{"total":77,"rows":[{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166,"area":null},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161,"area":"safety"},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2303.15180","title":"Detecting Backdoors in Pre-trained Encoders","created":"2023-03-23","cited_by_count":55,"area":"safety"},{"id":"2303.18191","title":"Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency","created":"2023-03-27","cited_by_count":46,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2201.13178","title":"Few-Shot Backdoor Attacks on Visual Object Tracking","created":"2022-01-31","cited_by_count":35,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2203.00858","title":"Physical Backdoor Attacks to Lane Detection Systems in Autonomous Driving","created":"2022-03-02","cited_by_count":31,"area":null},{"id":"2312.00050","title":"Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift","created":"2023-11-27","cited_by_count":31,"area":"diffusion"},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2208.08052","title":"Imperceptible and Robust Backdoor Attack in 3D Point Cloud","created":"2022-08-17","cited_by_count":25,"area":null},{"id":"2502.18508","title":"REFINE: Inversion-Free Backdoor Defense via Model Reprogramming","created":"2025-02-22","cited_by_count":22,"area":null},{"id":"2206.12381","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","created":"2022-06-24","cited_by_count":20,"area":"safety"},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2301.10412","title":"BDMMT: Backdoor Sample Detection for Language Models through Model Mutation Testing","created":"2023-01-25","cited_by_count":16,"area":"safety"},{"id":"2301.06241","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","created":"2023-01-16","cited_by_count":15,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2404.01101","title":"UFID: A Unified Framework for Input-level Backdoor Detection on Diffusion Models","created":"2024-04-01","cited_by_count":14,"area":"diffusion"},{"id":"2103.10274","title":"TOP: Backdoor Detection in Neural Networks via Transferability of Perturbation","created":"2021-03-18","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2210.10886","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","created":"2022-10-19","cited_by_count":12,"area":"safety"},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11,"area":null},{"id":"2503.06453","title":"Efficient Input-level Backdoor Defense on Text-to-Image Synthesis via Neuron Activation Variation","created":"2025-03-09","cited_by_count":8,"area":"diffusion"},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2411.15673","title":"Semantic Shield: Defending Vision-Language Models Against Backdooring and Poisoning via Fine-grained Knowledge Alignment","created":"2024-11-23","cited_by_count":7,"area":"mllm"},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2212.11751","title":"Mind Your Heart: Stealthy Backdoor Attack on Dynamic Deep Neural Network in Edge Computing","created":"2022-12-22","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2106.07214","title":"Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence Functions","created":"2021-06-14","cited_by_count":5,"area":null},{"id":"2206.00145","title":"CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defences","created":"2022-05-31","cited_by_count":5,"area":null},{"id":"2401.01911","title":"Backdoor Attack on Unpaired Medical Image-Text Foundation Models: A Pilot Study on MedCLIP","created":"2024-01-01","cited_by_count":5,"area":"safety"},{"id":"2406.02883","title":"Nonlinear Transformations Against Unlearnable Datasets","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2103.15918","title":"MISA: Online Defense of Trojaned Models using Misattributions","created":"2021-03-29","cited_by_count":4,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2301.12318","title":"Gradient Shaping: Enhancing Backdoor Attack Against Reverse Engineering","created":"2023-01-29","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2404.11265","title":"The Victim and The Beneficiary: Exploiting a Poisoned Model to Train a Clean Model on Poisoned Data","created":"2024-04-17","cited_by_count":4,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2407.10052","title":"Augmented Neural Fine-Tuning for Efficient Backdoor Purification","created":"2024-07-14","cited_by_count":3,"area":null},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2504.11990","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","created":"2025-04-16","cited_by_count":3,"area":"safety"},{"id":"2402.15653","title":"Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm","created":"2024-02-23","cited_by_count":2,"area":null},{"id":"2403.15010","title":"Clean-image Backdoor Attacks","created":"2024-03-22","cited_by_count":2,"area":null},{"id":"2410.12955","title":"Long-Tailed Backdoor Attack Using Dynamic Data Augmentation Operations","created":"2024-10-16","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2411.19075","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2503.12058","title":"Revisiting Training-Inference Trigger Intensity in Backdoor Attacks","created":"2025-03-15","cited_by_count":2,"area":null},{"id":"2206.07018","title":"Turning a Curse into a Blessing: Enabling In-Distribution-Data-Free Backdoor Removal via Stabilized Model Inversion","created":"2022-06-14","cited_by_count":1,"area":null},{"id":"2303.15564","title":"Mask and Restore: Blind Backdoor Defense at Test Time with Masked Autoencoder","created":"2023-03-27","cited_by_count":1,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2404.14042","title":"CloudFort: Enhancing Robustness of 3D Point Cloud Classification Against Backdoor Attacks via Spatial Partitioning and Ensemble Prediction","created":"2024-04-22","cited_by_count":1,"area":null},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2211.01808","title":"Dormant Neural Trojans","created":"2022-11-02","cited_by_count":0,"area":"safety"},{"id":"2306.01983","title":"Mitigating Backdoor Attack Via Prerequisite Transformation","created":"2023-06-03","cited_by_count":0,"area":null},{"id":"2311.15728","title":"Adinkra Symbol Recognition using Classical Machine Learning and Deep Learning","created":"2023-11-27","cited_by_count":0,"area":null},{"id":"2403.18256","title":"Manipulating Neural Path Planners via Slight Perturbations","created":"2024-03-27","cited_by_count":0,"area":"safety"},{"id":"2404.12852","title":"LSP Framework: A Compensatory Model for Defeating Trigger Reverse Engineering via Label Smoothing Poisoning","created":"2024-04-19","cited_by_count":0,"area":"safety"},{"id":"2405.16488","title":"Partial train and isolate, mitigate backdoor attack","created":"2024-05-26","cited_by_count":0,"area":null},{"id":"2407.10180","title":"Defending Against Repetitive Backdoor Attacks on Semi-supervised Learning through Lens of Rate-Distortion-Perception Trade-off","created":"2024-07-14","cited_by_count":0,"area":null},{"id":"2410.05284","title":"Hypnopaedia-Aware Machine Unlearning via Psychometrics of Artificial Mental Imagery","created":"2024-09-29","cited_by_count":0,"area":"safety"},{"id":"2502.10490","title":"A Robust Attack: Displacement Backdoor Attack","created":"2025-02-14","cited_by_count":0,"area":null},{"id":"2507.06092","title":"Taming Data Challenges in ML-based Security Tasks Using Generative AI","created":"2025-07-08","cited_by_count":0,"area":null},{"id":"2508.02115","title":"Coward: Collision-based OOD Watermarking for Practical Proactive Federated Backdoor Detection","created":"2025-08-04","cited_by_count":0,"area":null},{"id":"2604.20047","title":"PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2607.25502","title":"Anti-Backdoor Coreset Selection via Cumulative Entropy","created":"2026-07-28","cited_by_count":0,"area":null}],"next_cursor":null}