{"total":87,"rows":[{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2309.13256","title":"Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attacks","created":"2023-09-23","cited_by_count":33,"area":"safety"},{"id":"2404.12916","title":"Physical Backdoor Attack can Jeopardize Driving with Vision-Large-Language Models","created":"2024-04-19","cited_by_count":33,"area":"safety"},{"id":"2411.12768","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","created":"2024-11-18","cited_by_count":33,"area":"safety"},{"id":"2310.14480","title":"Attention-Enhancing Backdoor Attacks Against BERT-based Models","created":"2023-10-23","cited_by_count":32,"area":"safety"},{"id":"2304.14475","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","created":"2023-04-27","cited_by_count":31,"area":"safety"},{"id":"2406.05948","title":"Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Models","created":"2024-06-10","cited_by_count":28,"area":"safety"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2311.09763","title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations","created":"2023-11-16","cited_by_count":21,"area":"safety"},{"id":"2411.12701","title":"When Backdoors Speak: Understanding LLM Backdoor Attacks Through Model-Generated Explanations","created":"2024-11-19","cited_by_count":20,"area":"safety"},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2308.02122","title":"ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP","created":"2023-08-04","cited_by_count":19,"area":"safety"},{"id":"2310.18633","title":"Setting the Trap: Capturing and Defeating Backdoors in Pretrained Language Models through Honeypots","created":"2023-10-28","cited_by_count":19,"area":"safety"},{"id":"2110.08247","title":"Textual Backdoor Attacks Can Be More Harmful via Two Simple Tricks","created":"2021-10-15","cited_by_count":18,"area":"safety"},{"id":"2503.00596","title":"BadJudge: Backdoor Vulnerabilities of LLM-as-a-Judge","created":"2025-03-01","cited_by_count":18,"area":"safety"},{"id":"2603.12277","title":"Prompt Injection as Role Confusion","created":"2026-02-22","cited_by_count":17,"area":"safety"},{"id":"2301.10412","title":"BDMMT: Backdoor Sample Detection for Language Models through Model Mutation Testing","created":"2023-01-25","cited_by_count":16,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2211.11958","title":"A Survey on Backdoor Attack and Defense in Natural Language Processing","created":"2022-11-22","cited_by_count":14,"area":"safety"},{"id":"2310.18603","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","created":"2023-10-28","cited_by_count":14,"area":"safety"},{"id":"2409.01193","title":"CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models","created":"2024-09-02","cited_by_count":13,"area":"safety"},{"id":"2303.14325","title":"Backdoor Attacks with Input-unique Triggers in NLP","created":"2023-03-25","cited_by_count":12,"area":"safety"},{"id":"2405.07667","title":"Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models","created":"2024-05-13","cited_by_count":12,"area":"safety"},{"id":"2503.04036","title":"Robust Data Watermarking in Language Models by Injecting Fictitious Knowledge","created":"2025-03-06","cited_by_count":12,"area":"safety"},{"id":"2406.07778","title":"A Study of Backdoors in Instruction Fine-tuned Language Models","created":"2024-06-12","cited_by_count":11,"area":"safety"},{"id":"2508.01365","title":"ConfGuard: A Simple and Effective Backdoor Detection for Large Language Models","created":"2025-08-02","cited_by_count":9,"area":"safety"},{"id":"2303.01742","title":"NCL: Textual Backdoor Defense Using Noise-augmented Contrastive Learning","created":"2023-03-03","cited_by_count":8,"area":"safety"},{"id":"2402.12026","title":"Acquiring Clean Language Models from Backdoor Poisoned Datasets by Downscaling Frequency Space","created":"2024-02-19","cited_by_count":8,"area":"safety"},{"id":"2412.19037","title":"CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers","created":"2024-12-26","cited_by_count":8,"area":"safety"},{"id":"2212.10103","title":"VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion","created":"2022-12-20","cited_by_count":7,"area":"safety"},{"id":"2405.02365","title":"ModelShield: Adaptive and Robust Watermark against Model Extraction Attack","created":"2024-05-03","cited_by_count":7,"area":"safety"},{"id":"2211.08697","title":"PBSM: Backdoor attack against Keyword spotting based on pitch boosting and sound masking","created":"2022-11-16","cited_by_count":6,"area":"safety"},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2503.05445","title":"Are Your LLM-based Text-to-SQL Models Secure? Exploring SQL Injection via Backdoor Attacks","created":"2025-03-07","cited_by_count":6,"area":"safety"},{"id":"2312.15867","title":"Punctuation Matters! Stealthy Backdoor Attack for Language Models","created":"2023-12-26","cited_by_count":5,"area":"safety"},{"id":"2402.18945","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","created":"2024-02-29","cited_by_count":5,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2407.04151","title":"Securing Multi-turn Conversational Language Models From Distributed Backdoor Triggers","created":"2024-07-04","cited_by_count":5,"area":"safety"},{"id":"2508.20032","title":"Pruning Strategies for Backdoor Defense in LLMs","created":"2025-08-27","cited_by_count":5,"area":"safety"},{"id":"2201.12211","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","created":"2022-01-28","cited_by_count":4,"area":"safety"},{"id":"2508.01647","title":"DUP: Detection-guided Unlearning for Backdoor Purification in Language Models","created":"2025-08-03","cited_by_count":4,"area":"safety"},{"id":"2311.17429","title":"TARGET: Template-Transferable Backdoor Attack Against Prompt-based NLP Models via GPT4","created":"2023-11-29","cited_by_count":3,"area":"safety"},{"id":"2402.07689","title":"OrderBkd: Textual backdoor attack through repositioning","created":"2024-02-12","cited_by_count":3,"area":"safety"},{"id":"2505.23015","title":"Detecting Stealthy Backdoor Samples based on Intra-class Distance for Large Language Models","created":"2025-05-29","cited_by_count":3,"area":"safety"},{"id":"2510.04347","title":"Unmasking Backdoors: An Explainable Defense via Gradient-Attention Anomaly Scoring for Pre-trained Language Models","created":"2025-10-05","cited_by_count":3,"area":"safety"},{"id":"2601.04448","title":"Merging Triggers, Breaking Backdoors: Defensive Poisoning for Instruction-Tuned Language Models","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2311.13957","title":"Efficient Trigger Word Insertion","created":"2023-11-23","cited_by_count":2,"area":"safety"},{"id":"2408.11587","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","created":"2024-08-21","cited_by_count":2,"area":"safety"},{"id":"2410.20136","title":"CodePurify: Defend Backdoor Attacks on Neural Code Models via Entropy-based Purification","created":"2024-10-26","cited_by_count":2,"area":"safety"},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2505.03501","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2603.00516","title":"ProtegoFed: Backdoor-Free Federated Instruction Tuning with Interspersed Poisoned Data","created":"2026-02-28","cited_by_count":2,"area":"safety"},{"id":"2201.02993","title":"Rethink the Evaluation for Attack Strength of Backdoor Attacks in Natural Language Processing","created":"2022-01-09","cited_by_count":1,"area":"safety"},{"id":"2310.00648","title":"PETA: Parameter-Efficient Trojan Attacks","created":"2023-10-01","cited_by_count":1,"area":"safety"},{"id":"2407.04179","title":"Defense Against Syntactic Textual Backdoor Attacks with Token Substitution","created":"2024-07-04","cited_by_count":1,"area":"safety"},{"id":"2410.04009","title":"ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs","created":"2024-10-05","cited_by_count":1,"area":"safety"},{"id":"2502.00652","title":"Reformulation is All You Need: Addressing Malicious Text Features in DNNs","created":"2025-02-02","cited_by_count":1,"area":"safety"},{"id":"2506.01825","title":"Backdoors in Code Summarizers: How Bad Is It?","created":"2025-06-02","cited_by_count":1,"area":"safety"},{"id":"2512.10998","title":"SCOUT: A Defense Against Data Poisoning Attacks in Fine-Tuned Language Models","created":"2025-12-10","cited_by_count":1,"area":"safety"},{"id":"2602.05401","title":"BadTemplate: A Training-Free Backdoor Attack via Chat Template Against Large Language Models","created":"2026-02-05","cited_by_count":1,"area":"safety"},{"id":"2604.21700","title":"Stealthy Backdoor Attacks against LLMs Based on Natural Style Triggers","created":"2026-04-23","cited_by_count":1,"area":"safety"},{"id":"2605.25073","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","created":"2026-05-24","cited_by_count":1,"area":"safety"},{"id":"2606.11648","title":"Dummy Backdoor as a Defense: Removing Unknown Backdoors via Shared Internal Mechanisms for Generative LLMs","created":"2026-06-10","cited_by_count":1,"area":"safety"},{"id":"2606.12716","title":"Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Review","created":"2026-06-10","cited_by_count":1,"area":"safety"},{"id":"2210.11264","title":"Detecting Backdoors in Deep Text Classifiers","created":"2022-10-11","cited_by_count":0,"area":"safety"},{"id":"2412.17531","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","created":"2024-12-23","cited_by_count":0,"area":"safety"},{"id":"2508.15934","title":"Strategic Sample Selection for Improved Clean-Label Backdoor Attacks in Text Classification","created":"2025-08-21","cited_by_count":0,"area":"safety"},{"id":"2603.07452","title":"Backdoor4Good: Benchmarking Beneficial Uses of Backdoors in LLMs","created":"2026-03-08","cited_by_count":0,"area":"safety"},{"id":"2603.15692","title":"BadLLM-TG: A Backdoor Defender powered by LLM Trigger Generator","created":"2026-03-16","cited_by_count":0,"area":"safety"},{"id":"2604.24162","title":"Defusing the Trigger: Tail-Risk-Informed Attention Rebalancing for LLM Backdoor Mitigation","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.26574","title":"GradSentry: Gradient Spectral Entropy for Backdoor Sample Filtering in Large Language Model Fine-Tuning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.07963","title":"Shared Latent Structures Enable Unified Backdoor Detection and Mitigation in LLMs","created":"2026-06-06","cited_by_count":0,"area":"safety"},{"id":"2607.15724","title":"Natural Backdoor Attacks on Speech Recognition Models","created":"2026-07-17","cited_by_count":0,"area":"safety"},{"id":"2609.24826","title":"OPBackdoor: Opportunistic Backdoors via Alibi-Aligned Reasoning","created":"2026-09-21","cited_by_count":0,"area":"safety"},{"id":"2609.26184","title":"Silent Sabotage: Internal State Triggered Backdoor Attacks on LLM-Powered Robotic Systems","created":"2026-09-02","cited_by_count":0,"area":"safety"}],"next_cursor":null}