{"total":183,"rows":[{"id":"2111.08947","title":"Fast Yet Effective Machine Unlearning","created":"2021-11-17","cited_by_count":217,"area":"safety"},{"id":"2205.08096","title":"Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teacher","created":"2022-05-17","cited_by_count":194,"area":"safety"},{"id":"2308.07707","title":"Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening","created":"2023-08-15","cited_by_count":181,"area":"safety"},{"id":"2308.10741","title":"On the Adversarial Robustness of Multi-Modal Foundation Models","created":"2023-08-21","cited_by_count":145,"area":"safety"},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2301.11578","title":"Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifiers","created":"2023-01-27","cited_by_count":67,"area":"safety"},{"id":"2401.06187","title":"Scissorhands: Scrub Data Influence via Connection Sensitivity in Networks","created":"2024-01-11","cited_by_count":52,"area":"safety"},{"id":"2407.20516","title":"Machine Unlearning in Generative AI: A Survey","created":"2024-07-30","cited_by_count":49,"area":"safety"},{"id":"2402.00351","title":"Machine Unlearning for Image-to-Image Generative Models","created":"2024-02-01","cited_by_count":47,"area":"safety"},{"id":"2206.03693","title":"Autoregressive Perturbations for Data Poisoning","created":"2022-06-08","cited_by_count":46,"area":"safety"},{"id":"2106.14851","title":"Data Poisoning Won't Save You From Facial Recognition","created":"2021-06-28","cited_by_count":45,"area":"safety"},{"id":"2409.19732","title":"Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancement","created":"2024-09-29","cited_by_count":45,"area":"safety"},{"id":"2403.01267","title":"Dissecting Language Models: Machine Unlearning via Selective Pruning","created":"2024-03-02","cited_by_count":42,"area":"safety"},{"id":"2209.15266","title":"Data Poisoning Attacks Against Multimodal Encoders","created":"2022-09-30","cited_by_count":41,"area":"safety"},{"id":"2405.04825","title":"Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution","created":"2024-05-08","cited_by_count":40,"area":"safety"},{"id":"2410.18057","title":"CLEAR: Character Unlearning in Textual and Visual Modalities","created":"2024-10-23","cited_by_count":39,"area":"safety"},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2504.10957","title":"When is Task Vector Provably Effective for Model Editing? A Generalization Analysis of Nonlinear Transformers","created":"2025-04-15","cited_by_count":38,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2304.13169","title":"SAFE: Machine Unlearning With Shard Graphs","created":"2023-04-25","cited_by_count":28,"area":"safety"},{"id":"2503.23751","title":"Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks","created":"2025-03-31","cited_by_count":28,"area":"safety"},{"id":"2406.16257","title":"Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning","created":"2024-06-24","cited_by_count":27,"area":"safety"},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2312.00761","title":"Deep Unlearning: Fast and Efficient Gradient-free Approach to Class Forgetting","created":"2023-12-01","cited_by_count":22,"area":"safety"},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2406.05344","title":"MemeGuard: An LLM and VLM-based Framework for Advancing Content Moderation via Meme Intervention","created":"2024-06-08","cited_by_count":20,"area":"safety"},{"id":"2502.12176","title":"Ten Challenging Problems in Federated Foundation Models","created":"2025-02-14","cited_by_count":20,"area":"safety"},{"id":"2407.10494","title":"Learning to Unlearn for Robust Machine Unlearning","created":"2024-07-15","cited_by_count":19,"area":"safety"},{"id":"2402.09477","title":"PANORAMIA: Privacy Auditing of Machine Learning Models without Retraining","created":"2024-02-12","cited_by_count":17,"area":"safety"},{"id":"2406.14796","title":"MU-Bench: A Multitask Multimodal Benchmark for Machine Unlearning","created":"2024-06-21","cited_by_count":17,"area":"safety"},{"id":"2407.07485","title":"Zero-Shot Class Unlearning in CLIP with Synthetic Samples","created":"2024-07-10","cited_by_count":17,"area":"safety"},{"id":"2402.01401","title":"An Information Theoretic Approach to Machine Unlearning","created":"2024-02-02","cited_by_count":16,"area":"safety"},{"id":"2401.10458","title":"Contrastive Unlearning: A Contrastive Approach to Machine Unlearning","created":"2024-01-19","cited_by_count":15,"area":"safety"},{"id":"2503.05657","title":"NoT: Federated Unlearning via Weight Negation","created":"2025-03-07","cited_by_count":15,"area":"safety"},{"id":"2507.06908","title":"MIND: A Multi-agent Framework for Zero-shot Harmful Meme Detection","created":"2025-07-09","cited_by_count":15,"area":"safety"},{"id":"2406.09173","title":"Potion: Towards Poison Unlearning","created":"2024-06-13","cited_by_count":14,"area":"safety"},{"id":"2402.09225","title":"Is My Data in Your AI? Membership Inference Test (MINT) applied to Face Biometrics","created":"2024-02-14","cited_by_count":13,"area":"safety"},{"id":"2402.15109","title":"Remaining-data-free Machine Unlearning by Suppressing Sample Contribution","created":"2024-02-23","cited_by_count":13,"area":"safety"},{"id":"2503.18314","title":"LoTUS: Large-Scale Machine Unlearning with a Taste of Uncertainty","created":"2025-03-24","cited_by_count":13,"area":"safety"},{"id":"2412.20392","title":"Defending Multimodal Backdoored Models by Repulsive Visual Prompt Tuning","created":"2024-12-29","cited_by_count":12,"area":"safety"},{"id":"2312.16823","title":"Layer Attack Unlearning: Fast and Accurate Machine Unlearning via Layer Level Attack and Knowledge Distillation","created":"2023-12-28","cited_by_count":11,"area":"safety"},{"id":"2405.17878","title":"An Information Theoretic Evaluation Metric For Strong Unlearning","created":"2024-05-28","cited_by_count":11,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2311.15268","title":"Unlearning via Sparse Representations","created":"2023-11-26","cited_by_count":10,"area":"safety"},{"id":"2402.10098","title":"Parameter-tuning-free data entry error unlearning with adaptive selective synaptic dampening","created":"2024-02-06","cited_by_count":10,"area":"safety"},{"id":"2411.19876","title":"LUMIA: Linear probing for Unimodal and MultiModal Membership Inference Attacks leveraging internal LLM states","created":"2024-11-29","cited_by_count":10,"area":"safety"},{"id":"2509.00757","title":"MarkSplatter: Generalizable Watermarking for 3D Gaussian Splatting Model via Splatter Image Structure","created":"2025-08-31","cited_by_count":10,"area":"safety"},{"id":"2111.11870","title":"DBIA: Data-free Backdoor Injection Attack against Transformer Networks","created":"2021-11-22","cited_by_count":9,"area":"safety"},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2406.07698","title":"Label Smoothing Improves Machine Unlearning","created":"2024-06-11","cited_by_count":9,"area":"safety"},{"id":"2410.01276","title":"Deep Unlearn: Benchmarking Machine Unlearning for Image Classification","created":"2024-10-02","cited_by_count":9,"area":"safety"},{"id":"2410.05583","title":"NegMerge: Sign-Consensual Weight Merging for Machine Unlearning","created":"2024-10-08","cited_by_count":9,"area":"safety"},{"id":"2506.02761","title":"Rethinking Machine Unlearning in Image Generation Models","created":"2025-06-03","cited_by_count":9,"area":"safety"},{"id":"2208.07585","title":"Neural network fragile watermarking with no model performance degradation","created":"2022-08-16","cited_by_count":8,"area":"safety"},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2406.03508","title":"Mutual Information Guided Backdoor Mitigation for Pre-trained Encoders","created":"2024-06-05","cited_by_count":8,"area":"safety"},{"id":"2402.06674","title":"Impact of Dataset Properties on Membership Inference Vulnerability of Deep Transfer Learning","created":"2024-02-07","cited_by_count":7,"area":"safety"},{"id":"2503.02312","title":"Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalization","created":"2025-03-04","cited_by_count":7,"area":"safety"},{"id":"2505.17730","title":"Redirection for Erasing Memory (REM): Towards a universal unlearning method for corrupted data","created":"2025-05-23","cited_by_count":7,"area":"safety"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2411.16154","title":"DeDe: Detecting Backdoor Samples for SSL Encoders via Decoders","created":"2024-11-25","cited_by_count":6,"area":"safety"},{"id":"2412.02432","title":"Improved Localized Machine Unlearning Through the Lens of Memorization","created":"2024-12-03","cited_by_count":6,"area":"safety"},{"id":"2412.16780","title":"Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification","created":"2024-12-21","cited_by_count":6,"area":"safety"},{"id":"2601.13578","title":"FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearning","created":"2026-01-20","cited_by_count":6,"area":"safety"},{"id":"2310.05141","title":"Transferable Availability Poisoning Attacks","created":"2023-10-08","cited_by_count":5,"area":"safety"},{"id":"2312.14923","title":"Fast-NTK: Parameter-Efficient Unlearning for Large-Scale Models","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2405.10612","title":"Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers","created":"2024-05-17","cited_by_count":5,"area":"safety"},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2407.02747","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","created":"2024-07-03","cited_by_count":5,"area":"safety"},{"id":"2408.01689","title":"Controllable Unlearning for Image-to-Image Generative Models via $\\varepsilon$-Constrained Optimization","created":"2024-08-03","cited_by_count":5,"area":"safety"},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2401.00996","title":"Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment","created":"2024-01-02","cited_by_count":4,"area":"safety"},{"id":"2404.02067","title":"Red-Teaming Segment Anything Model","created":"2024-04-02","cited_by_count":4,"area":"safety"},{"id":"2407.12069","title":"Unlearning Personal Data from a Single Image","created":"2024-07-16","cited_by_count":4,"area":"safety"},{"id":"2410.04682","title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning","created":"2024-10-07","cited_by_count":4,"area":"safety"},{"id":"2504.13610","title":"Fairness and Robustness in Machine Unlearning","created":"2025-04-18","cited_by_count":4,"area":"safety"},{"id":"2505.18786","title":"Leveraging Per-Instance Privacy for Machine Unlearning","created":"2025-05-24","cited_by_count":4,"area":"safety"},{"id":"2506.01318","title":"Unlearning's Blind Spots: Over-Unlearning and Prototypical Relearning Attack","created":"2025-06-02","cited_by_count":4,"area":"safety"},{"id":"2507.20573","title":"Reminiscence Attack on Residuals: Exploiting Approximate Machine Unlearning for Privacy","created":"2025-07-28","cited_by_count":4,"area":"safety"},{"id":"2508.12730","title":"Unlearning Comparator: A Visual Analytics System for Comparative Evaluation of Machine Unlearning Methods","created":"2025-08-18","cited_by_count":4,"area":"safety"},{"id":"2602.18505","title":"Suppression or Deletion: A Restoration-Based Representation-Level Analysis of Machine Unlearning","created":"2026-02-18","cited_by_count":4,"area":"safety"},{"id":"2604.15166","title":"Class Unlearning via Depth-Aware Removal of Forget-Specific Directions","created":"2026-04-16","cited_by_count":4,"area":"safety"},{"id":"2404.13134","title":"Deep Learning-based Text-in-Image Watermarking","created":"2024-04-19","cited_by_count":3,"area":"safety"},{"id":"2411.08443","title":"Machine Unlearning on Pre-trained Models by Residual Feature Alignment Using LoRA","created":"2024-11-13","cited_by_count":3,"area":"safety"},{"id":"2412.08156","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","created":"2024-12-11","cited_by_count":3,"area":"safety"},{"id":"2501.02373","title":"BADTV: Unveiling Backdoor Threats in Third-Party Task Vectors","created":"2025-01-04","cited_by_count":3,"area":"safety"},{"id":"2501.17151","title":"Scanning Trojaned Models Using Out-of-Distribution Samples","created":"2025-01-28","cited_by_count":3,"area":"safety"},{"id":"2506.05743","title":"When Better Features Mean Greater Risks: The Performance-Privacy Trade-Off in Contrastive Learning","created":"2025-06-06","cited_by_count":3,"area":"safety"},{"id":"2508.01569","title":"LetheViT: Selective Machine Unlearning for Vision Transformers via Attention-Guided Contrastive Learning","created":"2025-08-03","cited_by_count":3,"area":"safety"},{"id":"2509.07879","title":"Active Membership Inference Test (aMINT): Enhancing Model Auditability with Multi-Task Learning","created":"2025-09-09","cited_by_count":3,"area":"safety"},{"id":"2603.15033","title":"Models Designed to Forget: Machine Unlearning via Key Deletion","created":"2026-03-16","cited_by_count":3,"area":"safety"},{"id":"2305.09684","title":"Decision-based iterative fragile watermarking for model integrity verification","created":"2023-05-13","cited_by_count":2,"area":"safety"},{"id":"2308.09971","title":"Disposable Transfer Learning for Selective Source Task Unlearning","created":"2023-08-19","cited_by_count":2,"area":"safety"},{"id":"2404.11056","title":"LMEraser: Large Model Unlearning through Adaptive Prompt Tuning","created":"2024-04-17","cited_by_count":2,"area":"safety"},{"id":"2407.07539","title":"Machine Unlearning for Medical Imaging","created":"2024-07-10","cited_by_count":2,"area":"safety"},{"id":"2408.01040","title":"Privacy-Preserving Split Learning with Vision Transformers using Patch-Wise Random and Noisy CutMix","created":"2024-08-02","cited_by_count":2,"area":"safety"}],"next_cursor":"100"}