{"total":20,"rows":[{"id":"2307.00682","title":"Tools for Verifying Neural Models' Training Data","created":"2023-07-02","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2402.06957","title":"Architectural Neural Backdoors from First Principles","created":"2024-02-10","cited_by_count":11,"area":null},{"id":"2210.00108","title":"ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks","created":"2022-09-30","cited_by_count":9,"area":null},{"id":"2412.06219","title":"Data Free Backdoor Attacks","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2509.11173","title":"Your Compiler is Backdooring Your Model: Understanding and Exploiting Compilation Inconsistency Vulnerabilities in Deep Learning Compilers","created":"2025-09-14","cited_by_count":7,"area":null},{"id":"2310.03614","title":"Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally","created":"2023-10-05","cited_by_count":6,"area":null},{"id":"2209.15139","title":"Augmentation Backdoors","created":"2022-09-29","cited_by_count":5,"area":null},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2308.16684","title":"Everyone Can Attack: Repurpose Lossy Compression as a Natural Backdoor Attack","created":"2023-08-31","cited_by_count":1,"area":null},{"id":"2404.02696","title":"Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition","created":"2024-04-03","cited_by_count":1,"area":null},{"id":"2411.17283","title":"BadScan: An Architectural Backdoor Attack on Visual State Space Models","created":"2024-11-26","cited_by_count":1,"area":null},{"id":"2504.00170","title":"Backdoor Detection through Replicated Execution of Outsourced Training","created":"2025-03-31","cited_by_count":1,"area":null},{"id":"2210.12179","title":"Neural Architectural Backdoors","created":"2022-10-21","cited_by_count":0,"area":null},{"id":"2412.16905","title":"Backdoor Attack with Invisible Triggers Based on Model Architecture Modification","created":"2024-12-22","cited_by_count":0,"area":null},{"id":"2501.04108","title":"TrojanDec: Data-free Detection of Trojan Inputs in Self-supervised Learning","created":"2025-01-07","cited_by_count":0,"area":null},{"id":"2505.06315","title":"Threat Modeling for AI: The Case for an Asset-Centric Approach","created":"2025-05-08","cited_by_count":0,"area":null},{"id":"2603.00711","title":"IU: Imperceptible Universal Backdoor Attack","created":"2026-02-28","cited_by_count":0,"area":null},{"id":"2603.11949","title":"Delayed Backdoor Attacks: Exploring the Temporal Dimension as a New Attack Surface in Pre-Trained Models","created":"2026-03-12","cited_by_count":0,"area":null},{"id":"2605.01298","title":"Checkerboard: Closed-Form and Data-Independent Trigger Design for Clean-Label Backdoor Attacks","created":"2026-05-02","cited_by_count":0,"area":null}],"next_cursor":null}