{"total":24,"rows":[{"id":"2405.16134","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","created":"2024-05-25","cited_by_count":28,"area":null},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19,"area":null},{"id":"2312.08890","title":"Defenses in Adversarial Machine Learning: A Survey","created":"2023-12-13","cited_by_count":14,"area":null},{"id":"2405.16112","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","created":"2024-05-25","cited_by_count":11,"area":null},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null},{"id":"2501.05928","title":"Towards Backdoor Stealthiness in Model Parameter Space","created":"2025-01-10","cited_by_count":7,"area":null},{"id":"2405.14781","title":"Unified Neural Backdoor Removal with Only Few Clean Samples through Unlearning and Relearning","created":"2024-05-23","cited_by_count":5,"area":null},{"id":"2408.15591","title":"VFLIP: A Backdoor Defense for Vertical Federated Learning via Identification and Purification","created":"2024-08-28","cited_by_count":4,"area":null},{"id":"2503.09712","title":"Revisiting Backdoor Attacks on Time Series Classification in the Frequency Domain","created":"2025-03-12","cited_by_count":4,"area":null},{"id":"2312.07955","title":"Erasing Self-Supervised Learning Backdoor by Cluster Activation Masking","created":"2023-12-13","cited_by_count":2,"area":null},{"id":"2407.11372","title":"UNIT: Backdoor Mitigation via Automated Neural Distribution Tightening","created":"2024-07-16","cited_by_count":2,"area":null},{"id":"2412.03441","title":"PBP: Post-training Backdoor Purification for Malware Classifiers","created":"2024-12-04","cited_by_count":2,"area":null},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2412.20476","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","created":"2024-12-29","cited_by_count":1,"area":null},{"id":"2502.18520","title":"Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features","created":"2025-02-23","cited_by_count":1,"area":null},{"id":"2509.03179","title":"AutoDetect: Designing an Autoencoder-based Detection Method for Poisoning Attacks on Object Detection Applications in the Military Domain","created":"2025-09-03","cited_by_count":1,"area":null},{"id":"2603.13864","title":"Inevitable Encounters: Backdoor Attacks Involving Lossy Compression","created":"2026-03-14","cited_by_count":1,"area":null},{"id":"2401.15002","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-01-26","cited_by_count":0,"area":null},{"id":"2503.20925","title":"Prototype Guided Backdoor Defense","created":"2025-03-26","cited_by_count":0,"area":null},{"id":"2504.05902","title":"Defending against Backdoor Attacks via Module Switching","created":"2025-04-08","cited_by_count":0,"area":null},{"id":"2604.24350","title":"Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training","created":"2026-04-27","cited_by_count":0,"area":null},{"id":"2605.21146","title":"Detecting Trojaned DNNs via Spectral Regression Analysis","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2607.26099","title":"Lilith: Backdoor Generalization under Training-Inference Trigger Shift","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2610.06994","title":"TARE: Weigh a Never-Poisoned Twin Before Reading Backdoor-Defense Costs","created":"2026-10-04","cited_by_count":0,"area":null}],"next_cursor":null}