{"total":43,"rows":[{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110,"area":"safety"},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2401.05949","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","created":"2024-01-11","cited_by_count":53,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2411.12768","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","created":"2024-11-18","cited_by_count":33,"area":"safety"},{"id":"2310.14480","title":"Attention-Enhancing Backdoor Attacks Against BERT-based Models","created":"2023-10-23","cited_by_count":32,"area":"safety"},{"id":"2304.14475","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","created":"2023-04-27","cited_by_count":31,"area":"safety"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2410.14425","title":"Unlearning Backdoor Attacks for LLMs with Weak-to-Strong Knowledge Distillation","created":"2024-10-18","cited_by_count":27,"area":"safety"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2302.12461","title":"Analyzing And Editing Inner Mechanisms Of Backdoored Language Models","created":"2023-02-24","cited_by_count":23,"area":"safety"},{"id":"2311.09763","title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations","created":"2023-11-16","cited_by_count":21,"area":"safety"},{"id":"2411.12701","title":"When Backdoors Speak: Understanding LLM Backdoor Attacks Through Model-Generated Explanations","created":"2024-11-19","cited_by_count":20,"area":"safety"},{"id":"2205.11803","title":"WeDef: Weakly Supervised Backdoor Defense for Text Classification","created":"2022-05-24","cited_by_count":15,"area":"safety"},{"id":"2211.11958","title":"A Survey on Backdoor Attack and Defense in Natural Language Processing","created":"2022-11-22","cited_by_count":14,"area":"safety"},{"id":"2303.14325","title":"Backdoor Attacks with Input-unique Triggers in NLP","created":"2023-03-25","cited_by_count":12,"area":"safety"},{"id":"2405.07667","title":"Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models","created":"2024-05-13","cited_by_count":12,"area":"safety"},{"id":"2312.04748","title":"Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attacks","created":"2023-12-07","cited_by_count":9,"area":"safety"},{"id":"2407.12281","title":"Turning Generative Models Degenerate: The Power of Data Poisoning Attacks","created":"2024-07-17","cited_by_count":9,"area":"safety"},{"id":"2501.15563","title":"PCAP-Backdoor: Backdoor Poisoning Generator for Network Traffic in CPS/IoT Environments","created":"2025-01-26","cited_by_count":9,"area":"safety"},{"id":"2403.03846","title":"Can Distillation Mitigate Backdoor Attacks in Pre-trained Encoders?","created":"2024-03-06","cited_by_count":6,"area":"safety"},{"id":"2510.04503","title":"P2P: A Poison-to-Poison Remedy for Reliable Backdoor Defense in LLMs","created":"2025-10-06","cited_by_count":6,"area":"safety"},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2508.20032","title":"Pruning Strategies for Backdoor Defense in LLMs","created":"2025-08-27","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2601.06305","title":"Why LoRA Fails to Forget: Regularized Low-Rank Adaptation Against Backdoors in Language Models","created":"2026-01-09","cited_by_count":4,"area":"safety"},{"id":"2409.01952","title":"Exploiting the Vulnerability of Large Language Models via Defense-Aware Architectural Backdoor","created":"2024-09-03","cited_by_count":3,"area":"safety"},{"id":"2505.23015","title":"Detecting Stealthy Backdoor Samples based on Intra-class Distance for Large Language Models","created":"2025-05-29","cited_by_count":3,"area":"safety"},{"id":"2510.04347","title":"Unmasking Backdoors: An Explainable Defense via Gradient-Attention Anomaly Scoring for Pre-trained Language Models","created":"2025-10-05","cited_by_count":3,"area":"safety"},{"id":"2409.17946","title":"Breaking PEFT Limitations: Leveraging Weak-to-Strong Knowledge Transfer for Backdoor Attacks in LLMs","created":"2024-09-26","cited_by_count":2,"area":"safety"},{"id":"2410.20136","title":"CodePurify: Defend Backdoor Attacks on Neural Code Models via Entropy-based Purification","created":"2024-10-26","cited_by_count":2,"area":"safety"},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2404.00461","title":"Shortcuts Arising from Contrast: Effective and Covert Clean-Label Attacks in Prompt-Based Learning","created":"2024-03-30","cited_by_count":0,"area":"safety"},{"id":"2508.15934","title":"Strategic Sample Selection for Improved Clean-Label Backdoor Attacks in Text Classification","created":"2025-08-21","cited_by_count":0,"area":"safety"},{"id":"2602.06887","title":"Plato's Form: Toward Backdoor Defense-as-a-Service for LLMs with Prototype Representations","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2604.24162","title":"Defusing the Trigger: Tail-Risk-Informed Attention Rebalancing for LLM Backdoor Mitigation","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2606.07963","title":"Shared Latent Structures Enable Unified Backdoor Detection and Mitigation in LLMs","created":"2026-06-06","cited_by_count":0,"area":"safety"},{"id":"2608.06779","title":"Genotypic Triggers: Exposing Pharmacogenomic Blind Spots via Host-Specific Backdoors in Generative Antimicrobial Peptide Models","created":"2026-08-07","cited_by_count":0,"area":"safety"},{"id":"2608.30403","title":"Why Are LLM Backdoor Defenses Fragmented? A Feature-Level Explanation with Sparse Autoencoders","created":"2026-08-31","cited_by_count":0,"area":"safety"}],"next_cursor":null}