{"total":193,"rows":[{"id":"2209.02299","title":"A Survey of Machine Unlearning","created":"2022-09-06","cited_by_count":312,"area":"safety"},{"id":"2111.08947","title":"Fast Yet Effective Machine Unlearning","created":"2021-11-17","cited_by_count":217,"area":"safety"},{"id":"2302.06588","title":"Raising the Cost of Malicious AI-Powered Image Editing","created":"2023-02-13","cited_by_count":163,"area":"diffusion"},{"id":"2106.10807","title":"Adversarial Examples Make Strong Poisons","created":"2021-06-21","cited_by_count":119,"area":null},{"id":"2106.08970","title":"Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratch","created":"2021-06-16","cited_by_count":102,"area":"safety"},{"id":"2405.14577","title":"Representation Noising: A Defence Mechanism Against Harmful Finetuning","created":"2024-05-23","cited_by_count":96,"area":"safety"},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2305.00054","title":"LAVA: Data Valuation without Pre-Specified Learning Algorithms","created":"2023-04-28","cited_by_count":69,"area":null},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57,"area":null},{"id":"2109.08266","title":"Hard to Forget: Poisoning Attacks on Certified Machine Unlearning","created":"2021-09-17","cited_by_count":52,"area":"safety"},{"id":"2206.03693","title":"Autoregressive Perturbations for Data Poisoning","created":"2022-06-08","cited_by_count":46,"area":"safety"},{"id":"2311.13127","title":"MetaCloak: Preventing Unauthorized Subject-driven Text-to-image Diffusion-based Synthesis via Meta-learning","created":"2023-11-22","cited_by_count":44,"area":"diffusion"},{"id":"2110.14189","title":"Robust Contrastive Learning Using Negative Samples with Diminished Semantics","created":"2021-10-27","cited_by_count":43,"area":null},{"id":"2210.10114","title":"Transferable Unlearnable Examples","created":"2022-10-18","cited_by_count":43,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2306.01902","title":"Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation","created":"2023-06-02","cited_by_count":37,"area":"diffusion"},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2310.19248","title":"IMPRESS: Evaluating the Resilience of Imperceptible Perturbations Against Unauthorized Data Usage in Diffusion-Based Generative AI","created":"2023-10-30","cited_by_count":35,"area":"diffusion"},{"id":"2405.07406","title":"Machine Unlearning: A Comprehensive Survey","created":"2024-05-13","cited_by_count":35,"area":"safety"},{"id":"2202.11202","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","created":"2022-02-22","cited_by_count":34,"area":"safety"},{"id":"2303.15127","title":"Learning the Unlearnable: Adversarial Augmentations Suppress Unlearnable Example Attacks","created":"2023-03-27","cited_by_count":30,"area":"safety"},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2307.09829","title":"What do neural networks learn in image classification? A frequency shortcut perspective","created":"2023-07-19","cited_by_count":28,"area":null},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26,"area":null},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2311.13091","title":"Stable Unlearnable Example: Enhancing the Robustness of Unlearnable Examples via Stable Error-Minimizing Noise","created":"2023-11-22","cited_by_count":25,"area":null},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23,"area":"safety"},{"id":"2305.19254","title":"What Can We Learn from Unlearnable Datasets?","created":"2023-05-30","cited_by_count":21,"area":null},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2311.02105","title":"Making Harmful Behaviors Unlearnable for Large Language Models","created":"2023-11-02","cited_by_count":20,"area":null},{"id":"2408.05500","title":"PointNCBW: Towards Dataset Ownership Verification for Point Clouds via Negative Clean-label Backdoor Watermark","created":"2024-08-10","cited_by_count":20,"area":null},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2303.08500","title":"The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models","created":"2023-03-15","cited_by_count":19,"area":"diffusion"},{"id":"2310.19360","title":"Balance, Imbalance, and Rebalance: Understanding Robust Overfitting from a Minimax Game Perspective","created":"2023-10-30","cited_by_count":18,"area":null},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2405.03316","title":"Provably Unlearnable Data Examples","created":"2024-05-06","cited_by_count":18,"area":null},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18,"area":"safety"},{"id":"2507.03034","title":"Rethinking Data Protection in the (Generative) Artificial Intelligence Era","created":"2025-07-03","cited_by_count":18,"area":null},{"id":"2202.13295","title":"Efficient Attribute Unlearning: Towards Selective Removal of Input Attributes from Feature Representations","created":"2022-02-27","cited_by_count":17,"area":"safety"},{"id":"2305.09241","title":"Unlearnable Examples Give a False Sense of Security: Piercing through Unexploitable Data with Learnable Examples","created":"2023-05-16","cited_by_count":17,"area":null},{"id":"2112.04558","title":"SoK: Anti-Facial Recognition Technology","created":"2021-12-08","cited_by_count":16,"area":null},{"id":"2410.03644","title":"Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Need","created":"2024-10-04","cited_by_count":16,"area":null},{"id":"2204.08615","title":"Poisons that are learned faster are more effective","created":"2022-04-19","cited_by_count":14,"area":null},{"id":"2410.09909","title":"UnSeg: One Universal Unlearnable Example Generator is Enough against All Image Segmentation","created":"2024-10-13","cited_by_count":14,"area":null},{"id":"2111.10130","title":"Fooling Adversarial Training with Inducing Noise","created":"2021-11-19","cited_by_count":13,"area":null},{"id":"2203.10939","title":"Deep Learning Serves Traffic Safety Analysis: A Forward-looking Review","created":"2022-03-07","cited_by_count":13,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2406.17349","title":"Semantic Deep Hiding for Robust Unlearnable Examples","created":"2024-06-25","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2311.11415","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","created":"2023-11-19","cited_by_count":12,"area":null},{"id":"2401.17523","title":"Game-Theoretic Unlearnable Example Generator","created":"2024-01-31","cited_by_count":12,"area":"safety"},{"id":"2402.04010","title":"Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously","created":"2024-02-06","cited_by_count":12,"area":null},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2403.12052","title":"A Dataset and Benchmark for Copyright Infringement Unlearning from Text-to-Image Diffusion Models","created":"2024-01-04","cited_by_count":11,"area":"diffusion"},{"id":"2405.17462","title":"Ferrari: Federated Feature Unlearning via Optimizing Feature Sensitivity","created":"2024-05-23","cited_by_count":11,"area":"safety"},{"id":"2406.00588","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","created":"2024-06-02","cited_by_count":11,"area":null},{"id":"2505.05279","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","created":"2025-05-08","cited_by_count":11,"area":null},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10,"area":null},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2404.06737","title":"Disguised Copyright Infringement of Latent Diffusion Models","created":"2024-04-10","cited_by_count":10,"area":"diffusion"},{"id":"2302.09813","title":"Audit to Forget: A Unified Method to Revoke Patients' Private Data in Intelligent Healthcare","created":"2023-02-20","cited_by_count":9,"area":null},{"id":"2311.11995","title":"BrainWash: A Poisoning Attack to Forget in Continual Learning","created":"2023-11-20","cited_by_count":9,"area":null},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2406.15093","title":"ECLIPSE: Expunging Clean-label Indiscriminate Poisons via Sparse Diffusion Purification","created":"2024-06-21","cited_by_count":9,"area":null},{"id":"2408.08143","title":"Unlearnable Examples Detection via Iterative Filtering","created":"2024-08-15","cited_by_count":9,"area":"safety"},{"id":"2507.07483","title":"Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Tracking","created":"2025-07-10","cited_by_count":9,"area":null},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2403.10573","title":"Medical Unlearnable Examples: Securing Medical Data from Unauthorized Training via Sparsity-Aware Local Masking","created":"2024-03-15","cited_by_count":8,"area":null},{"id":"2410.20742","title":"Mitigating Unauthorized Speech Synthesis for Voice Protection","created":"2024-10-28","cited_by_count":8,"area":null},{"id":"2507.05622","title":"DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective","created":"2025-07-08","cited_by_count":8,"area":null},{"id":"2106.06654","title":"Disrupting Model Training with Adversarial Shortcuts","created":"2021-06-12","cited_by_count":7,"area":null},{"id":"2201.00762","title":"Execute Order 66: Targeted Data Poisoning for Reinforcement Learning","created":"2022-01-03","cited_by_count":7,"area":"safety"},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2308.03258","title":"APBench: A Unified Benchmark for Availability Poisoning Attacks and Defenses","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2407.11011","title":"Toward Availability Attacks in 3D Point Clouds","created":"2024-06-26","cited_by_count":7,"area":null},{"id":"2512.16625","title":"DeContext as Defense: Safe Image Editing in Diffusion Transformers","created":"2025-12-18","cited_by_count":7,"area":"diffusion"},{"id":"2306.15268","title":"Can Pretrained Language Models Derive Correct Semantics from Corrupt Subwords under Noise?","created":"2023-06-27","cited_by_count":6,"area":null},{"id":"2310.16061","title":"Segue: Side-information Guided Generative Unlearnable Examples for Facial Privacy Protection in Real World","created":"2023-10-24","cited_by_count":6,"area":null},{"id":"2406.15305","title":"PID: Prompt-Independent Data Protection Against Latent Diffusion Models","created":"2024-06-14","cited_by_count":6,"area":"diffusion"},{"id":"2504.09839","title":"SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis","created":"2025-04-14","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2303.02568","title":"Unlearnable Graph: Protecting Graphs from Unauthorized Exploitation","created":"2023-03-05","cited_by_count":5,"area":null},{"id":"2310.05141","title":"Transferable Availability Poisoning Attacks","created":"2023-10-08","cited_by_count":5,"area":"safety"},{"id":"2311.06423","title":"Transferability Bound Theory: Exploring Relationship between Adversarial Transferability and Flatness","created":"2023-11-10","cited_by_count":5,"area":null},{"id":"2401.02135","title":"PosCUDA: Position based Convolution for Unlearnable Audio Datasets","created":"2024-01-04","cited_by_count":5,"area":null},{"id":"2401.08998","title":"Attack and Reset for Unlearning: Exploiting Adversarial Noise toward Machine Unlearning through Parameter Re-initialization","created":"2024-01-17","cited_by_count":5,"area":"safety"},{"id":"2401.17133","title":"SongBsAb: A Dual Prevention Approach against Singing Voice Conversion based Illegal Song Covers","created":"2024-01-30","cited_by_count":5,"area":null},{"id":"2402.02028","title":"Unlearnable Examples For Time Series","created":"2024-02-03","cited_by_count":5,"area":null},{"id":"2406.02883","title":"Nonlinear Transformations Against Unlearnable Datasets","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2410.10922","title":"Towards Privacy-Guaranteed Label Unlearning in Vertical Federated Learning: Few-Shot Forgetting without Disclosure","created":"2024-10-14","cited_by_count":5,"area":"safety"},{"id":"2411.10469","title":"User-wise Perturbations for User Identity Protection in EEG-Based BCIs","created":"2024-11-04","cited_by_count":5,"area":null},{"id":"2503.03519","title":"Do ImageNet-trained models learn shortcuts? The impact of frequency shortcuts on generalization","created":"2025-03-05","cited_by_count":5,"area":null},{"id":"2503.23536","title":"A Survey on Unlearnable Data","created":"2025-03-30","cited_by_count":5,"area":null}],"next_cursor":"100"}