{"total":84,"rows":[{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2212.14034","title":"Cramming: Training a Language Model on a Single GPU in One Day","created":"2022-12-28","cited_by_count":81,"area":null},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2301.02344","title":"TrojanPuzzle: Covertly Poisoning Code-Suggestion Models","created":"2023-01-06","cited_by_count":60,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57,"area":null},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46,"area":null},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2208.12348","title":"SNAP: Efficient Extraction of Private Properties with Poisoning","created":"2022-08-25","cited_by_count":31,"area":null},{"id":"2302.04262","title":"Algorithmic Collective Action in Machine Learning","created":"2023-02-08","cited_by_count":31,"area":null},{"id":"2203.08147","title":"Energy-Latency Attacks via Sponge Poisoning","created":"2022-03-14","cited_by_count":29,"area":null},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2311.13091","title":"Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noise","created":"2023-11-22","cited_by_count":25,"area":null},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17,"area":null},{"id":"2202.10627","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","created":"2022-02-22","cited_by_count":16,"area":null},{"id":"2407.15100","title":"A General Framework for Data-Use Auditing of ML Models","created":"2024-07-21","cited_by_count":16,"area":null},{"id":"2212.09006","title":"A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairness","created":"2022-12-18","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2202.07201","title":"Holistic Adversarial Robustness of Deep Learning Models","created":"2022-02-15","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2406.00588","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","created":"2024-06-02","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2304.08847","title":"BadVFL: Backdoor Attacks in Vertical Federated Learning","created":"2023-04-18","cited_by_count":10,"area":null},{"id":"2311.11995","title":"BrainWash: A Poisoning Attack to Forget in Continual Learning","created":"2023-11-20","cited_by_count":9,"area":null},{"id":"2105.10948","title":"Regularization Can Help Mitigate Poisoning Attacks... with the Right Hyperparameters","created":"2021-05-23","cited_by_count":8,"area":null},{"id":"2106.01425","title":"GAL: Gradient Assisted Learning for Decentralized Multi-Organization Collaborations","created":"2021-06-02","cited_by_count":8,"area":null},{"id":"2106.06654","title":"Disrupting Model Training with Adversarial Shortcuts","created":"2021-06-12","cited_by_count":7,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2212.10522","title":"Transformers Go for the LOLs: Generating (Humourous) Titles from Scientific Abstracts End-to-End","created":"2022-12-20","cited_by_count":6,"area":null},{"id":"2105.03692","title":"Incompatibility Clustering as a Defense Against Backdoor Poisoning Attacks","created":"2021-05-08","cited_by_count":5,"area":null},{"id":"2205.09986","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","created":"2022-05-20","cited_by_count":5,"area":null},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2303.02874","title":"Adversarial Sampling for Fairness Testing in Deep Neural Network","created":"2023-03-06","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2507.08983","title":"Exploiting Leaderboards for Large-Scale Distribution of Malicious Models","created":"2025-07-11","cited_by_count":5,"area":null},{"id":"2602.09987","title":"Infusion: Shaping Model Behavior by Editing Training Data via Influence Functions","created":"2026-02-10","cited_by_count":5,"area":null},{"id":"2310.10659","title":"Exploiting Machine Unlearning for Backdoor Attacks in Deep Learning System","created":"2023-09-12","cited_by_count":4,"area":null},{"id":"2406.17814","title":"Distribution Learnability and Robustness","created":"2024-06-25","cited_by_count":4,"area":null},{"id":"2407.19203","title":"Clean-Label Physical Backdoor Attacks with Data Distillation","created":"2024-07-27","cited_by_count":4,"area":null},{"id":"2307.01073","title":"What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?","created":"2023-07-03","cited_by_count":3,"area":null},{"id":"2401.00055","title":"Online Algorithmic Recourse by Collective Action","created":"2023-12-29","cited_by_count":3,"area":null},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2410.18267","title":"Backdoor in Seconds: Unlocking Vulnerabilities in Large Pre-trained Models via Model Editing","created":"2024-10-23","cited_by_count":3,"area":null},{"id":"2503.01896","title":"Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identification","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2408.09562","title":"Security Concerns in Quantum Machine Learning as a Service","created":"2024-08-18","cited_by_count":2,"area":null},{"id":"2412.20087","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","created":"2024-12-28","cited_by_count":2,"area":null},{"id":"2503.08829","title":"Seal Your Backdoor with Variational Defense","created":"2025-03-11","cited_by_count":2,"area":null},{"id":"2507.00724","title":"Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features","created":"2025-06-24","cited_by_count":2,"area":null},{"id":"2510.09210","title":"Provable Watermarking for Data Poisoning Attacks","created":"2025-10-10","cited_by_count":2,"area":null},{"id":"2302.04977","title":"Mithridates: Auditing and Boosting Backdoor Resistance of Machine Learning Pipelines","created":"2023-02-09","cited_by_count":1,"area":null},{"id":"2310.13019","title":"Tailoring Adversarial Attacks on Deep Neural Networks for Targeted Class Manipulation Using DeepFool Algorithm","created":"2023-10-18","cited_by_count":1,"area":null},{"id":"2311.10919","title":"PACOL: Poisoning Attacks Against Continual Learners","created":"2023-11-18","cited_by_count":1,"area":null},{"id":"2311.11544","title":"Understanding Variation in Subpopulation Susceptibility to Poisoning Attacks","created":"2023-11-20","cited_by_count":1,"area":null},{"id":"2403.11981","title":"Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2407.02437","title":"Beyond Full Poisoning: Effective Availability Attacks with Partial Perturbation","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2410.08872","title":"Fragile Giants: Understanding the Susceptibility of Models to Subpopulation Attacks","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2602.09757","title":"Towards Poisoning Robustness Certification for Natural Language Generation","created":"2026-02-10","cited_by_count":1,"area":null},{"id":"2606.17110","title":"Loss Landscape Poisoning: Targeted Extraction of Unseen Training Data from LLMs","created":"2026-06-15","cited_by_count":1,"area":null},{"id":"2202.10320","title":"Resurrecting Trust in Facial Recognition: Mitigating Backdoor Attacks in Face Recognition to Prevent Potential Privacy Breaches","created":"2022-02-18","cited_by_count":0,"area":null},{"id":"2302.14615","title":"Randomized Kaczmarz in Adversarial Distributed Setting","created":"2023-02-24","cited_by_count":0,"area":null},{"id":"2308.04909","title":"Adversarial Deep Reinforcement Learning for Cyber Security in Software Defined Networks","created":"2023-08-09","cited_by_count":0,"area":null},{"id":"2312.01281","title":"Mendata: A Framework to Purify Manipulated Training Data","created":"2023-12-03","cited_by_count":0,"area":null},{"id":"2401.17865","title":"Manipulating Predictions over Discrete Inputs in Machine Teaching","created":"2024-01-31","cited_by_count":0,"area":null},{"id":"2406.12929","title":"RMF: A Risk Measurement Framework for Machine Learning Models","created":"2024-06-15","cited_by_count":0,"area":null},{"id":"2503.00140","title":"Approaching the Harm of Gradient Attacks While Only Flipping Labels","created":"2025-02-28","cited_by_count":0,"area":null},{"id":"2504.02142","title":"Like Oil and Water: Group Robustness Methods and Poisoning Defenses May Be at Odds","created":"2025-04-02","cited_by_count":0,"area":null},{"id":"2506.02665","title":"Beyond Invisibility: Learning Robust Visible Watermarks for Stronger Copyright Protection","created":"2025-06-03","cited_by_count":0,"area":null},{"id":"2508.01276","title":"Defending Against Beta Poisoning Attacks in Machine Learning Models","created":"2025-08-02","cited_by_count":0,"area":null},{"id":"2601.22308","title":"Stealthy Poisoning Attacks Bypass Defenses in Regression Settings","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2606.20752","title":"Mirage: a Clean-Label Backdoor against LiDAR 3D Object Detection","created":"2026-06-18","cited_by_count":0,"area":null},{"id":"2609.29099","title":"TraceGuard: Adaptive Multimodal Poison Filtering through Cross-Feature Rank Agreement","created":"2026-09-24","cited_by_count":0,"area":null},{"id":"2609.34804","title":"Physics-Attested Federated Learning: Securing Collaborative Anomaly Detection in Critical Water Infrastructure","created":"2026-09-28","cited_by_count":0,"area":null},{"id":"2610.13051","title":"Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}