{"total":115,"rows":[{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166,"area":null},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153,"area":null},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2204.05255","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","created":"2022-04-11","cited_by_count":103,"area":null},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64,"area":null},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59,"area":null},{"id":"2303.18191","title":"Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency","created":"2023-03-27","cited_by_count":46,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2205.13616","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","created":"2022-05-26","cited_by_count":40,"area":null},{"id":"2302.14677","title":"Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger","created":"2023-02-28","cited_by_count":40,"area":null},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37,"area":null},{"id":"2201.13178","title":"Few-Shot Backdoor Attacks on Visual Object Tracking","created":"2022-01-31","cited_by_count":35,"area":null},{"id":"2302.11408","title":"ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms","created":"2023-02-22","cited_by_count":29,"area":null},{"id":"2211.05638","title":"Untargeted Backdoor Attack against Object Detection","created":"2022-11-02","cited_by_count":28,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2205.03190","title":"Imperceptible Backdoor Attack: From Input Space to Feature Representation","created":"2022-05-06","cited_by_count":27,"area":null},{"id":"2312.04432","title":"FreqFed: A Frequency Analysis-Based Approach for Mitigating Poisoning Attacks in Federated Learning","created":"2023-12-07","cited_by_count":27,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2502.18508","title":"REFINE: Inversion-Free Backdoor Defense via Model Reprogramming","created":"2025-02-22","cited_by_count":22,"area":null},{"id":"2207.10825","title":"Just Rotate it: Deploying Backdoor Attacks via Rotation Transformation","created":"2022-07-22","cited_by_count":20,"area":null},{"id":"2301.10908","title":"Distilling Cognitive Backdoor Patterns within an Image","created":"2023-01-26","cited_by_count":20,"area":null},{"id":"2304.01482","title":"Defending Against Patch-based Backdoor Attacks on Self-Supervised Learning","created":"2023-04-04","cited_by_count":20,"area":null},{"id":"2401.15295","title":"Shortcuts Everywhere and Nowhere: Exploring Multi-Trigger Backdoor Attacks","created":"2024-01-27","cited_by_count":19,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2302.12758","title":"Defending Against Backdoor Attacks by Layer-wise Feature Analysis","created":"2023-02-24","cited_by_count":16,"area":null},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2503.15293","title":"Test-Time Backdoor Detection for Object Detection Models","created":"2025-03-19","cited_by_count":14,"area":null},{"id":"2307.10184","title":"A Dual Stealthy Backdoor: From Both Spatial and Frequency Perspectives","created":"2023-07-03","cited_by_count":13,"area":null},{"id":"2210.06428","title":"Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace Subnetwork","created":"2022-10-12","cited_by_count":12,"area":null},{"id":"2412.07277","title":"Backdoor Attacks against No-Reference Image Quality Assessment Models via a Scalable Trigger","created":"2024-12-10","cited_by_count":12,"area":null},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11,"area":null},{"id":"2405.16112","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","created":"2024-05-25","cited_by_count":11,"area":null},{"id":"2406.00588","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","created":"2024-06-02","cited_by_count":11,"area":null},{"id":"2412.01646","title":"Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior","created":"2024-12-02","cited_by_count":11,"area":null},{"id":"2201.13164","title":"Imperceptible and Multi-channel Backdoor Attack against Deep Neural Networks","created":"2022-01-31","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2306.00816","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","created":"2023-06-01","cited_by_count":9,"area":null},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2310.11595","title":"WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networks","created":"2023-10-17","cited_by_count":8,"area":null},{"id":"2106.05484","title":"A Unified Framework for Task-Driven Data Quality Management","created":"2021-06-10","cited_by_count":7,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2306.08386","title":"Efficient Backdoor Attacks for Deep Neural Networks in Real-world Scenarios","created":"2023-06-14","cited_by_count":7,"area":null},{"id":"2401.02031","title":"Spy-Watermark: Robust Invisible Watermarking for Backdoor Attack","created":"2024-01-04","cited_by_count":7,"area":null},{"id":"2302.01740","title":"SoK: A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification","created":"2023-02-03","cited_by_count":6,"area":null},{"id":"2307.05422","title":"Differential Analysis of Triggers and Benign Features for Black-Box DNN Backdoor Detection","created":"2023-07-11","cited_by_count":6,"area":null},{"id":"2405.20291","title":"Unveiling and Mitigating Backdoor Vulnerabilities based on Unlearning Weight Changes and Backdoor Activeness","created":"2024-05-30","cited_by_count":6,"area":null},{"id":"2503.16872","title":"Lie Detector: Unified Backdoor Detection via Cross-Examination Framework","created":"2025-03-21","cited_by_count":6,"area":null},{"id":"2207.04209","title":"Invisible Backdoor Attacks Using Data Poisoning in the Frequency Domain","created":"2022-07-09","cited_by_count":5,"area":null},{"id":"2306.08313","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","created":"2023-06-14","cited_by_count":5,"area":null},{"id":"2307.07328","title":"Boosting Backdoor Attack with A Learnable Poisoning Sample Selection Strategy","created":"2023-07-14","cited_by_count":5,"area":null},{"id":"2405.14781","title":"Unified Neural Backdoor Removal with Only Few Clean Samples through Unlearning and Relearning","created":"2024-05-23","cited_by_count":5,"area":null},{"id":"2204.09498","title":"Backdooring Explainable Machine Learning","created":"2022-04-20","cited_by_count":4,"area":null},{"id":"2208.10608","title":"RIBAC: Towards Robust and Imperceptible Backdoor Attack against Compact DNN","created":"2022-08-22","cited_by_count":4,"area":null},{"id":"2211.10933","title":"Invisible Backdoor Attack with Dynamic Triggers against Person Re-identification","created":"2022-11-20","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2403.05847","title":"iBA: Backdoor Attack on 3D Point Cloud via Reconstructing Itself","created":"2024-03-09","cited_by_count":4,"area":null},{"id":"2406.10573","title":"Graph Neural Backdoor: Fundamentals, Methodologies, Applications, and Future Directions","created":"2024-06-15","cited_by_count":4,"area":null},{"id":"2407.19203","title":"Clean-Label Physical Backdoor Attacks with Data Distillation","created":"2024-07-27","cited_by_count":4,"area":null},{"id":"2409.16057","title":"Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis","created":"2024-09-24","cited_by_count":4,"area":null},{"id":"2503.09712","title":"Revisiting Backdoor Attacks on Time Series Classification in the Frequency Domain","created":"2025-03-12","cited_by_count":4,"area":null},{"id":"2205.15944","title":"Hide and Seek: on the Stealthiness of Attacks against Deep Learning Systems","created":"2022-05-31","cited_by_count":3,"area":null},{"id":"2303.01504","title":"Backdoor for Debias: Mitigating Model Bias with Backdoor Attack-based Artificial Bias","created":"2023-03-01","cited_by_count":3,"area":null},{"id":"2303.10594","title":"AdaptGuard: Defending Against Universal Attacks for Model Adaptation","created":"2023-03-19","cited_by_count":3,"area":null},{"id":"2304.10985","title":"INK: Inheritable Natural Backdoor Attack Against Model Distillation","created":"2023-04-21","cited_by_count":3,"area":null},{"id":"2307.11565","title":"Adversarial Feature Map Pruning for Backdoor","created":"2023-07-21","cited_by_count":3,"area":null},{"id":"2309.01786","title":"Safe and Robust Watermark Injection with a Single OoD Image","created":"2023-09-04","cited_by_count":3,"area":null},{"id":"2402.17465","title":"Model X-ray:Detecting Backdoored Models via Decision Boundary","created":"2024-02-27","cited_by_count":3,"area":null},{"id":"2403.15955","title":"Finding needles in a haystack: A Black-Box Approach to Invisible Watermark Detection","created":"2024-03-23","cited_by_count":3,"area":null},{"id":"2411.11525","title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization","created":"2024-11-18","cited_by_count":3,"area":null},{"id":"2502.11687","title":"ReVeil: Unconstrained Concealed Backdoor Attack on Deep Neural Networks using Machine Unlearning","created":"2025-02-17","cited_by_count":3,"area":null},{"id":"2202.11203","title":"Under-confidence Backdoors Are Resilient and Stealthy Backdoors","created":"2022-02-19","cited_by_count":2,"area":null},{"id":"2309.07428","title":"Physical Invisible Backdoor Based on Camera Imaging","created":"2023-09-14","cited_by_count":2,"area":null},{"id":"2401.00137","title":"SSL-OTA: Unveiling Backdoor Threats in Self-Supervised Learning for Object Detection","created":"2023-12-30","cited_by_count":2,"area":null},{"id":"2402.15653","title":"Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm","created":"2024-02-23","cited_by_count":2,"area":null},{"id":"2402.16926","title":"On the (In)feasibility of ML Backdoor Detection as an Hypothesis Testing Problem","created":"2024-02-26","cited_by_count":2,"area":null},{"id":"2409.00863","title":"Fisher Information guided Purification against Backdoor Attacks","created":"2024-09-01","cited_by_count":2,"area":null},{"id":"2411.19075","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2503.12058","title":"Revisiting Training-Inference Trigger Intensity in Backdoor Attacks","created":"2025-03-15","cited_by_count":2,"area":null},{"id":"2504.21054","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","created":"2025-04-29","cited_by_count":2,"area":null},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2205.04411","title":"Model-Contrastive Learning for Backdoor Defense","created":"2022-05-09","cited_by_count":1,"area":null},{"id":"2206.07018","title":"Turning a Curse into a Blessing: Enabling In-Distribution-Data-Free Backdoor Removal via Stabilized Model Inversion","created":"2022-06-14","cited_by_count":1,"area":null},{"id":"2403.13018","title":"Invisible Backdoor Attack Through Singular Value Decomposition","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2404.14042","title":"CloudFort: Enhancing Robustness of 3D Point Cloud Classification Against Backdoor Attacks via Spatial Partitioning and Ensemble Prediction","created":"2024-04-22","cited_by_count":1,"area":null},{"id":"2405.03918","title":"Unlearning Backdoor Attacks through Gradient-Based Model Pruning","created":"2024-05-07","cited_by_count":1,"area":null},{"id":"2409.02251","title":"NoiseAttack: An Evasive Sample-Specific Multi-Targeted Backdoor Attack Through White Gaussian Noise","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2502.18520","title":"Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features","created":"2025-02-23","cited_by_count":1,"area":null},{"id":"2509.15497","title":"Backdoor Mitigation via Invertible Pruning Masks","created":"2025-09-19","cited_by_count":1,"area":null},{"id":"2603.13864","title":"Inevitable Encounters: Backdoor Attacks Involving Lossy Compression","created":"2026-03-14","cited_by_count":1,"area":null},{"id":"2212.08701","title":"An Upper Bound for the Distribution Overlap Index and Its Applications","created":"2022-12-16","cited_by_count":0,"area":null},{"id":"2303.12397","title":"Edge Deep Learning Model Protection via Neuron Authorization","created":"2023-03-22","cited_by_count":0,"area":null},{"id":"2401.15002","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-01-26","cited_by_count":0,"area":null}],"next_cursor":"100"}