{"total":89,"rows":[{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2111.07970","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","created":"2021-11-15","cited_by_count":66,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2301.02344","title":"TrojanPuzzle: Covertly Poisoning Code-Suggestion Models","created":"2023-01-06","cited_by_count":60,"area":null},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2402.14872","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","created":"2024-02-21","cited_by_count":53,"area":"safety"},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49,"area":"safety"},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2310.14480","title":"Attention-Enhancing Backdoor Attacks Against BERT-based Models","created":"2023-10-23","cited_by_count":32,"area":"safety"},{"id":"2304.14475","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","created":"2023-04-27","cited_by_count":31,"area":"safety"},{"id":"2306.06815","title":"TrojLLM: A Black-box Trojan Prompt Attack on Large Language Models","created":"2023-06-12","cited_by_count":31,"area":null},{"id":"2312.00050","title":"Elijah: Eliminating Backdoors Injected in Diffusion Models via Distribution Shift","created":"2023-11-27","cited_by_count":31,"area":"diffusion"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2402.19334","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","created":"2024-02-29","cited_by_count":26,"area":null},{"id":"2305.02394","title":"Defending against Insertion-based Textual Backdoor Attacks via Attribution","created":"2023-05-03","cited_by_count":25,"area":"safety"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2410.14479","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","created":"2024-10-18","cited_by_count":22,"area":"rag"},{"id":"2305.02424","title":"Backdoor Learning on Sequence to Sequence Models","created":"2023-05-03","cited_by_count":21,"area":null},{"id":"2305.11596","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","created":"2023-05-19","cited_by_count":21,"area":null},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2305.17506","title":"Backdooring Neural Code Search","created":"2023-05-27","cited_by_count":19,"area":"safety"},{"id":"2308.02122","title":"ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP","created":"2023-08-04","cited_by_count":19,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2305.16503","title":"IMBERT: Making BERT Immune to Insertion-based Backdoor Attacks","created":"2023-05-25","cited_by_count":15,"area":"safety"},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2211.11958","title":"A Survey on Backdoor Attack and Defense in Natural Language Processing","created":"2022-11-22","cited_by_count":14,"area":"safety"},{"id":"2402.13532","title":"Backdoor Attacks on Dense Retrieval via Public and Unintentional Triggers","created":"2024-02-21","cited_by_count":14,"area":null},{"id":"2404.19597","title":"TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuning","created":"2024-04-30","cited_by_count":14,"area":"safety"},{"id":"2211.15929","title":"Backdoor Vulnerabilities in Normally Trained Deep Learning Models","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2404.02406","title":"Exploring Backdoor Vulnerabilities of Chat Models","created":"2024-04-03","cited_by_count":13,"area":"safety"},{"id":"2409.01193","title":"CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models","created":"2024-09-02","cited_by_count":13,"area":"safety"},{"id":"2303.14325","title":"Backdoor Attacks with Input-unique Triggers in NLP","created":"2023-03-25","cited_by_count":12,"area":"safety"},{"id":"2210.17029","title":"Poison Attack and Defense on Deep Source Code Processing Models","created":"2022-10-31","cited_by_count":11,"area":"safety"},{"id":"2202.13145","title":"QuoteR: A Benchmark of Quote Recommendation for Writing","created":"2022-02-26","cited_by_count":10,"area":null},{"id":"2409.00787","title":"The Dark Side of Human Feedback: Poisoning Large Language Models via User Inputs","created":"2024-09-01","cited_by_count":10,"area":"alignment"},{"id":"2210.00108","title":"ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks","created":"2022-09-30","cited_by_count":9,"area":null},{"id":"2312.04748","title":"Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attacks","created":"2023-12-07","cited_by_count":9,"area":"safety"},{"id":"2407.12281","title":"Turning Generative Models Degenerate: The Power of Data Poisoning Attacks","created":"2024-07-17","cited_by_count":9,"area":"safety"},{"id":"2410.02182","title":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","created":"2024-10-03","cited_by_count":9,"area":null},{"id":"2305.09574","title":"UOR: Universal Backdoor Attacks on Pre-trained Language Models","created":"2023-05-16","cited_by_count":8,"area":"safety"},{"id":"2412.19037","title":"CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers","created":"2024-12-26","cited_by_count":8,"area":"safety"},{"id":"2212.10103","title":"VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion","created":"2022-12-20","cited_by_count":7,"area":"safety"},{"id":"2404.02356","title":"Two Heads are Better than One: Nested PoE for Robust Defense Against Multi-Backdoors","created":"2024-04-02","cited_by_count":7,"area":"moe"},{"id":"2211.08697","title":"PBSM: Backdoor attack against Keyword spotting based on pitch boosting and sound masking","created":"2022-11-16","cited_by_count":6,"area":"safety"},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2301.11824","title":"PECAN: A Deterministic Certified Defense Against Backdoor Attacks","created":"2023-01-27","cited_by_count":5,"area":null},{"id":"2312.15867","title":"Punctuation Matters! Stealthy Backdoor Attack for Language Models","created":"2023-12-26","cited_by_count":5,"area":"safety"},{"id":"2402.18945","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","created":"2024-02-29","cited_by_count":5,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2407.04151","title":"Securing Multi-turn Conversational Language Models From Distributed Backdoor Triggers","created":"2024-07-04","cited_by_count":5,"area":"safety"},{"id":"2410.11283","title":"AdvBDGen: Adversarially Fortified Prompt-Specific Fuzzy Backdoor Generator Against LLM Alignment","created":"2024-10-15","cited_by_count":5,"area":"alignment"},{"id":"2508.20032","title":"Pruning Strategies for Backdoor Defense in LLMs","created":"2025-08-27","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2111.14309","title":"A General Framework for Defending Against Backdoor Attacks via Influence Graph","created":"2021-11-29","cited_by_count":3,"area":null},{"id":"2211.15363","title":"On the Security Vulnerabilities of Text-to-SQL Models","created":"2022-11-28","cited_by_count":3,"area":null},{"id":"2311.17429","title":"TARGET: Template-Transferable Backdoor Attack Against Prompt-based NLP Models via GPT4","created":"2023-11-29","cited_by_count":3,"area":"safety"},{"id":"2405.11575","title":"SEEP: Training Dynamics Grounds Latent Representation Search for Mitigating Backdoor Poisoning Attacks","created":"2024-05-19","cited_by_count":3,"area":null},{"id":"2505.23015","title":"Detecting Stealthy Backdoor Samples based on Intra-class Distance for Large Language Models","created":"2025-05-29","cited_by_count":3,"area":"safety"},{"id":"2510.04347","title":"Unmasking Backdoors: An Explainable Defense via Gradient-Attention Anomaly Scoring for Pre-trained Language Models","created":"2025-10-05","cited_by_count":3,"area":"safety"},{"id":"2601.04448","title":"Merging Triggers, Breaking Backdoors: Defensive Poisoning for Instruction-Tuned Language Models","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2311.13957","title":"Efficient Trigger Word Insertion","created":"2023-11-23","cited_by_count":2,"area":"safety"},{"id":"2408.11587","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","created":"2024-08-21","cited_by_count":2,"area":"safety"},{"id":"2409.17946","title":"Breaking PEFT Limitations: Leveraging Weak-to-Strong Knowledge Transfer for Backdoor Attacks in LLMs","created":"2024-09-26","cited_by_count":2,"area":"safety"},{"id":"2504.06669","title":"NLP Security and Ethics, in the Wild","created":"2025-04-09","cited_by_count":2,"area":null},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2112.04154","title":"SNEAK: Synonymous Sentences-Aware Adversarial Attack on Natural Language Video Localization","created":"2021-12-08","cited_by_count":1,"area":null},{"id":"2201.02993","title":"Rethink the Evaluation for Attack Strength of Backdoor Attacks in Natural Language Processing","created":"2022-01-09","cited_by_count":1,"area":"safety"},{"id":"2203.07426","title":"Sememe Prediction for BabelNet Synsets using Multilingual and Multimodal Information","created":"2022-03-14","cited_by_count":1,"area":null},{"id":"2402.10283","title":"Backdoor Attack against One-Class Sequential Anomaly Detection Models","created":"2024-02-15","cited_by_count":1,"area":null},{"id":"2407.04179","title":"Defense Against Syntactic Textual Backdoor Attacks with Token Substitution","created":"2024-07-04","cited_by_count":1,"area":"safety"},{"id":"2412.20476","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","created":"2024-12-29","cited_by_count":1,"area":null},{"id":"2511.14301","title":"SteganoBackdoor: Evading Data-Poisoning Defenses via Steganographic Backdoors","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2210.11264","title":"Detecting Backdoors in Deep Text Classifiers","created":"2022-10-11","cited_by_count":0,"area":"safety"},{"id":"2504.05902","title":"Defending against Backdoor Attacks via Module Switching","created":"2025-04-08","cited_by_count":0,"area":null},{"id":"2508.15934","title":"Strategic Sample Selection for Improved Clean-Label Backdoor Attacks in Text Classification","created":"2025-08-21","cited_by_count":0,"area":"safety"},{"id":"2605.11612","title":"When Emotion Becomes Trigger: Emotion-style dynamic Backdoor Attack Parasitising Large Language Models","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2608.10959","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","created":"2026-08-11","cited_by_count":0,"area":"mllm"},{"id":"2609.24826","title":"OPBackdoor: Opportunistic Backdoors via Alibi-Aligned Reasoning","created":"2026-09-21","cited_by_count":0,"area":"safety"},{"id":"2609.26184","title":"Silent Sabotage: Internal State Triggered Backdoor Attacks on LLM-Powered Robotic Systems","created":"2026-09-02","cited_by_count":0,"area":"safety"}],"next_cursor":null}