{"total":35,"rows":[{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2305.06360","title":"Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy","created":"2023-05-10","cited_by_count":51,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2411.12768","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","created":"2024-11-18","cited_by_count":33,"area":"safety"},{"id":"2308.02122","title":"ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP","created":"2023-08-04","cited_by_count":19,"area":"safety"},{"id":"2310.18633","title":"Setting the Trap: Capturing and Defeating Backdoors in Pretrained Language Models through Honeypots","created":"2023-10-28","cited_by_count":19,"area":"safety"},{"id":"2503.00596","title":"BadJudge: Backdoor Vulnerabilities of LLM-as-a-Judge","created":"2025-03-01","cited_by_count":18,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2211.11958","title":"A Survey on Backdoor Attack and Defense in Natural Language Processing","created":"2022-11-22","cited_by_count":14,"area":"safety"},{"id":"2402.05467","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","created":"2024-02-08","cited_by_count":14,"area":"safety"},{"id":"2602.03085","title":"The Trigger in the Haystack: Extracting and Reconstructing LLM Backdoor Triggers","created":"2026-02-03","cited_by_count":14,"area":"safety"},{"id":"2409.01193","title":"CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models","created":"2024-09-02","cited_by_count":13,"area":"safety"},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2402.12026","title":"Acquiring Clean Language Models from Backdoor Poisoned Datasets by Downscaling Frequency Space","created":"2024-02-19","cited_by_count":8,"area":"safety"},{"id":"2603.13461","title":"Purifying Generative LLMs from Backdoors without Prior Knowledge or Clean Reference","created":"2026-03-13","cited_by_count":7,"area":"safety"},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2510.04347","title":"Unmasking Backdoors: An Explainable Defense via Gradient-Attention Anomaly Scoring for Pre-trained Language Models","created":"2025-10-05","cited_by_count":3,"area":"safety"},{"id":"2408.11587","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","created":"2024-08-21","cited_by_count":2,"area":"safety"},{"id":"2510.05169","title":"From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMs","created":"2025-10-05","cited_by_count":2,"area":"safety"},{"id":"2502.00652","title":"Reformulation is All You Need: Addressing Malicious Text Features in DNNs","created":"2025-02-02","cited_by_count":1,"area":"safety"},{"id":"2605.19227","title":"Token by Token, Compromised: Backdoor Vulnerabilities in Unified Autoregressive Models","created":"2026-05-19","cited_by_count":1,"area":"safety"},{"id":"2509.05318","title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models","created":"2025-08-30","cited_by_count":0,"area":"safety"},{"id":"2509.16203","title":"Inverting Trojans in LLMs","created":"2025-09-19","cited_by_count":0,"area":"safety"},{"id":"2603.17174","title":"Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2606.10846","title":"Securing Code Understanding: Detecting Natural Backdoor Vulnerability in Code Language Models","created":"2026-06-09","cited_by_count":0,"area":"safety"},{"id":"2606.31309","title":"CSO-LLM: Class Subspace Orthogonalization for Post-Training Backdoor Detection and Trigger Inversion in LLMs","created":"2026-06-30","cited_by_count":0,"area":"safety"},{"id":"2610.00663","title":"Backdoor Containment via Expert Quarantine and Shutdown in LLMs","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.00685","title":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.14701","title":"Towards Merging-conditional Backdoor Unalignment against Large Language Models","created":"2026-10-10","cited_by_count":0,"area":"safety"}],"next_cursor":null}