{"total":53,"rows":[{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153,"area":null},{"id":"2106.09667","title":"Poisoning and Backdooring Contrastive Learning","created":"2021-06-17","cited_by_count":151,"area":null},{"id":"2302.02503","title":"Leaving Reality to Imagination: Robust Classification via Generated Datasets","created":"2023-02-05","cited_by_count":91,"area":null},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2306.07200","title":"Fill-Up: Balancing Long-Tailed Data with Generative Models","created":"2023-06-12","cited_by_count":34,"area":null},{"id":"2307.12280","title":"Downstream-agnostic Adversarial Examples","created":"2023-07-23","cited_by_count":32,"area":null},{"id":"2210.07346","title":"An Embarrassingly Simple Backdoor Attack on Self-supervised Learning","created":"2022-10-13","cited_by_count":31,"area":null},{"id":"2302.11408","title":"ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms","created":"2023-02-22","cited_by_count":29,"area":null},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2305.11596","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","created":"2023-05-19","cited_by_count":21,"area":null},{"id":"2403.10801","title":"Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples","created":"2024-03-16","cited_by_count":21,"area":null},{"id":"2304.01482","title":"Defending Against Patch-based Backdoor Attacks on Self-Supervised Learning","created":"2023-04-04","cited_by_count":20,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2211.12044","title":"Backdoor Cleansing with Unlabeled Data","created":"2022-11-22","cited_by_count":17,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2210.06428","title":"Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace Subnetwork","created":"2022-10-12","cited_by_count":12,"area":null},{"id":"2106.09993","title":"Accumulative Poisoning Attacks on Real-time Data","created":"2021-06-18","cited_by_count":10,"area":null},{"id":"2303.00215","title":"Single Image Backdoor Inversion via Robust Smoothed Classifiers","created":"2023-03-01","cited_by_count":10,"area":null},{"id":"2211.10908","title":"ESTAS: Effective and Stable Trojan Attacks in Self-supervised Encoders with One Target Unlabelled Sample","created":"2022-11-20","cited_by_count":9,"area":null},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2210.01632","title":"Backdoor Attacks in the Supply Chain of Masked Image Modeling","created":"2022-10-04","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2508.14015","title":"Backdooring Self-Supervised Contrastive Learning by Noisy Alignment","created":"2025-08-19","cited_by_count":6,"area":null},{"id":"2210.15818","title":"FUSSL: Fuzzy Uncertain Self Supervised Learning","created":"2022-10-28","cited_by_count":5,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2310.08320","title":"Defending Our Privacy With Backdoors","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2401.01537","title":"The Art of Deception: Robust Backdoor Attack using Dynamic Stacking of Triggers","created":"2024-01-03","cited_by_count":3,"area":null},{"id":"2405.11575","title":"SEEP: Training Dynamics Grounds Latent Representation Search for Mitigating Backdoor Poisoning Attacks","created":"2024-05-19","cited_by_count":3,"area":null},{"id":"2312.07955","title":"Erasing Self-Supervised Learning Backdoor by Cluster Activation Masking","created":"2023-12-13","cited_by_count":2,"area":null},{"id":"2401.00137","title":"SSL-OTA: Unveiling Backdoor Threats in Self-Supervised Learning for Object Detection","created":"2023-12-30","cited_by_count":2,"area":null},{"id":"2405.13080","title":"EmInspector: Combating Backdoor Attacks in Federated Self-Supervised Learning Through Embedding Inspection","created":"2024-05-21","cited_by_count":2,"area":null},{"id":"2409.00863","title":"Fisher Information guided Purification against Backdoor Attacks","created":"2024-09-01","cited_by_count":2,"area":null},{"id":"2503.08829","title":"Seal Your Backdoor with Variational Defense","created":"2025-03-11","cited_by_count":2,"area":null},{"id":"2506.04556","title":"BESA: Boosting Encoder Stealing Attack with Perturbation Recovery","created":"2025-06-05","cited_by_count":2,"area":null},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2507.12022","title":"Dataset Ownership Verification for Pre-trained Masked Models","created":"2025-07-16","cited_by_count":2,"area":null},{"id":"2306.17441","title":"Efficient Backdoor Removal Through Natural Gradient Fine-tuning","created":"2023-06-30","cited_by_count":1,"area":null},{"id":"2308.04673","title":"SSL-Auth: An Authentication Framework by Fragile Watermarking for Pre-trained Encoders in Self-supervised Learning","created":"2023-08-09","cited_by_count":1,"area":null},{"id":"2404.06694","title":"How to Craft Backdoors with Unlabeled Data Alone?","created":"2024-04-10","cited_by_count":1,"area":null},{"id":"2408.01705","title":"Downstream Transfer Attack: Adversarial Attacks on Downstream Models with Pre-trained Vision Transformers","created":"2024-08-03","cited_by_count":1,"area":null},{"id":"2409.04982","title":"2DSig-Detect: a semi-supervised framework for anomaly detection on image data using 2D-signatures","created":"2024-09-08","cited_by_count":1,"area":null},{"id":"2505.11586","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2508.08031","title":"IPBA: Imperceptible Perturbation Backdoor Attack in Federated Self-Supervised Learning","created":"2025-08-11","cited_by_count":1,"area":null},{"id":"2311.09680","title":"Trustworthy Large Models in Vision: A Survey","created":"2023-11-16","cited_by_count":0,"area":null},{"id":"2311.14772","title":"Trainwreck: A damaging adversarial attack on image classifiers","created":"2023-11-24","cited_by_count":0,"area":null},{"id":"2403.15918","title":"Towards Adversarial Robustness And Backdoor Mitigation in SSL","created":"2024-03-23","cited_by_count":0,"area":null},{"id":"2407.10180","title":"Defending Against Repetitive Backdoor Attacks on Semi-supervised Learning through Lens of Rate-Distortion-Perception Trade-off","created":"2024-07-14","cited_by_count":0,"area":null},{"id":"2412.02109","title":"Direct Coloring for Self-Supervised Enhanced Feature Decoupling","created":"2024-12-03","cited_by_count":0,"area":null},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2505.00881","title":"Protocol-agnostic and Data-free Backdoor Attacks on Pre-trained Models in RF Fingerprinting","created":"2025-05-01","cited_by_count":0,"area":null},{"id":"2604.14973","title":"Robustness of Vision Foundation Models to Common Perturbations","created":"2026-04-16","cited_by_count":0,"area":null},{"id":"2605.01834","title":"Repurposing and Evaluating the (In)Feasibility of Dataset Poisoning enabled Watermarking for Contrastive Learning","created":"2026-05-03","cited_by_count":0,"area":null}],"next_cursor":null}