On the public citation graph

Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses

https://doi.org/10.1109/tpami.2022.3162397

0 signed · 525 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.

Claim with ORCID

Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.

See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1002/0471725250openalex-snapshot

Robust Statistics

inferredcites →https://doi.org/10.1002/9781118186435openalex-snapshot

Robust Statistics

inferredcites →https://doi.org/10.1007/11681878_14openalex-snapshot

Calibrating Noise to Sensitivity in Private Data Analysis

inferredcites →https://doi.org/10.1007/978-1-4899-7687-1_79openalex-snapshot

Empirical Risk Minimization

inferredcites →https://doi.org/10.1007/978-3-030-00470-5_13openalex-snapshot

Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks

inferredcites →https://doi.org/10.1007/978-3-030-01554-1_11openalex-snapshot

Data Poisoning Attacks in Contextual Bandits

inferredcites →https://doi.org/10.1007/978-3-030-13453-2_1openalex-snapshot

Label Sanitization Against Label Flipping Poisoning Attacks

inferredcites →https://doi.org/10.1007/978-3-030-37228-6_15openalex-snapshot

Trojan Attack on Deep Generative Models in Autonomous Driving

inferredcites →https://doi.org/10.1007/978-3-030-58583-9_20openalex-snapshot

One-Pixel Signature: Characterizing CNN Models for Backdoor Detection

inferredcites →https://doi.org/10.1007/978-3-030-58583-9_9openalex-snapshot

Practical Poisoning Attacks on Neural Networks

inferredcites →https://doi.org/10.1007/978-3-030-58592-1_14openalex-snapshot

Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Cases

inferredcites →https://doi.org/10.1007/978-3-030-58951-6_24openalex-snapshot

Data Poisoning Attacks Against Federated Learning Systems

inferredcites →https://doi.org/10.1007/978-3-030-63076-8_1openalex-snapshot

Threats to Federated Learning

inferredcites →https://doi.org/10.1007/978-3-030-63076-8_2openalex-snapshot

Deep Leakage from Gradients

inferredcites →https://doi.org/10.1007/978-3-030-66415-2_4openalex-snapshot

Deep k-NN Defense Against Clean-Label Data Poisoning Attacks

inferredcites →https://doi.org/10.1007/978-3-030-67658-2_10openalex-snapshot

Poisoning Attacks on Algorithmic Fairness

inferredcites →https://doi.org/10.1007/978-3-319-70503-3_8openalex-snapshot

Blockwise p-Tampering Attacks on Cryptographic Primitives, Extractors, and Learners

inferredcites →https://doi.org/10.1007/978-3-642-02927-1_51openalex-snapshot

Learning Halfspaces with Malicious Noise

inferredcites →https://doi.org/10.1007/978-3-642-40994-3_25openalex-snapshot

Evasion Attacks against Machine Learning at Test Time

inferredcites →https://doi.org/10.1007/978-3-658-40442-0_9openalex-snapshot

Generative Adversarial Nets

inferredcites →https://doi.org/10.1007/978-3-662-44371-2_26openalex-snapshot

On the Impossibility of Cryptography with Tamperable Randomness

inferredcites →https://doi.org/10.1007/s10994-021-06119-yopenalex-snapshot

Stronger data poisoning attacks break data sanitization defenses

inferredcites →https://doi.org/10.1016/j.cosrev.2019.100199openalex-snapshot

A taxonomy and survey of attacks against machine learning

inferredcites →https://doi.org/10.1016/j.neucom.2020.07.133openalex-snapshot

Defense against neural trojan attacks: A survey

inferredcites →https://doi.org/10.1073/pnas.1611835114openalex-snapshot

Overcoming catastrophic forgetting in neural networks

inferredcites →https://doi.org/10.1080/00401706.1969.10490657openalex-snapshot

Procedures for Detecting Outlying Observations in Samples

inferredcites →https://doi.org/10.1093/biomet/69.1.242openalex-snapshot

Robust regression using repeated medians

inferredcites →https://doi.org/10.1109/access.2019.2905915openalex-snapshot

TensorClog: An Imperceptible Poisoning Attack on Deep Neural Network Applications

inferredcites →https://doi.org/10.1109/access.2019.2941376openalex-snapshot

A Backdoor Attack Against LSTM-Based Text Classification Systems

inferredcites →https://doi.org/10.1109/ciss.2017.7926118openalex-snapshot

A game-theoretic analysis of label flipping attacks on distributed support vector machines

inferredcites →https://doi.org/10.1109/cvpr.2017.17openalex-snapshot

Universal Adversarial Perturbations

inferredcites →https://doi.org/10.1109/cvpr.2018.00175openalex-snapshot

Robust Physical-World Attacks on Deep Learning Visual Classification

inferredcites →https://doi.org/10.1109/cvpr42600.2020.00038openalex-snapshot

Universal Litmus Patterns: Revealing Backdoor Attacks in CNNs

inferredcites →https://doi.org/10.1109/cvpr46437.2021.00614openalex-snapshot

Backdoor Attacks Against Deep Learning Systems in the Physical World

inferredcites →https://doi.org/10.1109/dac18072.2020.9218663openalex-snapshot

TrojDRL: Evaluation of Backdoor Attacks on Deep Reinforcement Learning

inferredcites →https://doi.org/10.1109/eurosp.2018.00035openalex-snapshot

SoK: Security and Privacy in Machine Learning

inferredcites →https://doi.org/10.1109/eurosp48549.2020.00019openalex-snapshot

Bypassing Backdoor Detection Algorithms in Deep Learning

inferredcites →https://doi.org/10.1109/eurosp48549.2020.00020openalex-snapshot

Biometric Backdoors: A Poisoning Attack Against Unsupervised Template Updating

inferredcites →https://doi.org/10.1109/eurosp51992.2021.00021openalex-snapshot

Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability

inferredcites →https://doi.org/10.1109/eurosp51992.2021.00022openalex-snapshot

Trojaning Language Models for Fun and Profit

inferredcites →https://doi.org/10.1109/focs.2016.76openalex-snapshot

Agnostic Estimation of Mean and Covariance

inferredcites →https://doi.org/10.1109/globecom38437.2019.9013539openalex-snapshot

Targeted Poisoning Attacks on Social Recommender Systems

inferredcites →https://doi.org/10.1109/icassp39728.2021.9414862openalex-snapshot

Strong Data Augmentation Sanitizes Poisoning and Backdoor Attacks Without an Accuracy Tradeoff

inferredcites →https://doi.org/10.1109/iccd.2017.16openalex-snapshot

Neural Trojans

inferredcites →https://doi.org/10.1109/iccv.2017.74openalex-snapshot

Grad-CAM: Visual Explanations from Deep Networks via Gradient-Based Localization

inferredcites →https://doi.org/10.1109/iccv.2019.00612openalex-snapshot

CutMix: Regularization Strategy to Train Strong Classifiers With Localizable Features

inferredcites →https://doi.org/10.1109/icdcs51616.2021.00086openalex-snapshot

BaFFLe: Backdoor Detection via Feedback-based Federated Learning

inferredcites →https://doi.org/10.1109/icpads47876.2019.00042openalex-snapshot

Understanding Distributed Poisoning Attack in Federated Learning

inferredcites →https://doi.org/10.1109/icpr48806.2021.9412684openalex-snapshot

Removing Backdoor-Based Watermarks in Neural Networks with Limited Data

inferredcites →https://doi.org/10.1109/icpr56361.2022.9956690openalex-snapshot

Backdoors in Neural Models of Source Code

inferredcites →https://doi.org/10.1109/ijcnn.2017.7966217openalex-snapshot

EMNIST: Extending MNIST to handwritten letters

inferredcites →https://doi.org/10.1109/jiot.2021.3128646openalex-snapshot

Data Poisoning Attacks on Federated Machine Learning

inferredcites →https://doi.org/10.1109/sp.2018.00057openalex-snapshot

Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning

inferredcites →https://doi.org/10.1109/sp.2019.00031openalex-snapshot

Neural Cleanse: Identifying and Mitigating Backdoor Attacks in Neural Networks

inferredcites →https://doi.org/10.1109/sp.2019.00044openalex-snapshot

Certified Robustness to Adversarial Examples with Differential Privacy

inferredcites →https://doi.org/10.1109/sp40001.2021.00034openalex-snapshot

Detecting AI Trojans Using Meta Neural Analysis

inferredcites →https://doi.org/10.1109/sp46215.2023.10179451openalex-snapshot

RAB: Provable Robustness Against Backdoor Attacks

inferredcites →https://doi.org/10.1109/spw50608.2020.00025openalex-snapshot

SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems

inferredcites →https://doi.org/10.1109/tdsc.2020.3021407openalex-snapshot

Invisible Backdoor Attacks on Deep Neural Networks via Steganography and Regularization

inferredcites →https://doi.org/10.1109/tifs.2021.3114024openalex-snapshot

Stop-and-Go: Exploring Backdoor Attacks on Deep Reinforcement Learning-Based Traffic Congestion Control Systems

inferredcites →https://doi.org/10.1109/tnnls.2018.2886017openalex-snapshot

Adversarial Examples: Attacks and Defenses for Deep Learning

inferredcites →https://doi.org/10.1109/tnnls.2022.3182979openalex-snapshot

Backdoor Learning: A Survey

inferredcites →https://doi.org/10.1109/trustcom/bigdatase.2019.00057openalex-snapshot

Poisoning Attack in Federated Learning using Generative Adversarial Nets

inferredcites →https://doi.org/10.1109/tsc.2020.3000900openalex-snapshot

Backdoor Attacks Against Transfer Learning With Pre-Trained Deep Learning Models

inferredcites →https://doi.org/10.1109/tsp.2022.3153135openalex-snapshot

Robust Aggregation for Federated Learning

inferredcites →https://doi.org/10.1111/rssb.12364openalex-snapshot

Robust Estimation via Robust Gradient Estimation

inferredcites →https://doi.org/10.1137/0222052openalex-snapshot

Learning in the Presence of Malicious Errors

inferredcites →https://doi.org/10.1145/1390156.1390294openalex-snapshot

Extracting and composing robust features with denoising autoencoders

inferredcites →https://doi.org/10.1145/2810103.2813677openalex-snapshot

Model Inversion Attacks that Exploit Confidence Information and Basic Countermeasures

inferredcites →https://doi.org/10.1145/2976749.2978318openalex-snapshot

Deep Learning with Differential Privacy

inferredcites →https://doi.org/10.1145/3041008.3041012openalex-snapshot

Analysis of Causative Attacks against SVMs Learning from Data Streams

inferredcites →https://doi.org/10.1145/3055399.3055491openalex-snapshot

Learning from untrusted data

inferredcites →https://doi.org/10.1145/3078971.3078974openalex-snapshot

Embedding Watermarks into Deep Neural Networks

inferredcites →https://doi.org/10.1145/3128572.3140451openalex-snapshot

Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization

inferredcites →https://doi.org/10.1145/3154503openalex-snapshot

Distributed Statistical Machine Learning in Adversarial Settings

inferredcites →https://doi.org/10.1145/3196494.3196550openalex-snapshot

Protecting Intellectual Property of Deep Neural Networks with Watermarking

inferredcites →https://doi.org/10.1145/3209582.3209594openalex-snapshot

Towards Data Poisoning Attacks in Crowd Sensing Systems

inferredcites →https://doi.org/10.1145/3219617.3219655openalex-snapshot

Distributed Statistical Machine Learning in Adversarial Settings

inferredcites →https://doi.org/10.1145/3243734.3243757openalex-snapshot

Model-Reuse Attacks on Deep Learning Systems

inferredcites →https://doi.org/10.1145/3274694.3274706openalex-snapshot

Poisoning Attacks to Graph-Based Recommender Systems

inferredcites →https://doi.org/10.1145/3319535.3354209openalex-snapshot

Latent Backdoor Attacks on Deep Neural Networks

inferredcites →https://doi.org/10.1145/3359789.3359790openalex-snapshot

STRIP

inferredcites →https://doi.org/10.1145/3366423.3380072openalex-snapshot

Influence Function based Data Poisoning Attacks to Top-N Recommender Systems

inferredcites →https://doi.org/10.1145/3381028openalex-snapshot

Outlier Detection

inferredcites →https://doi.org/10.1145/3394171.3413546openalex-snapshot

GangSweep

inferredcites →https://doi.org/10.1145/3394486.3403064openalex-snapshot

An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks

inferredcites →https://doi.org/10.1145/3397271.3401301openalex-snapshot

Data Poisoning Attacks against Differentially Private Recommender Systems

inferredcites →https://doi.org/10.1145/342009.335388openalex-snapshot

LOF

inferredcites →https://doi.org/10.1145/3433210.3453079openalex-snapshot

REFIT: A Unified Watermark Removal Framework For Deep Learning Systems With Limited Data

inferredcites →https://doi.org/10.1145/3450569.3463560openalex-snapshot

Backdoor Attacks to Graph Neural Networks

inferredcites →https://doi.org/10.1145/3460120.3485368openalex-snapshot

Subpopulation Data Poisoning Attacks

inferredcites →https://doi.org/10.1214/17-aos1607openalex-snapshot

Robust covariance and scatter matrix estimation under Huber’s contamination model

inferredcites →https://doi.org/10.1214/22-aos2186openalex-snapshot

Generalized resilience and robust statistics

inferredcites →https://doi.org/10.1214/aoms/1177703732openalex-snapshot

Robust Estimation of a Location Parameter

inferredcites →https://doi.org/10.1214/aos/1016218226openalex-snapshot

General notions of statistical depth function

inferredcites →https://doi.org/10.1214/aos/1176350820openalex-snapshot

The "Automatic" Robustness of Minimum Distance Functionals

inferredcites →https://doi.org/10.14722/ndss.2018.23291openalex-snapshot

Trojaning Attack on Neural Networks

inferredcites →https://doi.org/10.14722/ndss.2019.23415openalex-snapshot

NIC: Detecting Adversarial Samples with Neural Network Invariant Checking

inferredcites →https://doi.org/10.1609/aaai.v29i1.9569openalex-snapshot

Using Machine Teaching to Identify Optimal Training-Set Attacks on Machine Learners

inferredcites →https://doi.org/10.1609/aaai.v33i01.33011544openalex-snapshot

RSA: Byzantine-Robust Stochastic Aggregation Methods for Distributed Learning from Heterogeneous Datasets

inferredcites →https://doi.org/10.1609/aaai.v33i01.33014536openalex-snapshot

The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure

inferredcites →https://doi.org/10.1609/aaai.v34i07.6871openalex-snapshot

Hidden Trigger Backdoor Attacks

inferredcites →https://doi.org/10.1609/aaai.v35i9.16971openalex-snapshot

Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks

inferredcites →https://doi.org/10.1609/aaai.v36i9.21191openalex-snapshot

Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks

inferredcites →https://doi.org/10.18653/v1/2021.naacl-main.13openalex-snapshot

Concealed Data Poisoning Attacks on NLP Models

inferredcites →https://doi.org/10.2139/ssrn.3532474openalex-snapshot

Adversarial Machine Learning - Industry Perspectives

inferredcites →https://doi.org/10.2307/1269782openalex-snapshot

Robust Statistics: The Approach Based on Influence Functions

inferredcites →https://doi.org/10.2307/2530985openalex-snapshot

Outliers in Statistical Data.

inferredcites →https://doi.org/10.2307/2981480openalex-snapshot

Robust Statistics: The Approach Based on Influence Functions.

inferredcites →https://doi.org/10.2478/popets-2021-0032openalex-snapshot

Face-Off: Adversarial Face Obfuscation

inferredcites →https://doi.org/10.2478/popets-2021-0044openalex-snapshot

FoggySight: A Scheme for Facial Lookup Privacy

inferredcites →https://doi.org/10.24963/ijcai.2017/551openalex-snapshot

Efficient Label Contamination Attacks Against Black-Box Learning Models

inferredcites →https://doi.org/10.24963/ijcai.2019/647openalex-snapshot

DeepInspect: A Black-box Trojan Detection and Mitigation Framework for Deep Neural Networks

inferredcites →https://doi.org/10.24963/ijcai.2019/657openalex-snapshot

Data Poisoning against Differentially-Private Learners: Attacks and Defenses

inferredcites →https://doi.org/10.3156/jsoft.29.5_177_2openalex-snapshot

GAN（Generative Adversarial Nets）

inferredcites →https://doi.org/10.3929/ethz-b-000459774openalex-snapshot

Transferable Clean-Label Poisoning Attacks on Deep Neural Nets

inferredcites →https://doi.org/10.4230/lipics.itcs.2018.45openalex-snapshot

Resilience: A Criterion for Learning in the Presence of Arbitrary Outliers

inferredcites →https://doi.org/10.48550/arxiv.1206.6389openalex-snapshot

Poisoning Attacks against Support Vector Machines

inferredcites →https://doi.org/10.48550/arxiv.1312.6114openalex-snapshot

Auto-Encoding Variational Bayes

inferredcites →https://doi.org/10.48550/arxiv.1312.6199openalex-snapshot

Intriguing properties of neural networks

inferredcites →https://doi.org/10.48550/arxiv.1608.08182openalex-snapshot

Data Poisoning Attacks on Factorization-Based Collaborative Filtering

inferredcites →https://doi.org/10.48550/arxiv.1611.02770openalex-snapshot

Delving into Transferable Adversarial Examples and Black-box Attacks

inferredcites →https://doi.org/10.48550/arxiv.1703.01340openalex-snapshot

Generative Poisoning Attack Method Against Neural Networks

inferredcites →https://doi.org/10.48550/arxiv.1703.04730openalex-snapshot

Understanding Black-box Predictions via Influence Functions

inferredcites →https://doi.org/10.48550/arxiv.1704.03453openalex-snapshot

The Space of Transferable Adversarial Examples

inferredcites →https://doi.org/10.48550/arxiv.1707.07397openalex-snapshot

Synthesizing Robust Adversarial Examples

inferredcites →https://doi.org/10.48550/arxiv.1708.06733openalex-snapshot

BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain

inferredcites →https://doi.org/10.48550/arxiv.1710.09412openalex-snapshot

mixup: Beyond Empirical Risk Minimization

inferredcites →https://doi.org/10.48550/arxiv.1712.05526openalex-snapshot

Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning

inferredcites →https://doi.org/10.48550/arxiv.1802.03041openalex-snapshot

Detection of Adversarial Training Examples in Poisoning Attacks through Anomaly Detection

inferredcites →https://doi.org/10.48550/arxiv.1802.07927openalex-snapshot

The Hidden Vulnerability of Distributed Learning in Byzantium

inferredcites →https://doi.org/10.48550/arxiv.1803.01498openalex-snapshot

Byzantine-Robust Distributed Learning: Towards Optimal Statistical Rates

inferredcites →https://doi.org/10.48550/arxiv.1803.02815openalex-snapshot

Sever: A Robust Meta-Algorithm for Stochastic Optimization

inferredcites →https://doi.org/10.48550/arxiv.1804.00750openalex-snapshot

DeepSigns: A Generic Watermarking Framework for IP Protection of Deep Learning Models

inferredcites →https://doi.org/10.48550/arxiv.1804.07933openalex-snapshot

Is feature selection secure against training data poisoning?

inferredcites →https://doi.org/10.48550/arxiv.1807.00459openalex-snapshot

How To Backdoor Federated Learning

inferredcites →https://doi.org/10.48550/arxiv.1808.04866openalex-snapshot

Mitigating Sybils in Federated Learning Poisoning

inferredcites →https://doi.org/10.48550/arxiv.1810.02030openalex-snapshot

Robust Estimation and Generative Adversarial Nets

inferredcites →https://doi.org/10.48550/arxiv.1811.00636openalex-snapshot

Spectral Signatures in Backdoor Attacks

inferredcites →https://doi.org/10.48550/arxiv.1811.03728openalex-snapshot

Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering

inferredcites →https://doi.org/10.48550/arxiv.1811.12470openalex-snapshot

Analyzing Federated Learning through an Adversarial Lens

inferredcites →https://doi.org/10.48550/arxiv.1812.01097openalex-snapshot

LEAF: A Benchmark for Federated Settings

inferredcites →https://doi.org/10.48550/arxiv.1902.02918openalex-snapshot

Certified Adversarial Robustness via Randomized Smoothing

inferredcites →https://doi.org/10.48550/arxiv.1902.06156openalex-snapshot

A Little Is Enough: Circumventing Defenses For Distributed Learning

inferredcites →https://doi.org/10.48550/arxiv.1902.09972openalex-snapshot

Design of intentional backdoors in sequential models

inferredcites →https://doi.org/10.48550/arxiv.1903.01944openalex-snapshot

Generative Adversarial Nets for Robust Scatter Estimation: A Proper Scoring Rule Perspective

inferredcites →https://doi.org/10.48550/arxiv.1905.06494openalex-snapshot

Data Poisoning Attacks on Stochastic Bandits

inferredcites →https://doi.org/10.48550/arxiv.1906.07773openalex-snapshot

Poisoning Attacks with Generative Adversarial Nets

inferredcites →https://doi.org/10.48550/arxiv.1908.01763openalex-snapshot

TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems

inferredcites →https://doi.org/10.48550/arxiv.1910.04749openalex-snapshot

Defending Neural Backdoors via Generative Distribution Modeling

inferredcites →https://doi.org/10.48550/arxiv.1911.05911openalex-snapshot

Recent Advances in Algorithmic High-Dimensional Robust Statistics

inferredcites →https://doi.org/10.48550/arxiv.1911.07963openalex-snapshot

Can You Really Backdoor Federated Learning?

inferredcites →https://doi.org/10.48550/arxiv.1912.02771openalex-snapshot

Label-Consistent Backdoor Attacks

inferredcites →https://doi.org/10.48550/arxiv.1912.11464openalex-snapshot

Attack-Resistant Federated Learning with Residual-based Reweighting

inferredcites →https://doi.org/10.48550/arxiv.2002.00211openalex-snapshot

Learning to Detect Malicious Clients for Robust Federated Learning

inferredcites →https://doi.org/10.48550/arxiv.2002.03018openalex-snapshot

Certified Robustness to Label-Flipping Attacks via Randomized Smoothing

inferredcites →https://doi.org/10.48550/arxiv.2002.05646openalex-snapshot

Adversarial Machine Learning -- Industry Perspectives

inferredcites →https://doi.org/10.48550/arxiv.2002.09024openalex-snapshot

MaxUp: A Simple Way to Improve Generalization of Neural Network Training

inferredcites →https://doi.org/10.48550/arxiv.2002.11497openalex-snapshot

On the Effectiveness of Mitigating Data Poisoning Attacks with Gradient Shaping

inferredcites →https://doi.org/10.48550/arxiv.2003.01031openalex-snapshot

Explanation-Guided Backdoor Poisoning Attacks Against Malware Classifiers

inferredcites →https://doi.org/10.48550/arxiv.2003.02133openalex-snapshot

Threats to Federated Learning: A Survey

inferredcites →https://doi.org/10.48550/arxiv.2003.14053openalex-snapshot

Inverting Gradients -- How easy is it to break privacy in federated learning?

inferredcites →https://doi.org/10.48550/arxiv.2004.00225openalex-snapshot

MetaPoison: Practical General-purpose Clean-label Data Poisoning

inferredcites →https://doi.org/10.48550/arxiv.2006.07026openalex-snapshot

Backdoor Attacks on Federated Meta-Learning

inferredcites →https://doi.org/10.48550/arxiv.2006.07709openalex-snapshot

Auditing Differentially Private Machine Learning: How Private is Private SGD?

inferredcites →https://doi.org/10.48550/arxiv.2006.11623openalex-snapshot

FaceHack: Triggering backdoored facial recognition systems using facial characteristics

inferredcites →https://doi.org/10.48550/arxiv.2006.12557openalex-snapshot

Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks

inferredcites →https://doi.org/10.48550/arxiv.2006.14651openalex-snapshot

Influence Functions in Deep Learning Are Fragile

inferredcites →https://doi.org/10.48550/arxiv.2006.14768openalex-snapshot

Deep Partition Aggregation: Provable Defense against General Poisoning Attacks

inferredcites →https://doi.org/10.48550/arxiv.2006.16176openalex-snapshot

Natural Backdoor Attack on Text Data

inferredcites →https://doi.org/10.48550/arxiv.2007.02220openalex-snapshot

You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion

inferredcites →https://doi.org/10.48550/arxiv.2007.03608openalex-snapshot

Backdoor attacks and defenses in feature-partitioned collaborative learning

inferredcites →https://doi.org/10.48550/arxiv.2007.10760openalex-snapshot

Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review

inferredcites →https://doi.org/10.48550/arxiv.2009.02276openalex-snapshot

Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching

inferredcites →https://doi.org/10.48550/arxiv.2010.03007openalex-snapshot

BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models

inferredcites →https://doi.org/10.48550/arxiv.2010.09080openalex-snapshot

Poisoned classifiers are not only backdoored, they are fundamentally broken

inferredcites →https://doi.org/10.48550/arxiv.2011.01767openalex-snapshot

Mitigating Backdoor Attacks in Federated Learning

inferredcites →https://doi.org/10.48550/arxiv.2101.04898openalex-snapshot

Unlearnable Examples: Making Personal Data Unexploitable

inferredcites →https://doi.org/10.48550/arxiv.2101.07922openalex-snapshot

LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognition

inferredcites →https://doi.org/10.48550/arxiv.2103.02079openalex-snapshot

DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations

inferredcites →https://doi.org/10.48550/arxiv.2103.02683openalex-snapshot

Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release

inferredcites →https://doi.org/10.57702/zp44cu3gopenalex-snapshot

Learning Multiple Layers of Features from Tiny Images

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.2139/ssrn.4827065openalex-extracted

inferred← citeshttps://doi.org/10.2139/ssrn.5634455openalex-extracted

Advancing Security in Software-Defined Vehicles: A Comprehensive Survey and Taxonomy

inferred← citeshttps://doi.org/10.1002/asmb.70029openalex-snapshot

Backdoor Attacks on DNN and GBDT: A Case Study From the Insurance Domain

inferred← citeshttps://doi.org/10.1002/cpe.70264openalex-snapshot

DMTL : An Adaptive Integrity Verification Scheme for Dynamic Cloud Datasets

inferred← citeshttps://doi.org/10.1002/spe.70098openalex-snapshot

Security in the Fine‐Tuning Lifecycle of Large Language Models: Threats, Defenses, Evaluation, and Future Directions

inferred← citeshttps://doi.org/10.1002/spy2.70047openalex-snapshot

SMLaaS: Secure Machine Learning as a Service Ensuring Data and Model Parameter Privacy

inferred← citeshttps://doi.org/10.1002/sys.21703openalex-snapshot

The National Airworthiness Council artificial intelligence working group (NACAIWG) summit proceedings 2022

inferred← citeshttps://doi.org/10.1007/978-3-031-26351-4_41openalex-snapshot

COLLIDER: A Robust Training Framework for Backdoor Data

inferred← citeshttps://doi.org/10.1007/978-3-031-28124-2_31openalex-snapshot

Blockchain-Based Fairness-Enhanced Federated Learning Scheme Against Data Poisoning Attack

inferred← citeshttps://doi.org/10.1007/978-3-031-35644-5_6openalex-snapshot

Verifiable Machine Learning Models in Industrial IoT via Blockchain

inferred← citeshttps://doi.org/10.1007/978-3-031-51482-1_8openalex-snapshot

Security of NVMe Offloaded Data in Large-Scale Machine Learning

inferred← citeshttps://doi.org/10.1007/978-3-031-53969-5_8openalex-snapshot

Perceptrons Under Verifiable Random Data Corruption

inferred← citeshttps://doi.org/10.1007/978-3-031-56580-9_12openalex-snapshot

Decoding HDF5: Machine Learning File Forensics and Data Injection

inferred← citeshttps://doi.org/10.1007/978-3-031-59717-6_22openalex-snapshot

Personalized Sleep Monitoring Using Smartphones and Semi-supervised Learning

inferred← citeshttps://doi.org/10.1007/978-3-031-71848-9_25openalex-snapshot

Addressing Poisoning Attacks Against Federated Intrusion Detection Systems in Internet of Healthcare Things

inferred← citeshttps://doi.org/10.1007/978-3-031-73021-4_6openalex-snapshot

Flatness-Aware Sequential Learning Generates Resilient Backdoors

inferred← citeshttps://doi.org/10.1007/978-3-031-97629-2_15openalex-snapshot

Proof of Training: Obtaining Verifiable ML Models by Delegating Training to a Blockchain Network

inferred← citeshttps://doi.org/10.1007/978-3-031-99447-0_13openalex-snapshot

Evaluating and Defending Against Adversarial Attacks on LLM-Generated LSTM Models

inferred← citeshttps://doi.org/10.1007/978-3-032-00232-7_43openalex-snapshot

Investigating the Impact of Noise Injection on BERT for Offensive Arabic Text Detection

inferred← citeshttps://doi.org/10.1007/978-3-032-05461-6_38openalex-snapshot

Exploring Recommendations Attacks Through Blind Optimization

inferred← citeshttps://doi.org/10.1007/978-3-032-06286-4_9openalex-snapshot

Adversarial Machine Learning: From Attack Surface to Defence Mechanism

inferred← citeshttps://doi.org/10.1007/978-3-032-25874-8_6openalex-snapshot

Fairness and Poison Attack Detection in AI for Cybersecurity Systems: A Comprehensive Toolkit

inferred← citeshttps://doi.org/10.1007/978-3-032-25874-8_7openalex-snapshot

Global Governance and Collaborative Strategies for AI Cybersecurity

inferred← citeshttps://doi.org/10.1007/978-3-032-28393-1_27openalex-snapshot

Statistical Analysis of Combined Adversarial Attacks on Spam Detection Models

inferred← citeshttps://doi.org/10.1007/978-3-032-41330-7_11openalex-snapshot

Behavioural Feature Fingerprinting for Integrity Verification of Autonomous Vehicle Perception Models

inferred← citeshttps://doi.org/10.1007/978-981-19-8445-7_10openalex-snapshot

A Pragmatic Label-Specific Backdoor Attack

inferred← citeshttps://doi.org/10.1007/978-981-92-0875-3_13openalex-snapshot

Managing Security Risks in AI Deployment

inferred← citeshttps://doi.org/10.1007/978-981-92-3015-0_13openalex-snapshot

Backdoor Risks in Personalized Federated Learning Under Practical Constraints

inferred← citeshttps://doi.org/10.1007/978-981-92-3548-3_31openalex-snapshot

AdaColor: An Adaptive Backdoor Attack with Dynamic Trigger Generation and Color Space Perturbation

inferred← citeshttps://doi.org/10.1007/978-981-95-6123-0_6openalex-snapshot

Enhanced Contactless Palmprint Backdoor Attack with Invisible Sample-Specific Triggers

inferred← citeshttps://doi.org/10.1007/978-981-96-1045-7_7openalex-snapshot

Phoneme Semantic Backdoor Attacks with Multiple Task Learning for Speech Classification Task

inferred← citeshttps://doi.org/10.1007/978-981-96-1093-8_12openalex-snapshot

Analyzing the Vulnerabilities of Targets in Clean-Label Data Poisoning Attacks

inferred← citeshttps://doi.org/10.1007/978-981-96-1525-4_8openalex-snapshot

A Mini-model can Make Machine Unlearning Better

inferred← citeshttps://doi.org/10.1007/978-981-96-8183-9_24openalex-snapshot

Arms Race in Deep Learning: A Survey of Backdoor Defenses and Adaptive Attacks

inferred← citeshttps://doi.org/10.1007/978-981-96-8725-1_16openalex-snapshot

A DRL-Based Deviation-Aware Federated Digital Twin Construction over Wireless Edge Network

inferred← citeshttps://doi.org/10.1007/978-981-99-5180-2_21openalex-snapshot

Machine Learning Robustness in Predictive Maintenance Under Adversarial Attacks

inferred← citeshttps://doi.org/10.1007/979-8-8688-1047-3_10openalex-snapshot

Security and Privacy in AG-IoT-Enabled Unmanned Aerial Vehicles for Smart Cities

inferred← citeshttps://doi.org/10.1007/s00431-024-05957-xopenalex-snapshot

Predictive modeling of methadone poisoning outcomes in children ≤ 5 years: utilizing machine learning and the National Poison Data System for improved clinical decision-making

inferred← citeshttps://doi.org/10.1007/s10207-025-00997-2openalex-snapshot

USB-GATE: USB-based GAN-augmented transformer reinforced defense framework for adversarial keystroke injection attacks

inferred← citeshttps://doi.org/10.1007/s10489-024-05510-1openalex-snapshot

Analyzing the robustness of decentralized horizontal and vertical federated learning architectures in a non-IID scenario

inferred← citeshttps://doi.org/10.1007/s10586-024-04810-yopenalex-snapshot

Blockchain federated learning with sparsity for IoMT devices

inferred← citeshttps://doi.org/10.1007/s10586-026-06527-6openalex-snapshot

AI-enabled IoT mobile cloud security: trends and challenges

inferred← citeshttps://doi.org/10.1007/s10791-026-10398-1openalex-snapshot

Differentially private federated adversarial learning–based intrusion prevention for V2X communications

inferred← citeshttps://doi.org/10.1007/s10796-025-10656-5openalex-snapshot

Characterizing Cross-Contamination on Multitask Multimodal Large Language Models

inferred← citeshttps://doi.org/10.1007/s11227-023-05616-2openalex-snapshot

Security in internet of things: a review on approaches based on blockchain, machine learning, cryptography, and quantum computing

inferred← citeshttps://doi.org/10.1007/s11227-024-06625-5openalex-snapshot

Consensus algorithm for maintaining large-scale access-control views of education data

inferred← citeshttps://doi.org/10.1007/s11390-025-4366-7openalex-snapshot

DSBP: Data-Free and Swift Backdoor Purification for Trustworthy Federated Learning via Multi-Teacher Adversarial Distillation

inferred← citeshttps://doi.org/10.1007/s11704-025-50195-5openalex-snapshot

Defense against data poisoning attacks in robot vision systems based on adversarial example detection

inferred← citeshttps://doi.org/10.1007/s13042-024-02363-5openalex-snapshot

Backdoor learning curves: explaining backdoor poisoning beyond influence functions

inferred← citeshttps://doi.org/10.1007/s41060-024-00655-1openalex-snapshot

Rethinking security: the resilience of shallow ML models

inferred← citeshttps://doi.org/10.1007/s44443-026-01139-xopenalex-snapshot

WFR-Guard: detecting poisoned training patterns via watermark anchors and randomized feature projections

inferred← citeshttps://doi.org/10.1016/b978-0-12-824020-5.00014-4openalex-snapshot

Training-time adversarial attacks

inferred← citeshttps://doi.org/10.1016/b978-0-12-824020-5.00034-xopenalex-snapshot

References

inferred← citeshttps://doi.org/10.1016/b978-0-44-326572-3.00021-8openalex-snapshot

Foundation of secured edge intelligence in CPS

inferred← citeshttps://doi.org/10.1016/b978-0-443-13462-3.00015-7openalex-snapshot

Machine learning frameworks in IoT systems: A survey, case study, and future research directions

inferred← citeshttps://doi.org/10.1016/b978-0-443-28940-8.00007-5openalex-snapshot

A bibliometric analysis of adversarial attacks and countermeasures in AI/ML cybersecurity

inferred← citeshttps://doi.org/10.1016/j.asoc.2025.113967openalex-snapshot

Industrial large models as carriers for malicious payloads: A fast and robust approach

inferred← citeshttps://doi.org/10.1016/j.asoc.2026.114912openalex-snapshot

False flag: An evolutionary false labeling approach for multilabel classification

inferred← citeshttps://doi.org/10.1016/j.bar.2023.101241openalex-snapshot

Boosting credit risk models

inferred← citeshttps://doi.org/10.1016/j.bcra.2023.100152openalex-snapshot

A decentralized data evaluation framework in federated learning

inferred← citeshttps://doi.org/10.1016/j.bdr.2025.100528openalex-snapshot

TE-PADN: A poisoning attack defense model based on temporal margin samples

inferred← citeshttps://doi.org/10.1016/j.bprint.2023.e00321openalex-snapshot

Cybersecurity and privacy in smart bioprinting

inferred← citeshttps://doi.org/10.1016/j.comnet.2026.112038openalex-snapshot

PBA: Persistent backdoor attack on federated learning via distributed generative triggers

inferred← citeshttps://doi.org/10.1016/j.compind.2024.104133openalex-snapshot

A novel dimensional variational prototypical network for industrial few-shot fault diagnosis with unseen faults

inferred← citeshttps://doi.org/10.1016/j.cose.2023.103523openalex-snapshot

SGBA: A stealthy scapegoat backdoor attack against deep neural networks

inferred← citeshttps://doi.org/10.1016/j.cosrev.2026.100940openalex-snapshot

GAI & cybersecurity: Bi-visions

inferred← citeshttps://doi.org/10.1016/j.ejim.2026.107172openalex-snapshot

Artificial intelligence in medicine: An ethical and legal review

inferred← citeshttps://doi.org/10.1016/j.engappai.2023.107166openalex-snapshot

Backdoor attacks and defenses in federated learning: Survey, challenges and future research directions

inferred← citeshttps://doi.org/10.1016/j.eswa.2025.127352openalex-snapshot

FEAT: Frequency Energy Based Backdoor Attack in Deep Neural Networks

inferred← citeshttps://doi.org/10.1016/j.eswa.2025.127546openalex-snapshot

Clean-label backdoor attack based on robust feature attenuation for speech recognition

inferred← citeshttps://doi.org/10.1016/j.eswa.2026.133244openalex-snapshot

Precise defense method against low-magnitude poisoning attack in industrial internet of things

inferred← citeshttps://doi.org/10.1016/j.future.2023.01.026openalex-snapshot

An adaptive robust defending algorithm against backdoor attacks in federated learning

inferred← citeshttps://doi.org/10.1016/j.future.2023.09.012openalex-snapshot

LearnChain: Transparent and cooperative reinforcement learning on Blockchain

inferred← citeshttps://doi.org/10.1016/j.heliyon.2024.e35683openalex-snapshot

Big data analytics and artificial intelligence aspects for privacy and security concerns for demand response modelling in smart grid: A futuristic approach

inferred← citeshttps://doi.org/10.1016/j.ijepes.2025.110878openalex-snapshot

A CGAN-based adversarial attack method for data-driven state estimation

inferred← citeshttps://doi.org/10.1016/j.inffus.2026.104241openalex-snapshot

Security and privacy in LLMs: A comprehensive survey of threats and mitigation strategies

inferred← citeshttps://doi.org/10.1016/j.ins.2025.121905openalex-snapshot

Energy-latency attacks via sponge poisoning

inferred← citeshttps://doi.org/10.1016/j.ins.2025.122168openalex-snapshot

Graph neural networks adversarial attacks based on node gradient and importance score

inferred← citeshttps://doi.org/10.1016/j.iot.2024.101320openalex-snapshot

The revolution and vision of explainable AI for Android malware detection and protection

inferred← citeshttps://doi.org/10.1016/j.iotcps.2023.04.001openalex-snapshot

Security of federated learning with IoT systems: Issues, limitations, challenges, and solutions

inferred← citeshttps://doi.org/10.1016/j.jisa.2023.103580openalex-snapshot

Blockchain-based fairness-enhanced federated learning scheme against label flipping attack

inferred← citeshttps://doi.org/10.1016/j.jisa.2026.104457openalex-snapshot

Provenance-based advanced persistent threat detection via holistic contrastive learning with heuristic augmentation

inferred← citeshttps://doi.org/10.1016/j.jlp.2026.105953openalex-snapshot

A comprehensive review of AI-enabled predictive maintenance for hydrogen-powered transport: Advancing process safety and sustainability

inferred← citeshttps://doi.org/10.1016/j.jnca.2026.104451openalex-snapshot

Improving smart contract security with transformer-based anomaly detection

inferred← citeshttps://doi.org/10.1016/j.knosys.2025.113019openalex-snapshot

Social bot detection using variational generative adversarial networks with hidden Markov models in Twitter network

inferred← citeshttps://doi.org/10.1016/j.knosys.2025.114828openalex-snapshot

Accountable federated learning against local poisoning attacks

inferred← citeshttps://doi.org/10.1016/j.knosys.2026.116930openalex-snapshot

Counterfactual incremental defense against poisoning attacks

inferred← citeshttps://doi.org/10.1016/j.neucom.2023.03.052openalex-snapshot

A lightweight backdoor defense framework based on image inpainting

inferred← citeshttps://doi.org/10.1016/j.neucom.2024.128349openalex-snapshot

Improved gradient leakage attack against compressed gradients in federated learning

inferred← citeshttps://doi.org/10.1016/j.neucom.2024.128902openalex-snapshot

Spatialspectral-Backdoor: Realizing backdoor attack for deep neural networks in brain–computer interface via EEG characteristics

inferred← citeshttps://doi.org/10.1016/j.neucom.2026.134365openalex-snapshot

NLP in cybersecurity: Advances, applications, and future directions for threat analysis and dark web intelligence

inferred← citeshttps://doi.org/10.1016/j.neucom.2026.134830openalex-snapshot

GaussGuard: Leave-one-out detection and mitigation of view-conditional poisoning attacks on 3D Gaussian Splatting

inferred← citeshttps://doi.org/10.1016/j.neunet.2023.10.034openalex-snapshot

Learning a robust foundation model against clean-label data poisoning attacks at downstream tasks

inferred← citeshttps://doi.org/10.1016/j.neunet.2025.107990openalex-snapshot

GraphGuard: An adaptive approach for restoring accuracy in backdoor-compromised GNNs

inferred← citeshttps://doi.org/10.1016/j.neunet.2026.109556openalex-snapshot

Backdooring rationalization plus

inferred← citeshttps://doi.org/10.1016/j.patcog.2026.113211openalex-snapshot

UPGP:Backdoor defense via unlearning perturbation and orthogonality-constraint gradient projection

inferred← citeshttps://doi.org/10.1016/j.patcog.2026.114565openalex-snapshot

BadDenoise: Backdoor attacks on self-supervised image denoising

inferred← citeshttps://doi.org/10.1016/j.patter.2025.101260openalex-snapshot

Unleashing the potential of prompt engineering for large language models

inferred← citeshttps://doi.org/10.1016/j.sysarc.2025.103544openalex-snapshot

T-TNet: A dual-dependency trigger framework for active defense and hierarchical access control via multi-domain information fusion

inferred← citeshttps://doi.org/10.1016/j.trc.2024.104750openalex-snapshot

Data poisoning attacks in intelligent transportation systems: A survey

inferred← citeshttps://doi.org/10.1016/j.trc.2025.105501openalex-snapshot

Transferability in data poisoning attacks on spatiotemporal traffic forecasting models

inferred← citeshttps://doi.org/10.1038/s41467-026-70420-4openalex-snapshot

Superior resilience to poisoning and amenability to unlearning in quantum machine learning

inferred← citeshttps://doi.org/10.1038/s41598-025-95564-zopenalex-snapshot

Restricted Boltzmann machine with Sobel filter dense adversarial noise secured layer framework for flower species recognition

inferred← citeshttps://doi.org/10.1051/epjconf/202532801069openalex-snapshot

Data Anonymization and Privacy Preservation in Healthcare Systems

inferred← citeshttps://doi.org/10.1080/01969722.2025.2483718openalex-snapshot

MCL++ : Strengthening Defenses Against Backdoor Poisoning Attacks

inferred← citeshttps://doi.org/10.1080/08874417.2023.2251443openalex-snapshot

Towards Defining a Trustworthy Artificial Intelligence System Development Maturity Model

inferred← citeshttps://doi.org/10.1080/19393555.2026.2632670openalex-snapshot

Intrusion detection using ensemble learning and deep learning for IoT network security

inferred← citeshttps://doi.org/10.1080/19475683.2026.2630753openalex-snapshot

The role of open-source LLMs in shaping the future of GeoAI

inferred← citeshttps://doi.org/10.1109/acait60137.2023.10528484openalex-snapshot

Data Hybrid Attacks Based on Sensitive Users in Recommender Systems

inferred← citeshttps://doi.org/10.1109/access.2022.3176385openalex-snapshot

A Survey on Trusted Distributed Artificial Intelligence

inferred← citeshttps://doi.org/10.1109/access.2022.3229124openalex-snapshot

Turning Federated Learning Systems Into Covert Channels

inferred← citeshttps://doi.org/10.1109/access.2023.3269980openalex-snapshot

A Survey on Securing Federated Learning: Analysis of Applications, Attacks, Challenges, and Trends

inferred← citeshttps://doi.org/10.1109/access.2024.3355816openalex-snapshot

Backdoor Attacks to Deep Neural Networks: A Survey of the Literature, Challenges, and Future Research Directions

inferred← citeshttps://doi.org/10.1109/access.2024.3363657openalex-snapshot

Security Considerations in AI-Robotics: A Survey of Current Methods, Challenges, and Opportunities

inferred← citeshttps://doi.org/10.1109/access.2024.3382584openalex-snapshot

A Comprehensive Survey on Backdoor Attacks and Their Defenses in Face Recognition Systems

inferred← citeshttps://doi.org/10.1109/access.2024.3477714openalex-snapshot

Trends in Smart Grid Cyber-Physical Security: Components, Threats, and Solutions

inferred← citeshttps://doi.org/10.1109/access.2024.3485804openalex-snapshot

Defusing Dirty Label Backdoor Attack With Differentially Private Data Through Feature Vectorized AlexNet for Face Gender Classification

inferred← citeshttps://doi.org/10.1109/access.2024.3513485openalex-snapshot

Defending Data Poisoning Attack through Watermarked Friendly Noise Luminosity Activated Dense Layered UNet for Classification of Lung Disease

inferred← citeshttps://doi.org/10.1109/access.2025.3571995openalex-snapshot

Survey on Backdoor Attacks on Deep Learning: Current Trends, Categorization, Applications, Research Challenges, and Future Prospects

inferred← citeshttps://doi.org/10.1109/access.2025.3586416openalex-snapshot

Improved Distributed Backdoor Attacks in Federated Learning by Density-Adaptive Data Poisoning and Projection-Based Gradient Updating

inferred← citeshttps://doi.org/10.1109/access.2025.3608951openalex-snapshot

Is My Data in Your AI? Membership Inference Test (MINT) Applied to Face Biometrics

inferred← citeshttps://doi.org/10.1109/access.2025.3642198openalex-snapshot

SecurePoL: Integration of Watermarking With Proof-of-Learning to Enhance Security Against Spoofing Attacks

inferred← citeshttps://doi.org/10.1109/access.2026.3695138openalex-snapshot

Evaluating the Effect of Data Poisoning via Label Flipping on Traditional and Deep Learning Models for Arabic Offensive Text Detection

inferred← citeshttps://doi.org/10.1109/acdsa65407.2025.11166409openalex-snapshot

Adversarial Attacks on Machine Learning Models in Cybersecurity

inferred← citeshttps://doi.org/10.1109/acsacw65225.2024.00013openalex-snapshot

Restoring Unintended Model Learning by Error Correcting Code

inferred← citeshttps://doi.org/10.1109/asru57964.2023.10389697openalex-snapshot

Joint Energy-Based Model for Robust Speech Classification System Against Dirty-Label Backdoor Poisoning Attacks

inferred← citeshttps://doi.org/10.1109/bdpc63545.2025.11135804openalex-snapshot

Dual-Model Backdoor Defense with Contrast Learning

inferred← citeshttps://doi.org/10.1109/cieec58067.2023.10165834openalex-snapshot

A GAN-based Adversarial Attack Method for Data-driven State Estimation

inferred← citeshttps://doi.org/10.1109/comst.2024.3361451openalex-snapshot

Data and Model Poisoning Backdoor Attacks on Wireless Federated Learning, and the Defense Mechanisms: A Comprehensive Survey

inferred← citeshttps://doi.org/10.1109/comst.2024.3471685openalex-snapshot

Resource Management, Security, and Privacy Issues in Semantic Communications: A Survey

inferred← citeshttps://doi.org/10.1109/cress68073.2025.11452523openalex-snapshot

RHDC: A Redundant and Heterogeneous Defense Chain Mechanism for Endogenous Security-Oriented Switches

inferred← citeshttps://doi.org/10.1109/csitss67709.2025.11294762openalex-snapshot

Smart Mobility and Coverage in Ghats: Terrain-Aware Routing and Cost-Optimized MCDS Deployment

inferred← citeshttps://doi.org/10.1109/cvpr52729.2023.00750openalex-snapshot

Boundary Unlearning: Rapid Forgetting of Deep Networks via Shifting the Decision Boundary

inferred← citeshttps://doi.org/10.1109/cvpr52733.2024.02335openalex-snapshot

Attack To Defend: Exploiting Adversarial Attacks for Detecting Poisoned Models

inferred← citeshttps://doi.org/10.1109/cvprw56347.2022.00033openalex-snapshot

Poisons that are learned faster are more effective

inferred← citeshttps://doi.org/10.1109/dcoss-iot65416.2025.00148openalex-snapshot

Can Cross-Layer Intrusion Detection Secure Agriculture 4.0 Systems?

inferred← citeshttps://doi.org/10.1109/dsc55868.2022.00014openalex-snapshot

A Survey on Data Poisoning Attacks and Defenses

inferred← citeshttps://doi.org/10.1109/dsc65356.2025.11260868openalex-snapshot

Attack Information Spectrum: A Taxonomy of Adversarial Attack Methods for Images

inferred← citeshttps://doi.org/10.1109/dsc67331.2025.00056openalex-snapshot

When Reputation Meets Auction: A Dual Incentive Mechanism for Mitigating Clean Label Attack in Data Trading Markets

inferred← citeshttps://doi.org/10.1109/dsn-w54100.2022.00019openalex-snapshot

A Robust Framework for Adaptive Selection of Filter Ensembles to Detect Adversarial Inputs

inferred← citeshttps://doi.org/10.1109/etfa61755.2024.10710991openalex-snapshot

Concepts and Measures Towards Trustworthy AI in Industrial Manufacturing

inferred← citeshttps://doi.org/10.1109/fine71157.2026.00020openalex-snapshot

Generative AI for Trustworthy and Compliant Cybersecurity in the Digital Landscape

inferred← citeshttps://doi.org/10.1109/fmec54266.2021.9732568openalex-snapshot

Bird's-eye view on the Automotive Cybersecurity Landscape & Challenges in adopting AI/ML

inferred← citeshttps://doi.org/10.1109/focs57990.2023.00133openalex-snapshot

The Full Landscape of Robust Mean Testing: Sharp Separations between Oblivious and Adaptive Contamination

inferred← citeshttps://doi.org/10.1109/hpcc64274.2024.00188openalex-snapshot

DP-CAKA: Defending Local Model Poisoning Attacks Based on Differential Privacy and Complex Acc-based multi-Krum Algorithm in Distributed Federated Learning

inferred← citeshttps://doi.org/10.1109/hpcc67675.2025.00157openalex-snapshot

Towards Building Robust, Reliable and Private AI/ML Security Solutions in Open Radio Access Networks

inferred← citeshttps://doi.org/10.1109/ic-nidc59918.2023.10390737openalex-snapshot

CTP: Defending Against Data Poisoning in Attack Traffic Detection Based Deep Neural Networks

inferred← citeshttps://doi.org/10.1109/icaic67076.2026.11395867openalex-snapshot

dataRLsec: Safety, Security, and Reliability With Robust Offline Reinforcement Learning for DPAs

inferred← citeshttps://doi.org/10.1109/icassp48485.2024.10448169openalex-snapshot

Breaking Speaker Recognition with Paddingback

inferred← citeshttps://doi.org/10.1109/icassp49357.2023.10095980openalex-snapshot

Untargeted Backdoor Attack Against Object Detection

inferred← citeshttps://doi.org/10.1109/icc52391.2025.11161689openalex-snapshot

Making Audio Data Unlearnable

inferred← citeshttps://doi.org/10.1109/iccc65529.2025.11148722openalex-snapshot

Data Poisoning Attack Detection Based On Reconstruction

inferred← citeshttps://doi.org/10.1109/iccst59048.2023.10474244openalex-snapshot

SL-Defender: Decentralized Defense for Adversarial Robustness in Federated Learning

inferred← citeshttps://doi.org/10.1109/iccv48922.2021.00758openalex-snapshot

Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddings

inferred← citeshttps://doi.org/10.1109/iccv51701.2025.00212openalex-snapshot

Prototype Guided Backdoor Defense via Activation Space Manipulation

inferred← citeshttps://doi.org/10.1109/iccworkshops67674.2025.11162402openalex-snapshot

Manipulating Digital Twin Networks by Poisoning Semantic Knowledge Base

inferred← citeshttps://doi.org/10.1109/icdmcs69443.2025.00023openalex-snapshot

RoboChain: A Blockchain-Powered Decentralized Training Framework for General-Purpose Robots

inferred← citeshttps://doi.org/10.1109/icears64219.2025.10940731openalex-snapshot

Mitigating Iterative Fast Gradient Adversarial Poisoning in Archaeological Image Datasets using Generative Adversarial Networks and Denoising Autoencoders

inferred← citeshttps://doi.org/10.1109/icecce61019.2023.10442532openalex-snapshot

A Systematic Review of Recent Research on Chatbots

inferred← citeshttps://doi.org/10.1109/icetisi67983.2025.11405914openalex-snapshot

Deep Neural Network Watermarking to Detect Backdoor Attacks in Datasets Using Wet Paper Coding

inferred← citeshttps://doi.org/10.1109/icicip64458.2025.10898123openalex-snapshot

Does Federated Learning Improve the Resiliency of Machine Learning Models Against Data Fault Attacks?

inferred← citeshttps://doi.org/10.1109/iciss71466.2026.11715026openalex-snapshot

Evaluating the Robustness of Transformer-based Models Against Data Poisoning Attacks in Social Media Sentiment Analysis

inferred← citeshttps://doi.org/10.1109/icnlp65360.2025.11108582openalex-snapshot

New Construction Method for Weightwise Perfectly Balanced Boolean Functions

inferred← citeshttps://doi.org/10.1109/icsadl61749.2024.00036openalex-snapshot

Real Time Poisoning Attacks and Privacy Strategies on Machine Learning Systems

inferred← citeshttps://doi.org/10.1109/icse48619.2023.00206openalex-snapshot

An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry

inferred← citeshttps://doi.org/10.1109/iitcee64140.2025.10915410openalex-snapshot

Securing ML Models on Websites: Face Recognition and Spoof Detection via IPFS Blockchain

inferred← citeshttps://doi.org/10.1109/ijcnn60899.2024.10650573openalex-snapshot

Unveiling Robustness of Spiking Neural Networks against Data Poisoning Attacks

inferred← citeshttps://doi.org/10.1109/ijcnn60899.2024.10651155openalex-snapshot

HiddenSpeaker: Generate Imperceptible Unlearnable Audios for Speaker Verification System

inferred← citeshttps://doi.org/10.1109/ijcnn64981.2025.11228852openalex-snapshot

SPBA: Utilizing Speech Large Language Model for Backdoor Attacks on Speech Classification Models

inferred← citeshttps://doi.org/10.1109/iscaie68866.2026.11576316openalex-snapshot

From Automation to Accountability: Security Architectures and Non-Human Identity Governance in Generative AI–Driven Systems Integration

inferred← citeshttps://doi.org/10.1109/ismsit67332.2025.11267881openalex-snapshot

A case study on mirror- and twin-based bypass of smartphone face unlock systems

inferred← citeshttps://doi.org/10.1109/isncc70543.2026.11693833openalex-snapshot

Security and Privacy in Aquatic Acoustic Systems: A Review of ML/DL in Edge-Fog-Cloud

inferred← citeshttps://doi.org/10.1109/iwcmc69287.2026.11579810openalex-snapshot

When Models Must Forget: Evaluating Machine Unlearning Algorithms for Data Privacy and Security

inferred← citeshttps://doi.org/10.1109/jiot.2023.3325634openalex-snapshot

MITDBA: Mitigating Dynamic Backdoor Attacks in Federated Learning for IoT Applications

inferred← citeshttps://doi.org/10.1109/jiot.2025.3575005openalex-snapshot

Model Residuals as Shields: A Two-Level Formulation to Defend Smart Grids From Poisoning Attacks

inferred← citeshttps://doi.org/10.1109/jiot.2025.3640212openalex-snapshot

Data Poisoning Offensive and Defensive System in FL-Enabled Low-Altitude IoT Scenario: Unlearnable Example Attack and Model Similarity Defend

inferred← citeshttps://doi.org/10.1109/jiot.2025.3649049openalex-snapshot

Navigating Embodied Intelligence: Enabling Technologies, Security and Privacy, and Emerging Trends

inferred← citeshttps://doi.org/10.1109/jsac.2025.3536557openalex-snapshot

Next Generation Advanced Transceiver Technologies for 6G and Beyond

inferred← citeshttps://doi.org/10.1109/lsp.2023.3293429openalex-snapshot

Stealthy Backdoor Attack Against Speaker Recognition Using Phase-Injection Hidden Trigger

inferred← citeshttps://doi.org/10.1109/lsp.2025.3617292openalex-snapshot

IBSD: Iterable Black-Box Self-Defense Against Backdoor Attacks

inferred← citeshttps://doi.org/10.1109/mis.2024.3410372openalex-snapshot

Regulated Federated Learning Against the Effects of Heterogeneity and Client Attacks

inferred← citeshttps://doi.org/10.1109/mrai70020.2026.11621182openalex-snapshot

Training-Time Backdoor Sample Filtering via Loss and Uncertainty Dynamics

inferred← citeshttps://doi.org/10.1109/msn60784.2023.00073openalex-snapshot

Supvirus: A Scenario-Oriented Feature Poisoning Attack Approach in SplitFed Learning

inferred← citeshttps://doi.org/10.1109/ojcoms.2024.3449563openalex-snapshot

Federated Learning for Enhanced Cybersecurity and Trustworthiness in 5G and 6G Networks: A Comprehensive Survey

inferred← citeshttps://doi.org/10.1109/ojsp.2022.3190213openalex-snapshot

An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences

inferred← citeshttps://doi.org/10.1109/qmtisit63393.2024.10762915openalex-snapshot

Vulnerabilities of Artificial Intelligence Systems

inferred← citeshttps://doi.org/10.1109/qrs57517.2022.00086openalex-snapshot

A Survey on Backdoor Attack and Defense in Natural Language Processing

inferred← citeshttps://doi.org/10.1109/raid67961.2025.00048openalex-snapshot

ADAPT: A Pseudo-labeling Approach to Combat Concept Drift in Malware Detection

inferred← citeshttps://doi.org/10.1109/resgenxai64788.2025.11344010openalex-snapshot

Understanding and Mitigating Data Poisoning in LLMs

inferred← citeshttps://doi.org/10.1109/ri2c67120.2025.11282760openalex-snapshot

Enhancing Security in DAWN-MANET for Disaster Management: Challenges and Solutions

inferred← citeshttps://doi.org/10.1109/satml54575.2023.00035openalex-snapshot

Venomave: Targeted Poisoning Against Speech Recognition

inferred← citeshttps://doi.org/10.1109/satml59370.2024.00025openalex-snapshot

The Devil’s Advocate: Shattering the Illusion of Unexploitable Data using Diffusion Models

inferred← citeshttps://doi.org/10.1109/satml68715.2026.00019openalex-snapshot

On the Fragility of Contribution Evaluation in Federated Learning

inferred← citeshttps://doi.org/10.1109/smartcomp58114.2023.00085openalex-snapshot

Assessing Wearable Human Activity Recognition Systems Against Data Poisoning Attacks in Differentially-Private Federated Learning

inferred← citeshttps://doi.org/10.1109/sp46214.2022.9833623openalex-snapshot

Property Inference from Poisoning

inferred← citeshttps://doi.org/10.1109/sp46214.2022.9833647openalex-snapshot

Back to the Drawing Board: A Critical Evaluation of Poisoning Attacks on Production Federated Learning

inferred← citeshttps://doi.org/10.1109/sp54263.2024.00031openalex-snapshot

Backdooring Multimodal Learning

inferred← citeshttps://doi.org/10.1109/sp54263.2024.00207openalex-snapshot

Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models

inferred← citeshttps://doi.org/10.1109/sp54263.2024.00223openalex-snapshot

DeepVenom: Persistent DNN Backdoors Exploiting Transient Weight Perturbations in Memories

inferred← citeshttps://doi.org/10.1109/ssci51031.2022.10022015openalex-snapshot

Label Flipping Data Poisoning Attack Against Wearable Human Activity Recognition System

showing the first 200 of 343

Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.