{"total":263,"rows":[{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290,"area":null},{"id":"2402.08787","title":"Rethinking Machine Unlearning for Large Language Models","created":"2024-02-13","cited_by_count":257,"area":"lr"},{"id":"2110.14430","title":"Adversarial Neuron Pruning Purifies Backdoored Deep Models","created":"2021-10-27","cited_by_count":235,"area":null},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2311.12075","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","created":"2023-11-20","cited_by_count":115,"area":"safety"},{"id":"2209.00189","title":"Federated Learning with Label Distribution Skew via Logits Calibration","created":"2022-09-01","cited_by_count":109,"area":null},{"id":"2204.05255","title":"Narcissus: A Practical Clean-Label Backdoor Attack with Limited Information","created":"2022-04-11","cited_by_count":103,"area":null},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2209.06015","title":"Black-box Dataset Ownership Verification via Backdoor Watermarking","created":"2022-08-04","cited_by_count":65,"area":null},{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64,"area":null},{"id":"2303.03323","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","created":"2023-03-06","cited_by_count":63,"area":"safety"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59,"area":null},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2408.12798","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","created":"2024-08-23","cited_by_count":50,"area":"safety"},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2303.12993","title":"Backdoor Defense via Adaptively Splitting Poisoned Dataset","created":"2023-03-23","cited_by_count":43,"area":null},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2112.14889","title":"Few-shot Backdoor Defense Using Shapley Estimation","created":"2021-12-30","cited_by_count":41,"area":null},{"id":"2205.13616","title":"Towards A Proactive ML Approach for Detecting Backdoor Poison Samples","created":"2022-05-26","cited_by_count":40,"area":null},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39,"area":null},{"id":"2202.06382","title":"Training with More Confidence: Mitigating Injected and Natural Backdoors During Training","created":"2022-02-13","cited_by_count":38,"area":null},{"id":"2212.09067","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","created":"2022-12-18","cited_by_count":38,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2201.13178","title":"Few-Shot Backdoor Attacks on Visual Object Tracking","created":"2022-01-31","cited_by_count":35,"area":null},{"id":"2402.11473","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","created":"2024-02-18","cited_by_count":35,"area":null},{"id":"2408.07362","title":"BadMerging: Backdoor Attacks Against Model Merging","created":"2024-08-14","cited_by_count":34,"area":null},{"id":"2201.10055","title":"Identifying a Training-Set Attack's Target Using Renormalized Influence Estimation","created":"2022-01-25","cited_by_count":32,"area":null},{"id":"2310.01875","title":"Towards Stable Backdoor Purification through Feature Shift Tuning","created":"2023-10-03","cited_by_count":32,"area":null},{"id":"2403.16257","title":"Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning","created":"2024-03-24","cited_by_count":31,"area":"safety"},{"id":"2210.09671","title":"Not All Poisons are Created Equal: Robust Training against Data Poisoning","created":"2022-10-18","cited_by_count":30,"area":"safety"},{"id":"2302.11408","title":"ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms","created":"2023-02-22","cited_by_count":29,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2202.05189","title":"Understanding Rare Spurious Correlations in Neural Networks","created":"2022-02-10","cited_by_count":27,"area":null},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2302.01762","title":"BackdoorBox: A Python Toolbox for Backdoor Learning","created":"2023-02-01","cited_by_count":26,"area":null},{"id":"2402.19334","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","created":"2024-02-29","cited_by_count":26,"area":null},{"id":"2502.18508","title":"REFINE: Inversion-Free Backdoor Defense via Model Reprogramming","created":"2025-02-22","cited_by_count":22,"area":null},{"id":"2208.10224","title":"Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attacks","created":"2022-08-14","cited_by_count":21,"area":"safety"},{"id":"2301.01197","title":"Backdoor Attacks Against Dataset Distillation","created":"2023-01-03","cited_by_count":21,"area":null},{"id":"2205.14926","title":"CalFAT: Calibrated Federated Adversarial Training with Label Skewness","created":"2022-05-30","cited_by_count":20,"area":null},{"id":"2301.10908","title":"Distilling Cognitive Backdoor Patterns within an Image","created":"2023-01-26","cited_by_count":20,"area":null},{"id":"2304.01482","title":"Defending Against Patch-based Backdoor Attacks on Self-Supervised Learning","created":"2023-04-04","cited_by_count":20,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2410.10437","title":"Towards Reliable Verification of Unauthorized Data Usage in Personalized Text-to-Image Diffusion Models","created":"2024-10-14","cited_by_count":20,"area":"diffusion"},{"id":"2302.09479","title":"Delving into the Adversarial Robustness of Federated Learning","created":"2023-02-19","cited_by_count":19,"area":null},{"id":"2310.18633","title":"Setting the Trap: Capturing and Defeating Backdoors in Pretrained Language Models through Honeypots","created":"2023-10-28","cited_by_count":19,"area":"safety"},{"id":"2401.15295","title":"Shortcuts Everywhere and Nowhere: Exploring Multi-Trigger Backdoor Attacks","created":"2024-01-27","cited_by_count":19,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2202.07183","title":"A Survey of Neural Trojan Attacks and Defenses in Deep Learning","created":"2022-02-15","cited_by_count":17,"area":null},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2211.12044","title":"Backdoor Cleansing with Unlabeled Data","created":"2022-11-22","cited_by_count":17,"area":null},{"id":"2202.10627","title":"On the Effectiveness of Adversarial Training against Backdoor Attacks","created":"2022-02-22","cited_by_count":16,"area":null},{"id":"2205.11158","title":"IDEAL: Query-Efficient Data-Free Learning from Black-box Models","created":"2022-05-23","cited_by_count":16,"area":"distill"},{"id":"2202.05470","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","created":"2022-02-11","cited_by_count":14,"area":null},{"id":"2302.06079","title":"Byzantine-Robust Learning on Heterogeneous Data via Gradient Splitting","created":"2023-02-13","cited_by_count":14,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2404.01101","title":"UFID: A Unified Framework for Input-level Backdoor Detection on Diffusion Models","created":"2024-04-01","cited_by_count":14,"area":"diffusion"},{"id":"2406.09173","title":"Potion: Towards Poison Unlearning","created":"2024-06-13","cited_by_count":14,"area":"safety"},{"id":"2206.08477","title":"Backdoor Attacks on Vision Transformers","created":"2022-06-16","cited_by_count":13,"area":"safety"},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2201.13329","title":"Can Adversarial Training Be Manipulated By Non-Robust Features?","created":"2022-01-31","cited_by_count":12,"area":null},{"id":"2210.06428","title":"Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace Subnetwork","created":"2022-10-12","cited_by_count":12,"area":null},{"id":"2210.10886","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","created":"2022-10-19","cited_by_count":12,"area":"safety"},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2204.06273","title":"Towards A Critical Evaluation of Robustness for Deep Learning Backdoor Countermeasures","created":"2022-04-13","cited_by_count":11,"area":null},{"id":"2307.15539","title":"Beating Backdoor Attack at Its Own Game","created":"2023-07-28","cited_by_count":11,"area":null},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11,"area":null},{"id":"2405.16112","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","created":"2024-05-25","cited_by_count":11,"area":null},{"id":"2207.05641","title":"Backdoor Attacks on Crowd Counting","created":"2022-07-12","cited_by_count":10,"area":null},{"id":"2211.07915","title":"Backdoor Attacks on Time Series: A Generative Approach","created":"2022-11-15","cited_by_count":10,"area":"safety"},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2311.16646","title":"Rethinking Backdoor Attacks on Dataset Distillation: A Kernel Method Perspective","created":"2023-11-28","cited_by_count":10,"area":"safety"},{"id":"2312.12724","title":"Progressive Poisoned Data Isolation for Training-time Backdoor Defense","created":"2023-12-20","cited_by_count":10,"area":null},{"id":"2405.17929","title":"Towards Unified Robustness Against Both Backdoor and Adversarial Attacks","created":"2024-05-28","cited_by_count":10,"area":null},{"id":"2409.15968","title":"Adversarial Backdoor Defense in CLIP","created":"2024-09-24","cited_by_count":10,"area":"safety"},{"id":"2507.05113","title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2306.00816","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","created":"2023-06-01","cited_by_count":9,"area":null},{"id":"2306.02368","title":"Revisiting Data-Free Knowledge Distillation with Poisoned Teachers","created":"2023-06-04","cited_by_count":9,"area":"safety"},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2312.11057","title":"DataElixir: Purifying Poisoned Dataset to Mitigate Backdoor Attacks via Diffusion Models","created":"2023-12-18","cited_by_count":9,"area":"diffusion"},{"id":"2412.11441","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","created":"2024-12-16","cited_by_count":9,"area":"diffusion"},{"id":"2506.04743","title":"SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs","created":"2025-06-05","cited_by_count":9,"area":"mllm"},{"id":"2507.01321","title":"ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks","created":"2025-07-02","cited_by_count":9,"area":"safety"},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2310.11595","title":"WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networks","created":"2023-10-17","cited_by_count":8,"area":null},{"id":"2402.12026","title":"Acquiring Clean Language Models from Backdoor Poisoned Datasets by Downscaling Frequency Space","created":"2024-02-19","cited_by_count":8,"area":"safety"},{"id":"2405.19928","title":"BAN: Detecting Backdoors Activated by Adversarial Neuron Noise","created":"2024-05-30","cited_by_count":8,"area":null},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2309.13166","title":"Invisible Watermarking for Audio Generation Diffusion Models","created":"2023-09-22","cited_by_count":7,"area":"diffusion"},{"id":"2312.04902","title":"BELT: Old-School Backdoor Attacks can Evade the State-of-the-Art Defense with Backdoor Exclusivity Lifting","created":"2023-12-08","cited_by_count":7,"area":null},{"id":"2406.09836","title":"Robustness Inspired Graph Backdoor Defense","created":"2024-06-14","cited_by_count":7,"area":null},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null}],"next_cursor":"100"}