{"total":32,"rows":[{"id":"2311.12075","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","created":"2023-11-20","cited_by_count":115,"area":"safety"},{"id":"2403.05030","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","created":"2024-03-08","cited_by_count":88,"area":"safety"},{"id":"2304.12298","title":"BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPT","created":"2023-02-21","cited_by_count":76,"area":"safety"},{"id":"2303.03323","title":"CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learning","created":"2023-03-06","cited_by_count":63,"area":"safety"},{"id":"2408.12798","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","created":"2024-08-23","cited_by_count":50,"area":"safety"},{"id":"2302.10894","title":"Red Teaming Deep Neural Networks with Feature Synthesis Tools","created":"2023-02-08","cited_by_count":21,"area":"safety"},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2207.12405","title":"Versatile Weight Attack via Flipping Limited Bits","created":"2022-07-25","cited_by_count":13,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2505.17601","title":"Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs","created":"2025-05-23","cited_by_count":10,"area":"safety"},{"id":"2507.05113","title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2412.02454","title":"Gracefully Filtering Backdoor Samples for Generative Large Language Models without Retraining","created":"2024-12-03","cited_by_count":9,"area":"safety"},{"id":"2402.12026","title":"Acquiring Clean Language Models from Backdoor Poisoned Datasets by Downscaling Frequency Space","created":"2024-02-19","cited_by_count":8,"area":"safety"},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2501.17151","title":"Scanning Trojaned Models Using Out-of-Distribution Samples","created":"2025-01-28","cited_by_count":3,"area":"safety"},{"id":"2601.19448","title":"From Internal Diagnosis to External Auditing: A VLM-Driven Paradigm for Data-Free Online Backdoor Defense","created":"2026-01-27","cited_by_count":3,"area":"safety"},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2505.08255","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","created":"2025-05-13","cited_by_count":2,"area":"safety"},{"id":"2602.17168","title":"BadCLIP++: Stealthy and Persistent Backdoors in Multimodal Contrastive Learning","created":"2026-02-19","cited_by_count":2,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2411.12914","title":"Trojan Cleansing with Neural Collapse","created":"2024-11-19","cited_by_count":1,"area":"safety"},{"id":"2603.10806","title":"Backdoor Directions in Vision Transformers","created":"2026-03-11","cited_by_count":1,"area":"safety"},{"id":"2604.18970","title":"Mechanistic Anomaly Detection via Functional Attribution","created":"2026-04-21","cited_by_count":1,"area":"safety"},{"id":"2508.00445","title":"AutoDebias: Automated Framework for Debiasing Text-to-Image Models","created":"2025-08-01","cited_by_count":0,"area":"safety"},{"id":"2508.05409","title":"From Detection to Correction: Backdoor-Resilient Face Recognition via Vision-Language Trigger Detection and Noise-Based Neutralization","created":"2025-08-07","cited_by_count":0,"area":"safety"},{"id":"2603.18538","title":"Beyond Passive Aggregation: Active Auditing and Topology-Aware Defense in Decentralized Federated Learning","created":"2026-03-19","cited_by_count":0,"area":"safety"},{"id":"2603.20108","title":"Trojan horse hunt in deep forecasting models: Insights from the European Space Agency competition","created":"2026-03-20","cited_by_count":0,"area":"safety"},{"id":"2606.14078","title":"Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning","created":"2026-06-12","cited_by_count":0,"area":"safety"},{"id":"2609.25579","title":"Rethinking Backdoor Repair Evaluation: Distinguishing Aggregate Clean Utility from Benign Performance Preservation","created":"2026-09-22","cited_by_count":0,"area":"safety"}],"next_cursor":null}