{"list":"other","total":55,"rows":[{"id":"2212.04089","title":"Editing Models with Task Arithmetic","created":"2022-12-08","cited_by_count":1120},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"1712.05526","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","created":"2017-12-15","cited_by_count":1055},{"id":"1805.12185","title":"Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks","created":"2018-05-30","cited_by_count":580},{"id":"2304.15004","title":"Are Emergent Abilities of Large Language Models a Mirage?","created":"2023-04-28","cited_by_count":523},{"id":"2012.03816","title":"Invisible Backdoor Attack with Sample-Specific Triggers","created":"2020-12-07","cited_by_count":353},{"id":"2007.02343","title":"Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks","created":"2020-07-05","cited_by_count":349},{"id":"2003.08505","title":"A Metric Learning Reality Check","created":"2020-03-18","cited_by_count":321},{"id":"2010.08138","title":"Input-Aware Dynamic Backdoor Attack","created":"2020-10-16","cited_by_count":313},{"id":"2110.11571","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data","created":"2021-10-22","cited_by_count":263},{"id":"1902.11237","title":"A new Backdoor Attack in CNNs by training set corruption without label poisoning","created":"2019-02-12","cited_by_count":242},{"id":"1907.06902","title":"Are We Really Making Much Progress? A Worrying Analysis of Recent Neural Recommendation Approaches","created":"2019-07-16","cited_by_count":185},{"id":"2410.07163","title":"Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning","created":"2024-10-09","cited_by_count":172},{"id":"2110.03735","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","created":"2021-10-07","cited_by_count":166},{"id":"2104.03413","title":"Rethinking the Backdoor Attacks' Triggers: A Frequency Perspective","created":"2021-04-07","cited_by_count":161},{"id":"2005.00060","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","created":"2020-04-30","cited_by_count":132},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129},{"id":"2511.04703","title":"Measuring what Matters: Construct Validity in Large Language Model Benchmarks","created":"2025-11-03","cited_by_count":119},{"id":"2406.11813","title":"How Do Large Language Models Acquire Factual Knowledge During Pretraining?","created":"2024-06-17","cited_by_count":90},{"id":"2205.13383","title":"BppAttack: Stealthy and Efficient Trojan Attacks against Deep Neural Networks via Image Quantization and Contrastive Adversarial Learning","created":"2022-05-26","cited_by_count":86},{"id":"2208.03111","title":"Data-free Backdoor Removal based on Channel Lipschitzness","created":"2022-08-05","cited_by_count":79},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72},{"id":"2504.20879","title":"The Leaderboard Illusion","created":"2025-04-29","cited_by_count":66},{"id":"2304.11823","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","created":"2023-04-24","cited_by_count":64},{"id":"2305.14876","title":"Reconstructive Neuron Pruning for Backdoor Defense","created":"2023-05-24","cited_by_count":59},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57},{"id":"2307.10562","title":"Shared Adversarial Unlearning: Backdoor Mitigation by Unlearning Shared Adversarial Examples","created":"2023-07-20","cited_by_count":43},{"id":"2306.16697","title":"Neural Polarizer: A Lightweight and Effective Backdoor Defense via Purifying Poisoned Features","created":"2023-06-29","cited_by_count":37},{"id":"2310.01875","title":"Towards Stable Backdoor Purification through Feature Shift Tuning","created":"2023-10-03","cited_by_count":32},{"id":"2307.00682","title":"Tools for Verifying Neural Models' Training Data","created":"2023-07-02","cited_by_count":22},{"id":"2407.19845","title":"BackdoorBench: A Comprehensive Benchmark and Analysis of Backdoor Learning","created":"2024-07-29","cited_by_count":19},{"id":"2503.06991","title":"Are We Truly Forgetting? A Critical Re-examination of Machine Unlearning Evaluation Protocols","created":"2025-03-10","cited_by_count":18},{"id":"2601.03986","title":"Benchmark^2: Systematic Evaluation of LLM Benchmarks","created":"2026-01-07","cited_by_count":13},{"id":"2405.16112","title":"Mitigating Backdoor Attack by Injecting Proactive Defensive Backdoor","created":"2024-05-25","cited_by_count":11},{"id":"2510.17776","title":"Mapping Post-Training Forgetting in Language Models at Scale","created":"2025-10-20","cited_by_count":11},{"id":"2507.05113","title":"CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation","created":"2025-07-07","cited_by_count":10},{"id":"2409.00399","title":"Rethinking Backdoor Detection Evaluation for Language Models","created":"2024-08-31","cited_by_count":9},{"id":"2603.13461","title":"Purifying Generative LLMs from Backdoors without Prior Knowledge or Clean Reference","created":"2026-03-13","cited_by_count":7},{"id":"2405.20291","title":"Unveiling and Mitigating Backdoor Vulnerabilities based on Unlearning Weight Changes and Backdoor Activeness","created":"2024-05-30","cited_by_count":6},{"id":"2604.13627","title":"(How) Learning Rates Regulate Catastrophic Overtraining","created":"2026-04-15","cited_by_count":6},{"id":"2102.10369","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","created":"2021-02-20","cited_by_count":5},{"id":"2405.14781","title":"Unified Neural Backdoor Removal with Only Few Clean Samples through Unlearning and Relearning","created":"2024-05-23","cited_by_count":5},{"id":"2510.05152","title":"A Single Character can Make or Break Your LLM Evals","created":"2025-10-02","cited_by_count":5},{"id":"2510.12981","title":"Reference-Specific Unlearning Metrics Can Hide the Truth: A Reality Check","created":"2025-10-14","cited_by_count":5},{"id":"2511.13143","title":"SoK: The Last Line of Defense: On Backdoor Defense Evaluation","created":"2025-11-17","cited_by_count":5},{"id":"2411.09585","title":"Backdoor Mitigation by Distance-Driven Detoxification","created":"2024-11-14","cited_by_count":4},{"id":"2605.23168","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","created":"2026-05-22","cited_by_count":3},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2},{"id":"2510.08016","title":"Backdoor Vectors: a Task Arithmetic View on Backdoor Attacks and Defenses","created":"2025-10-09","cited_by_count":2},{"id":"2601.04301","title":"Quantifying the Effect of Test Set Contamination on Generative Evaluations","created":"2026-01-07","cited_by_count":2},{"id":"2606.18473","title":"PreUnlearn: Auditing Collateral Knowledge Damage Before Large Language Model Unlearning","created":"2026-06-16","cited_by_count":2},{"id":"2412.20476","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","created":"2024-12-29","cited_by_count":1},{"id":"2605.02206","title":"Metric Unreliability in Multimodal Machine Unlearning: A Systematic Analysis and Principled Unified Score","created":"2026-05-04","cited_by_count":1},{"id":"2605.23628","title":"How Hard is it to Rig a Benchmark? A Social Choice Analysis of Leaderboard Robustness","created":"2026-05-22","cited_by_count":1},{"id":"2606.03785","title":"Backdoor Unlearning Generalization: A Path Toward the Removal of Unknown Triggers in LLMs","created":"2026-06-02","cited_by_count":1}],"next_cursor":null}