{"total":104,"rows":[{"id":"2107.03374","title":"Evaluating Large Language Models Trained on Code","created":"2021-07-07","cited_by_count":8320,"area":null},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2108.10241","title":"Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning","created":"2021-08-23","cited_by_count":118,"area":null},{"id":"2206.10341","title":"Neurotoxin: Durable Backdoors in Federated Learning","created":"2022-06-12","cited_by_count":98,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2303.02552","title":"An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry","created":"2023-03-05","cited_by_count":47,"area":null},{"id":"2103.02683","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","created":"2021-02-16","cited_by_count":35,"area":null},{"id":"2103.02079","title":"DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations","created":"2021-03-02","cited_by_count":34,"area":null},{"id":"2303.02213","title":"Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions","created":"2023-03-03","cited_by_count":33,"area":null},{"id":"2306.04719","title":"Don't trust your eyes: on the (un)reliability of feature visualizations","created":"2023-06-07","cited_by_count":32,"area":null},{"id":"2310.01875","title":"Towards Stable Backdoor Purification through Feature Shift Tuning","created":"2023-10-03","cited_by_count":32,"area":null},{"id":"2203.08147","title":"Energy-Latency Attacks via Sponge Poisoning","created":"2022-03-14","cited_by_count":29,"area":null},{"id":"2211.05638","title":"Untargeted Backdoor Attack against Object Detection","created":"2022-11-02","cited_by_count":28,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2504.13146","title":"Antidistillation Sampling","created":"2025-04-17","cited_by_count":25,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2207.09560","title":"Holistic Robust Data-Driven Decisions","created":"2022-07-19","cited_by_count":18,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2202.10627","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","created":"2022-02-22","cited_by_count":16,"area":null},{"id":"2302.01677","title":"Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks","created":"2023-02-03","cited_by_count":16,"area":null},{"id":"2307.02460","title":"Performance Scaling via Optimal Transport: Enabling Data Selection from Partially Revealed Sources","created":"2023-07-05","cited_by_count":16,"area":null},{"id":"2203.06462","title":"Low-Rank Softmax Can Have Unargmaxable Classes in Theory but Rarely in Practice","created":"2022-03-12","cited_by_count":15,"area":null},{"id":"2205.11819","title":"Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free","created":"2022-05-24","cited_by_count":15,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2204.08615","title":"Poisons that are learned faster are more effective","created":"2022-04-19","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2211.15929","title":"Backdoor Vulnerabilities in Normally Trained Deep Learning Models","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2302.12480","title":"Robust Weight Signatures: Gaining Robustness as Easy as Patching Weights?","created":"2023-02-24","cited_by_count":13,"area":null},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2409.13864","title":"Persistent Backdoor Attacks in Continual Learning","created":"2024-09-20","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2108.13797","title":"Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings","created":"2021-08-30","cited_by_count":11,"area":null},{"id":"2204.06273","title":"Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures","created":"2022-04-13","cited_by_count":11,"area":null},{"id":"2303.02251","title":"Certified Robust Neural Networks: Generalization and Corruption Resistance","created":"2023-03-03","cited_by_count":11,"area":null},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11,"area":null},{"id":"2412.01646","title":"Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior","created":"2024-12-02","cited_by_count":11,"area":null},{"id":"2505.05279","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","created":"2025-05-08","cited_by_count":11,"area":null},{"id":"2208.08433","title":"Label Flipping Data Poisoning Attack Against Wearable Human Activity Recognition System","created":"2022-08-17","cited_by_count":10,"area":null},{"id":"2310.10780","title":"Demystifying Poisoning Backdoor Attacks from a Statistical Perspective","created":"2023-10-16","cited_by_count":10,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2310.08565","title":"Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities","created":"2023-10-12","cited_by_count":9,"area":null},{"id":"2211.13317","title":"Rank-One Editing of Encoder-Decoder Models","created":"2022-11-23","cited_by_count":7,"area":null},{"id":"2306.08386","title":"Efficient Backdoor Attacks for Deep Neural Networks in Real-world Scenarios","created":"2023-06-14","cited_by_count":7,"area":null},{"id":"2308.03258","title":"APBench: A Unified Benchmark for Availability Poisoning Attacks and Defenses","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2312.00157","title":"Universal Backdoor Attacks","created":"2023-11-30","cited_by_count":7,"area":null},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null},{"id":"2104.10561","title":"Turning Federated Learning Systems Into Covert Channels","created":"2021-04-21","cited_by_count":6,"area":null},{"id":"2210.06704","title":"COLLIDER: A Robust Training Framework for Backdoor Data","created":"2022-10-13","cited_by_count":6,"area":null},{"id":"2308.07553","title":"Enhancing the Antidote: Improved Pointwise Certifications against Poisoning Attacks","created":"2023-08-15","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2502.04484","title":"An Empirical Analysis of Machine Learning Model and Dataset Documentation, Supply Chain, and Licensing Challenges on Hugging Face","created":"2025-02-06","cited_by_count":6,"area":null},{"id":"2503.19791","title":"SITA: Structurally Imperceptible and Transferable Adversarial Attacks for Stylized Image Generation","created":"2025-03-25","cited_by_count":6,"area":null},{"id":"2306.08313","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","created":"2023-06-14","cited_by_count":5,"area":null},{"id":"2306.12111","title":"A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking","created":"2023-06-21","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2407.15855","title":"Data Poisoning Attacks in Intelligent Transportation Systems: A Survey","created":"2024-07-06","cited_by_count":5,"area":null},{"id":"2411.15101","title":"What You See is Not What You Get: Neural Partial Differential Equations and The Illusion of Learning","created":"2024-11-22","cited_by_count":5,"area":null},{"id":"2602.09987","title":"Infusion: Shaping Model Behavior by Editing Training Data via Influence Functions","created":"2026-02-10","cited_by_count":5,"area":null},{"id":"2301.08751","title":"Towards Understanding How Self-training Tolerates Data Backdoor Poisoning","created":"2023-01-20","cited_by_count":4,"area":null},{"id":"2405.15655","title":"HiddenSpeaker: Generate Imperceptible Unlearnable Audios for Speaker Verification System","created":"2024-05-24","cited_by_count":4,"area":null},{"id":"2406.17814","title":"Distribution Learnability and Robustness","created":"2024-06-25","cited_by_count":4,"area":null},{"id":"2407.10825","title":"Wicked Oddities: Selectively Poisoning for Effective Clean-Label Backdoor Attacks","created":"2024-07-15","cited_by_count":4,"area":null},{"id":"2309.01786","title":"Safe and Robust Watermark Injection with a Single OoD Image","created":"2023-09-04","cited_by_count":3,"area":null},{"id":"2401.01537","title":"The Art of Deception: Robust Backdoor Attack using Dynamic Stacking of Triggers","created":"2024-01-03","cited_by_count":3,"area":null},{"id":"2406.10719","title":"Trading Devil: Robust backdoor attack via Stochastic investment models and Bayesian approach","created":"2024-06-15","cited_by_count":3,"area":null},{"id":"2506.02032","title":"Towards Secure MLOps: Surveying Attacks, Mitigation Strategies, and Research Challenges","created":"2025-05-30","cited_by_count":3,"area":null},{"id":"2504.17833","title":"The Role of Open-Source LLMs in Shaping the Future of GeoAI","created":"2025-04-24","cited_by_count":2,"area":null},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2509.02372","title":"Scam2Prompt: A Scalable Framework for Auditing Malicious Scam Endpoints in Production LLMs","created":"2025-09-02","cited_by_count":2,"area":null},{"id":"2509.11398","title":"From Firewalls to Frontiers: AI Red-Teaming is a Domain-Specific Evolution of Cyber Red-Teaming","created":"2025-09-14","cited_by_count":2,"area":null},{"id":"2510.08016","title":"Backdoor Vectors: a Task Arithmetic View on Backdoor Attacks and Defenses","created":"2025-10-09","cited_by_count":2,"area":null},{"id":"2604.23593","title":"When AI reviews science: Can we trust the referee?","created":"2026-04-26","cited_by_count":2,"area":null},{"id":"2202.04311","title":"Identifying Backdoor Attacks in Federated Learning via Anomaly Detection","created":"2022-02-09","cited_by_count":1,"area":null},{"id":"2302.13567","title":"Towards Audit Requirements for AI-based Systems in Mobility Applications","created":"2023-02-27","cited_by_count":1,"area":null},{"id":"2306.07992","title":"Securing Visually-Aware Recommender Systems: An Adversarial Image Reconstruction and Detection Framework","created":"2023-06-11","cited_by_count":1,"area":null},{"id":"2312.06077","title":"An Ambiguity Measure for Recognizing the Unknowns in Deep Learning","created":"2023-12-11","cited_by_count":1,"area":null},{"id":"2502.18520","title":"Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features","created":"2025-02-23","cited_by_count":1,"area":null},{"id":"2507.08597","title":"ADAPT: A Pseudo-labeling Approach to Combat Concept Drift in Malware Detection","created":"2025-07-11","cited_by_count":1,"area":null},{"id":"2509.19921","title":"On the Fragility of Contribution Score Computation in Federated Learning","created":"2025-09-24","cited_by_count":1,"area":null},{"id":"2510.14845","title":"Backdoor Unlearning by Linear Task Decomposition","created":"2025-10-16","cited_by_count":1,"area":null},{"id":"2511.14301","title":"SteganoBackdoor: Evading Data-Poisoning Defenses via Steganographic Backdoors","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2207.10809","title":"Security and Safety Aspects of AI in Industry Applications","created":"2022-07-16","cited_by_count":0,"area":null},{"id":"2211.14667","title":"Deep Fake Detection, Deterrence and Response: Challenges and Opportunities","created":"2022-11-26","cited_by_count":0,"area":null},{"id":"2301.02615","title":"Silent Killer: A Stealthy, Clean-Label, Black-Box Backdoor Attack","created":"2023-01-05","cited_by_count":0,"area":null},{"id":"2306.03726","title":"Exploring Model Dynamics for Accumulative Poisoning Discovery","created":"2023-06-06","cited_by_count":0,"area":null},{"id":"2312.03120","title":"The Landscape of Modern Machine Learning: A Review of Machine, Distributed and Federated Learning","created":"2023-12-05","cited_by_count":0,"area":null},{"id":"2412.08366","title":"Backdoor attacks on DNN and GBDT -- A Case Study from the insurance domain","created":"2024-12-11","cited_by_count":0,"area":null},{"id":"2502.05211","title":"Decoding FL Defenses: Systemization, Pitfalls, and Remedies","created":"2025-02-03","cited_by_count":0,"area":null},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2510.13322","title":"Injection, Attack and Erasure: Revocable Backdoor Attacks via Machine Unlearning","created":"2025-10-15","cited_by_count":0,"area":null},{"id":"2512.14158","title":"CIS-BA: Continuous Interaction Space Based Backdoor Attack for Object Detection in the Real-World","created":"2025-12-16","cited_by_count":0,"area":null},{"id":"2601.03805","title":"Detecting Semantic Backdoors in a Mystery Shopping Scenario","created":"2026-01-07","cited_by_count":0,"area":null},{"id":"2602.00183","title":"RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance","created":"2026-01-30","cited_by_count":0,"area":null},{"id":"2602.07358","title":"UTOPIA: Unlearnable Tabular Data via Decoupled Shortcut Embedding","created":"2026-02-07","cited_by_count":0,"area":null},{"id":"2602.22470","title":"Beyond performance-wise Contribution Evaluation in Federated Learning","created":"2026-02-25","cited_by_count":0,"area":null}],"next_cursor":"100"}