{"total":68,"rows":[{"id":"2402.11208","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","created":"2024-02-17","cited_by_count":137,"area":"agents"},{"id":"2305.10701","title":"Personalization as a Shortcut for Few-Shot Backdoor Attack against Text-to-Image Diffusion Models","created":"2023-05-18","cited_by_count":42,"area":"diffusion"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2201.13178","title":"Few-Shot Backdoor Attacks on Visual Object Tracking","created":"2022-01-31","cited_by_count":35,"area":null},{"id":"2408.07362","title":"BadMerging: Backdoor Attacks Against Model Merging","created":"2024-08-14","cited_by_count":34,"area":null},{"id":"2203.00858","title":"Physical Backdoor Attacks to Lane Detection Systems in Autonomous Driving","created":"2022-03-02","cited_by_count":31,"area":null},{"id":"2312.00050","title":"Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift","created":"2023-11-27","cited_by_count":31,"area":"diffusion"},{"id":"2312.12585","title":"BadRL: Sparse Targeted Backdoor Attack Against Reinforcement Learning","created":"2023-12-19","cited_by_count":30,"area":null},{"id":"2205.03190","title":"Imperceptible Backdoor Attack: From Input Space to Feature Representation","created":"2022-05-06","cited_by_count":27,"area":null},{"id":"2203.08398","title":"COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks","created":"2022-03-16","cited_by_count":26,"area":"offlinerl"},{"id":"2210.04688","title":"BAFFLE: Hiding Backdoors in Offline Reinforcement Learning Datasets","created":"2022-10-07","cited_by_count":25,"area":"offlinerl"},{"id":"2202.03609","title":"PolicyCleanse: Backdoor Detection and Mitigation in Reinforcement Learning","created":"2022-02-08","cited_by_count":19,"area":null},{"id":"2405.20539","title":"SleeperNets: Universal Backdoor Poisoning Attacks Against Reinforcement Learning Agents","created":"2024-05-30","cited_by_count":19,"area":"safety"},{"id":"2211.10530","title":"Provable Defense against Backdoor Policies in Reinforcement Learning","created":"2022-11-18","cited_by_count":18,"area":null},{"id":"2302.03322","title":"Attacking Cooperative Multi-Agent Reinforcement Learning by Adversarial Minority Influence","created":"2023-02-07","cited_by_count":17,"area":null},{"id":"2205.02589","title":"A Temporal-Pattern Backdoor Attack to Deep Reinforcement Learning","created":"2022-05-05","cited_by_count":16,"area":null},{"id":"2211.11030","title":"Adversarial Cheap Talk","created":"2022-11-20","cited_by_count":16,"area":null},{"id":"2302.13851","title":"Implicit Poisoning Attacks in Two-Agent Reinforcement Learning: Adversarial Policies for Training-Time Attacks","created":"2023-02-27","cited_by_count":14,"area":null},{"id":"2505.23847","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","created":"2025-05-28","cited_by_count":12,"area":"agents"},{"id":"2309.03081","title":"ORL-AUDITOR: Dataset Auditing in Offline Deep Reinforcement Learning","created":"2023-09-06","cited_by_count":11,"area":"offlinerl"},{"id":"2307.07670","title":"Efficient Adversarial Attacks on Online Multi-agent Reinforcement Learning","created":"2023-07-15","cited_by_count":10,"area":null},{"id":"2601.04266","title":"State Backdoor: Towards Stealthy Real-world Poisoning Attack on Vision-Language-Action Model in State Space","created":"2026-01-07","cited_by_count":9,"area":"vla"},{"id":"2410.13995","title":"Adversarial Inception Backdoor Attacks against Reinforcement Learning","created":"2024-10-17","cited_by_count":8,"area":"deeprl"},{"id":"2402.03741","title":"SUB-PLAY: Adversarial Policies against Partially Observed Multi-Agent Reinforcement Learning Systems","created":"2024-02-06","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2501.01593","title":"BLAST: A Stealthy Backdoor Leverage Attack against Cooperative Multi-Agent Deep Reinforcement Learning based Systems","created":"2025-01-03","cited_by_count":7,"area":"safety"},{"id":"2405.15245","title":"Cooperative Backdoor Attack in Decentralized Reinforcement Learning with Theoretical Guarantee","created":"2024-05-24","cited_by_count":6,"area":"deeprl"},{"id":"2409.07775","title":"A Spatiotemporal Stealthy Backdoor Attack against Cooperative Multi-Agent Deep Reinforcement Learning","created":"2024-09-12","cited_by_count":6,"area":"safety"},{"id":"2305.10091","title":"Multi-Agent Reinforcement Learning: Methods, Applications, Visionary Prospects, and Challenges","created":"2023-05-17","cited_by_count":5,"area":null},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2501.15529","title":"UNIDOOR: A Universal Framework for Action-Level Backdoor Attacks in Deep Reinforcement Learning","created":"2025-01-26","cited_by_count":5,"area":"deeprl"},{"id":"2505.19532","title":"Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning","created":"2025-05-26","cited_by_count":5,"area":"deeprl"},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2211.10933","title":"Invisible Backdoor Attack with Dynamic Triggers against Person Re-identification","created":"2022-11-20","cited_by_count":4,"area":null},{"id":"2402.02165","title":"Towards Optimal Adversarial Robust Q-learning with Bellman Infinity-error","created":"2024-02-03","cited_by_count":4,"area":"deeprl"},{"id":"2407.15168","title":"Mitigating Deep Reinforcement Learning Backdoors in the Neural Activation Space","created":"2024-07-21","cited_by_count":4,"area":"deeprl"},{"id":"2509.16950","title":"Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving","created":"2025-09-21","cited_by_count":4,"area":"safety"},{"id":"2210.11237","title":"Emerging Threats in Deep Learning-Based Autonomous Driving: A Comprehensive Survey","created":"2022-10-19","cited_by_count":3,"area":null},{"id":"2211.11455","title":"Backdoor Attacks on Multiagent Collaborative Systems","created":"2022-11-21","cited_by_count":3,"area":"safety"},{"id":"2211.14440","title":"Don't Watch Me: A Spatio-Temporal Trojan Attack on Deep-Reinforcement-Learning-Augment Autonomous Driving","created":"2022-11-22","cited_by_count":3,"area":"driving"},{"id":"2411.16512","title":"Guarding the Gate: ConceptGuard Battles Concept-Level Backdoors in Concept Bottleneck Models","created":"2024-11-25","cited_by_count":3,"area":null},{"id":"2506.09562","title":"TooBadRL: Trigger Optimization to Boost Effectiveness of Backdoor Attacks on Deep Reinforcement Learning","created":"2025-06-11","cited_by_count":3,"area":"deeprl"},{"id":"2506.12815","title":"TrojanTO: Action-Level Backdoor Attacks against Trajectory Optimization Models","created":"2025-06-15","cited_by_count":3,"area":"offlinerl"},{"id":"2212.06123","title":"Security of Deep Reinforcement Learning for Autonomous Driving: A Survey","created":"2022-12-12","cited_by_count":2,"area":"driving"},{"id":"2305.16621","title":"A Reminder of its Brittleness: Language Reward Shaping May Hinder Learning for Instruction Following Agents","created":"2023-05-26","cited_by_count":2,"area":null},{"id":"2505.17248","title":"Backdoors in DRL: Four Environments Focusing on In-distribution Triggers","created":"2025-05-22","cited_by_count":2,"area":"deeprl"},{"id":"2505.22829","title":"Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergies","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2507.00485","title":"PNAct: Crafting Backdoor Attacks in Safe Reinforcement Learning","created":"2025-07-01","cited_by_count":2,"area":"deeprl"},{"id":"2602.05089","title":"Beware Untrusted Simulators -- Reward-Free Backdoor Attacks in Reinforcement Learning","created":"2026-02-04","cited_by_count":2,"area":"deeprl"},{"id":"2311.00859","title":"Optimal Cost Constrained Adversarial Attacks For Multiple Agent Systems","created":"2023-11-01","cited_by_count":1,"area":null},{"id":"2410.04823","title":"CAT: Concept-level backdoor ATtacks for Concept Bottleneck Models","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2507.04883","title":"Beyond Training-time Poisoning: Component-level and Post-training Backdoors in Deep Reinforcement Learning","created":"2025-07-07","cited_by_count":1,"area":"deeprl"},{"id":"2605.14587","title":"Angel or Demon: Investigating the Plasticity Interventions' Impact on Backdoor Threats in Deep Reinforcement Learning","created":"2026-05-14","cited_by_count":1,"area":"deeprl"},{"id":"2606.09499","title":"Targeting World Models to Compromise Robot Learning Pipelines","created":"2026-06-08","cited_by_count":1,"area":"wm"},{"id":"2606.12896","title":"PolicyGuard: Towards Test-time and Step-level Adversary (Backdoor) Defense for Reinforcement Learning Agent","created":"2026-06-11","cited_by_count":1,"area":"safety"},{"id":"2403.18256","title":"Manipulating Neural Path Planners via Slight Perturbations","created":"2024-03-27","cited_by_count":0,"area":"safety"},{"id":"2412.17908","title":"Trading Devil RL: Backdoor attack via Stock market, Bayesian Optimization and Reinforcement Learning","created":"2024-12-23","cited_by_count":0,"area":"deeprl"},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2512.01228","title":"On the Tension Between Optimality and Adversarial Robustness in Policy Optimization","created":"2025-12-01","cited_by_count":0,"area":"deeprl"},{"id":"2601.10407","title":"CS-GBA: A Critical Sample-based Gradient-guided Backdoor Attack for Offline Reinforcement Learning","created":"2026-01-15","cited_by_count":0,"area":"offlinerl"},{"id":"2605.05977","title":"BehaviorGuard: Online Backdoor Defense for Deep Reinforcement Learning","created":"2026-05-07","cited_by_count":0,"area":"deeprl"},{"id":"2605.09638","title":"Plan2Cleanse: Test-Time Backdoor Defense via Monte-Carlo Planning in Deep Reinforcement Learning","created":"2026-05-10","cited_by_count":0,"area":"deeprl"},{"id":"2605.21146","title":"Detecting Trojaned DNNs via Spectral Regression Analysis","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2606.00414","title":"Auditing Near-Optimal Policies Can Be Exponentially Hard: Conditional Query Lower Bounds via Occupancy Rashomon Capacity","created":"2026-05-29","cited_by_count":0,"area":null},{"id":"2607.08137","title":"Securing Autonomous Vehicle Systems via Twin-Aware Federated Reinforcement Learning","created":"2026-07-09","cited_by_count":0,"area":"driving"},{"id":"2609.15781","title":"When the World Lies: Backdoor Attacks on Latent World Models for Downstream Control","created":"2026-09-14","cited_by_count":0,"area":"wm"}],"next_cursor":null}