{"total":119,"rows":[{"id":"2212.04612","title":"Training Data Influence Analysis and Estimation: A Survey","created":"2022-12-09","cited_by_count":135,"area":null},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2201.06640","title":"Towards Adversarial Evaluations for Inexact Machine Unlearning","created":"2022-01-17","cited_by_count":84,"area":"safety"},{"id":"2111.00898","title":"Availability Attacks Create Shortcuts","created":"2021-11-01","cited_by_count":62,"area":null},{"id":"2206.03693","title":"Autoregressive Perturbations for Data Poisoning","created":"2022-06-08","cited_by_count":46,"area":"safety"},{"id":"2210.10114","title":"Transferable Unlearnable Examples","created":"2022-10-18","cited_by_count":43,"area":null},{"id":"2301.13838","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","created":"2023-01-31","cited_by_count":39,"area":null},{"id":"2306.01902","title":"Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation","created":"2023-06-02","cited_by_count":37,"area":"diffusion"},{"id":"2301.01217","title":"Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples","created":"2022-12-31","cited_by_count":36,"area":null},{"id":"2203.14533","title":"Robust Unlearnable Examples: Protecting Data Against Adversarial Learning","created":"2022-03-28","cited_by_count":35,"area":null},{"id":"2202.11202","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","created":"2022-02-22","cited_by_count":34,"area":"safety"},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2205.12141","title":"One-Pixel Shortcut: on the Learning Preference of Deep Neural Networks","created":"2022-05-24","cited_by_count":29,"area":null},{"id":"2303.04278","title":"CUDA: Convolution-based Unlearnable Datasets","created":"2023-03-07","cited_by_count":26,"area":null},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23,"area":"safety"},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2305.19254","title":"What Can We Learn from Unlearnable Datasets?","created":"2023-05-30","cited_by_count":21,"area":null},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2211.12005","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","created":"2022-11-22","cited_by_count":19,"area":null},{"id":"2303.08500","title":"The Devil's Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models","created":"2023-03-15","cited_by_count":19,"area":"diffusion"},{"id":"2305.12863","title":"Towards Benchmarking and Assessing Visual Naturalness of Physical World Adversarial Attacks","created":"2023-05-22","cited_by_count":18,"area":null},{"id":"2310.19360","title":"Balance, Imbalance, and Rebalance: Understanding Robust Overfitting from a Minimax Game Perspective","created":"2023-10-30","cited_by_count":18,"area":null},{"id":"2405.01460","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","created":"2024-05-02","cited_by_count":18,"area":null},{"id":"2405.03316","title":"Provably Unlearnable Data Examples","created":"2024-05-06","cited_by_count":18,"area":null},{"id":"2410.08190","title":"Poison-splat: Computation Cost Attack on 3D Gaussian Splatting","created":"2024-10-10","cited_by_count":18,"area":null},{"id":"2305.09241","title":"Unlearnable Examples Give a False Sense of Security: Piercing through Unexploitable Data with Learnable Examples","created":"2023-05-16","cited_by_count":17,"area":null},{"id":"2410.03644","title":"Unlearnable 3D Point Clouds: Class-wise Transformation Is All You Need","created":"2024-10-04","cited_by_count":16,"area":null},{"id":"2204.08615","title":"Poisons that are learned faster are more effective","created":"2022-04-19","cited_by_count":14,"area":null},{"id":"2310.18603","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","created":"2023-10-28","cited_by_count":14,"area":"safety"},{"id":"2410.09909","title":"UnSeg: One Universal Unlearnable Example Generator is Enough against All Image Segmentation","created":"2024-10-13","cited_by_count":14,"area":null},{"id":"2111.10130","title":"Fooling Adversarial Training with Inducing Noise","created":"2021-11-19","cited_by_count":13,"area":null},{"id":"2312.08898","title":"Detection and Defense of Unlearnable Examples","created":"2023-12-14","cited_by_count":13,"area":null},{"id":"2406.17349","title":"Semantic Deep Hiding for Robust Unlearnable Examples","created":"2024-06-25","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2311.11415","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","created":"2023-11-19","cited_by_count":12,"area":null},{"id":"2401.17523","title":"Game-Theoretic Unlearnable Example Generator","created":"2024-01-31","cited_by_count":12,"area":"safety"},{"id":"2402.04010","title":"Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously","created":"2024-02-06","cited_by_count":12,"area":null},{"id":"2505.05279","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","created":"2025-05-08","cited_by_count":11,"area":null},{"id":"2111.13244","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","created":"2021-11-25","cited_by_count":10,"area":null},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2404.06737","title":"Disguised Copyright Infringement of Latent Diffusion Models","created":"2024-04-10","cited_by_count":10,"area":"diffusion"},{"id":"2404.14016","title":"Ungeneralizable Examples","created":"2024-04-22","cited_by_count":9,"area":null},{"id":"2406.15093","title":"ECLIPSE: Expunging Clean-label Indiscriminate Poisons via Sparse Diffusion Purification","created":"2024-06-21","cited_by_count":9,"area":null},{"id":"2408.08143","title":"Unlearnable Examples Detection via Iterative Filtering","created":"2024-08-15","cited_by_count":9,"area":"safety"},{"id":"2507.07483","title":"Temporal Unlearnable Examples: Preventing Personal Video Data from Unauthorized Exploitation by Object Tracking","created":"2025-07-10","cited_by_count":9,"area":null},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2403.10573","title":"Medical Unlearnable Examples: Securing Medical Data from Unauthorized Training via Sparsity-Aware Local Masking","created":"2024-03-15","cited_by_count":8,"area":null},{"id":"2202.03576","title":"Learnability Lock: Authorized Learnability Control Through Adversarial Invertible Transformations","created":"2022-02-03","cited_by_count":7,"area":null},{"id":"2308.03258","title":"APBench: A Unified Benchmark for Availability Poisoning Attacks and Defenses","created":"2023-08-07","cited_by_count":7,"area":null},{"id":"2407.11011","title":"Toward Availability Attacks in 3D Point Clouds","created":"2024-06-26","cited_by_count":7,"area":null},{"id":"2211.08942","title":"Differentially Private Optimizers Can Learn Adversarially Robust Models","created":"2022-11-16","cited_by_count":6,"area":null},{"id":"2502.17121","title":"Adversarial Training for Defense Against Label Poisoning Attacks","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2504.09839","title":"SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis","created":"2025-04-14","cited_by_count":6,"area":null},{"id":"2310.05141","title":"Transferable Availability Poisoning Attacks","created":"2023-10-08","cited_by_count":5,"area":"safety"},{"id":"2401.02135","title":"PosCUDA: Position based Convolution for Unlearnable Audio Datasets","created":"2024-01-04","cited_by_count":5,"area":null},{"id":"2401.07087","title":"Exploring Adversarial Attacks against Latent Diffusion Model from the Perspective of Adversarial Transferability","created":"2024-01-13","cited_by_count":5,"area":"diffusion"},{"id":"2406.02883","title":"Nonlinear Transformations Against Unlearnable Datasets","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2408.06079","title":"Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment","created":"2024-08-12","cited_by_count":5,"area":null},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2304.04641","title":"Probably Approximately Correct Federated Learning","created":"2023-04-10","cited_by_count":4,"area":null},{"id":"2305.11191","title":"Towards Generalizable Data Protection With Transferable Unlearnable Examples","created":"2023-05-18","cited_by_count":4,"area":null},{"id":"2401.03156","title":"Data-Dependent Stability Analysis of Adversarial Training","created":"2024-01-06","cited_by_count":4,"area":null},{"id":"2410.04682","title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning","created":"2024-10-07","cited_by_count":4,"area":"safety"},{"id":"2509.08058","title":"How Far Are We from True Unlearnability?","created":"2025-09-09","cited_by_count":4,"area":null},{"id":"2211.01086","title":"Generative Poisoning Using Random Discriminators","created":"2022-11-02","cited_by_count":3,"area":"safety"},{"id":"2307.01073","title":"What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?","created":"2023-07-03","cited_by_count":3,"area":null},{"id":"2412.21061","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","created":"2024-12-30","cited_by_count":3,"area":null},{"id":"2412.21123","title":"ExpShield: Safeguarding Web Text from Unauthorized Crawling and LLM Exploitation","created":"2024-12-30","cited_by_count":3,"area":"safety"},{"id":"2508.03091","title":"T2UE: Generating Unlearnable Examples from Text Descriptions","created":"2025-08-05","cited_by_count":3,"area":null},{"id":"2401.10262","title":"Null Space Properties of Neural Networks with Applications to Image Steganography","created":"2024-01-01","cited_by_count":2,"area":null},{"id":"2405.04191","title":"Effective and Robust Adversarial Training against Data and Label Corruptions","created":"2024-05-07","cited_by_count":2,"area":null},{"id":"2411.02871","title":"Enhancing Adversarial Robustness via Uncertainty-Aware Distributional Adversarial Training","created":"2024-11-05","cited_by_count":2,"area":null},{"id":"2411.14412","title":"Adversarial Data Poisoning Attacks on Quantum Machine Learning in the NISQ Era","created":"2024-11-21","cited_by_count":2,"area":"safety"},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2507.10578","title":"When and Where do Data Poisons Attack Textual Inversion?","created":"2025-07-11","cited_by_count":2,"area":"diffusion"},{"id":"2508.16843","title":"A Survey of Threats Against Voice Authentication and Anti-Spoofing Systems","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2509.10359","title":"Immunizing Images from Text to Image Editing via Adversarial Cross-Attention","created":"2025-09-12","cited_by_count":2,"area":null},{"id":"2510.09210","title":"Provable Watermarking for Data Poisoning Attacks","created":"2025-10-10","cited_by_count":2,"area":null},{"id":"2603.03725","title":"Why Do Unlearnable Examples Work: A Novel Perspective of Mutual Information","created":"2026-03-04","cited_by_count":2,"area":null},{"id":"2605.14291","title":"To See is Not to Learn: Protecting Multimodal Data from Unauthorized Fine-Tuning of Large Vision-Language Model","created":"2026-05-14","cited_by_count":2,"area":"mllm"},{"id":"2605.19999","title":"LLM Benchmark Datasets Should Be Contamination-Resistant","created":"2026-05-19","cited_by_count":2,"area":null},{"id":"2608.04314","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","created":"2026-08-05","cited_by_count":2,"area":null},{"id":"2211.09717","title":"UPTON: Preventing Authorship Leakage from Public Text Release via Data Poisoning","created":"2022-11-17","cited_by_count":1,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2306.02064","title":"Unlearnable Examples Give a False Sense of Data Privacy: Understanding and Relearning","created":"2023-06-03","cited_by_count":1,"area":null},{"id":"2402.11237","title":"Be Persistent: Towards a Unified Solution for Mitigating Shortcuts in Deep Learning","created":"2024-02-17","cited_by_count":1,"area":null},{"id":"2405.05573","title":"Poisoning-based Backdoor Attacks for Arbitrary Target Label with Positive Triggers","created":"2024-05-09","cited_by_count":1,"area":null},{"id":"2407.02437","title":"Beyond Full Poisoning: Effective Availability Attacks with Partial Perturbation","created":"2024-07-02","cited_by_count":1,"area":null},{"id":"2409.08509","title":"Exploiting Supervised Poison Vulnerability to Strengthen Self-Supervised Defense","created":"2024-09-13","cited_by_count":1,"area":null},{"id":"2410.13891","title":"S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack","created":"2024-10-13","cited_by_count":1,"area":null},{"id":"2411.01742","title":"Learning from Convolution-based Unlearnable Datasets","created":"2024-11-04","cited_by_count":1,"area":null},{"id":"2505.11586","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2601.19967","title":"Perturbation-Induced Linearization: Constructing Unlearnable Data with Solely Linear Classifiers","created":"2026-01-27","cited_by_count":1,"area":null},{"id":"2106.11732","title":"FLEA: Provably Robust Fair Multisource Learning from Unreliable Training Data","created":"2021-06-22","cited_by_count":0,"area":null},{"id":"2305.10691","title":"Re-thinking Data Availablity Attacks Against Deep Neural Networks","created":"2023-05-18","cited_by_count":0,"area":null},{"id":"2306.03726","title":"Exploring Model Dynamics for Accumulative Poisoning Discovery","created":"2023-06-06","cited_by_count":0,"area":null}],"next_cursor":"100"}