{"total":82,"rows":[{"id":"2311.12075","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","created":"2023-11-20","cited_by_count":115,"area":"safety"},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2303.15180","title":"Detecting Backdoors in Pre-trained Encoders","created":"2023-03-23","cited_by_count":55,"area":"safety"},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2112.07668","title":"Dual-Key Multimodal Backdoors for Visual Question Answering","created":"2021-12-14","cited_by_count":37,"area":"safety"},{"id":"2403.16257","title":"Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning","created":"2024-03-24","cited_by_count":31,"area":"safety"},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2211.08229","title":"CorruptEncoder: Data Poisoning based Backdoor Attacks to Contrastive Learning","created":"2022-11-15","cited_by_count":29,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2407.07735","title":"Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Model","created":"2024-07-10","cited_by_count":18,"area":"safety"},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2411.11683","title":"Robot Collapse: Supply Chain Backdoor Attacks Against VLM-based Robotic Manipulation","created":"2024-11-18","cited_by_count":15,"area":"safety"},{"id":"2303.14325","title":"Backdoor Attacks with Input-unique Triggers in NLP","created":"2023-03-25","cited_by_count":12,"area":"safety"},{"id":"2412.20392","title":"Defending Multimodal Backdoored Models by Repulsive Visual Prompt Tuning","created":"2024-12-29","cited_by_count":12,"area":"safety"},{"id":"2503.08704","title":"Life-Cycle Routing Vulnerabilities of LLM Router","created":"2025-03-09","cited_by_count":11,"area":"safety"},{"id":"2211.07915","title":"Backdoor Attacks on Time Series: A Generative Approach","created":"2022-11-15","cited_by_count":10,"area":"safety"},{"id":"2306.15875","title":"Fake the Real: Backdoor Attack on Deep Speech Classification via Voice Conversion","created":"2023-06-28","cited_by_count":10,"area":"safety"},{"id":"2311.16646","title":"Rethinking Backdoor Attacks on Dataset Distillation: A Kernel Method Perspective","created":"2023-11-28","cited_by_count":10,"area":"safety"},{"id":"2312.03205","title":"Who Leaked the Model? Tracking IP Infringers in Accountable Federated Learning","created":"2023-12-06","cited_by_count":10,"area":"safety"},{"id":"2507.05113","title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2501.15563","title":"PCAP-Backdoor: Backdoor Poisoning Generator for Network Traffic in CPS/IoT Environments","created":"2025-01-26","cited_by_count":9,"area":"safety"},{"id":"2504.16907","title":"BadVideo: Stealthy Backdoor Attack against Text-to-Video Generation","created":"2025-04-23","cited_by_count":9,"area":"safety"},{"id":"2410.09101","title":"Data Taggants: Dataset Ownership Verification via Harmless Targeted Data Poisoning","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2212.10103","title":"VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion","created":"2022-12-20","cited_by_count":7,"area":"safety"},{"id":"2211.08697","title":"PBSM: Backdoor attack against Keyword spotting based on pitch boosting and sound masking","created":"2022-11-16","cited_by_count":6,"area":"safety"},{"id":"2310.00626","title":"GhostEncoder: Stealthy Backdoor Attacks with Dynamic Triggers to Pre-trained Encoders in Self-supervised Learning","created":"2023-10-01","cited_by_count":6,"area":"safety"},{"id":"2409.19526","title":"Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats","created":"2024-09-29","cited_by_count":6,"area":"safety"},{"id":"2503.05445","title":"Are Your LLM-based Text-to-SQL Models Secure? Exploring SQL Injection via Backdoor Attacks","created":"2025-03-07","cited_by_count":6,"area":"safety"},{"id":"2405.10612","title":"Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers","created":"2024-05-17","cited_by_count":5,"area":"safety"},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2404.11265","title":"The Victim and The Beneficiary: Exploiting a Poisoned Model to Train a Clean Model on Poisoned Data","created":"2024-04-17","cited_by_count":4,"area":"safety"},{"id":"2509.16950","title":"Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving","created":"2025-09-21","cited_by_count":4,"area":"safety"},{"id":"2405.19990","title":"DiffPhysBA: Diffusion-based Physical Backdoor Attack against Person Re-Identification in Real-World","created":"2024-05-30","cited_by_count":3,"area":"safety"},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2501.17151","title":"Scanning Trojaned Models Using Out-of-Distribution Samples","created":"2025-01-28","cited_by_count":3,"area":"safety"},{"id":"2601.19448","title":"From Internal Diagnosis to External Auditing: A VLM-Driven Paradigm for Data-Free Online Backdoor Defense","created":"2026-01-27","cited_by_count":3,"area":"safety"},{"id":"2408.11587","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","created":"2024-08-21","cited_by_count":2,"area":"safety"},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2505.08255","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","created":"2025-05-13","cited_by_count":2,"area":"safety"},{"id":"2506.22506","title":"SABRE-FL: Selective and Accurate Backdoor Rejection for Federated Prompt Learning","created":"2025-06-25","cited_by_count":2,"area":"safety"},{"id":"2602.17168","title":"BadCLIP++: Stealthy and Persistent Backdoors in Multimodal Contrastive Learning","created":"2026-02-19","cited_by_count":2,"area":"safety"},{"id":"2301.00435","title":"Trojaning semi-supervised learning model via poisoning wild images on the web","created":"2023-01-01","cited_by_count":1,"area":"safety"},{"id":"2303.15564","title":"Mask and Restore: Blind Backdoor Defense at Test Time with Masked Autoencoder","created":"2023-03-27","cited_by_count":1,"area":"safety"},{"id":"2305.05503","title":"BadCS: A Backdoor Attack Framework for Code search","created":"2023-05-09","cited_by_count":1,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2406.19753","title":"Attack On Prompt: Backdoor Attack in Prompt-Based Continual Learning","created":"2024-06-28","cited_by_count":1,"area":"safety"},{"id":"2407.04179","title":"Defense Against Syntactic Textual Backdoor Attacks with Token Substitution","created":"2024-07-04","cited_by_count":1,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2410.01128","title":"Using Interleaved Ensemble Unlearning to Keep Backdoors at Bay for Finetuning Vision Transformers","created":"2024-10-01","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2412.16512","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","created":"2024-12-21","cited_by_count":1,"area":"safety"},{"id":"2503.09095","title":"Backdooring CLIP through Concept Confusion","created":"2025-03-12","cited_by_count":1,"area":"safety"},{"id":"2511.05845","title":"IndirectAD: Practical Data Poisoning Attacks against Recommender Systems for Item Promotion","created":"2025-11-08","cited_by_count":1,"area":"safety"},{"id":"2603.10806","title":"Backdoor Directions in Vision Transformers","created":"2026-03-11","cited_by_count":1,"area":"safety"},{"id":"2604.18970","title":"Mechanistic Anomaly Detection via Functional Attribution","created":"2026-04-21","cited_by_count":1,"area":"safety"},{"id":"2605.15172","title":"MetaBackdoor: Exploiting Positional Encoding as a Backdoor Attack Surface in LLMs","created":"2026-05-14","cited_by_count":1,"area":"safety"},{"id":"2302.04457","title":"Imperceptible Sample-Specific Backdoor to DNN with Denoising Autoencoder","created":"2023-02-09","cited_by_count":0,"area":"safety"},{"id":"2409.19442","title":"Trigger-Based Fragile Model Watermarking for Image Transformation Networks","created":"2024-09-28","cited_by_count":0,"area":"safety"},{"id":"2410.05284","title":"Hypnopaedia-Aware Machine Unlearning via Psychometrics of Artificial Mental Imagery","created":"2024-09-29","cited_by_count":0,"area":"safety"},{"id":"2506.20926","title":"Towards Generalized and Stealthy Watermarking for Generative Code Models","created":"2025-06-26","cited_by_count":0,"area":"safety"},{"id":"2507.19905","title":"ConSeg: Contextual Backdoor Attack Against Semantic Segmentation","created":"2025-07-26","cited_by_count":0,"area":"safety"},{"id":"2508.05409","title":"From Detection to Correction: Backdoor-Resilient Face Recognition via Vision-Language Trigger Detection and Noise-Based Neutralization","created":"2025-08-07","cited_by_count":0,"area":"safety"},{"id":"2510.13992","title":"Signature in Code Backdoor Detection, how far are we?","created":"2025-10-15","cited_by_count":0,"area":"safety"},{"id":"2512.22046","title":"Backdoor Attacks on Prompt-Driven Video Segmentation Foundation Models","created":"2025-12-26","cited_by_count":0,"area":"safety"},{"id":"2603.20339","title":"Graph-Aware Stealthy Poison-Text Backdoors for Text-Attributed Graphs","created":"2026-03-20","cited_by_count":0,"area":"safety"},{"id":"2604.05809","title":"Adjustable Text-Guided Backdoor Attacks with Natural-Word Triggers on Multimodal Pretrained Models","created":"2026-04-07","cited_by_count":0,"area":"safety"},{"id":"2604.12232","title":"TEMPLATEFUZZ: Fine-Grained Chat Template Fuzzing for Jailbreaking and Red Teaming LLMs","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2604.20047","title":"PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2604.21416","title":"CSC: Turning the Adversary's Poison against Itself","created":"2026-04-23","cited_by_count":0,"area":"safety"},{"id":"2605.19478","title":"Exposing Functional Fusion: A New Class of Strategic Backdoor in Dynamic Prompt Architectures","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2605.27809","title":"Density-aware Sample-specific Attack","created":"2026-05-27","cited_by_count":0,"area":"safety"},{"id":"2605.31246","title":"BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning","created":"2026-05-29","cited_by_count":0,"area":"safety"},{"id":"2606.14078","title":"Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning","created":"2026-06-12","cited_by_count":0,"area":"safety"},{"id":"2608.04052","title":"When Modalities Fail to Tango: Conformal Backdoor Detection in Multimodal Contrastive Learning","created":"2026-08-04","cited_by_count":0,"area":"safety"}],"next_cursor":null}