{"total":86,"rows":[{"id":"2212.04612","title":"Training Data Influence Analysis and Estimation: A Survey","created":"2022-12-09","cited_by_count":135,"area":null},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2210.10114","title":"Transferable Unlearnable Examples","created":"2022-10-18","cited_by_count":43,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26,"area":null},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2305.19254","title":"What Can We Learn from Unlearnable Datasets?","created":"2023-05-30","cited_by_count":21,"area":null},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2305.12863","title":"Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attacks","created":"2023-05-22","cited_by_count":18,"area":null},{"id":"2310.19360","title":"Balance, Imbalance, and Rebalance: Understanding Robust Overfitting from a Minimax Game Perspective","created":"2023-10-30","cited_by_count":18,"area":null},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2405.03316","title":"Provably Unlearnable Data Examples","created":"2024-05-06","cited_by_count":18,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2305.09241","title":"Unlearnable Examples Give a False Sense of Security: Piercing through Unexploitable Data with Learnable Examples","created":"2023-05-16","cited_by_count":17,"area":null},{"id":"2410.03644","title":"Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Need","created":"2024-10-04","cited_by_count":16,"area":null},{"id":"2204.08615","title":"Poisons that are learned faster are more effective","created":"2022-04-19","cited_by_count":14,"area":null},{"id":"2410.09909","title":"UnSeg: One Universal Unlearnable Example Generator is Enough against All Image Segmentation","created":"2024-10-13","cited_by_count":14,"area":null},{"id":"2111.10130","title":"Fooling Adversarial Training with Inducing Noise","created":"2021-11-19","cited_by_count":13,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2406.17349","title":"Semantic Deep Hiding for Robust Unlearnable Examples","created":"2024-06-25","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2311.11415","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","created":"2023-11-19","cited_by_count":12,"area":null},{"id":"2402.04010","title":"Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously","created":"2024-02-06","cited_by_count":12,"area":null},{"id":"2505.05279","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","created":"2025-05-08","cited_by_count":11,"area":null},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10,"area":null},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2406.15093","title":"ECLIPSE: Expunging Clean-label Indiscriminate Poisons via Sparse Diffusion Purification","created":"2024-06-21","cited_by_count":9,"area":null},{"id":"2507.07483","title":"Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Tracking","created":"2025-07-10","cited_by_count":9,"area":null},{"id":"2403.10573","title":"Medical Unlearnable Examples: Securing Medical Data from Unauthorized Training via Sparsity-Aware Local Masking","created":"2024-03-15","cited_by_count":8,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2308.03258","title":"APBench: A Unified Benchmark for Availability Poisoning Attacks and Defenses","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2407.11011","title":"Toward Availability Attacks in 3D Point Clouds","created":"2024-06-26","cited_by_count":7,"area":null},{"id":"2211.08942","title":"Differentially Private Optimizers Can Learn Adversarially Robust Models","created":"2022-11-16","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2504.09839","title":"SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis","created":"2025-04-14","cited_by_count":6,"area":null},{"id":"2401.02135","title":"PosCUDA: Position based Convolution for Unlearnable Audio Datasets","created":"2024-01-04","cited_by_count":5,"area":null},{"id":"2406.02883","title":"Nonlinear Transformations Against Unlearnable Datasets","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2408.06079","title":"Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment","created":"2024-08-12","cited_by_count":5,"area":null},{"id":"2304.04641","title":"Probably Approximately Correct Federated Learning","created":"2023-04-10","cited_by_count":4,"area":null},{"id":"2305.11191","title":"Towards Generalizable Data Protection With Transferable Unlearnable Examples","created":"2023-05-18","cited_by_count":4,"area":null},{"id":"2401.03156","title":"Data-Dependent Stability Analysis of Adversarial Training","created":"2024-01-06","cited_by_count":4,"area":null},{"id":"2509.08058","title":"How Far Are We from True Unlearnability?","created":"2025-09-09","cited_by_count":4,"area":null},{"id":"2307.01073","title":"What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?","created":"2023-07-03","cited_by_count":3,"area":null},{"id":"2412.21061","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","created":"2024-12-30","cited_by_count":3,"area":null},{"id":"2508.03091","title":"T2UE: Generating Unlearnable Examples from Text Descriptions","created":"2025-08-05","cited_by_count":3,"area":null},{"id":"2401.10262","title":"Null Space Properties of Neural Networks with Applications to Image Steganography","created":"2024-01-01","cited_by_count":2,"area":null},{"id":"2405.04191","title":"Effective and Robust Adversarial Training against Data and Label Corruptions","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2411.02871","title":"Enhancing Adversarial Robustness via Uncertainty-Aware Distributional Adversarial Training","created":"2024-11-05","cited_by_count":2,"area":null},{"id":"2508.16843","title":"A Survey of Threats Against Voice Authentication and Anti-Spoofing Systems","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2509.10359","title":"Immunizing Images from Text to Image Editing via Adversarial Cross-Attention","created":"2025-09-12","cited_by_count":2,"area":null},{"id":"2510.09210","title":"Provable Watermarking for Data Poisoning Attacks","created":"2025-10-10","cited_by_count":2,"area":null},{"id":"2603.03725","title":"Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Information","created":"2026-03-04","cited_by_count":2,"area":null},{"id":"2605.19999","title":"LLM Benchmark Datasets Should Be Contamination-Resistant","created":"2026-05-19","cited_by_count":2,"area":null},{"id":"2608.04314","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","created":"2026-08-05","cited_by_count":2,"area":null},{"id":"2306.02064","title":"Unlearnable Examples Give a False Sense of Data Privacy: Understanding and Relearning","created":"2023-06-03","cited_by_count":1,"area":null},{"id":"2402.11237","title":"Be Persistent: Towards a Unified Solution for Mitigating Shortcuts in Deep Learning","created":"2024-02-17","cited_by_count":1,"area":null},{"id":"2405.05573","title":"Poisoning-based Backdoor Attacks for Arbitrary Target Label with Positive Triggers","created":"2024-05-09","cited_by_count":1,"area":null},{"id":"2407.02437","title":"Beyond Full Poisoning: Effective Availability Attacks with Partial Perturbation","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2409.08509","title":"Exploiting Supervised Poison Vulnerability to Strengthen Self-Supervised Defense","created":"2024-09-13","cited_by_count":1,"area":null},{"id":"2410.13891","title":"S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack","created":"2024-10-13","cited_by_count":1,"area":null},{"id":"2411.01742","title":"Learning from Convolution-based Unlearnable Datasets","created":"2024-11-04","cited_by_count":1,"area":null},{"id":"2505.11586","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2601.19967","title":"Perturbation-Induced Linearization: Constructing Unlearnable Data with Solely Linear Classifiers","created":"2026-01-27","cited_by_count":1,"area":null},{"id":"2106.11732","title":"FLEA: Provably Robust Fair Multisource Learning from Unreliable Training Data","created":"2021-06-22","cited_by_count":0,"area":null},{"id":"2305.10691","title":"Re-thinking Data Availablity Attacks Against Deep Neural Networks","created":"2023-05-18","cited_by_count":0,"area":null},{"id":"2306.03726","title":"Exploring Model Dynamics for Accumulative Poisoning Discovery","created":"2023-06-06","cited_by_count":0,"area":null},{"id":"2311.14772","title":"Trainwreck: A damaging adversarial attack on image classifiers","created":"2023-11-24","cited_by_count":0,"area":null},{"id":"2312.07069","title":"Context Matters: Data-Efficient Augmentation of Large Language Models for Scientific Applications","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2409.02430","title":"Transfer-based Adversarial Poisoning Attacks for Online (MIMO-)Deep Receviers","created":"2024-09-04","cited_by_count":0,"area":null},{"id":"2411.03752","title":"Deferred Poisoning: Making the Model More Vulnerable via Hessian Singularization","created":"2024-11-06","cited_by_count":0,"area":null},{"id":"2511.08191","title":"Towards Provably Unlearnable Examples via Bayes Error Optimisation","created":"2025-11-11","cited_by_count":0,"area":null},{"id":"2512.13416","title":"Learning to Generate Cross-Task Unexploitable Examples","created":"2025-12-15","cited_by_count":0,"area":null},{"id":"2601.22308","title":"Stealthy Poisoning Attacks Bypass Defenses in Regression Settings","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2602.07358","title":"UTOPIA: Unlearnable Tabular Data via Decoupled Shortcut Embedding","created":"2026-02-07","cited_by_count":0,"area":null},{"id":"2605.12792","title":"SoK: A Comprehensive Analysis of the Current Status of Neural Tangent Generalization Attacks with Research Directions","created":"2026-05-12","cited_by_count":0,"area":null},{"id":"2605.17345","title":"VoxShield: Protecting 3D Medical Datasets from Unauthorized Training via Frequency-Aware Inter-Slice Disruption","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2606.10091","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2607.05996","title":"Unlearnable Faces: Privacy Protection Surviving Extraction Pipeline","created":"2026-07-07","cited_by_count":0,"area":null},{"id":"2609.04627","title":"Leveraging Imperfect Restoration for Data Availability Attack","created":"2026-09-04","cited_by_count":0,"area":null},{"id":"2609.35528","title":"Let the Neurons Die: Exploiting ReLU-Induced Model Degradation","created":"2026-09-28","cited_by_count":0,"area":null}],"next_cursor":null}