{"total":64,"rows":[{"id":"2311.12075","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","created":"2023-11-20","cited_by_count":115,"area":"safety"},{"id":"2311.16194","title":"BadCLIP: Trigger-Aware Prompt Learning for Backdoor Attacks on CLIP","created":"2023-11-26","cited_by_count":67,"area":"mllm"},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43,"area":null},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37,"area":null},{"id":"2310.01875","title":"Towards Stable Backdoor Purification through Feature Shift Tuning","created":"2023-10-03","cited_by_count":32,"area":null},{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2502.12202","title":"To Think or Not to Think: Exploring the Unthinking Vulnerability in Large Reasoning Models","created":"2025-02-16","cited_by_count":22,"area":"lr"},{"id":"2505.01976","title":"A Survey on Privacy Risks and Protection in Large Language Models","created":"2025-05-04","cited_by_count":21,"area":"safety"},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2410.13910","title":"Mitigating the Backdoor Effect for Multi-Task Model Merging via Safety-Aware Subspace","created":"2024-10-17","cited_by_count":14,"area":null},{"id":"2405.16112","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","created":"2024-05-25","cited_by_count":11,"area":null},{"id":"2406.00588","title":"Generalization Bound and New Algorithm for Clean-Label Backdoor Attack","created":"2024-06-02","cited_by_count":11,"area":null},{"id":"2405.19928","title":"BAN: Detecting Backdoors Activated by Adversarial Neuron Noise","created":"2024-05-30","cited_by_count":8,"area":null},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null},{"id":"2501.05928","title":"Towards Backdoor Stealthiness in Model Parameter Space","created":"2025-01-10","cited_by_count":7,"area":null},{"id":"2511.07210","title":"Breaking the Stealth-Potency Trade-off in Clean-Image Backdoors with Generative Trigger Optimization","created":"2025-11-10","cited_by_count":7,"area":"safety"},{"id":"2405.20291","title":"Unveiling and Mitigating Backdoor Vulnerabilities based on Unlearning Weight Changes and Backdoor Activeness","created":"2024-05-30","cited_by_count":6,"area":null},{"id":"2504.11182","title":"Exploring Backdoor Attack and Defense for LLM-empowered Recommendations","created":"2025-04-15","cited_by_count":6,"area":"safety"},{"id":"2307.07328","title":"Boosting Backdoor Attack with A Learnable Poisoning Sample Selection Strategy","created":"2023-07-14","cited_by_count":5,"area":null},{"id":"2407.10825","title":"Wicked Oddities: Selectively Poisoning for Effective Clean-Label Backdoor Attacks","created":"2024-07-15","cited_by_count":4,"area":null},{"id":"2412.00727","title":"Perturb and Recover: Fine-tuning for Effective Backdoor Removal from CLIP","created":"2024-12-01","cited_by_count":4,"area":"mllm"},{"id":"2407.10052","title":"Augmented Neural Fine-Tuning for Efficient Backdoor Purification","created":"2024-07-14","cited_by_count":3,"area":null},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2411.11525","title":"Reliable Poisoned Sample Detection against Backdoor Attacks Enhanced by Sharpness Aware Minimization","created":"2024-11-18","cited_by_count":3,"area":null},{"id":"2504.11990","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","created":"2025-04-16","cited_by_count":3,"area":"safety"},{"id":"2407.11372","title":"UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening","created":"2024-07-16","cited_by_count":2,"area":null},{"id":"2412.03441","title":"PBP: Post-training Backdoor Purification for Malware Classifiers","created":"2024-12-04","cited_by_count":2,"area":null},{"id":"2505.22829","title":"Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergies","created":"2025-05-28","cited_by_count":2,"area":null},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2405.03918","title":"Unlearning Backdoor Attacks through Gradient-Based Model Pruning","created":"2024-05-07","cited_by_count":1,"area":null},{"id":"2405.17750","title":"Magnitude-based Neuron Pruning for Backdoor Defens","created":"2024-05-28","cited_by_count":1,"area":null},{"id":"2408.11679","title":"BadVim: Unveiling Backdoor Threats in Visual State Space Model","created":"2024-08-21","cited_by_count":1,"area":null},{"id":"2409.12072","title":"PAD-FT: A Lightweight Defense for Backdoor Attacks via Data Purification and Fine-Tuning","created":"2024-09-18","cited_by_count":1,"area":null},{"id":"2411.12914","title":"Trojan Cleansing with Neural Collapse","created":"2024-11-19","cited_by_count":1,"area":"safety"},{"id":"2412.20476","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","created":"2024-12-29","cited_by_count":1,"area":null},{"id":"2502.18520","title":"Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features","created":"2025-02-23","cited_by_count":1,"area":null},{"id":"2509.15497","title":"Backdoor Mitigation via Invertible Pruning Masks","created":"2025-09-19","cited_by_count":1,"area":null},{"id":"2510.01157","title":"Where Do Backdoors Live? A Component-Level Analysis of Backdoor Propagation in Speech Language Models","created":"2025-10-01","cited_by_count":1,"area":"safety"},{"id":"2601.21066","title":"BadDet+: Robust Backdoor Attacks for Object Detection","created":"2026-01-28","cited_by_count":1,"area":null},{"id":"2401.15002","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-01-26","cited_by_count":0,"area":null},{"id":"2405.16488","title":"Partial train and isolate, mitigate backdoor attack","created":"2024-05-26","cited_by_count":0,"area":null},{"id":"2408.08655","title":"FLAIN: Mitigating Backdoor Attacks in Federated Learning via Flipping Weight Updates of Low-Activation Input Neurons","created":"2024-08-16","cited_by_count":0,"area":null},{"id":"2408.15861","title":"Fusing Pruned and Backdoored Models: Optimal Transport-based Data-free Backdoor Mitigation","created":"2024-08-28","cited_by_count":0,"area":null},{"id":"2412.07511","title":"Stealthy and Robust Backdoor Attack against 3D Point Clouds through Additional Point Features","created":"2024-12-10","cited_by_count":0,"area":null},{"id":"2502.10490","title":"A Robust Attack: Displacement Backdoor Attack","created":"2025-02-14","cited_by_count":0,"area":null},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2505.04015","title":"MergeGuard: Efficient Thwarting of Trojan Attacks in Machine Learning Models","created":"2025-05-06","cited_by_count":0,"area":null},{"id":"2508.00445","title":"AutoDebias: Automated Framework for Debiasing Text-to-Image Models","created":"2025-08-01","cited_by_count":0,"area":"safety"},{"id":"2508.01932","title":"Proactive Disentangled Modeling of Trigger-Object Pairings for Backdoor Defense","created":"2025-08-03","cited_by_count":0,"area":null},{"id":"2508.05404","title":"NT-ML: Backdoor Defense via Non-target Label Training and Mutual Learning","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2512.10402","title":"The Eminence in Shadow: Exploiting Feature Boundary Ambiguity for Robust Backdoor Attacks","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2605.01298","title":"Checkerboard: Closed-Form and Data-Independent Trigger Design for Clean-Label Backdoor Attacks","created":"2026-05-02","cited_by_count":0,"area":null},{"id":"2605.05928","title":"Backdoor Mitigation in Object Detection via Adversarial Fine-Tuning","created":"2026-05-07","cited_by_count":0,"area":null},{"id":"2605.22365","title":"TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting","created":"2026-05-21","cited_by_count":0,"area":null},{"id":"2605.27809","title":"Density-aware Sample-specific Attack","created":"2026-05-27","cited_by_count":0,"area":"safety"},{"id":"2606.02947","title":"BYORn: Bootstrap Your Own Responses to Defend Large Vision-Language Models Against Backdoor Attacks","created":"2026-06-01","cited_by_count":0,"area":"mllm"},{"id":"2607.25502","title":"Anti-Backdoor Coreset Selection via Cumulative Entropy","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2608.11295","title":"Backdoor Decontamination Dynamics in LLM Agents","created":"2026-08-11","cited_by_count":0,"area":"agents"},{"id":"2609.00788","title":"Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain","created":"2026-09-01","cited_by_count":0,"area":"mllm"},{"id":"2609.06346","title":"Robust Dynamic Expansion for Continual Learning under Backdoor Attacks via Purification and Selective Recovery","created":"2026-09-06","cited_by_count":0,"area":"moe"},{"id":"2609.25579","title":"Rethinking Backdoor Repair Evaluation: Distinguishing Aggregate Clean Utility from Benign Performance Preservation","created":"2026-09-22","cited_by_count":0,"area":"safety"},{"id":"2610.06994","title":"TARE: Weigh a Never-Poisoned Twin Before Reading Backdoor-Defense Costs","created":"2026-10-04","cited_by_count":0,"area":null}],"next_cursor":null}