{"total":61,"rows":[{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2112.14889","title":"Few-shot Backdoor Defense Using Shapley Estimation","created":"2021-12-30","cited_by_count":41,"area":null},{"id":"2302.14677","title":"Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger","created":"2023-02-28","cited_by_count":40,"area":null},{"id":"2303.06818","title":"Backdoor Defense via Deconfounded Representation Learning","created":"2023-03-13","cited_by_count":38,"area":null},{"id":"2303.02213","title":"Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions","created":"2023-03-03","cited_by_count":33,"area":null},{"id":"2207.00278","title":"BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label","created":"2022-07-01","cited_by_count":28,"area":null},{"id":"2301.10908","title":"Distilling Cognitive Backdoor Patterns within an Image","created":"2023-01-26","cited_by_count":20,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.04466","title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers","created":"2023-08-08","cited_by_count":18,"area":null},{"id":"2312.08667","title":"Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey","created":"2023-12-14","cited_by_count":18,"area":null},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18,"area":null},{"id":"2408.07440","title":"BAPLe: Backdoor Attacks on Medical Foundational Models using Prompt Learning","created":"2024-08-14","cited_by_count":16,"area":"safety"},{"id":"2307.10184","title":"A Dual Stealthy Backdoor: From Both Spatial and Frequency Perspectives","created":"2023-07-03","cited_by_count":13,"area":null},{"id":"2210.10886","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","created":"2022-10-19","cited_by_count":12,"area":"safety"},{"id":"2412.01646","title":"Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior","created":"2024-12-02","cited_by_count":11,"area":null},{"id":"2401.00163","title":"A clean-label graph backdoor attack method in node classification task","created":"2023-12-30","cited_by_count":10,"area":null},{"id":"2410.02182","title":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","created":"2024-10-03","cited_by_count":9,"area":null},{"id":"2303.13211","title":"Don't FREAK Out: A Frequency-Inspired Approach to Detecting Backdoor Poisoned Samples in DNNs","created":"2023-03-23","cited_by_count":8,"area":null},{"id":"2310.11595","title":"WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networks","created":"2023-10-17","cited_by_count":8,"area":null},{"id":"2212.01082","title":"Membership Inference Attacks Against Semantic Segmentation Models","created":"2022-12-02","cited_by_count":7,"area":"safety"},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2306.08386","title":"Efficient Backdoor Attacks for Deep Neural Networks in Real-world Scenarios","created":"2023-06-14","cited_by_count":7,"area":null},{"id":"2401.02031","title":"Spy-Watermark: Robust Invisible Watermarking for Backdoor Attack","created":"2024-01-04","cited_by_count":7,"area":null},{"id":"2503.14895","title":"Mitigating Object Hallucinations in MLLMs via Multi-Frequency Perturbations","created":"2025-03-19","cited_by_count":7,"area":"mllm"},{"id":"2211.08044","title":"Backdoor Attacks for Remote Sensing Data with Wavelet Transform","created":"2022-11-15","cited_by_count":6,"area":null},{"id":"2208.00474","title":"Feather-Light Fourier Domain Adaptation in Magnetic Resonance Imaging","created":"2022-07-31","cited_by_count":5,"area":null},{"id":"2306.08313","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","created":"2023-06-14","cited_by_count":5,"area":null},{"id":"2309.08953","title":"Robust Backdoor Attacks on Object Detection in Real World","created":"2023-09-16","cited_by_count":5,"area":null},{"id":"2401.01911","title":"Backdoor Attack on Unpaired Medical Image-Text Foundation Models: A Pilot Study on MedCLIP","created":"2024-01-01","cited_by_count":5,"area":"safety"},{"id":"2211.10933","title":"Invisible Backdoor Attack with Dynamic Triggers against Person Re-identification","created":"2022-11-20","cited_by_count":4,"area":null},{"id":"2312.12484","title":"SkyMask: Attack-agnostic Robust Federated Learning with Fine-grained Learnable Masks","created":"2023-12-19","cited_by_count":4,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2405.19990","title":"DiffPhysBA: Diffusion-based Physical Backdoor Attack against Person Re-Identification in Real-World","created":"2024-05-30","cited_by_count":3,"area":"safety"},{"id":"2407.06838","title":"Event Trojan: Asynchronous Event-based Backdoor Attacks","created":"2024-07-09","cited_by_count":3,"area":null},{"id":"2410.18267","title":"Backdoor in Seconds: Unlocking Vulnerabilities in Large Pre-trained Models via Model Editing","created":"2024-10-23","cited_by_count":3,"area":null},{"id":"2412.01495","title":"Adversarial Attacks on Hyperbolic Networks","created":"2024-12-02","cited_by_count":3,"area":null},{"id":"2301.01885","title":"Enhancement attacks in biomedical machine learning","created":"2023-01-05","cited_by_count":2,"area":null},{"id":"2402.15653","title":"Low-Frequency Black-Box Backdoor Attack via Evolutionary Algorithm","created":"2024-02-23","cited_by_count":2,"area":null},{"id":"2408.11587","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","created":"2024-08-21","cited_by_count":2,"area":"safety"},{"id":"2409.07415","title":"SoK: Security and Privacy Risks of Healthcare AI","created":"2024-09-11","cited_by_count":2,"area":null},{"id":"2411.19075","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","created":"2024-11-28","cited_by_count":2,"area":null},{"id":"2412.03441","title":"PBP: Post-training Backdoor Purification for Malware Classifiers","created":"2024-12-04","cited_by_count":2,"area":null},{"id":"2403.13018","title":"Invisible Backdoor Attack Through Singular Value Decomposition","created":"2024-03-18","cited_by_count":1,"area":null},{"id":"2409.02251","title":"NoiseAttack: An Evasive Sample-Specific Multi-Targeted Backdoor Attack Through White Gaussian Noise","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2411.17283","title":"BadScan: An Architectural Backdoor Attack on Visual State Space Models","created":"2024-11-26","cited_by_count":1,"area":null},{"id":"2602.09284","title":"X-Mark: Saliency-Guided Robust Dataset Ownership Verification for Medical Imaging","created":"2026-02-10","cited_by_count":1,"area":"safety"},{"id":"2311.14772","title":"Trainwreck: A damaging adversarial attack on image classifiers","created":"2023-11-24","cited_by_count":0,"area":null},{"id":"2403.06430","title":"AS-FIBA: Adaptive Selective Frequency-Injection for Backdoor Attack on Deep Face Restoration","created":"2024-03-11","cited_by_count":0,"area":null},{"id":"2403.15918","title":"Towards Adversarial Robustness And Backdoor Mitigation in SSL","created":"2024-03-23","cited_by_count":0,"area":null},{"id":"2411.03926","title":"Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning","created":"2024-11-06","cited_by_count":0,"area":null},{"id":"2412.10681","title":"One Pixel is All I Need","created":"2024-12-14","cited_by_count":0,"area":"safety"},{"id":"2504.21052","title":"SFIBA: Spatial-based Full-target Invisible Backdoor Attacks","created":"2025-04-29","cited_by_count":0,"area":null},{"id":"2512.14158","title":"CIS-BA: Continuous Interaction Space Based Backdoor Attack for Object Detection in the Real-World","created":"2025-12-16","cited_by_count":0,"area":null},{"id":"2512.19730","title":"ArcGen: Generalizing Neural Backdoor Detection Across Diverse Architectures","created":"2025-12-17","cited_by_count":0,"area":null},{"id":"2512.22046","title":"Backdoor Attacks on Prompt-Driven Video Segmentation Foundation Models","created":"2025-12-26","cited_by_count":0,"area":"safety"},{"id":"2601.17107","title":"StealthMark: Harmless and Stealthy Ownership Verification for Medical Segmentation via Uncertainty-Guided Backdoors","created":"2026-01-23","cited_by_count":0,"area":null},{"id":"2602.03316","title":"Invisible Clean-Label Backdoor Attacks for Generative Data Augmentation","created":"2026-02-03","cited_by_count":0,"area":"safety"},{"id":"2604.05809","title":"Adjustable Text-Guided Backdoor Attacks with Natural-Word Triggers on Multimodal Pretrained Models","created":"2026-04-07","cited_by_count":0,"area":"safety"},{"id":"2604.20047","title":"PASTA: A Patch-Agnostic Twofold-Stealthy Backdoor Attack on Vision Transformers","created":"2026-04-21","cited_by_count":0,"area":"safety"},{"id":"2608.18036","title":"Harnessing Magnitude-Only and Complex Measurements for Improved Dynamic MRI Reconstruction with Learned Priors","created":"2026-08-18","cited_by_count":0,"area":null},{"id":"2609.14290","title":"Fusing Spectral Signatures and Activation Clustering for Backdoor Detection in Healthcare Imaging Models: Method, Implementation, and Evaluation","created":"2026-09-13","cited_by_count":0,"area":null}],"next_cursor":null}