{"total":94,"rows":[{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2306.06123","title":"Adversarial attacks and defenses in explainable artificial intelligence: A survey","created":"2023-06-06","cited_by_count":48,"area":null},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2406.17216","title":"Machine Unlearning Fails to Remove Data Poisoning Attacks","created":"2024-06-25","cited_by_count":37,"area":"safety"},{"id":"2207.05164","title":"Machine Learning Security in Industry: A Quantitative Survey","created":"2022-07-11","cited_by_count":21,"area":null},{"id":"2402.10908","title":"LLM-Assisted Crisis Management: Building Advanced LLM Platforms for Effective Emergency Response and Public Collaboration","created":"2024-01-12","cited_by_count":21,"area":null},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2602.11865","title":"Intelligent AI Delegation","created":"2026-02-12","cited_by_count":18,"area":null},{"id":"2311.09994","title":"Towards more Practical Threat Models in Artificial Intelligence Security","created":"2023-11-16","cited_by_count":17,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2411.00489","title":"Human-inspired Perspectives: A Survey on AI Long-term Memory","created":"2024-11-01","cited_by_count":12,"area":null},{"id":"2303.09767","title":"It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness","created":"2023-03-17","cited_by_count":9,"area":null},{"id":"2401.01085","title":"Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control","created":"2024-01-02","cited_by_count":8,"area":"safety"},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2506.06518","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2210.09305","title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning","created":"2022-10-17","cited_by_count":7,"area":"safety"},{"id":"2312.00157","title":"Universal Backdoor Attacks","created":"2023-11-30","cited_by_count":7,"area":null},{"id":"2406.15386","title":"U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AI","created":"2024-04-22","cited_by_count":7,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2502.04879","title":"Statistical Collusion by Collectives on Learning Platforms","created":"2025-02-07","cited_by_count":6,"area":null},{"id":"2305.02383","title":"On the Security Risks of Knowledge Graph Reasoning","created":"2023-05-03","cited_by_count":5,"area":null},{"id":"2306.08313","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","created":"2023-06-14","cited_by_count":5,"area":null},{"id":"2407.15855","title":"Data Poisoning Attacks in Intelligent Transportation Systems: A Survey","created":"2024-07-06","cited_by_count":5,"area":null},{"id":"2404.00076","title":"A Backdoor Approach with Inverted Labels Using Dirty Label-Flipping Attacks","created":"2024-03-29","cited_by_count":4,"area":null},{"id":"2307.00368","title":"Minimizing Energy Consumption of Deep Learning Models by Energy-Aware Training","created":"2023-07-01","cited_by_count":3,"area":null},{"id":"2310.10744","title":"Fast Adversarial Label-Flipping Attack on Tabular Data","created":"2023-10-16","cited_by_count":3,"area":null},{"id":"2312.11500","title":"A Red Teaming Framework for Securing AI in Maritime Autonomous Systems","created":"2023-12-08","cited_by_count":3,"area":"safety"},{"id":"2401.01537","title":"The Art of Deception: Robust Backdoor Attack using Dynamic Stacking of Triggers","created":"2024-01-03","cited_by_count":3,"area":null},{"id":"2403.14641","title":"Testing autonomous vehicles and AI: perspectives and challenges from cybersecurity, transparency, robustness and fairness","created":"2024-02-21","cited_by_count":3,"area":null},{"id":"2503.04480","title":"Poisoning Bayesian Inference via Data Deletion and Replication","created":"2025-03-06","cited_by_count":3,"area":null},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2301.01885","title":"Enhancement attacks in biomedical machine learning","created":"2023-01-05","cited_by_count":2,"area":null},{"id":"2309.01614","title":"Dropout Attacks","created":"2023-09-04","cited_by_count":2,"area":null},{"id":"2309.07106","title":"Hardening RGB-D Object Recognition Systems against Adversarial Patch Attacks","created":"2023-09-13","cited_by_count":2,"area":null},{"id":"2410.21952","title":"On the Robustness of Adversarial Training Against Uncertainty Attacks","created":"2024-10-29","cited_by_count":2,"area":null},{"id":"2411.10500","title":"Edge-Only Universal Adversarial Attacks in Distributed Learning","created":"2024-11-15","cited_by_count":2,"area":null},{"id":"2412.02670","title":"The Broader Landscape of Robustness in Algorithmic Statistics","created":"2024-12-03","cited_by_count":2,"area":null},{"id":"2412.17614","title":"Emerging Security Challenges of Large Language Models","created":"2024-12-23","cited_by_count":2,"area":null},{"id":"2505.23412","title":"Buffer-free Class-Incremental Learning with Out-of-Distribution Detection","created":"2025-05-29","cited_by_count":2,"area":null},{"id":"2509.02372","title":"Scam2Prompt: A Scalable Framework for Auditing Malicious Scam Endpoints in Production LLMs","created":"2025-09-02","cited_by_count":2,"area":null},{"id":"2512.00094","title":"HMARK: Radioactive Multi-Bit Semantic-Latent Watermarking for Diffusion Models","created":"2025-11-26","cited_by_count":2,"area":"diffusion"},{"id":"2305.05293","title":"On the Limitations of Model Stealing with Uncertainty Quantification Models","created":"2023-05-09","cited_by_count":1,"area":null},{"id":"2305.11347","title":"Quantifying the robustness of deep multispectral segmentation models against natural perturbations and data poisoning","created":"2023-05-18","cited_by_count":1,"area":"safety"},{"id":"2402.18329","title":"Robust Synthetic Data-Driven Detection of Living-Off-the-Land Reverse Shells","created":"2024-02-28","cited_by_count":1,"area":null},{"id":"2403.13523","title":"Have You Poisoned My Data? Defending Neural Networks against Data Poisoning","created":"2024-03-20","cited_by_count":1,"area":"safety"},{"id":"2409.07448","title":"A Novel Perturb-ability Score to Mitigate Evasion Adversarial Attacks on Flow-Based ML-NIDS","created":"2024-09-11","cited_by_count":1,"area":null},{"id":"2412.03908","title":"Generalizable Targeted Data Poisoning against Varying Physical Objects","created":"2024-12-05","cited_by_count":1,"area":"safety"},{"id":"2503.11841","title":"Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection","created":"2025-03-14","cited_by_count":1,"area":null},{"id":"2506.01230","title":"Stress-Testing ML Pipelines with Adversarial Data Corruption","created":"2025-06-02","cited_by_count":1,"area":null},{"id":"2506.09640","title":"Evasion Attacks Against Bayesian Predictive Models","created":"2025-06-11","cited_by_count":1,"area":null},{"id":"2511.05102","title":"Quantifying the Risk of Transferred Black Box Attacks","created":"2025-11-07","cited_by_count":1,"area":null},{"id":"2602.03899","title":"Byzantine Machine Learning: MultiKrum and an optimal notion of robustness","created":"2026-02-03","cited_by_count":1,"area":null},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2606.21172","title":"BadDreamer: Transferable Backdoor Attacks against Video World Models for Autonomous Driving","created":"2026-06-19","cited_by_count":1,"area":"wm"},{"id":"2608.30041","title":"Reachability-Based Capability Confinement for LLM Agents under Indirect Prompt Injection","created":"2026-08-30","cited_by_count":1,"area":"agents"},{"id":"2301.02615","title":"Silent Killer: A Stealthy, Clean-Label, Black-Box Backdoor Attack","created":"2023-01-05","cited_by_count":0,"area":null},{"id":"2301.07474","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","created":"2023-01-18","cited_by_count":0,"area":null},{"id":"2306.16127","title":"MLSMM: Machine Learning Security Maturity Model","created":"2023-06-28","cited_by_count":0,"area":null},{"id":"2306.17370","title":"Differential Privacy May Have a Potential Optimization Effect on Some Swarm Intelligence Algorithms besides Privacy-preserving","created":"2023-06-30","cited_by_count":0,"area":null},{"id":"2310.16224","title":"Poison is Not Traceless: Fully-Agnostic Detection of Poisoning Attacks","created":"2023-10-24","cited_by_count":0,"area":null},{"id":"2312.13863","title":"Manipulating Trajectory Prediction with Backdoors","created":"2023-12-21","cited_by_count":0,"area":null},{"id":"2312.16957","title":"Attack Tree Analysis for Adversarial Evasion Attacks","created":"2023-12-28","cited_by_count":0,"area":null},{"id":"2408.07558","title":"Sonic: Fast and Transferable Data Poisoning on Clustering Algorithms","created":"2024-08-14","cited_by_count":0,"area":null},{"id":"2409.02430","title":"Transfer-based Adversarial Poisoning Attacks for Online (MIMO-)Deep Receviers","created":"2024-09-04","cited_by_count":0,"area":null},{"id":"2410.00862","title":"Timber! Poisoning Decision Trees","created":"2024-10-01","cited_by_count":0,"area":null},{"id":"2411.10673","title":"How to Defend Against Large-scale Model Poisoning Attacks in Federated Learning: A Vertical Solution","created":"2024-11-16","cited_by_count":0,"area":null},{"id":"2412.10186","title":"MIBP-Cert: Certified Training against Data Perturbations with Mixed-Integer Bilinear Programs","created":"2024-12-13","cited_by_count":0,"area":null},{"id":"2503.18497","title":"Statistically Testing Training Data for Unwanted Error Patterns using Rule-Oriented Regression","created":"2025-03-24","cited_by_count":0,"area":null},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2506.20573","title":"LARP: Learner-Agnostic Robust Data Prefiltering","created":"2025-06-25","cited_by_count":0,"area":null},{"id":"2507.02125","title":"Can Artificial Intelligence solve the blockchain oracle problem? Unpacking the Challenges and Possibilities","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2507.04106","title":"Addressing The Devastating Effects Of Single-Task Data Poisoning In Exemplar-Free Continual Learning","created":"2025-07-05","cited_by_count":0,"area":"safety"},{"id":"2508.01276","title":"Defending Against Beta Poisoning Attacks in Machine Learning Models","created":"2025-08-02","cited_by_count":0,"area":null},{"id":"2508.05600","title":"Provable one-poison backdoor attacks on linear models and ReLU neural networks","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2508.21654","title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks","created":"2025-08-29","cited_by_count":0,"area":null},{"id":"2511.14406","title":"Watch Out for the Lifespan: Evaluating Backdoor Attacks Against Federated Model Adaptation","created":"2025-11-18","cited_by_count":0,"area":null},{"id":"2601.22308","title":"Stealthy Poisoning Attacks Bypass Defenses in Regression Settings","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2603.17174","title":"Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2604.24700","title":"Green Shielding: A User-Centric Approach Towards Trustworthy AI","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.13214","title":"Backdoor Channels Hidden in Latent Space: Extending Cryptographic Undetectability to Modern Neural Networks","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.14151","title":"Stochastic global optimization of continuous functions via random walks on Grassmannians","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.21146","title":"Detecting Trojaned DNNs via Spectral Regression Analysis","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2606.10091","title":"SoK: Colluding Adversaries in Machine Learning Pipelines","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2606.20880","title":"Adversarial observations in probabilistic State-Space Models for robust Reinforcement Learning","created":"2026-06-18","cited_by_count":0,"area":"deeprl"},{"id":"2607.25479","title":"Architectural Backdoors in Vision-Language Model Supply Chains via Representation Steering","created":"2026-07-28","cited_by_count":0,"area":"mllm"},{"id":"2608.03626","title":"A Security-Oriented Lifecycle Model for Large Language Model Systems","created":"2026-08-04","cited_by_count":0,"area":null},{"id":"2608.21366","title":"Reviewing Model Collapse and Countermeasures","created":"2026-06-17","cited_by_count":0,"area":"synth"},{"id":"2608.23547","title":"Robustness of Anomaly Detection Models for Industrial Control Systems under Training-Time Data Contamination","created":"2026-08-24","cited_by_count":0,"area":null},{"id":"2609.10952","title":"Empirical Evaluation of Data Poisoning Attacks in Supervised Learning","created":"2026-09-10","cited_by_count":0,"area":"safety"},{"id":"2609.24515","title":"Beyond Predictable Paths: Redefining AI Security Incident Reporting for Agents","created":"2026-09-21","cited_by_count":0,"area":null},{"id":"2610.01282","title":"Trustworthy Data- and ML-Ops for Intelligent Transportation Systems and Logistics","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.01788","title":"SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples","created":"2026-10-01","cited_by_count":0,"area":"safety"},{"id":"2610.13051","title":"Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}