{"total":86,"rows":[{"id":"2310.03693","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","created":"2023-10-05","cited_by_count":1154,"area":"alignment"},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49,"area":"safety"},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39,"area":null},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2208.13049","title":"TrojViT: Trojan Insertion in Vision Transformers","created":"2022-08-27","cited_by_count":31,"area":"safety"},{"id":"2405.13360","title":"How to Trace Latent Generative Model Generated Images without Artificial Watermark?","created":"2024-05-22","cited_by_count":26,"area":"diffusion"},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2305.18651","title":"UMD: Unsupervised Model Detection for X2X Backdoor Attacks","created":"2023-05-29","cited_by_count":18,"area":null},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18,"area":null},{"id":"2211.12044","title":"Backdoor Cleansing with Unlabeled Data","created":"2022-11-22","cited_by_count":17,"area":null},{"id":"2310.17498","title":"CBD: A Certified Backdoor Detector Based on Local Dominant Probability","created":"2023-10-26","cited_by_count":13,"area":null},{"id":"2403.17188","title":"LOTUS: Evasive and Resilient Backdoor Attacks through Sub-Partitioning","created":"2024-03-25","cited_by_count":13,"area":null},{"id":"2407.11282","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","created":"2024-07-15","cited_by_count":13,"area":"safety"},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11,"area":null},{"id":"2405.16112","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","created":"2024-05-25","cited_by_count":11,"area":null},{"id":"2312.12724","title":"Progressive Poisoned Data Isolation for Training-time Backdoor Defense","created":"2023-12-20","cited_by_count":10,"area":null},{"id":"2507.05113","title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2306.00816","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","created":"2023-06-01","cited_by_count":9,"area":null},{"id":"2310.11595","title":"WaveAttack: Asymmetric Frequency Obfuscation-based Backdoor Attacks Against Deep Neural Networks","created":"2023-10-17","cited_by_count":8,"area":null},{"id":"2405.19928","title":"BAN: Detecting Backdoors Activated by Adversarial Neuron Noise","created":"2024-05-30","cited_by_count":8,"area":null},{"id":"2301.00986","title":"Look, Listen, and Attack: Backdoor Attacks Against Video Action Recognition","created":"2023-01-03","cited_by_count":7,"area":null},{"id":"2411.15673","title":"Semantic Shield: Defending Vision-Language Models Against Backdooring and Poisoning via Fine-grained Knowledge Alignment","created":"2024-11-23","cited_by_count":7,"area":"mllm"},{"id":"2501.05928","title":"Towards Backdoor Stealthiness in Model Parameter Space","created":"2025-01-10","cited_by_count":7,"area":null},{"id":"2302.01740","title":"SoK: A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification","created":"2023-02-03","cited_by_count":6,"area":null},{"id":"2401.15883","title":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability","created":"2024-01-29","cited_by_count":6,"area":null},{"id":"2405.14672","title":"Invisible Backdoor Attack against Self-supervised Learning","created":"2024-05-23","cited_by_count":6,"area":null},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2307.07328","title":"Boosting Backdoor Attack with A Learnable Poisoning Sample Selection Strategy","created":"2023-07-14","cited_by_count":5,"area":null},{"id":"2309.08953","title":"Robust Backdoor Attacks on Object Detection in Real World","created":"2023-09-16","cited_by_count":5,"area":null},{"id":"2405.14781","title":"Unified Neural Backdoor Removal with Only Few Clean Samples through Unlearning and Relearning","created":"2024-05-23","cited_by_count":5,"area":null},{"id":"2509.23871","title":"Taught Well Learned Ill: Towards Distillation-conditional Backdoor Attack","created":"2025-09-28","cited_by_count":5,"area":"distill"},{"id":"2211.10933","title":"Invisible Backdoor Attack with Dynamic Triggers against Person Re-identification","created":"2022-11-20","cited_by_count":4,"area":null},{"id":"2301.12318","title":"Gradient Shaping: Enhancing Backdoor Attack Against Reverse Engineering","created":"2023-01-29","cited_by_count":4,"area":null},{"id":"2305.18439","title":"Alteration-free and Model-agnostic Origin Attribution of Generated Images","created":"2023-05-29","cited_by_count":4,"area":null},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2402.17465","title":"Model X-ray:Detecting Backdoored Models via Decision Boundary","created":"2024-02-27","cited_by_count":3,"area":null},{"id":"2407.10052","title":"Augmented Neural Fine-Tuning for Efficient Backdoor Purification","created":"2024-07-14","cited_by_count":3,"area":null},{"id":"2411.04811","title":"Defending Deep Regression Models against Backdoor Attacks","created":"2024-11-07","cited_by_count":3,"area":null},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2501.17151","title":"Scanning Trojaned Models Using Out-of-Distribution Samples","created":"2025-01-28","cited_by_count":3,"area":"safety"},{"id":"2502.11687","title":"ReVeil: Unconstrained Concealed Backdoor Attack on Deep Neural Networks using Machine Unlearning","created":"2025-02-17","cited_by_count":3,"area":null},{"id":"2512.08129","title":"Improving the Sensitivity of Backdoor Detectors via Class Subspace Orthogonalization","created":"2025-12-09","cited_by_count":3,"area":null},{"id":"2601.19448","title":"From Internal Diagnosis to External Auditing: A VLM-Driven Paradigm for Data-Free Online Backdoor Defense","created":"2026-01-27","cited_by_count":3,"area":"safety"},{"id":"2403.15010","title":"Clean-image Backdoor Attacks","created":"2024-03-22","cited_by_count":2,"area":null},{"id":"2409.00863","title":"Fisher Information guided Purification against Backdoor Attacks","created":"2024-09-01","cited_by_count":2,"area":null},{"id":"2410.12955","title":"Long-Tailed Backdoor Attack Using Dynamic Data Augmentation Operations","created":"2024-10-16","cited_by_count":2,"area":null},{"id":"2503.12058","title":"Revisiting Training-Inference Trigger Intensity in Backdoor Attacks","created":"2025-03-15","cited_by_count":2,"area":null},{"id":"2510.14299","title":"TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening","created":"2025-10-16","cited_by_count":2,"area":null},{"id":"2303.15564","title":"Mask and Restore: Blind Backdoor Defense at Test Time with Masked Autoencoder","created":"2023-03-27","cited_by_count":1,"area":"safety"},{"id":"2306.17441","title":"Efficient Backdoor Removal Through Natural Gradient Fine-tuning","created":"2023-06-30","cited_by_count":1,"area":null},{"id":"2402.10283","title":"Backdoor Attack against One-Class Sequential Anomaly Detection Models","created":"2024-02-15","cited_by_count":1,"area":null},{"id":"2405.03918","title":"Unlearning Backdoor Attacks through Gradient-Based Model Pruning","created":"2024-05-07","cited_by_count":1,"area":null},{"id":"2408.00255","title":"Revocable Backdoor for Deep Model Trading","created":"2024-08-01","cited_by_count":1,"area":null},{"id":"2409.02251","title":"NoiseAttack: An Evasive Sample-Specific Multi-Targeted Backdoor Attack Through White Gaussian Noise","created":"2024-09-03","cited_by_count":1,"area":null},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2411.12914","title":"Trojan Cleansing with Neural Collapse","created":"2024-11-19","cited_by_count":1,"area":"safety"},{"id":"2411.14449","title":"Unlearn to Relearn Backdoors: Deferred Backdoor Functionality Attacks on Deep Learning Models","created":"2024-11-10","cited_by_count":1,"area":null},{"id":"2502.01152","title":"Gradient Norm-based Fine-Tuning for Backdoor Defense in Automatic Speech Recognition","created":"2025-02-03","cited_by_count":1,"area":"safety"},{"id":"2504.00170","title":"Backdoor Detection through Replicated Execution of Outsourced Training","created":"2025-03-31","cited_by_count":1,"area":null},{"id":"2506.17350","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","created":"2025-06-20","cited_by_count":1,"area":null},{"id":"2507.22813","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","created":"2025-07-30","cited_by_count":1,"area":"diffusion"},{"id":"2509.15497","title":"Backdoor Mitigation via Invertible Pruning Masks","created":"2025-09-19","cited_by_count":1,"area":null},{"id":"2602.10780","title":"Kill it with FIRE: On Leveraging Latent Space Directions for Runtime Backdoor Mitigation in Deep Neural Networks","created":"2026-02-11","cited_by_count":1,"area":null},{"id":"2603.10806","title":"Backdoor Directions in Vision Transformers","created":"2026-03-11","cited_by_count":1,"area":"safety"},{"id":"2603.13864","title":"Inevitable Encounters: Backdoor Attacks Involving Lossy Compression","created":"2026-03-14","cited_by_count":1,"area":null},{"id":"2604.18970","title":"Mechanistic Anomaly Detection via Functional Attribution","created":"2026-04-21","cited_by_count":1,"area":"safety"},{"id":"2311.14772","title":"Trainwreck: A damaging adversarial attack on image classifiers","created":"2023-11-24","cited_by_count":0,"area":null},{"id":"2312.07389","title":"Eroding Trust In Aerial Imagery: Comprehensive Analysis and Evaluation Of Adversarial Attacks In Geospatial Systems","created":"2023-12-12","cited_by_count":0,"area":null},{"id":"2401.15002","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-01-26","cited_by_count":0,"area":null},{"id":"2406.16125","title":"CBPF: Filtering Poisoned Data Based on Composite Backdoor Attack","created":"2024-06-23","cited_by_count":0,"area":null},{"id":"2506.20926","title":"Towards Generalized and Stealthy Watermarking for Generative Code Models","created":"2025-06-26","cited_by_count":0,"area":"safety"},{"id":"2507.00577","title":"BadViM: Backdoor Attack against Vision Mamba","created":"2025-07-01","cited_by_count":0,"area":"ssm"},{"id":"2507.21742","title":"Adversarial Reconstruction Feedback for Robust Fine-grained Generalization","created":"2025-07-29","cited_by_count":0,"area":null},{"id":"2508.05404","title":"NT-ML: Backdoor Defense via Non-target Label Training and Mutual Learning","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2510.13992","title":"Signature in Code Backdoor Detection, how far are we?","created":"2025-10-15","cited_by_count":0,"area":"safety"},{"id":"2511.12046","title":"BackWeak: Backdooring Knowledge Distillation Simply with Weak Triggers and Fine-tuning","created":"2025-11-15","cited_by_count":0,"area":"distill"},{"id":"2512.19730","title":"ArcGen: Generalizing Neural Backdoor Detection Across Diverse Architectures","created":"2025-12-17","cited_by_count":0,"area":null},{"id":"2602.07200","title":"BadSNN: Backdoor Attacks on Spiking Neural Networks via Adversarial Spiking Neuron","created":"2026-02-06","cited_by_count":0,"area":null},{"id":"2605.18907","title":"Lightweight and Fast Backdoor Model Detection","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.18908","title":"Fast and Lightweight Backdoor Detection via Head Random Probing","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.27809","title":"Density-aware Sample-specific Attack","created":"2026-05-27","cited_by_count":0,"area":"safety"},{"id":"2610.06994","title":"TARE: Weigh a Never-Poisoned Twin Before Reading Backdoor-Defense Costs","created":"2026-10-04","cited_by_count":0,"area":null},{"id":"2610.19947","title":"Quiet Triggers, Loud Footprints: A Tri-Space Measurement Study of Backdoor Stealthiness","created":"2026-10-14","cited_by_count":0,"area":null}],"next_cursor":null}