{"total":104,"rows":[{"id":"2305.04175","title":"Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoning","created":"2023-05-07","cited_by_count":92,"area":"diffusion"},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2306.15546","title":"When Foundation Model Meets Federated Learning: Motivations, Challenges, and Future Directions","created":"2023-06-27","cited_by_count":84,"area":null},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2306.06874","title":"VillanDiffusion: A Unified Backdoor Attack Framework for Diffusion Models","created":"2023-06-12","cited_by_count":68,"area":"diffusion"},{"id":"2303.01325","title":"A Pathway Towards Responsible AI Generated Content","created":"2023-03-02","cited_by_count":38,"area":null},{"id":"2307.16489","title":"BAGM: A Backdoor Attack for Manipulating Text-to-Image Generative Models","created":"2023-07-31","cited_by_count":37,"area":"safety"},{"id":"2401.04136","title":"The Stronger the Diffusion Model, the Easier the Backdoor: Data Poisoning to Induce Copyright Breaches Without Adjusting Finetuning Pipeline","created":"2024-01-07","cited_by_count":33,"area":"diffusion"},{"id":"2310.14480","title":"Attention-Enhancing Backdoor Attacks Against BERT-based Models","created":"2023-10-23","cited_by_count":32,"area":"safety"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2407.15811","title":"Stretching Each Dollar: Diffusion Training from Scratch on a Micro-Budget","created":"2024-07-22","cited_by_count":30,"area":"diffusion"},{"id":"2409.05294","title":"TERD: A Unified Framework for Safeguarding Diffusion Models Against Backdoors","created":"2024-09-09","cited_by_count":25,"area":"diffusion"},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2306.03436","title":"Intellectual Property Protection of Diffusion Models via the Watermark Diffusion Process","created":"2023-06-06","cited_by_count":19,"area":"diffusion"},{"id":"2402.02739","title":"DisDet: Exploring Detectability of Backdoor Attack on Diffusion Models","created":"2024-02-05","cited_by_count":17,"area":"diffusion"},{"id":"2312.13053","title":"Quantifying Bias in Text-to-Image Generative Models","created":"2023-12-20","cited_by_count":16,"area":null},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2308.10718","title":"Backdooring Textual Inversion for Concept Censorship","created":"2023-08-21","cited_by_count":14,"area":"diffusion"},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2412.01646","title":"Robust and Transferable Backdoor Attacks Against Deep Image Compression With Selective Frequency Prior","created":"2024-12-02","cited_by_count":11,"area":null},{"id":"2503.09669","title":"Silent Branding Attack: Trigger-free Data Poisoning Attack on Text-to-Image Diffusion Models","created":"2025-03-12","cited_by_count":11,"area":"diffusion"},{"id":"2310.10780","title":"Demystifying Poisoning Backdoor Attacks from a Statistical Perspective","created":"2023-10-16","cited_by_count":10,"area":null},{"id":"2311.02373","title":"From Trojan Horses to Castle Walls: Unveiling Bilateral Data Poisoning Effects in Diffusion Models","created":"2023-11-04","cited_by_count":9,"area":"diffusion"},{"id":"2406.00816","title":"Invisible Backdoor Attacks on Diffusion Models","created":"2024-06-02","cited_by_count":9,"area":"diffusion"},{"id":"2412.11441","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","created":"2024-12-16","cited_by_count":9,"area":"diffusion"},{"id":"2504.16907","title":"BadVideo: Stealthy Backdoor Attack against Text-to-Video Generation","created":"2025-04-23","cited_by_count":9,"area":"safety"},{"id":"2504.21072","title":"Erased but Not Forgotten: How Backdoors Compromise Concept Erasure","created":"2025-04-29","cited_by_count":9,"area":"diffusion"},{"id":"2310.10461","title":"Model Selection of Anomaly Detectors in the Absence of Labeled Validation Data","created":"2023-10-16","cited_by_count":8,"area":null},{"id":"2502.11798","title":"BackdoorDM: A Comprehensive Benchmark for Backdoor Learning on Diffusion Model","created":"2025-02-17","cited_by_count":8,"area":"diffusion"},{"id":"2301.13862","title":"Salient Conditional Diffusion for Defending Against Backdoor Attacks","created":"2023-01-31","cited_by_count":7,"area":"diffusion"},{"id":"2309.13166","title":"Invisible Watermarking for Audio Generation Diffusion Models","created":"2023-09-22","cited_by_count":7,"area":"diffusion"},{"id":"2407.10445","title":"Backdoor Attacks against Image-to-Image Networks","created":"2024-07-15","cited_by_count":7,"area":null},{"id":"2306.15755","title":"Adversarial Backdoor Attack by Naturalistic Data Poisoning on Trajectory Prediction in Autonomous Driving","created":"2023-06-27","cited_by_count":6,"area":null},{"id":"2308.04406","title":"XGBD: Explanation-Guided Graph Backdoor Detection","created":"2023-08-08","cited_by_count":6,"area":null},{"id":"2310.06372","title":"Leveraging Diffusion-Based Image Variations for Robust Training on Poisoned Data","created":"2023-10-10","cited_by_count":6,"area":"diffusion"},{"id":"2409.13945","title":"PureDiffusion: Using Backdoor to Counter Backdoor in Generative Diffusion Models","created":"2024-09-20","cited_by_count":6,"area":"diffusion"},{"id":"2502.20943","title":"BadRefSR: Backdoor Attacks Against Reference-based Image Super Resolution","created":"2025-02-28","cited_by_count":6,"area":null},{"id":"2505.08809","title":"MixBridge: Heterogeneous Image-to-Image Backdoor Attack through Mixture of Schr\\\"odinger Bridges","created":"2025-05-12","cited_by_count":6,"area":"diffusion"},{"id":"2301.04554","title":"Universal Detection of Backdoor Attacks via Density-based Clustering and Centroids Analysis","created":"2023-01-11","cited_by_count":5,"area":null},{"id":"2312.00057","title":"VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models","created":"2023-11-29","cited_by_count":5,"area":null},{"id":"2401.01911","title":"Backdoor Attack on Unpaired Medical Image-Text Foundation Models: A Pilot Study on MedCLIP","created":"2024-01-01","cited_by_count":5,"area":"safety"},{"id":"2406.05826","title":"PSBD: Prediction Shift Uncertainty Unlocks Backdoor Detection","created":"2024-06-09","cited_by_count":5,"area":null},{"id":"2310.08320","title":"Defending Our Privacy With Backdoors","created":"2023-10-12","cited_by_count":4,"area":null},{"id":"2402.18211","title":"Catastrophic Overfitting: A Potential Blessing in Disguise","created":"2024-02-28","cited_by_count":4,"area":null},{"id":"2406.09669","title":"Watch the Watcher! Backdoor Attacks on Security-Enhancing Diffusion Models","created":"2024-06-14","cited_by_count":4,"area":"diffusion"},{"id":"2406.14429","title":"CollaFuse: Collaborative Diffusion Models","created":"2024-06-20","cited_by_count":4,"area":"diffusion"},{"id":"2410.18866","title":"The Cat and Mouse Game: The Ongoing Arms Race Between Diffusion Models and Detection Methods","created":"2024-10-24","cited_by_count":4,"area":"diffusion"},{"id":"2504.14815","title":"What Lurks Within? Concept Auditing for Shared Diffusion Models at Scale","created":"2025-04-21","cited_by_count":4,"area":"diffusion"},{"id":"2509.16950","title":"Temporal Logic-Based Multi-Vehicle Backdoor Attacks against Offline RL Agents in End-to-end Autonomous Driving","created":"2025-09-21","cited_by_count":4,"area":"safety"},{"id":"2602.21977","title":"When LoRA Betrays: Backdooring Text-to-Image Models by Masquerading as Benign Adapters","created":"2026-02-25","cited_by_count":4,"area":"diffusion"},{"id":"2402.05967","title":"The last Dance : Robust backdoor attack via diffusion models and bayesian approach","created":"2024-02-05","cited_by_count":3,"area":"diffusion"},{"id":"2406.10719","title":"Trading Devil: Robust backdoor attack via Stochastic investment models and Bayesian approach","created":"2024-06-15","cited_by_count":3,"area":null},{"id":"2410.18267","title":"Backdoor in Seconds: Unlocking Vulnerabilities in Large Pre-trained Models via Model Editing","created":"2024-10-23","cited_by_count":3,"area":null},{"id":"2412.07249","title":"Buster: Implanting Semantic Backdoor into Text Encoder to Mitigate NSFW Content Generation","created":"2024-12-10","cited_by_count":3,"area":"safety"},{"id":"2502.19047","title":"A Dual-Purpose Framework for Backdoor Defense and Backdoor Amplification in Diffusion Models","created":"2025-02-26","cited_by_count":3,"area":"diffusion"},{"id":"2503.06340","title":"Backdoor Attacks on Discrete Graph Diffusion Models","created":"2025-03-08","cited_by_count":3,"area":"diffusion"},{"id":"2405.00466","title":"Lazy Layers to Make Fine-Tuned Diffusion Models More Traceable","created":"2024-05-01","cited_by_count":2,"area":"diffusion"},{"id":"2407.11372","title":"UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening","created":"2024-07-16","cited_by_count":2,"area":null},{"id":"2409.18897","title":"Detecting Dataset Abuse in Fine-Tuning Stable Diffusion Models for Text-to-Image Synthesis","created":"2024-09-27","cited_by_count":2,"area":"diffusion"},{"id":"2411.12389","title":"Combinational Backdoor Attack against Customized Text-to-Image Models","created":"2024-11-19","cited_by_count":2,"area":"diffusion"},{"id":"2411.13981","title":"On the Fairness, Diversity and Reliability of Text-to-Image Generative Models","created":"2024-11-21","cited_by_count":2,"area":null},{"id":"2503.18459","title":"Hiding Images in Diffusion Models by Editing Learned Score Functions","created":"2025-03-24","cited_by_count":2,"area":"diffusion"},{"id":"2504.18563","title":"Backdoor Defense in Diffusion Models via Spatial Attention Unlearning","created":"2025-04-21","cited_by_count":2,"area":"diffusion"},{"id":"2505.15175","title":"A Linear Approach to Data Poisoning","created":"2025-05-21","cited_by_count":2,"area":"safety"},{"id":"2508.18235","title":"Sealing The Backdoor: Unlearning Adversarial Text Triggers In Diffusion Models Using Knowledge Distillation","created":"2025-08-20","cited_by_count":2,"area":"diffusion"},{"id":"2602.22246","title":"Self-Purification Mitigates Backdoors in Multimodal Diffusion Language Models","created":"2026-02-24","cited_by_count":2,"area":"diffusion"},{"id":"2603.29328","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","created":"2026-03-31","cited_by_count":2,"area":null},{"id":"2406.15863","title":"EmoAttack: Emotion-to-Image Diffusion Models for Emotional Backdoor Generation","created":"2024-06-22","cited_by_count":1,"area":"diffusion"},{"id":"2410.22445","title":"Embedding Watermarks in Diffusion Process for Model Intellectual Property Protection","created":"2024-10-29","cited_by_count":1,"area":"diffusion"},{"id":"2411.14681","title":"TrojanEdit: Multimodal Backdoor Attack Against Image Editing Model","created":"2024-11-22","cited_by_count":1,"area":"diffusion"},{"id":"2412.16512","title":"TrojFlow: Flow Models are Natural Targets for Trojan Attacks","created":"2024-12-21","cited_by_count":1,"area":"safety"},{"id":"2502.20650","title":"Gungnir: Exploiting Stylistic Features in Images for Backdoor Attacks on Diffusion Models","created":"2025-02-28","cited_by_count":1,"area":"diffusion"},{"id":"2506.04879","title":"Invisible Backdoor Triggers in Image Editing Model via Deep Watermarking","created":"2025-06-05","cited_by_count":1,"area":"diffusion"},{"id":"2508.01605","title":"Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models","created":"2025-08-03","cited_by_count":1,"area":"diffusion"},{"id":"2512.15769","title":"Data-Chain Backdoor: Do You Trust Diffusion Models as Generative Data Supplier?","created":"2025-12-12","cited_by_count":1,"area":"diffusion"},{"id":"2603.01019","title":"BadRSSD: Backdoor Attacks on Regularized Self-Supervised Diffusion Models","created":"2026-03-01","cited_by_count":1,"area":"diffusion"},{"id":"2603.04859","title":"Osmosis Distillation: Model Hijacking with the Fewest Samples","created":"2026-03-05","cited_by_count":1,"area":null},{"id":"2603.05921","title":"BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviation","created":"2026-03-06","cited_by_count":1,"area":"safety"},{"id":"2605.19227","title":"Token by Token, Compromised: Backdoor Vulnerabilities in Unified Autoregressive Models","created":"2026-05-19","cited_by_count":1,"area":"safety"},{"id":"2311.09680","title":"Trustworthy Large Models in Vision: A Survey","created":"2023-11-16","cited_by_count":0,"area":null},{"id":"2311.12858","title":"RAEDiff: Denoising Diffusion Probabilistic Models Based Reversible Adversarial Examples Self-Generation and Self-Recovery","created":"2023-10-25","cited_by_count":0,"area":"diffusion"},{"id":"2404.02530","title":"Manipulating and Mitigating Generative Model Biases without Retraining","created":"2024-04-03","cited_by_count":0,"area":"safety"},{"id":"2504.00952","title":"Personalized Federated Training of Diffusion Models with Privacy Guarantees","created":"2025-04-01","cited_by_count":0,"area":"diffusion"},{"id":"2505.03084","title":"Adversarial Attacks in Multimodal Systems: A Practitioner's Survey","created":"2025-05-06","cited_by_count":0,"area":null},{"id":"2506.02665","title":"Beyond Invisibility: Learning Robust Visible Watermarks for Stronger Copyright Protection","created":"2025-06-03","cited_by_count":0,"area":null},{"id":"2508.03221","title":"BadBlocks: Low-Cost and Stealthy Backdoor Attacks Tailored for Text-to-Image Diffusion Models","created":"2025-08-05","cited_by_count":0,"area":"diffusion"},{"id":"2510.20792","title":"BadGraph: A Backdoor Attack Against Latent Diffusion Model for Text-Guided Graph Generation","created":"2025-10-23","cited_by_count":0,"area":"diffusion"},{"id":"2602.01765","title":"Backdoor Sentinel: Detecting and Detoxifying Backdoors in Diffusion Models via Temporal Noise Consistency","created":"2026-02-02","cited_by_count":0,"area":"diffusion"},{"id":"2602.04898","title":"Semantic-level Backdoor Attack against Text-to-Image Diffusion Models","created":"2026-02-03","cited_by_count":0,"area":"diffusion"},{"id":"2603.04064","title":"Tuning Just Enough: Lightweight Backdoor Attacks on Multi-Encoder Diffusion Models","created":"2026-03-04","cited_by_count":0,"area":"diffusion"},{"id":"2603.06508","title":"When One Modality Rules Them All: Backdoor Modality Collapse in Multimodal Diffusion Models","created":"2026-03-06","cited_by_count":0,"area":"diffusion"},{"id":"2604.24350","title":"Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training","created":"2026-04-27","cited_by_count":0,"area":null},{"id":"2605.00935","title":"Watch Your Step: Information Injection in Diffusion Models via Shadow Timestep Embedding","created":"2026-05-01","cited_by_count":0,"area":"diffusion"},{"id":"2605.09397","title":"BadDLM: Backdooring Diffusion Language Models with Diverse Targets","created":"2026-05-10","cited_by_count":0,"area":"diffusion"},{"id":"2605.19262","title":"Backdooring Masked Diffusion Language Models","created":"2026-05-19","cited_by_count":0,"area":"diffusion"},{"id":"2605.19698","title":"Awakening the Hydra: Stabilizing Multi-Concept Backdoor Injection in Text-to-Image Diffusion Models","created":"2026-05-19","cited_by_count":0,"area":"diffusion"},{"id":"2606.22837","title":"CLIP-guided Diffusion Model for Backdoor Generation in Sensor-based Human Activity Recognition","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2606.23362","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","created":"2026-06-22","cited_by_count":0,"area":"diffusion"},{"id":"2606.29759","title":"GoodDiffusion: Proactive Copyright Protection for Diffusion Bridge Models via Learnable Sample-specific Signatures","created":"2026-06-29","cited_by_count":0,"area":"safety"},{"id":"2608.22824","title":"DIME: Query-Efficient Framework for Membership Inference on Diffusion Models","created":"2026-08-24","cited_by_count":0,"area":"diffusion"}],"next_cursor":"100"}