{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/backdoor-attack/papers/5","list_of":"/task/backdoor-attack","task":"Backdoor Attack","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":5,"pages_in_order":6,"rows_per_page":100,"rows":[401,500],"of":523,"counts":{"archive_papers_tagged":523,"with_a_code_link":217,"where_syntology_ran_a_sample":88,"not_listed_spam_title":0,"listed":523,"listed_where_code_ran":88,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":67,"every_run_a_failure_of_syntologys_instrument":21,"listed_with_a_run_with_no_instrument_failure":67,"listed_every_run_a_failure_of_syntologys_instrument":21,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/backdoor-attack","prev":"/task/backdoor-attack/papers/4","next":"/task/backdoor-attack/papers/6","papers":[{"url":null,"slug":"mitigating-backdoor-attack-via-prerequisite","title":"Mitigating Backdoor Attack Via Prerequisite Transformation","date":"2023-06-03","arxiv_id":"2306.01983","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-backdoor-attack-with-visible-semantic","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","date":"2023-06-01","arxiv_id":"2306.00816","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attacks-against-incremental-learners","title":"Backdoor Attacks Against Incremental Learners: An Empirical Evaluation Study","date":"2023-05-28","arxiv_id":"2305.18384","repositories_listed":0,"syntology":null},{"url":null,"slug":"zero-day-backdoor-attack-against-text-to","title":"Personalization as a Shortcut for Few-Shot Backdoor Attack against Text-to-Image Diffusion Models","date":"2023-05-18","arxiv_id":"2305.10701","repositories_listed":0,"syntology":null},{"url":null,"slug":"uor-universal-backdoor-attacks-on-pre-trained","title":"UOR: Universal Backdoor Attacks on Pre-trained Language Models","date":"2023-05-16","arxiv_id":"2305.09574","repositories_listed":0,"syntology":null},{"url":null,"slug":"badsam-exploring-security-vulnerabilities-of","title":"BadSAM: Exploring Security Vulnerabilities of SAM via Backdoor Attacks","date":"2023-05-05","arxiv_id":"2305.03289","repositories_listed":0,"syntology":null},{"url":null,"slug":"dabs-data-agnostic-backdoor-attack-at-the","title":"DABS: Data-Agnostic Backdoor attack at the Server in Federated Learning","date":"2023-05-02","arxiv_id":"2305.01267","repositories_listed":0,"syntology":null},{"url":null,"slug":"prompt-as-triggers-for-backdoor-attack","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","date":"2023-05-02","arxiv_id":"2305.01219","repositories_listed":0,"syntology":null},{"url":null,"slug":"chatgpt-as-an-attack-tool-stealthy-textual","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","date":"2023-04-27","arxiv_id":"2304.14475","repositories_listed":0,"syntology":null},{"url":null,"slug":"launching-a-robust-backdoor-attack-under","title":"INK: Inheritable Natural Backdoor Attack Against Model Distillation","date":"2023-04-21","arxiv_id":"2304.10985","repositories_listed":0,"syntology":null},{"url":null,"slug":"badvfl-backdoor-attacks-in-vertical-federated","title":"BadVFL: Backdoor Attacks in Vertical Federated Learning","date":"2023-04-18","arxiv_id":"2304.08847","repositories_listed":0,"syntology":null},{"url":null,"slug":"evil-from-within-machine-learning-backdoors","title":"Evil from Within: Machine Learning Backdoors through Hardware Trojans","date":"2023-04-17","arxiv_id":"2304.08411","repositories_listed":0,"syntology":null},{"url":null,"slug":"rethinking-the-trigger-injecting-position-in","title":"Rethinking the Trigger-injecting Position in Graph Backdoor Attack","date":"2023-04-05","arxiv_id":"2304.02277","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attacks-with-input-unique-triggers","title":"Backdoor Attacks with Input-unique Triggers in NLP","date":"2023-03-25","arxiv_id":"2303.14325","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attacks-and-defenses-in-federated","title":"Backdoor Attacks and Defenses in Federated Learning: Survey, Challenges and Future Research Directions","date":"2023-03-03","arxiv_id":"2303.02213","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-semantic-backdoor-attack-against-graph","title":"A semantic backdoor attack against Graph Convolutional Networks","date":"2023-02-28","arxiv_id":"2302.14353","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attacks-against-deep-image","title":"Backdoor Attacks Against Deep Image Compression via Adaptive Frequency Trigger","date":"2023-02-28","arxiv_id":"2302.14677","repositories_listed":0,"syntology":null},{"url":null,"slug":"satba-an-invisible-backdoor-attack-based-on","title":"SATBA: An Invisible Backdoor Attack Based On Spatial Attention","date":"2023-02-25","arxiv_id":"2302.13056","repositories_listed":0,"syntology":null},{"url":null,"slug":"badgpt-exploring-security-vulnerabilities-of","title":"BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPT","date":"2023-02-21","arxiv_id":"2304.12298","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-feasibility-of-server-side-backdoor","title":"On Feasibility of Server-side Backdoor Attacks on Split Learning","date":"2023-02-19","arxiv_id":"2302.09578","repositories_listed":0,"syntology":null},{"url":null,"slug":"qtrojan-a-circuit-backdoor-against-quantum","title":"QTrojan: A Circuit Backdoor Against Quantum Neural Networks","date":"2023-02-16","arxiv_id":"2302.08090","repositories_listed":0,"syntology":null},{"url":null,"slug":"gradient-shaping-enhancing-backdoor-attack","title":"Gradient Shaping: Enhancing Backdoor Attack Against Reverse Engineering","date":"2023-01-29","arxiv_id":"2301.12318","repositories_listed":0,"syntology":null},{"url":null,"slug":"bdmmt-backdoor-sample-detection-for-language","title":"BDMMT: Backdoor Sample Detection for Language Models through Model Mutation Testing","date":"2023-01-25","arxiv_id":"2301.10412","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attacks-in-peer-to-peer-federated","title":"Backdoor Attacks in Peer-to-Peer Federated Learning","date":"2023-01-23","arxiv_id":"2301.09732","repositories_listed":0,"syntology":null},{"url":null,"slug":"you-are-catching-my-attention-are-vision","title":"You Are Catching My Attention: Are Vision Transformers Bad Learners Under Backdoor Attacks?","date":"2023-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"vulnerabilities-of-deep-learning-driven","title":"Vulnerabilities of Deep Learning-Driven Semantic Communications to Backdoor (Trojan) Attacks","date":"2022-12-21","arxiv_id":"2212.11205","repositories_listed":0,"syntology":null},{"url":null,"slug":"vsvc-backdoor-attack-against-keyword-spotting","title":"VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion","date":"2022-12-20","arxiv_id":"2212.10103","repositories_listed":0,"syntology":null},{"url":null,"slug":"ai-security-for-geoscience-and-remote-sensing","title":"AI Security for Geoscience and Remote Sensing: Challenges and Future Trends","date":"2022-12-19","arxiv_id":"2212.09360","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attack-detection-in-computer-vision","title":"Backdoor Attack Detection in Computer Vision by Applying Matrix Factorization on the Weights of Deep Networks","date":"2022-12-15","arxiv_id":"2212.08121","repositories_listed":0,"syntology":null},{"url":null,"slug":"be-careful-with-rotation-a-uniform-backdoor","title":"Be Careful with Rotation: A Uniform Backdoor Pattern for 3D Shape","date":"2022-11-28","arxiv_id":"2211.16192","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-survey-on-backdoor-attack-and-defense-in","title":"A Survey on Backdoor Attack and Defense in Natural Language Processing","date":"2022-11-22","arxiv_id":"2211.11958","repositories_listed":0,"syntology":null},{"url":null,"slug":"pbsm-backdoor-attack-against-keyword-spotting","title":"PBSM: Backdoor attack against Keyword spotting based on pitch boosting and sound masking","date":"2022-11-16","arxiv_id":"2211.08697","repositories_listed":0,"syntology":null},{"url":null,"slug":"batt-backdoor-attack-with-transformation","title":"BATT: Backdoor Attack with Transformation-based Triggers","date":"2022-11-02","arxiv_id":"2211.01806","repositories_listed":0,"syntology":null},{"url":null,"slug":"apple-of-sodom-hidden-backdoors-in-superior","title":"Apple of Sodom: Hidden Backdoors in Superior Sentence Embeddings via Contrastive Learning","date":"2022-10-20","arxiv_id":"2210.11082","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attack-and-defense-in-federated","title":"Backdoor Attack and Defense in Federated Generative Adversarial Network-based Medical Image Synthesis","date":"2022-10-19","arxiv_id":"2210.10886","repositories_listed":0,"syntology":null},{"url":null,"slug":"marksman-backdoor-backdoor-attacks-with","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","date":"2022-10-17","arxiv_id":"2210.09194","repositories_listed":0,"syntology":null},{"url":null,"slug":"understanding-impacts-of-task-similarity-on","title":"Understanding Impacts of Task Similarity on Backdoor Attack and Detection","date":"2022-10-12","arxiv_id":"2210.06509","repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-against-backdoor-attack-on-graph","title":"Defending Against Backdoor Attack on Graph Nerual Network by Explainability","date":"2022-09-07","arxiv_id":"2209.02902","repositories_listed":0,"syntology":null},{"url":null,"slug":"reduce-communication-costs-and-preserve","title":"FedPrompt: Communication-Efficient and Privacy Preserving Prompt Tuning in Federated Learning","date":"2022-08-25","arxiv_id":"2208.12268","repositories_listed":0,"syntology":null},{"url":null,"slug":"unicon-unidirectional-split-learning-with","title":"Bidirectional Contrastive Split Learning for Visual Question Answering","date":"2022-08-24","arxiv_id":"2208.11435","repositories_listed":0,"syntology":null},{"url":null,"slug":"confidence-matters-inspecting-backdoors-in","title":"Confidence Matters: Inspecting Backdoors in Deep Neural Networks via Distribution Transfer","date":"2022-08-13","arxiv_id":"2208.06592","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-knowledge-distillation-based-backdoor","title":"A Knowledge Distillation-Based Backdoor Attack in Federated Learning","date":"2022-08-12","arxiv_id":"2208.06176","repositories_listed":0,"syntology":null},{"url":null,"slug":"frib-low-poisoning-rate-invisible-backdoor","title":"FRIB: Low-poisoning Rate Invisible Backdoor Attack based on Feature Repair","date":"2022-07-26","arxiv_id":"2207.12863","repositories_listed":0,"syntology":null},{"url":null,"slug":"technical-report-assisting-backdoor-federated","title":"Technical Report: Assisting Backdoor Federated Learning with Whole Population Knowledge Alignment","date":"2022-07-25","arxiv_id":"2207.12327","repositories_listed":0,"syntology":null},{"url":null,"slug":"invisible-backdoor-attacks-using-data","title":"Invisible Backdoor Attacks Using Data Poisoning in the Frequency Domain","date":"2022-07-09","arxiv_id":"2207.04209","repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-backdoor-attacks-on-vision","title":"Defending Backdoor Attacks on Vision Transformer via Patch Processing","date":"2022-06-24","arxiv_id":"2206.12381","repositories_listed":0,"syntology":null},{"url":null,"slug":"transferable-graph-backdoor-attack","title":"Transferable Graph Backdoor Attack","date":"2022-06-21","arxiv_id":"2207.00425","repositories_listed":0,"syntology":null},{"url":null,"slug":"is-multi-modal-necessarily-better-robustness","title":"Is Multi-Modal Necessarily Better? Robustness Evaluation of Multi-modal Fake News Detection","date":"2022-06-17","arxiv_id":"2206.08788","repositories_listed":0,"syntology":null},{"url":null,"slug":"enhancing-clean-label-backdoor-attack-with","title":"Enhancing Clean Label Backdoor Attack with Two-phase Specific Triggers","date":"2022-06-10","arxiv_id":"2206.04881","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-temporal-chrominance-trigger-for-clean","title":"A temporal chrominance trigger for clean-label backdoor attack against anti-spoof rebroadcast detection","date":"2022-06-02","arxiv_id":"2206.01102","repositories_listed":0,"syntology":null},{"url":null,"slug":"contributor-aware-defenses-against","title":"Contributor-Aware Defenses Against Adversarial Backdoor Attacks","date":"2022-05-28","arxiv_id":"2206.03583","repositories_listed":0,"syntology":null},{"url":null,"slug":"safenet-mitigating-data-poisoning-attacks-on","title":"SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning","date":"2022-05-20","arxiv_id":"2205.09986","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attacks-on-bayesian-neural-networks","title":"Backdoor Attacks on Bayesian Neural Networks using Reverse Distribution","date":"2022-05-18","arxiv_id":"2205.09167","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-temporal-pattern-backdoor-attack-to-deep","title":"A Temporal-Pattern Backdoor Attack to Deep Reinforcement Learning","date":"2022-05-05","arxiv_id":"2205.02589","repositories_listed":0,"syntology":null},{"url":null,"slug":"adatest-reinforcement-learning-and-adaptive","title":"AdaTest:Reinforcement Learning and Adaptive Sampling for On-chip Hardware Trojan Detection","date":"2022-04-12","arxiv_id":"2204.06117","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attack-against-nlp-models-with","title":"Backdoor Attack against NLP models with Robustness-Aware Perturbation defense","date":"2022-04-08","arxiv_id":"2204.05758","repositories_listed":0,"syntology":null},{"url":null,"slug":"trojan-horse-training-for-breaking-defenses","title":"Trojan Horse Training for Breaking Defenses against Backdoor Attacks in Deep Learning","date":"2022-03-25","arxiv_id":"2203.15506","repositories_listed":0,"syntology":null},{"url":null,"slug":"pidan-a-coherence-optimization-approach-for","title":"PiDAn: A Coherence Optimization Approach for Backdoor Attack Detection and Mitigation in Deep Neural Networks","date":"2022-03-17","arxiv_id":"2203.09289","repositories_listed":0,"syntology":null},{"url":null,"slug":"low-loss-subspace-compression-for-clean-gains","title":"Low-Loss Subspace Compression for Clean Gains against Multi-Agent Backdoor Attacks","date":"2022-03-07","arxiv_id":"2203.03692","repositories_listed":0,"syntology":null},{"url":null,"slug":"clean-annotation-backdoor-attack-against-lane","title":"Physical Backdoor Attacks to Lane Detection Systems in Autonomous Driving","date":"2022-03-02","arxiv_id":"2203.00858","repositories_listed":0,"syntology":null},{"url":null,"slug":"label-smoothed-backdoor-attack","title":"Under-confidence Backdoors Are Resilient and Stealthy Backdoors","date":"2022-02-19","arxiv_id":"2202.11203","repositories_listed":0,"syntology":null},{"url":null,"slug":"debiasing-backdoor-attack-a-benign","title":"Debiasing Backdoor Attack: A Benign Application of Backdoor Attack in Eliminating Data Bias","date":"2022-02-18","arxiv_id":"2202.10582","repositories_listed":0,"syntology":null},{"url":null,"slug":"jigsaw-puzzle-selective-backdoor-attack-to","title":"Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers","date":"2022-02-11","arxiv_id":"2202.05470","repositories_listed":0,"syntology":null},{"url":null,"slug":"false-memory-formation-in-continual-learners","title":"False Memory Formation in Continual Learners Through Imperceptible Backdoor Trigger","date":"2022-02-09","arxiv_id":"2202.04479","repositories_listed":0,"syntology":null},{"url":null,"slug":"imperceptible-and-multi-channel-backdoor","title":"Imperceptible and Multi-channel Backdoor Attack against Deep Neural Networks","date":"2022-01-31","arxiv_id":"2201.13164","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoors-stuck-at-the-frontdoor-multi-agent","title":"Backdoors Stuck At The Frontdoor: Multi-Agent Backdoor Attacks That Backfire","date":"2022-01-28","arxiv_id":"2201.12211","repositories_listed":0,"syntology":null},{"url":null,"slug":"dangerous-cloaking-natural-trigger-based","title":"Dangerous Cloaking: Natural Trigger based Backdoor Attacks on Object Detectors in the Physical World","date":"2022-01-21","arxiv_id":"2201.08619","repositories_listed":0,"syntology":null},{"url":null,"slug":"neighboring-backdoor-attacks-on-graph","title":"Neighboring Backdoor Attacks on Graph Convolutional Network","date":"2022-01-17","arxiv_id":"2201.06202","repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-against-backdoor-attacks-in-natural-1","title":"Defending against Backdoor Attacks in Natural Language Generation","date":"2022-01-16","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"rethink-stealthy-backdoor-attacks-in-natural","title":"Rethink the Evaluation for Attack Strength of Backdoor Attacks in Natural Language Processing","date":"2022-01-09","arxiv_id":"2201.02993","repositories_listed":0,"syntology":null},{"url":null,"slug":"compression-resistant-backdoor-attack-against","title":"Compression-Resistant Backdoor Attack against Deep Neural Networks","date":"2022-01-03","arxiv_id":"2201.00672","repositories_listed":0,"syntology":null},{"url":null,"slug":"defeat-deep-hidden-feature-backdoor-attacks","title":"DEFEAT: Deep Hidden Feature Backdoor Attacks by Imperceptible Perturbation and Latent Representation Constraints","date":"2022-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"test-time-detection-of-backdoor-triggers-for","title":"Test-Time Detection of Backdoor Triggers for Poisoned Deep Neural Networks","date":"2021-12-06","arxiv_id":"2112.03350","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attack-with-imperceptible-input-and","title":"Backdoor Attack with Imperceptible Input and Latent Modification","date":"2021-12-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"an-overview-of-backdoor-attacks-against-deep","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","date":"2021-11-16","arxiv_id":"2111.08429","repositories_listed":0,"syntology":null},{"url":null,"slug":"widen-the-backdoor-to-let-more-attackers-in","title":"Widen The Backdoor To Let More Attackers In","date":"2021-10-09","arxiv_id":"2110.04571","repositories_listed":0,"syntology":null},{"url":null,"slug":"dyn-backdoor-backdoor-attack-on-dynamic-link","title":"Dyn-Backdoor: Backdoor Attack on Dynamic Link Prediction","date":"2021-10-08","arxiv_id":"2110.03875","repositories_listed":0,"syntology":null},{"url":null,"slug":"badpre-task-agnostic-backdoor-attacks-to-pre","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","date":"2021-10-06","arxiv_id":"2110.02467","repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-against-backdoor-attacks-using","title":"Defending Against Backdoor Attacks Using Ensembles of Weak Learners","date":"2021-09-29","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-backdoor-data-poisoning-attacks-by","title":"Defending Backdoor Data Poisoning Attacks by Using Noisy Label Defense Algorithm","date":"2021-09-29","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"feature-grinding-efficient-backdoor","title":"Feature Grinding: Efficient Backdoor Sanitation in Deep Neural Networks","date":"2021-09-29","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"gradient-broadcast-adaptation-defending","title":"Gradient Broadcast Adaptation: Defending against the backdoor attack in pre-trained models","date":"2021-09-29","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"marnet-backdoor-attacks-against-value","title":"MARNET: Backdoor Attacks against Value-Decomposition Multi-Agent Reinforcement Learning","date":"2021-09-29","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"bfclass-a-backdoor-free-text-classification","title":"BFClass: A Backdoor-free Text Classification Framework","date":"2021-09-22","arxiv_id":"2109.10855","repositories_listed":0,"syntology":null},{"url":null,"slug":"check-your-other-door-establishing-backdoor","title":"Check Your Other Door! Creating Backdoor Attacks in the Frequency Domain","date":"2021-09-12","arxiv_id":"2109.05507","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attack-and-defense-for-deep","title":"Backdoor Attack and Defense for Deep Regression","date":"2021-09-06","arxiv_id":"2109.02381","repositories_listed":0,"syntology":null},{"url":null,"slug":"can-you-hear-it-backdoor-attacks-via","title":"Can You Hear It? Backdoor Attacks via Ultrasonic Triggers","date":"2021-07-30","arxiv_id":"2107.14569","repositories_listed":0,"syntology":null},{"url":null,"slug":"subnet-replacement-deployment-stage-backdoor","title":"Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting","date":"2021-07-15","arxiv_id":"2107.07240","repositories_listed":0,"syntology":null},{"url":null,"slug":"badnl-backdoor-attacks-against-nlp-models-1","title":"BadNL: Backdoor Attacks Against NLP Models","date":"2021-06-18","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"handcrafted-backdoors-in-deep-neural-networks","title":"Handcrafted Backdoors in Deep Neural Networks","date":"2021-06-08","arxiv_id":"2106.04690","repositories_listed":0,"syntology":null},{"url":null,"slug":"detecting-backdoor-in-deep-neural-networks","title":"Detecting Backdoor in Deep Neural Networks via Intentional Adversarial Perturbations","date":"2021-05-29","arxiv_id":"2105.14259","repositories_listed":0,"syntology":null},{"url":null,"slug":"poisoning-morphnet-for-clean-label-backdoor","title":"Poisoning MorphNet for Clean-Label Backdoor Attack to Point Clouds","date":"2021-05-11","arxiv_id":"2105.04839","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoorl-backdoor-attack-against-competitive","title":"BACKDOORL: Backdoor Attack against Competitive Reinforcement Learning","date":"2021-05-02","arxiv_id":"2105.00579","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-master-key-backdoor-for-universal","title":"A Master Key Backdoor for Universal Impersonation Attack against DNN-based Face Verification","date":"2021-05-01","arxiv_id":"2105.00249","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-backdoor-attacks-against-deep-neural","title":"Robust Backdoor Attacks against Deep Neural Networks in Real Physical World","date":"2021-04-15","arxiv_id":"2104.07395","repositories_listed":0,"syntology":null},{"url":null,"slug":"explainability-based-backdoor-attacks-against","title":"Explainability-based Backdoor Attacks Against Graph Neural Networks","date":"2021-04-08","arxiv_id":"2104.03674","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-attack-in-the-physical-world","title":"Backdoor Attack in the Physical World","date":"2021-04-06","arxiv_id":"2104.02361","repositories_listed":0,"syntology":null},{"url":null,"slug":"pointba-towards-backdoor-attacks-in-3d-point","title":"PointBA: Towards Backdoor Attacks in 3D Point Cloud","date":"2021-03-30","arxiv_id":"2103.16074","repositories_listed":0,"syntology":null},{"url":null,"slug":"ex-ray-distinguishing-injected-backdoor-from","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","date":"2021-03-16","arxiv_id":"2103.08820","repositories_listed":0,"syntology":null},{"url":null,"slug":"hidden-backdoor-attack-against-semantic","title":"Hidden Backdoor Attack against Semantic Segmentation Models","date":"2021-03-06","arxiv_id":"2103.04038","repositories_listed":0,"syntology":null}],"record_sha256":"b983665706b941c78c1e201351acca6c2f38c84678122a5d9ab33bbe87768ced","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}