{"total":131,"rows":[{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2305.00054","title":"LAVA: Data Valuation without Pre-Specified Learning Algorithms","created":"2023-04-28","cited_by_count":69,"area":null},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57,"area":null},{"id":"2110.14189","title":"Robust Contrastive Learning Using Negative Samples with Diminished Semantics","created":"2021-10-27","cited_by_count":43,"area":null},{"id":"2210.10114","title":"Transferable Unlearnable Examples","created":"2022-10-18","cited_by_count":43,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2307.09829","title":"What do neural networks learn in image classification? A frequency shortcut perspective","created":"2023-07-19","cited_by_count":28,"area":null},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26,"area":null},{"id":"2311.13091","title":"Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noise","created":"2023-11-22","cited_by_count":25,"area":null},{"id":"2305.19254","title":"What Can We Learn from Unlearnable Datasets?","created":"2023-05-30","cited_by_count":21,"area":null},{"id":"2311.02105","title":"Making Harmful Behaviors Unlearnable for Large Language Models","created":"2023-11-02","cited_by_count":20,"area":null},{"id":"2408.05500","title":"PointNCBW: Towards Dataset Ownership Verification for Point Clouds via Negative Clean-label Backdoor Watermark","created":"2024-08-10","cited_by_count":20,"area":null},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2310.19360","title":"Balance, Imbalance, and Rebalance: Understanding Robust Overfitting from a Minimax Game Perspective","created":"2023-10-30","cited_by_count":18,"area":null},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2405.03316","title":"Provably Unlearnable Data Examples","created":"2024-05-06","cited_by_count":18,"area":null},{"id":"2507.03034","title":"Rethinking Data Protection in the (Generative) Artificial Intelligence Era","created":"2025-07-03","cited_by_count":18,"area":null},{"id":"2305.09241","title":"Unlearnable Examples Give a False Sense of Security: Piercing through Unexploitable Data with Learnable Examples","created":"2023-05-16","cited_by_count":17,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2410.03644","title":"Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Need","created":"2024-10-04","cited_by_count":16,"area":null},{"id":"2204.08615","title":"Poisons that are learned faster are more effective","created":"2022-04-19","cited_by_count":14,"area":null},{"id":"2410.09909","title":"UnSeg: One Universal Unlearnable Example Generator is Enough against All Image Segmentation","created":"2024-10-13","cited_by_count":14,"area":null},{"id":"2111.10130","title":"Fooling Adversarial Training with Inducing Noise","created":"2021-11-19","cited_by_count":13,"area":null},{"id":"2203.10939","title":"Deep Learning Serves Traffic Safety Analysis: A Forward-looking Review","created":"2022-03-07","cited_by_count":13,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2406.17349","title":"Semantic Deep Hiding for Robust Unlearnable Examples","created":"2024-06-25","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2311.11415","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","created":"2023-11-19","cited_by_count":12,"area":null},{"id":"2402.04010","title":"Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously","created":"2024-02-06","cited_by_count":12,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2406.00588","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","created":"2024-06-02","cited_by_count":11,"area":null},{"id":"2505.05279","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","created":"2025-05-08","cited_by_count":11,"area":null},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10,"area":null},{"id":"2302.09813","title":"Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcare","created":"2023-02-20","cited_by_count":9,"area":null},{"id":"2311.11995","title":"BrainWash: A Poisoning Attack to Forget in Continual Learning","created":"2023-11-20","cited_by_count":9,"area":null},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2406.15093","title":"ECLIPSE: Expunging Clean-label Indiscriminate Poisons via Sparse Diffusion Purification","created":"2024-06-21","cited_by_count":9,"area":null},{"id":"2507.07483","title":"Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Tracking","created":"2025-07-10","cited_by_count":9,"area":null},{"id":"2403.10573","title":"Medical Unlearnable Examples: Securing Medical Data from Unauthorized Training via Sparsity-Aware Local Masking","created":"2024-03-15","cited_by_count":8,"area":null},{"id":"2410.20742","title":"Mitigating Unauthorized Speech Synthesis for Voice Protection","created":"2024-10-28","cited_by_count":8,"area":null},{"id":"2507.05622","title":"DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective","created":"2025-07-08","cited_by_count":8,"area":null},{"id":"2106.06654","title":"Disrupting Model Training with Adversarial Shortcuts","created":"2021-06-12","cited_by_count":7,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2308.03258","title":"APBench: A Unified Benchmark for Availability Poisoning Attacks and Defenses","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2407.11011","title":"Toward Availability Attacks in 3D Point Clouds","created":"2024-06-26","cited_by_count":7,"area":null},{"id":"2306.15268","title":"Can Pretrained Language Models Derive Correct Semantics from Corrupt Subwords under Noise?","created":"2023-06-27","cited_by_count":6,"area":null},{"id":"2310.16061","title":"Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World","created":"2023-10-24","cited_by_count":6,"area":null},{"id":"2504.09839","title":"SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis","created":"2025-04-14","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2303.02568","title":"Unlearnable Graph: Protecting Graphs from Unauthorized Exploitation","created":"2023-03-05","cited_by_count":5,"area":null},{"id":"2311.06423","title":"Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2401.02135","title":"PosCUDA: Position based Convolution for Unlearnable Audio Datasets","created":"2024-01-04","cited_by_count":5,"area":null},{"id":"2401.17133","title":"SongBsAb: A Dual Prevention Approach against Singing Voice Conversion based Illegal Song Covers","created":"2024-01-30","cited_by_count":5,"area":null},{"id":"2402.02028","title":"Unlearnable Examples For Time Series","created":"2024-02-03","cited_by_count":5,"area":null},{"id":"2406.02883","title":"Nonlinear Transformations Against Unlearnable Datasets","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2411.10469","title":"User-wise Perturbations for User Identity Protection in EEG-Based BCIs","created":"2024-11-04","cited_by_count":5,"area":null},{"id":"2503.03519","title":"Do ImageNet-trained models learn shortcuts? The impact of frequency shortcuts on generalization","created":"2025-03-05","cited_by_count":5,"area":null},{"id":"2503.23536","title":"A Survey on Unlearnable Data","created":"2025-03-30","cited_by_count":5,"area":null},{"id":"2603.04731","title":"When Priors Backfire: On the Vulnerability of Unlearnable Examples to Pretraining","created":"2026-03-05","cited_by_count":5,"area":null},{"id":"2212.01767","title":"ConfounderGAN: Protecting Image Data Privacy with Causal Confounder","created":"2022-12-04","cited_by_count":4,"area":null},{"id":"2303.02559","title":"Securing Biomedical Images from Unauthorized Training with Anti-Learning Perturbation","created":"2023-03-05","cited_by_count":4,"area":null},{"id":"2305.11191","title":"Towards Generalizable Data Protection With Transferable Unlearnable Examples","created":"2023-05-18","cited_by_count":4,"area":null},{"id":"2310.10659","title":"Exploiting Machine Unlearning for Backdoor Attacks in Deep Learning System","created":"2023-09-12","cited_by_count":4,"area":null},{"id":"2401.03156","title":"Data-Dependent Stability Analysis of Adversarial Training","created":"2024-01-06","cited_by_count":4,"area":null},{"id":"2405.15655","title":"HiddenSpeaker: Generate Imperceptible Unlearnable Audios for Speaker Verification System","created":"2024-05-24","cited_by_count":4,"area":null},{"id":"2409.06280","title":"Anonymity Unveiled: A Practical Framework for Auditing Data Use in Deep Learning Models","created":"2024-09-10","cited_by_count":4,"area":null},{"id":"2509.08058","title":"How Far Are We from True Unlearnability?","created":"2025-09-09","cited_by_count":4,"area":null},{"id":"2112.04720","title":"Amicable Aid: Perturbing Images to Improve Classification Performance","created":"2021-12-09","cited_by_count":3,"area":null},{"id":"2208.10688","title":"Hierarchical Perceptual Noise Injection for Social Media Fingerprint Privacy Protection","created":"2022-08-23","cited_by_count":3,"area":null},{"id":"2307.01073","title":"What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?","created":"2023-07-03","cited_by_count":3,"area":null},{"id":"2312.11413","title":"DeRDaVa: Deletion-Robust Data Valuation for Machine Learning","created":"2023-12-18","cited_by_count":3,"area":null},{"id":"2411.08506","title":"Towards Operationalizing Right to Data Protection","created":"2024-11-13","cited_by_count":3,"area":null},{"id":"2412.21061","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","created":"2024-12-30","cited_by_count":3,"area":null},{"id":"2503.05794","title":"CBW: Towards Dataset Ownership Verification for Speaker Verification via Clustering-based Backdoor Watermarking","created":"2025-03-02","cited_by_count":3,"area":null},{"id":"2508.03091","title":"T2UE: Generating Unlearnable Examples from Text Descriptions","created":"2025-08-05","cited_by_count":3,"area":null},{"id":"2606.26719","title":"Full spectrum Unlearnable Examples via Spectral Equalization","created":"2026-06-25","cited_by_count":3,"area":null},{"id":"2405.04191","title":"Effective and Robust Adversarial Training against Data and Label Corruptions","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2411.09776","title":"Combining Machine Learning Defenses without Conflicts","created":"2024-11-14","cited_by_count":2,"area":null},{"id":"2501.06533","title":"DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR Strategy","created":"2025-01-11","cited_by_count":2,"area":null},{"id":"2508.01074","title":"Evading Data Provenance in Deep Neural Networks","created":"2025-08-01","cited_by_count":2,"area":null},{"id":"2508.16843","title":"A Survey of Threats Against Voice Authentication and Anti-Spoofing Systems","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2510.09210","title":"Provable Watermarking for Data Poisoning Attacks","created":"2025-10-10","cited_by_count":2,"area":null},{"id":"2602.03878","title":"Intellectual Property Protection for 3D Gaussian Splatting Assets: A Survey","created":"2026-02-02","cited_by_count":2,"area":null},{"id":"2603.03725","title":"Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Information","created":"2026-03-04","cited_by_count":2,"area":null},{"id":"2605.19999","title":"LLM Benchmark Datasets Should Be Contamination-Resistant","created":"2026-05-19","cited_by_count":2,"area":null},{"id":"2608.04314","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","created":"2026-08-05","cited_by_count":2,"area":null},{"id":"2306.02064","title":"Unlearnable Examples Give a False Sense of Data Privacy: Understanding and Relearning","created":"2023-06-03","cited_by_count":1,"area":null},{"id":"2311.10919","title":"PACOL: Poisoning Attacks Against Continual Learners","created":"2023-11-18","cited_by_count":1,"area":null},{"id":"2402.11237","title":"Be Persistent: Towards a Unified Solution for Mitigating Shortcuts in Deep Learning","created":"2024-02-17","cited_by_count":1,"area":null},{"id":"2405.05573","title":"Poisoning-based Backdoor Attacks for Arbitrary Target Label with Positive Triggers","created":"2024-05-09","cited_by_count":1,"area":null},{"id":"2407.02437","title":"Beyond Full Poisoning: Effective Availability Attacks with Partial Perturbation","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2409.08509","title":"Exploiting Supervised Poison Vulnerability to Strengthen Self-Supervised Defense","created":"2024-09-13","cited_by_count":1,"area":null}],"next_cursor":"100"}