{"total":151,"rows":[{"id":"2305.17493","title":"The Curse of Recursion: Training on Generated Data Makes Models Forget","created":"2023-05-27","cited_by_count":356,"area":"diffusion"},{"id":"2109.13916","title":"Unsolved Problems in ML Safety","created":"2021-09-28","cited_by_count":292,"area":null},{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2305.00944","title":"Poisoning Language Models During Instruction Tuning","created":"2023-05-01","cited_by_count":269,"area":null},{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2202.03423","title":"Backdoor Defense via Decoupling the Training Process","created":"2022-02-05","cited_by_count":153,"area":null},{"id":"2205.14459","title":"CyCLIP: Cyclic Contrastive Language-Image Pretraining","created":"2022-05-28","cited_by_count":127,"area":null},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123,"area":"safety"},{"id":"2311.12075","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","created":"2023-11-20","cited_by_count":115,"area":"safety"},{"id":"2308.14840","title":"Identifying and Mitigating the Security Risks of Generative AI","created":"2023-08-28","cited_by_count":91,"area":null},{"id":"2110.11316","title":"CLOOB: Modern Hopfield Networks with InfoLOOB Outperform CLIP","created":"2021-10-21","cited_by_count":89,"area":null},{"id":"2402.13851","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","created":"2024-02-21","cited_by_count":87,"area":"mllm"},{"id":"2205.13383","title":"BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning","created":"2022-05-26","cited_by_count":86,"area":null},{"id":"2210.00875","title":"Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection","created":"2022-09-27","cited_by_count":86,"area":null},{"id":"2303.03323","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","created":"2023-03-06","cited_by_count":63,"area":"safety"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2303.15180","title":"Detecting Backdoors in Pre-trained Encoders","created":"2023-03-23","cited_by_count":55,"area":"safety"},{"id":"2402.06659","title":"Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models","created":"2024-02-05","cited_by_count":50,"area":"mllm"},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2209.15266","title":"Data Poisoning Attacks Against Multimodal Encoders","created":"2022-09-30","cited_by_count":41,"area":"safety"},{"id":"2409.19232","title":"TrojVLM: Backdoor Attack Against Vision Language Models","created":"2024-09-28","cited_by_count":39,"area":"mllm"},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2112.07668","title":"Dual-Key Multimodal Backdoors for Visual Question Answering","created":"2021-12-14","cited_by_count":37,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2202.11202","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","created":"2022-02-22","cited_by_count":34,"area":"safety"},{"id":"2205.06401","title":"PoisonedEncoder: Poisoning the Unlabeled Pre-training Data in Contrastive Learning","created":"2022-05-13","cited_by_count":34,"area":"safety"},{"id":"2410.01264","title":"Backdooring Vision-Language Models with Out-Of-Distribution Data","created":"2024-10-02","cited_by_count":33,"area":"mllm"},{"id":"2307.12280","title":"Downstream-agnostic Adversarial Examples","created":"2023-07-23","cited_by_count":32,"area":null},{"id":"2310.01875","title":"Towards Stable Backdoor Purification through Feature Shift Tuning","created":"2023-10-03","cited_by_count":32,"area":null},{"id":"2210.07346","title":"An Embarrassingly Simple Backdoor Attack on Self-supervised Learning","created":"2022-10-13","cited_by_count":31,"area":null},{"id":"2303.06854","title":"Robust Contrastive Language-Image Pre-training against Data Poisoning and Backdoor Attacks","created":"2023-03-13","cited_by_count":31,"area":"mllm"},{"id":"2403.16257","title":"Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning","created":"2024-03-24","cited_by_count":31,"area":"safety"},{"id":"2209.08891","title":"Exploiting Cultural Biases via Homoglyphs in Text-to-Image Synthesis","created":"2022-09-19","cited_by_count":29,"area":"diffusion"},{"id":"2211.08229","title":"CorruptEncoder: Data Poisoning based Backdoor Attacks to Contrastive Learning","created":"2022-11-15","cited_by_count":29,"area":"safety"},{"id":"2302.11408","title":"ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms","created":"2023-02-22","cited_by_count":29,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2311.12202","title":"Nepotistically Trained Generative-AI Models Collapse","created":"2023-11-20","cited_by_count":27,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2305.11596","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","created":"2023-05-19","cited_by_count":21,"area":null},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2304.01482","title":"Defending Against Patch-based Backdoor Attacks on Self-Supervised Learning","created":"2023-04-04","cited_by_count":20,"area":null},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2310.05862","title":"Better Safe than Sorry: Pre-training CLIP against Targeted Data Poisoning and Backdoor Attacks","created":"2023-10-05","cited_by_count":19,"area":"safety"},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2510.09269","title":"Goal-oriented Backdoor Attack against Vision-Language-Action Models via Physical Objects","created":"2025-10-10","cited_by_count":17,"area":"vla"},{"id":"2202.10627","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","created":"2022-02-22","cited_by_count":16,"area":null},{"id":"2408.07440","title":"BAPLe: Backdoor Attacks on Medical Foundational Models using Prompt Learning","created":"2024-08-14","cited_by_count":16,"area":"safety"},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2404.19227","title":"Espresso: Robust Concept Filtering in Text-to-Image Models","created":"2024-04-30","cited_by_count":14,"area":"diffusion"},{"id":"2502.18290","title":"Stealthy Backdoor Attack in Self-Supervised Learning Vision Encoders for Large Vision Language Models","created":"2025-02-25","cited_by_count":14,"area":"mllm"},{"id":"2409.17601","title":"CleanerCLIP: Fine-grained Counterfactual Semantic Augmentation for Backdoor Defense in Contrastive Learning","created":"2024-09-26","cited_by_count":13,"area":"safety"},{"id":"2210.06428","title":"Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace Subnetwork","created":"2022-10-12","cited_by_count":12,"area":null},{"id":"2301.12576","title":"Uncovering Adversarial Risks of Test-Time Adaptation","created":"2023-01-29","cited_by_count":12,"area":null},{"id":"2412.20392","title":"Defending Multimodal Backdoored Models by Repulsive Visual Prompt Tuning","created":"2024-12-29","cited_by_count":12,"area":"safety"},{"id":"2201.08217","title":"Watermarking Pre-trained Encoders in Contrastive Learning","created":"2022-01-20","cited_by_count":11,"area":null},{"id":"2109.04699","title":"EfficientCLIP: Efficient Cross-Modal Pre-training by Ensemble Confident Learning and Language Modeling","created":"2021-09-10","cited_by_count":10,"area":null},{"id":"2301.10576","title":"A Study on FGSM Adversarial Training for Neural Retrieval","created":"2023-01-25","cited_by_count":10,"area":null},{"id":"2302.03684","title":"Temporal Robustness against Data Poisoning","created":"2023-02-07","cited_by_count":10,"area":"safety"},{"id":"2303.00215","title":"Single Image Backdoor Inversion via Robust Smoothed Classifiers","created":"2023-03-01","cited_by_count":10,"area":null},{"id":"2311.16445","title":"CLAP: Isolating Content from Style through Contrastive Learning with Augmented Prompts","created":"2023-11-28","cited_by_count":10,"area":"mllm"},{"id":"2403.19326","title":"MedBN: Robust Test-Time Adaptation against Malicious Test Samples","created":"2024-03-28","cited_by_count":10,"area":null},{"id":"2409.15968","title":"Adversarial Backdoor Defense in CLIP","created":"2024-09-24","cited_by_count":10,"area":"safety"},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2404.09387","title":"RankCLIP: Ranking-Consistent Language-Image Pretraining","created":"2024-04-15","cited_by_count":9,"area":"mllm"},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2406.03508","title":"Mutual Information Guided Backdoor Mitigation for Pre-trained Encoders","created":"2024-06-05","cited_by_count":8,"area":"safety"},{"id":"2411.11667","title":"Dissecting Representation Misalignment in Contrastive Learning via Influence Function","created":"2024-11-18","cited_by_count":8,"area":null},{"id":"2210.01632","title":"Backdoor Attacks in the Supply Chain of Masked Image Modeling","created":"2022-10-04","cited_by_count":7,"area":null},{"id":"2304.10727","title":"RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Models","created":"2023-04-21","cited_by_count":7,"area":"mllm"},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2310.00626","title":"GhostEncoder: Stealthy Backdoor Attacks with Dynamic Triggers to Pre-trained Encoders in Self-supervised Learning","created":"2023-10-01","cited_by_count":6,"area":"safety"},{"id":"2403.03846","title":"Can Distillation Mitigate Backdoor Attacks in Pre-trained Encoders?","created":"2024-03-06","cited_by_count":6,"area":"safety"},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2409.19526","title":"Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats","created":"2024-09-29","cited_by_count":6,"area":"safety"},{"id":"2411.16154","title":"DeDe: Detecting Backdoor Samples for SSL Encoders via Decoders","created":"2024-11-25","cited_by_count":6,"area":"safety"},{"id":"2207.04209","title":"Invisible Backdoor Attacks Using Data Poisoning in the Frequency Domain","created":"2022-07-09","cited_by_count":5,"area":null},{"id":"2308.09490","title":"Balancing Transparency and Risk: The Security and Privacy Risks of Open-Source Machine Learning Models","created":"2023-08-18","cited_by_count":5,"area":null},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2501.15529","title":"UNIDOOR: A Universal Framework for Action-Level Backdoor Attacks in Deep Reinforcement Learning","created":"2025-01-26","cited_by_count":5,"area":"deeprl"},{"id":"2509.24566","title":"TokenSwap: Backdoor Attack on the Compositional Understanding of Large Vision-Language Models","created":"2025-09-29","cited_by_count":5,"area":"mllm"},{"id":"2211.07122","title":"ContextCLIP: Contextual Alignment of Image-Text pairs on CLIP visual representations","created":"2022-11-14","cited_by_count":4,"area":null},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2310.08320","title":"Defending Our Privacy With Backdoors","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2402.14977","title":"Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models","created":"2024-02-22","cited_by_count":4,"area":"safety"},{"id":"2511.00446","title":"ToxicTextCLIP: Text-Based Poisoning and Backdoor Attacks on CLIP Pre-training","created":"2025-11-01","cited_by_count":4,"area":"mllm"},{"id":"2301.02905","title":"REaaS: Enabling Adversarially Robust Downstream Classifiers via Robust Encoder as a Service","created":"2023-01-07","cited_by_count":3,"area":null},{"id":"2310.10665","title":"Privacy Preservation in Artificial Intelligence and Extended Reality (AI-XR) Metaverses: A Survey","created":"2023-09-19","cited_by_count":3,"area":null},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2405.11575","title":"SEEP: Training Dynamics Grounds Latent Representation Search for Mitigating Backdoor Poisoning Attacks","created":"2024-05-19","cited_by_count":3,"area":null},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2509.18717","title":"Pre-training CLIP against Data Poisoning with Optimal Transport-based Matching and Alignment","created":"2025-09-23","cited_by_count":3,"area":"safety"},{"id":"2511.04711","title":"SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking","created":"2025-11-05","cited_by_count":3,"area":"mllm"}],"next_cursor":"100"}