{"total":130,"rows":[{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263,"area":null},{"id":"2301.07014","title":"Dataset Distillation: A Comprehensive Review","created":"2023-01-17","cited_by_count":127,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2205.13383","title":"BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning","created":"2022-05-26","cited_by_count":86,"area":null},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79,"area":null},{"id":"2209.11715","title":"The \"Beatrix'' Resurrections: Robust Backdoor Detection via Gram Matrices","created":"2022-09-23","cited_by_count":63,"area":null},{"id":"2204.06974","title":"Planting Undetectable Backdoors in Machine Learning Models","created":"2022-04-14","cited_by_count":59,"area":null},{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57,"area":null},{"id":"2206.10013","title":"Measuring the Effect of Training Data on Deep Learning Predictions via Randomized Experiments","created":"2022-06-20","cited_by_count":50,"area":null},{"id":"2303.18191","title":"Detecting Backdoors During the Inference Stage Based on Corruption Robustness Consistency","created":"2023-03-27","cited_by_count":46,"area":null},{"id":"2205.13616","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","created":"2022-05-26","cited_by_count":40,"area":null},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2302.11408","title":"ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms","created":"2023-02-22","cited_by_count":29,"area":null},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2301.08170","title":"On the Vulnerability of Backdoor Defenses for Federated Learning","created":"2023-01-19","cited_by_count":27,"area":null},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2111.05077","title":"Enhancing Backdoor Attacks with Multi-Level MMD Regularization","created":"2021-11-09","cited_by_count":15,"area":null},{"id":"2210.05929","title":"Few-shot Backdoor Attacks via Neural Tangent Kernels","created":"2022-10-12","cited_by_count":15,"area":null},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2307.10163","title":"Rethinking Backdoor Attacks","created":"2023-07-19","cited_by_count":14,"area":"safety"},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2202.06312","title":"Progressive Backdoor Erasing via connecting Backdoor and Adversarial Attacks","created":"2022-02-13","cited_by_count":11,"area":null},{"id":"2208.13893","title":"Data Isotopes for Data Provenance in DNNs","created":"2022-08-29","cited_by_count":11,"area":null},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11,"area":null},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11,"area":null},{"id":"2406.00588","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","created":"2024-06-02","cited_by_count":11,"area":null},{"id":"2506.14003","title":"Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputs","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2310.10780","title":"Demystifying Poisoning Backdoor Attacks from a Statistical Perspective","created":"2023-10-16","cited_by_count":10,"area":null},{"id":"2405.17929","title":"Towards Unified Robustness Against Both Backdoor and Adversarial Attacks","created":"2024-05-28","cited_by_count":10,"area":null},{"id":"2109.05507","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","created":"2021-09-12","cited_by_count":9,"area":null},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2309.16211","title":"VDC: Versatile Data Cleanser based on Visual-Linguistic Inconsistency by Multimodal Large Language Models","created":"2023-09-28","cited_by_count":9,"area":"mllm"},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2410.02182","title":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","created":"2024-10-03","cited_by_count":9,"area":null},{"id":"2303.11643","title":"Manipulating Transfer Learning for Property Inference","created":"2023-03-21","cited_by_count":8,"area":null},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8,"area":null},{"id":"2310.11595","title":"WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networks","created":"2023-10-17","cited_by_count":8,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2312.00157","title":"Universal Backdoor Attacks","created":"2023-11-30","cited_by_count":7,"area":null},{"id":"2411.15673","title":"Semantic Shield: Defending Vision-Language Models Against Backdooring and Poisoning via Fine-grained Knowledge Alignment","created":"2024-11-23","cited_by_count":7,"area":"mllm"},{"id":"2308.04406","title":"XGBD: Explanation-Guided Graph Backdoor Detection","created":"2023-08-08","cited_by_count":6,"area":null},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2205.11736","title":"Towards a Defense Against Federated Backdoor Attacks Under Continuous Training","created":"2022-05-24","cited_by_count":5,"area":null},{"id":"2301.04554","title":"Universal Detection of Backdoor Attacks via Density-based Clustering and Centroids Analysis","created":"2023-01-11","cited_by_count":5,"area":null},{"id":"2306.08009","title":"DHBE: Data-free Holistic Backdoor Erasing in Deep Neural Networks via Restricted Adversarial Distillation","created":"2023-06-13","cited_by_count":5,"area":null},{"id":"2306.08313","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","created":"2023-06-14","cited_by_count":5,"area":null},{"id":"2406.05826","title":"PSBD: Prediction Shift Uncertainty Unlocks Backdoor Detection","created":"2024-06-09","cited_by_count":5,"area":null},{"id":"2411.03279","title":"Oblivious Defense in ML Models: Backdoor Removal without Detection","created":"2024-11-05","cited_by_count":5,"area":null},{"id":"2504.08812","title":"Mechanistic Anomaly Detection for \"Quirky\" Language Models","created":"2025-04-09","cited_by_count":5,"area":null},{"id":"2507.04119","title":"When Data-Free Knowledge Distillation Meets Non-Transferable Teacher: Escaping Out-of-Distribution Trap is All You Need","created":"2025-07-05","cited_by_count":5,"area":"distill"},{"id":"2404.11265","title":"The Victim and The Beneficiary: Exploiting a Poisoned Model to Train a Clean Model on Poisoned Data","created":"2024-04-17","cited_by_count":4,"area":"safety"},{"id":"2407.08838","title":"Deep Learning for Network Anomaly Detection under Data Contamination: Evaluating Robustness and Mitigating Performance Degradation","created":"2024-07-11","cited_by_count":4,"area":null},{"id":"2407.10825","title":"Wicked Oddities: Selectively Poisoning for Effective Clean-Label Backdoor Attacks","created":"2024-07-15","cited_by_count":4,"area":null},{"id":"2407.19203","title":"Clean-Label Physical Backdoor Attacks with Data Distillation","created":"2024-07-27","cited_by_count":4,"area":null},{"id":"2504.21730","title":"Cert-SSBD: Certified Backdoor Defense with Sample-Specific Smoothing Noises","created":"2025-04-30","cited_by_count":4,"area":null},{"id":"2111.14309","title":"A General Framework for Defending Against Backdoor Attacks via Influence Graph","created":"2021-11-29","cited_by_count":3,"area":null},{"id":"2309.11691","title":"RAI4IoE: Responsible AI for Enabling the Internet of Energy","created":"2023-09-20","cited_by_count":3,"area":null},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2411.11525","title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization","created":"2024-11-18","cited_by_count":3,"area":null},{"id":"2504.11990","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","created":"2025-04-16","cited_by_count":3,"area":"safety"},{"id":"2601.21692","title":"TCAP: Tri-Component Attention Profiling for Unsupervised Backdoor Detection in MLLM Fine-Tuning","created":"2026-01-29","cited_by_count":3,"area":"mllm"},{"id":"2603.15656","title":"Attribution-Guided Model Rectification of Unreliable Neural Network Behaviors","created":"2026-03-08","cited_by_count":3,"area":null},{"id":"2605.03482","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","created":"2026-05-05","cited_by_count":3,"area":"rag"},{"id":"2202.11203","title":"Under-confidence Backdoors Are Resilient and Stealthy Backdoors","created":"2022-02-19","cited_by_count":2,"area":null},{"id":"2207.03576","title":"Robustness Evaluation of Deep Unsupervised Learning Algorithms for Intrusion Detection Systems","created":"2022-06-25","cited_by_count":2,"area":null},{"id":"2407.05112","title":"Releasing Malevolence from Benevolence: The Menace of Benign Data on Machine Unlearning","created":"2024-07-06","cited_by_count":2,"area":"safety"},{"id":"2407.11372","title":"UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening","created":"2024-07-16","cited_by_count":2,"area":null},{"id":"2410.17230","title":"Optimal Robust Estimation under Local and Global Corruptions: Stronger Adversary and Smaller Error","created":"2024-10-22","cited_by_count":2,"area":null},{"id":"2503.12058","title":"Revisiting Training-Inference Trigger Intensity in Backdoor Attacks","created":"2025-03-15","cited_by_count":2,"area":null},{"id":"2505.14531","title":"SifterNet: A Generalized and Model-Agnostic Trigger Purification Approach","created":"2025-05-20","cited_by_count":2,"area":"safety"},{"id":"2505.15175","title":"A Linear Approach to Data Poisoning","created":"2025-05-21","cited_by_count":2,"area":"safety"},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2507.12022","title":"Dataset Ownership Verification for Pre-trained Masked Models","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2205.13613","title":"Circumventing Backdoor Defenses That Are Based on Latent Separability","created":"2022-05-26","cited_by_count":1,"area":null},{"id":"2210.06509","title":"Understanding Impacts of Task Similarity on Backdoor Attack and Detection","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2402.08695","title":"Game of Trojans: Adaptive Adversaries Against Output-based Trojaned-Model Detectors","created":"2024-02-12","cited_by_count":1,"area":null},{"id":"2405.16707","title":"Visualizing the Shadows: Unveiling Data Poisoning Behaviors in Federated Learning","created":"2024-05-26","cited_by_count":1,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2409.04982","title":"2DSig-Detect: a semi-supervised framework for anomaly detection on image data using 2D-signatures","created":"2024-09-08","cited_by_count":1,"area":null},{"id":"2409.13004","title":"Data Poisoning and Leakage Analysis in Federated Learning","created":"2024-09-19","cited_by_count":1,"area":"safety"},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2508.21636","title":"Detecting Stealthy Data Poisoning Attacks in AI Code Generators","created":"2025-08-29","cited_by_count":1,"area":"safety"},{"id":"2509.19242","title":"Linear Regression under Missing or Corrupted Coordinates","created":"2025-09-23","cited_by_count":1,"area":null},{"id":"2510.01157","title":"Where Do Backdoors Live? A Component-Level Analysis of Backdoor Propagation in Speech Language Models","created":"2025-10-01","cited_by_count":1,"area":"safety"},{"id":"2602.15195","title":"Weight space Detection of Backdoors in LoRA Adapters","created":"2026-02-16","cited_by_count":1,"area":null},{"id":"2604.24542","title":"Layerwise Convergence Fingerprints for Runtime Misbehavior Detection in Large Language Models","created":"2026-04-27","cited_by_count":1,"area":"alignment"},{"id":"2605.30189","title":"Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2207.05937","title":"Game of Trojans: A Submodular Byzantine Approach","created":"2022-07-13","cited_by_count":0,"area":null},{"id":"2208.06592","title":"Confidence Matters: Inspecting Backdoors in Deep Neural Networks via Distribution Transfer","created":"2022-08-13","cited_by_count":0,"area":null},{"id":"2211.01808","title":"Dormant Neural Trojans","created":"2022-11-02","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}