{"total":32,"rows":[{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161,"area":"safety"},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2202.02628","title":"Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation","created":"2022-02-05","cited_by_count":52,"area":"safety"},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49,"area":"safety"},{"id":"2101.02644","title":"Data Poisoning Attacks to Deep Learning Based Recommender Systems","created":"2021-01-07","cited_by_count":43,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2211.08229","title":"CorruptEncoder: Data Poisoning based Backdoor Attacks to Contrastive Learning","created":"2022-11-15","cited_by_count":29,"area":"safety"},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2302.02300","title":"Run-Off Election: Improved Provable Defense against Data Poisoning Attacks","created":"2023-02-05","cited_by_count":17,"area":"safety"},{"id":"2205.13176","title":"On Collective Robustness of Bagging Against Data Poisoning","created":"2022-05-26","cited_by_count":16,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2311.16136","title":"ERASER: Machine Unlearning in MLaaS via an Inference Serving-Aware Approach","created":"2023-11-03","cited_by_count":15,"area":"safety"},{"id":"2406.06186","title":"A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks","created":"2024-06-10","cited_by_count":15,"area":"safety"},{"id":"2210.02713","title":"On Optimal Learning Under Targeted Data Poisoning","created":"2022-10-06","cited_by_count":14,"area":"safety"},{"id":"2307.10163","title":"Rethinking Backdoor Attacks","created":"2023-07-19","cited_by_count":14,"area":"safety"},{"id":"2208.03309","title":"Lethal Dose Conjecture on Data Poisoning","created":"2022-08-05","cited_by_count":12,"area":"safety"},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2303.14601","title":"PORE: Provably Robust Recommender Systems against Data Poisoning Attacks","created":"2023-03-26","cited_by_count":10,"area":"safety"},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2402.14977","title":"Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models","created":"2024-02-22","cited_by_count":4,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2306.16415","title":"On Practical Aspects of Aggregation Defenses against Data Poisoning Attacks","created":"2023-06-28","cited_by_count":1,"area":"safety"},{"id":"2307.08288","title":"Systematic Testing of the Data-Poisoning Robustness of KNN","created":"2023-07-17","cited_by_count":1,"area":"safety"},{"id":"2410.05284","title":"Hypnopaedia-Aware Machine Unlearning via Psychometrics of Artificial Mental Imagery","created":"2024-09-29","cited_by_count":0,"area":"safety"},{"id":"2503.21236","title":"Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashing","created":"2025-03-27","cited_by_count":0,"area":"safety"},{"id":"2510.22274","title":"SecureLearn -- An Attack-agnostic Defense for Multiclass Machine Learning Against Data Poisoning Attacks","created":"2025-10-25","cited_by_count":0,"area":"safety"},{"id":"2512.20865","title":"Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attacks","created":"2025-12-24","cited_by_count":0,"area":"safety"}],"next_cursor":null}