{"total":208,"rows":[{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263,"area":null},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166,"area":null},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153,"area":null},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2301.07014","title":"Dataset Distillation: A Comprehensive Review","created":"2023-01-17","cited_by_count":127,"area":null},{"id":"2205.13383","title":"BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning","created":"2022-05-26","cited_by_count":86,"area":null},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79,"area":null},{"id":"2201.09538","title":"Backdoor Defense with Machine Unlearning","created":"2022-01-24","cited_by_count":65,"area":null},{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64,"area":null},{"id":"2112.01148","title":"FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis","created":"2021-12-02","cited_by_count":61,"area":null},{"id":"2102.04716","title":"Better Safe Than Sorry: Preventing Delusive Adversaries with Adversarial Training","created":"2021-02-09","cited_by_count":59,"area":null},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59,"area":null},{"id":"2205.06900","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","created":"2022-05-13","cited_by_count":55,"area":null},{"id":"2101.06969","title":"Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attacks","created":"2021-01-18","cited_by_count":49,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2205.14497","title":"BadDet: Backdoor Attacks on Object Detection","created":"2022-05-28","cited_by_count":45,"area":null},{"id":"2303.12993","title":"Backdoor Defense via Adaptively Splitting Poisoned Dataset","created":"2023-03-23","cited_by_count":43,"area":null},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2205.13616","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","created":"2022-05-26","cited_by_count":40,"area":null},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2210.09194","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","created":"2022-10-17","cited_by_count":33,"area":null},{"id":"2306.06815","title":"TrojLLM: A Black-box Trojan Prompt Attack on Large Language Models","created":"2023-06-12","cited_by_count":31,"area":null},{"id":"2108.09187","title":"Quantization Backdoors to Deep Learning Commercial Frameworks","created":"2021-08-20","cited_by_count":29,"area":null},{"id":"2201.08474","title":"Post-Training Detection of Backdoor Attacks for Two-Class and Multi-Attack Scenarios","created":"2022-01-20","cited_by_count":29,"area":null},{"id":"2207.04497","title":"One-shot Neural Backdoor Erasing via Adversarial Weight Masking","created":"2022-07-10","cited_by_count":28,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2205.03190","title":"Imperceptible Backdoor Attack: From Input Space to Feature Representation","created":"2022-05-06","cited_by_count":27,"area":null},{"id":"2301.08170","title":"On the Vulnerability of Backdoor Defenses for Federated Learning","created":"2023-01-19","cited_by_count":27,"area":null},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26,"area":null},{"id":"2401.17319","title":"Decentralized Federated Learning: A Survey on Security and Privacy","created":"2024-01-25","cited_by_count":25,"area":null},{"id":"2109.01300","title":"How to Inject Backdoors with Better Consistency: Logit Anchoring on Clean Data","created":"2021-09-03","cited_by_count":24,"area":null},{"id":"2502.18508","title":"REFINE: Inversion-Free Backdoor Defense via Model Reprogramming","created":"2025-02-22","cited_by_count":22,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2207.10825","title":"Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation","created":"2022-07-22","cited_by_count":20,"area":null},{"id":"2301.10908","title":"Distilling Cognitive Backdoor Patterns within an Image","created":"2023-01-26","cited_by_count":20,"area":null},{"id":"2401.15295","title":"Shortcuts Everywhere and Nowhere: Exploring Multi-Trigger Backdoor Attacks","created":"2024-01-27","cited_by_count":19,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2111.10991","title":"Backdoor Attack through Frequency Domain","created":"2021-11-22","cited_by_count":18,"area":null},{"id":"2204.09975","title":"Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation","created":"2022-04-21","cited_by_count":18,"area":null},{"id":"2211.10530","title":"Provable Defense against Backdoor Policies in Reinforcement Learning","created":"2022-11-18","cited_by_count":18,"area":null},{"id":"2302.06279","title":"Sneaky Spikes: Uncovering Stealthy Backdoor Attacks in Spiking Neural Networks with Neuromorphic Data","created":"2023-02-13","cited_by_count":18,"area":null},{"id":"2305.18651","title":"UMD: Unsupervised Model Detection for X2X Backdoor Attacks","created":"2023-05-29","cited_by_count":18,"area":null},{"id":"2308.04466","title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers","created":"2023-08-08","cited_by_count":18,"area":null},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2211.12044","title":"Backdoor Cleansing with Unlabeled Data","created":"2022-11-22","cited_by_count":17,"area":null},{"id":"2411.09702","title":"On the Surprising Effectiveness of Attention Transfer for Vision Transformers","created":"2024-11-14","cited_by_count":17,"area":null},{"id":"2202.10627","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","created":"2022-02-22","cited_by_count":16,"area":null},{"id":"2302.01677","title":"Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks","created":"2023-02-03","cited_by_count":16,"area":null},{"id":"2302.12758","title":"Defending Against Backdoor Attacks by Layer-wise Feature Analysis","created":"2023-02-24","cited_by_count":16,"area":null},{"id":"2111.05077","title":"Enhancing Backdoor Attacks with Multi-Level MMD Regularization","created":"2021-11-09","cited_by_count":15,"area":null},{"id":"2205.11819","title":"Quarantine: Sparsity Can Uncover the Trojan Attack Trigger for Free","created":"2022-05-24","cited_by_count":15,"area":null},{"id":"2301.06241","title":"BEAGLE: Forensics of Deep Learning Backdoor Attack for Better Defense","created":"2023-01-16","cited_by_count":15,"area":null},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2211.15929","title":"Backdoor Vulnerabilities in Normally Trained Deep Learning Models","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2307.10184","title":"A Dual Stealthy Backdoor: From Both Spatial and Frequency Perspectives","created":"2023-07-03","cited_by_count":13,"area":null},{"id":"2310.17498","title":"CBD: A Certified Backdoor Detector Based on Local Dominant Probability","created":"2023-10-26","cited_by_count":13,"area":null},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2210.06428","title":"Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace Subnetwork","created":"2022-10-12","cited_by_count":12,"area":null},{"id":"2202.06312","title":"Progressive Backdoor Erasing via connecting Backdoor and Adversarial Attacks","created":"2022-02-13","cited_by_count":11,"area":null},{"id":"2211.01806","title":"BATT: Backdoor Attack with Transformation-based Triggers","created":"2022-11-02","cited_by_count":11,"area":null},{"id":"2212.04687","title":"Selective Amnesia: On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned Machine Learning Models","created":"2022-12-09","cited_by_count":11,"area":null},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11,"area":null},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11,"area":null},{"id":"2402.06957","title":"Architectural Neural Backdoors from First Principles","created":"2024-02-10","cited_by_count":11,"area":null},{"id":"2405.16112","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","created":"2024-05-25","cited_by_count":11,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2207.05641","title":"Backdoor Attacks on Crowd Counting","created":"2022-07-12","cited_by_count":10,"area":null},{"id":"2211.05631","title":"Backdoor Defense via Suppressing Model Shortcuts","created":"2022-11-02","cited_by_count":10,"area":null},{"id":"2305.17627","title":"Robust Natural Language Understanding with Residual Attention Debiasing","created":"2023-05-28","cited_by_count":10,"area":null},{"id":"2405.17929","title":"Towards Unified Robustness Against Both Backdoor and Adversarial Attacks","created":"2024-05-28","cited_by_count":10,"area":null},{"id":"2306.00816","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","created":"2023-06-01","cited_by_count":9,"area":null},{"id":"2311.16065","title":"A Survey on Vulnerability of Federated Learning: A Learning Algorithm Perspective","created":"2023-11-27","cited_by_count":9,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2310.13424","title":"FLTracer: Accurate Poisoning Attack Provenance in Federated Learning","created":"2023-10-20","cited_by_count":8,"area":null},{"id":"2202.12154","title":"Towards Effective and Robust Neural Trojan Defenses via Input Filtering","created":"2022-02-24","cited_by_count":7,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2312.00157","title":"Universal Backdoor Attacks","created":"2023-11-30","cited_by_count":7,"area":null},{"id":"2411.19479","title":"FLARE: Toward Universal Dataset Purification against Backdoor Attacks","created":"2024-11-29","cited_by_count":7,"area":null},{"id":"2106.10147","title":"Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks","created":"2021-06-18","cited_by_count":6,"area":null},{"id":"2210.06704","title":"COLLIDER: A Robust Training Framework for Backdoor Data","created":"2022-10-13","cited_by_count":6,"area":null},{"id":"2212.11751","title":"Mind Your Heart: Stealthy Backdoor Attack on Dynamic Deep Neural Network in Edge Computing","created":"2022-12-22","cited_by_count":6,"area":null},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2405.20291","title":"Unveiling and Mitigating Backdoor Vulnerabilities based on Unlearning Weight Changes and Backdoor Activeness","created":"2024-05-30","cited_by_count":6,"area":null},{"id":"2406.06207","title":"Lurking in the shadows: Unveiling Stealthy Backdoor Attacks against Personalized Federated Learning","created":"2024-06-10","cited_by_count":6,"area":null},{"id":"2503.16872","title":"Lie Detector: Unified Backdoor Detection via Cross-Examination Framework","created":"2025-03-21","cited_by_count":6,"area":null}],"next_cursor":"100"}