{"total":97,"rows":[{"id":"2311.12075","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","created":"2023-11-20","cited_by_count":115,"area":"safety"},{"id":"2310.14942","title":"Domain Watermark: Effective and Harmless Dataset Copyright Protection is Closed at Hand","created":"2023-10-09","cited_by_count":57,"area":null},{"id":"2305.06360","title":"Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy","created":"2023-05-10","cited_by_count":51,"area":"safety"},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2405.09786","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","created":"2024-05-16","cited_by_count":39,"area":null},{"id":"2303.12512","title":"Sibling-Attack: Rethinking Transferable Adversarial Attacks against Face Recognition","created":"2023-03-22","cited_by_count":34,"area":null},{"id":"2408.07362","title":"BadMerging: Backdoor Attacks Against Model Merging","created":"2024-08-14","cited_by_count":34,"area":null},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2306.06209","title":"Backdoor Attack with Sparse and Invisible Trigger","created":"2023-05-11","cited_by_count":20,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2506.16447","title":"Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models","created":"2025-06-19","cited_by_count":19,"area":"alignment"},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2404.01101","title":"UFID: A Unified Framework for Input-level Backdoor Detection on Diffusion Models","created":"2024-04-01","cited_by_count":14,"area":"diffusion"},{"id":"2503.15293","title":"Test-Time Backdoor Detection for Object Detection Models","created":"2025-03-19","cited_by_count":14,"area":null},{"id":"2403.10717","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","created":"2024-03-15","cited_by_count":13,"area":null},{"id":"2411.16746","title":"LoBAM: LoRA-Based Backdoor Attack on Model Merging","created":"2024-11-23","cited_by_count":12,"area":null},{"id":"2308.12439","title":"BaDExpert: Extracting Backdoor Functionality for Accurate Backdoor Input Detection","created":"2023-08-23","cited_by_count":11,"area":null},{"id":"2406.00588","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","created":"2024-06-02","cited_by_count":11,"area":null},{"id":"2307.15860","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","created":"2023-07-29","cited_by_count":10,"area":null},{"id":"2312.12724","title":"Progressive Poisoned Data Isolation for Training-time Backdoor Defense","created":"2023-12-20","cited_by_count":10,"area":null},{"id":"2309.06981","title":"MASTERKEY: Practical Backdoor Attack Against Speaker Verification Systems","created":"2023-09-13","cited_by_count":8,"area":null},{"id":"2405.19928","title":"BAN: Detecting Backdoors Activated by Adversarial Neuron Noise","created":"2024-05-30","cited_by_count":8,"area":null},{"id":"2503.06453","title":"Efficient Input-level Backdoor Defense on Text-to-Image Synthesis via Neuron Activation Variation","created":"2025-03-09","cited_by_count":8,"area":"diffusion"},{"id":"2507.05622","title":"DATABench: Evaluating Dataset Auditing in Deep Learning from an Adversarial Perspective","created":"2025-07-08","cited_by_count":8,"area":null},{"id":"2411.19479","title":"FLARE: Toward Universal Dataset Purification against Backdoor Attacks","created":"2024-11-29","cited_by_count":7,"area":null},{"id":"2501.05928","title":"Towards Backdoor Stealthiness in Model Parameter Space","created":"2025-01-10","cited_by_count":7,"area":null},{"id":"2502.13593","title":"Toward Robust Non-Transferable Learning: A Survey and Benchmark","created":"2025-02-19","cited_by_count":7,"area":null},{"id":"2505.23561","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2503.05445","title":"Are Your LLM-based Text-to-SQL Models Secure? Exploring SQL Injection via Backdoor Attacks","created":"2025-03-07","cited_by_count":6,"area":"safety"},{"id":"2306.08313","title":"A Proxy Attack-Free Strategy for Practically Improving the Poisoning Efficiency in Backdoor Attacks","created":"2023-06-14","cited_by_count":5,"area":null},{"id":"2309.06960","title":"PhantomSound: Black-Box, Query-Efficient Audio Adversarial Attack via Split-Second Phoneme Injection","created":"2023-09-13","cited_by_count":5,"area":null},{"id":"2405.10612","title":"Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers","created":"2024-05-17","cited_by_count":5,"area":"safety"},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2406.05826","title":"PSBD: Prediction Shift Uncertainty Unlocks Backdoor Detection","created":"2024-06-09","cited_by_count":5,"area":null},{"id":"2503.21305","title":"DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data","created":"2025-03-27","cited_by_count":5,"area":null},{"id":"2509.23871","title":"Taught Well Learned Ill: Towards Distillation-conditional Backdoor Attack","created":"2025-09-28","cited_by_count":5,"area":"distill"},{"id":"2312.04584","title":"Towards Sample-specific Backdoor Attack with Clean Labels via Attribute Trigger","created":"2023-12-03","cited_by_count":4,"area":null},{"id":"2407.19203","title":"Clean-Label Physical Backdoor Attacks with Data Distillation","created":"2024-07-27","cited_by_count":4,"area":null},{"id":"2402.17465","title":"Model X-ray:Detecting Backdoored Models via Decision Boundary","created":"2024-02-27","cited_by_count":3,"area":null},{"id":"2410.18267","title":"Backdoor in Seconds: Unlocking Vulnerabilities in Large Pre-trained Models via Model Editing","created":"2024-10-23","cited_by_count":3,"area":null},{"id":"2411.04811","title":"Defending Deep Regression Models against Backdoor Attacks","created":"2024-11-07","cited_by_count":3,"area":null},{"id":"2411.11006","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","created":"2024-11-17","cited_by_count":3,"area":"safety"},{"id":"2411.11525","title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization","created":"2024-11-18","cited_by_count":3,"area":null},{"id":"2504.11990","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","created":"2025-04-16","cited_by_count":3,"area":"safety"},{"id":"2601.19448","title":"From Internal Diagnosis to External Auditing: A VLM-Driven Paradigm for Data-Free Online Backdoor Defense","created":"2026-01-27","cited_by_count":3,"area":"safety"},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2503.08829","title":"Seal Your Backdoor with Variational Defense","created":"2025-03-11","cited_by_count":2,"area":null},{"id":"2505.14531","title":"SifterNet: A Generalized and Model-Agnostic Trigger Purification Approach","created":"2025-05-20","cited_by_count":2,"area":"safety"},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2510.14299","title":"TED++: Submanifold-Aware Backdoor Detection via Layerwise Tubular-Neighbourhood Screening","created":"2025-10-16","cited_by_count":2,"area":null},{"id":"2602.17168","title":"BadCLIP++: Stealthy and Persistent Backdoors in Multimodal Contrastive Learning","created":"2026-02-19","cited_by_count":2,"area":"safety"},{"id":"2402.08695","title":"Game of Trojans: Adaptive Adversaries Against Output-based Trojaned-Model Detectors","created":"2024-02-12","cited_by_count":1,"area":null},{"id":"2411.09540","title":"Prompting the Unseen: Detecting Hidden Backdoors in Black-Box Models","created":"2024-11-14","cited_by_count":1,"area":"safety"},{"id":"2411.14449","title":"Unlearn to Relearn Backdoors: Deferred Backdoor Functionality Attacks on Deep Learning Models","created":"2024-11-10","cited_by_count":1,"area":null},{"id":"2411.17283","title":"BadScan: An Architectural Backdoor Attack on Visual State Space Models","created":"2024-11-26","cited_by_count":1,"area":null},{"id":"2412.08755","title":"Proactive Adversarial Defense: Harnessing Prompt Tuning in Vision-Language Models to Detect Unseen Backdoored Images","created":"2024-12-11","cited_by_count":1,"area":"mllm"},{"id":"2412.20476","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","created":"2024-12-29","cited_by_count":1,"area":null},{"id":"2502.18520","title":"Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features","created":"2025-02-23","cited_by_count":1,"area":null},{"id":"2503.09095","title":"Backdooring CLIP through Concept Confusion","created":"2025-03-12","cited_by_count":1,"area":"safety"},{"id":"2505.19821","title":"Poison in the Well: Feature Embedding Disruption in Backdoor Attacks","created":"2025-05-26","cited_by_count":1,"area":null},{"id":"2602.10780","title":"Kill it with FIRE: On Leveraging Latent Space Directions for Runtime Backdoor Mitigation in Deep Neural Networks","created":"2026-02-11","cited_by_count":1,"area":null},{"id":"2603.18103","title":"STEP: Detecting Audio Backdoor Attacks via Stability-based Trigger Exposure Profiling","created":"2026-03-18","cited_by_count":1,"area":null},{"id":"2604.18970","title":"Mechanistic Anomaly Detection via Functional Attribution","created":"2026-04-21","cited_by_count":1,"area":"safety"},{"id":"2606.12896","title":"PolicyGuard: Towards Test-time and Step-level Adversary (Backdoor) Defense for Reinforcement Learning Agent","created":"2026-06-11","cited_by_count":1,"area":"safety"},{"id":"2607.26849","title":"ToxScreen: Detecting Whether an LLM Has Been Poisoned","created":"2026-07-29","cited_by_count":1,"area":"safety"},{"id":"2401.15002","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-01-26","cited_by_count":0,"area":null},{"id":"2406.13073","title":"Let the Noise Speak: Harnessing Noise for a Unified Defense Against Adversarial and Backdoor Attacks","created":"2024-06-18","cited_by_count":0,"area":null},{"id":"2412.10681","title":"One Pixel is All I Need","created":"2024-12-14","cited_by_count":0,"area":"safety"},{"id":"2412.16905","title":"Backdoor Attack with Invisible Triggers Based on Model Architecture Modification","created":"2024-12-22","cited_by_count":0,"area":null},{"id":"2504.21052","title":"SFIBA: Spatial-based Full-target Invisible Backdoor Attacks","created":"2025-04-29","cited_by_count":0,"area":null},{"id":"2505.12100","title":"Improving Fairness in LLMs Through Testing-Time Adversaries","created":"2025-05-17","cited_by_count":0,"area":null},{"id":"2506.01444","title":"Variance-Based Defense Against Blended Backdoor Attacks","created":"2025-06-02","cited_by_count":0,"area":null},{"id":"2510.19145","title":"HAMLOCK: HArdware-Model LOgically Combined attacK","created":"2025-10-22","cited_by_count":0,"area":"safety"},{"id":"2511.12046","title":"BackWeak: Backdooring Knowledge Distillation Simply with Weak Triggers and Fine-tuning","created":"2025-11-15","cited_by_count":0,"area":"distill"},{"id":"2511.13356","title":"Enhancing All-to-X Backdoor Attacks with Optimized Target Class Mapping","created":"2025-11-17","cited_by_count":0,"area":null},{"id":"2512.10402","title":"The Eminence in Shadow: Exploiting Feature Boundary Ambiguity for Robust Backdoor Attacks","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2601.03805","title":"Detecting Semantic Backdoors in a Mystery Shopping Scenario","created":"2026-01-07","cited_by_count":0,"area":null},{"id":"2602.00183","title":"RPP: A Certified Poisoned-Sample Detection Framework for Backdoor Attacks under Dataset Imbalance","created":"2026-01-30","cited_by_count":0,"area":null},{"id":"2602.01765","title":"Backdoor Sentinel: Detecting and Detoxifying Backdoors in Diffusion Models via Temporal Noise Consistency","created":"2026-02-02","cited_by_count":0,"area":"diffusion"},{"id":"2603.00711","title":"IU: Imperceptible Universal Backdoor Attack","created":"2026-02-28","cited_by_count":0,"area":null},{"id":"2604.09101","title":"CLIP-Inspector: Model-Level Backdoor Detection for Prompt-Tuned CLIP via OOD Trigger Inversion","created":"2026-04-10","cited_by_count":0,"area":"mllm"},{"id":"2604.12446","title":"Scaling Exposes the Trigger: Input-Level Backdoor Detection in Text-to-Image Diffusion Models via Cross-Attention Scaling","created":"2026-04-14","cited_by_count":0,"area":"diffusion"},{"id":"2605.18907","title":"Lightweight and Fast Backdoor Model Detection","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.18908","title":"Fast and Lightweight Backdoor Detection via Head Random Probing","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2605.22365","title":"TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting","created":"2026-05-21","cited_by_count":0,"area":null},{"id":"2606.15730","title":"InstantForget: Update-Free Backdoor Unlearning with Inference-Time Feature Reset","created":"2026-06-14","cited_by_count":0,"area":null},{"id":"2607.01702","title":"Pmeta-TLA: Backdoor Attacks for Speech Classification Models via Meta-Learning with Timbre Leakage Attack","created":"2026-07-02","cited_by_count":0,"area":"safety"},{"id":"2607.01729","title":"DRL-CLBA: A Clean Label Backdoor Attack for Speech Classification via DDPG Reinforcement Learning","created":"2026-07-02","cited_by_count":0,"area":"safety"},{"id":"2607.26099","title":"Lilith: Backdoor Generalization under Training-Inference Trigger Shift","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2608.10959","title":"Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs","created":"2026-08-11","cited_by_count":0,"area":"mllm"},{"id":"2609.03139","title":"Beyond Small Patches: Black-Box Detection and Purification of Diverse Backdoor Triggers","created":"2026-09-02","cited_by_count":0,"area":null},{"id":"2610.13051","title":"Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}