{"total":12,"rows":[{"id":"2406.13433","title":"Certification for Differentially Private Prediction in Gradient-Based Training","created":"2024-06-19","cited_by_count":7,"area":null},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2512.01899","title":"Provably Safe Model Updates","created":"2025-12-01","cited_by_count":3,"area":null},{"id":"2604.22746","title":"Relaxation-Informed Training of Neural Network Surrogate Models","created":"2026-04-24","cited_by_count":2,"area":null},{"id":"2602.09757","title":"Towards Poisoning Robustness Certification for Natural Language Generation","created":"2026-02-10","cited_by_count":1,"area":null},{"id":"2407.14573","title":"Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimization","created":"2024-07-21","cited_by_count":0,"area":null},{"id":"2409.13770","title":"A constrained optimization approach to improve robustness of neural networks","created":"2024-09-18","cited_by_count":0,"area":null},{"id":"2412.10186","title":"MIBP-Cert: Certified Training against Data Perturbations with Mixed-Integer Bilinear Programs","created":"2024-12-13","cited_by_count":0,"area":null},{"id":"2604.11416","title":"Exact Certification of Neural Networks and Partition Aggregation Ensembles against Label Poisoning","created":"2026-04-13","cited_by_count":0,"area":null},{"id":"2605.21780","title":"Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy","created":"2026-05-20","cited_by_count":0,"area":null},{"id":"2606.09746","title":"Hybrid Robustness Verification for Spatio-Temporal Neural Networks","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2610.06238","title":"Certification-Enhanced Generalization Bounds","created":"2026-10-05","cited_by_count":0,"area":null}],"next_cursor":null}