":11,"area":"safety"},{"id":"2306.15875","title":"Fake the Real: Backdoor Attack on Deep Speech Classification via Voice Conversion","created":"2023-06-28","cited_by_count":10,"area":"safety"},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2312.04748","title":"Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attacks","created":"2023-12-07","cited_by_count":9,"area":"safety"},{"id":"2407.12281","title":"Turning Generative Models Degenerate: The Power of Data Poisoning Attacks","created":"2024-07-17","cited_by_count":9,"area":"safety"},{"id":"2401.01085","title":"Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control","created":"2024-01-02","cited_by_count":8,"area":"safety"},{"id":"2406.03508","title":"Mutual Information Guided Backdoor Mitigation for Pre-trained Encoders","created":"2024-06-05","cited_by_count":8,"area":"safety"},{"id":"2212.10103","title":"VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion","created":"2022-12-20","cited_by_count":7,"area":"safety"},{"id":"2501.01593","title":"BLAST: A Stealthy Backdoor Leverage Attack against Cooperative Multi-Agent Deep Reinforcement Learning based Systems","created":"2025-01-03","cited_by_count":7,"area":"safety"},{"id":"2603.13461","title":"Purifying Generative LLMs from Backdoors without Prior Knowledge or Clean Reference","created":"2026-03-13","cited_by_count":7,"area":"safety"},{"id":"2211.08697","title":"PBSM: Backdoor attack against Keyword spotting based on pitch boosting and sound masking","created":"2022-11-16","cited_by_count":6,"area":"safety"},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2409.19526","title":"Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats","created":"2024-09-29","cited_by_count":6,"area":"safety"},{"id":"2504.11182","title":"Exploring Backdoor Attack and Defense for LLM-empowered Recommendations","created":"2025-04-15","cited_by_count":6,"area":"safety"},{"id":"2510.17021","title":"Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearning","created":"2025-10-19","cited_by_count":6,"area":"safety"},{"id":"2306.02216","title":"Forgettable Federated Linear Learning with Certified Data Unlearning","created":"2023-06-03","cited_by_count":5,"area":"safety"},{"id":"2306.16022","title":"Enrollment-stage Backdoor Attacks on Speaker Recognition Systems via Adversarial Ultrasound","created":"2023-06-28","cited_by_count":5,"area":"safety"},{"id":"2312.15867","title":"Punctuation Matters! Stealthy Backdoor Attack for Language Models","created":"2023-12-26","cited_by_count":5,"area":"safety"},{"id":"2401.01911","title":"Backdoor Attack on Unpaired Medical Image-Text Foundation Models: A Pilot Study on MedCLIP","created":"2024-01-01","cited_by_count":5,"area":"safety"},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2406.10932","title":"Imperceptible Rhythm Backdoor Attacks: Exploring Rhythm Transformation for Embedding Undetectable Vulnerabilities on Speech Recognition","created":"2024-06-16","cited_by_count":5,"area":"safety"},{"id":"2407.11921","title":"IPA-NeRF: Illusory Poisoning Attack Against Neural Radiance Fields","created":"2024-07-16","cited_by_count":5,"area":"safety"},{"id":"2201.12211","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","created":"2022-01-28","cited_by_count":4,"area":"safety"},{"id":"2203.03692","title":"Low-Loss Subspace Compression for Clean Gains against Multi-Agent Backdoor Attacks","created":"2022-03-07","cited_by_count":4,"area":"safety"},{"id":"2301.03118","title":"Facial Misrecognition Systems: Simple Weight Manipulations Force DNNs to Err Only on Specific Persons","created":"2023-01-08","cited_by_count":4,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2510.26096","title":"ALMGuard: Safety Shortcuts and Where to Find Them as Guardrails for Audio-Language Models","created":"2025-10-30","cited_by_count":4,"area":"safety"},{"id":"2306.01613","title":"Hyperparameter Learning under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization","created":"2023-06-02","cited_by_count":3,"area":"safety"},{"id":"2308.04179","title":"Breaking Speaker Recognition with PaddingBack","created":"2023-08-08","cited_by_count":3,"area":"safety"},{"id":"2402.08290","title":"The Effect of Data Poisoning on Counterfactual Explanations","created":"2024-02-13","cited_by_count":3,"area":"safety"},{"id":"2405.19990","title":"DiffPhysBA: Diffusion-based Physical Backdoor Attack against Person Re-Identification in Real-World","created":"2024-05-30","cited_by_count":3,"area":"safety"},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2501.17151","title":"Scanning Trojaned Models Using Out-of-Distribution Samples","created":"2025-01-28","cited_by_count":3,"area":"safety"},{"id":"2602.04195","title":"Semantic Consensus Decoding: Backdoor Defense for Verilog Code Generation","created":"2026-02-04","cited_by_count":3,"area":"safety"},{"id":"2306.05670","title":"One-Shot Machine Unlearning with Mnemonic Code","created":"2023-06-09","cited_by_count":2,"area":"safety"},{"id":"2408.11587","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","created":"2024-08-21","cited_by_count":2,"area":"safety"},{"id":"2408.15508","title":"EmoAttack: Utilizing Emotional Voice Conversion for Speech Backdoor Attacks on Deep Speech Classification Models","created":"2024-08-28","cited_by_count":2,"area":"safety"},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2505.03501","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2201.02993","title":"Rethink the Evaluation for Attack Strength of Backdoor Attacks in Natural Language Processing","created":"2022-01-09","cited_by_count":1,"area":"safety"},{"id":"2305.05503","title":"BadCS: A Backdoor Attack Framework for Code search","created":"2023-05-09","cited_by_count":1,"area":"safety"},{"id":"2306.03600","title":"Avoid Adversarial Adaption in Federated Learning by Multi-Metric Investigations","created":"2023-06-06","cited_by_count":1,"area":"safety"},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2411.03445","title":"Solving Trojan Detection Competitions with Linear Weight Classification","created":"2024-11-05","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2503.09095","title":"Backdooring CLIP through Concept Confusion","created":"2025-03-12","cited_by_count":1,"area":"safety"},{"id":"2602.05401","title":"BadTemplate: A Training-Free Backdoor Attack via Chat Template Against Large Language Models","created":"2026-02-05","cited_by_count":1,"area":"safety"},{"id":"2602.13427","title":"Backdooring Bias in Large Language Models","created":"2026-02-13","cited_by_count":1,"area":"safety"},{"id":"2603.10806","title":"Backdoor Directions in Vision Transformers","created":"2026-03-11","cited_by_count":1,"area":"safety"},{"id":"2605.06846","title":"Narrow Secret Loyalty Dodges Black-Box Audits","created":"2026-05-07","cited_by_count":1,"area":"safety"},{"id":"2605.15172","title":"MetaBackdoor: Exploiting Positional Encoding as a Backdoor Attack Surface in LLMs","created":"2026-05-14","cited_by_count":1,"area":"safety"},{"id":"2605.25073","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","created":"2026-05-24","cited_by_count":1,"area":"safety"},{"id":"2211.01808","title":"Dormant Neural Trojans","created":"2022-11-02","cited_by_count":0,"area":"safety"},{"id":"2311.04009","title":"AGNES: Abstraction-guided Framework for Deep Neural Networks Security","created":"2023-11-07","cited_by_count":0,"area":"safety"},{"id":"2311.07550","title":"Backdoor Attacks on Transformers for Tabular Data: An Empirical Study","created":"2023-11-13","cited_by_count":0,"area":"safety"},{"id":"2403.18256","title":"Manipulating Neural Path Planners via Slight Perturbations","created":"2024-03-27","cited_by_count":0,"area":"safety"},{"id":"2404.02530","title":"Manipulating and Mitigating Generative Model Biases without Retraining","created":"2024-04-03","cited_by_count":0,"area":"safety"},{"id":"2406.12605","title":"Attack and Defense of Deep Learning Models in the Field of Web Attack Detection","created":"2024-06-18","cited_by_count":0,"area":"safety"},{"id":"2408.04194","title":"FDI: Attack Neural Code Generation Systems through User Feedback Channel","created":"2024-08-08","cited_by_count":0,"area":"safety"},{"id":"2409.19442","title":"Trigger-Based Fragile Model Watermarking for Image Transformation Networks","created":"2024-09-28","cited_by_count":0,"area":"safety"},{"id":"2410.05284","title":"Hypnopaedia-Aware Machine Unlearning via Psychometrics of Artificial Mental Imagery","created":"2024-09-29","cited_by_count":0,"area":"safety"},{"id":"2411.15439","title":"Twin Trigger Generative Networks for Backdoor Attacks against Object Detection","created":"2024-11-23","cited_by_count":0,"area":"safety"},{"id":"2502.16396","title":"FedNIA: Noise-Induced Activation Analysis for Mitigating Data Poisoning in Federated Learning","created":"2025-02-23","cited_by_count":0,"area":"safety"},{"id":"2506.08346","title":"SPBA: Utilizing Speech Large Language Model for Backdoor Attacks on Speech Classification Models","created":"2025-06-10","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}