{"about":{"non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","site":"https://codewithpapers.app","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page","syntology":{"site":"https://syntology.ai","developers":"https://syntology.ai/developers","mcp":{"server":"https://syntology.ai/mcp","transport":"streamable-http","server_card":"https://syntology.ai/.well-known/mcp/server-card.json","auth":{"type":"trial token, no account","trial_token":"https://syntology.ai/api/oauth/trial/token","method":"POST","docs":"https://syntology.ai/developers"}},"have":"https://syntology.ai/api/graph/have?x=<method, arXiv id or title> (free, answers coverage only)","paper_base":"https://syntology.ai/paper/","atlas_base":"https://app.syntology.ai/?focus="},"machine_readable":[{"url":"https://codewithpapers.app/llms.txt","what":"the machine catalog: every machine-readable file, counted"},{"url":"https://codewithpapers.app/index/manifest.json","what":"paper-to-code index by arXiv id, with Syntology's counts"},{"url":"https://codewithpapers.app/search/manifest.json","what":"site search index (titles, authors) and its files"},{"url":"https://codewithpapers.app/download","what":"bulk files: Syntology's layer, described there"},{"url":"https://codewithpapers.app/build_manifest.json","what":"the build record: inputs, counts, exclusions, probes"}]},"url":"/task/data-poisoning/papers/5","list_of":"/task/data-poisoning","task":"Data Poisoning","archive":{"snapshot":"2025-07-28"},"key_notes":{"n_ran_checked":"legacy name, kept unchanged so existing readers do not break: it counts the samples that ran with no instrument failure (honoured, violated, and ran with no contract checked); it does not mean a contract was checked, and the pages print it as 'K with no instrument failure', not 'K checked'","n_constructed":"a sub-count of the samples that ran, never subtracted from them and never a failure: an executed sample whose run returned an instance of its own class (fixture_out_type equals the entry name): the run built an object and did not compute a result (Syntology's RAN record, counts.constructed)"},"syntology_read_at":"2026-09-28T10:30:06+00:00","order":"archive","order_definition":"repositories listed in the archive (most first), then date (newest first), then slug","page":5,"pages_in_order":5,"rows_per_page":100,"rows":[401,492],"of":492,"counts":{"archive_papers_tagged":492,"with_a_code_link":170,"where_syntology_ran_a_sample":62,"not_listed_spam_title":0,"listed":492,"listed_where_code_ran":62,"where_syntology_ran_a_sample_split":{"with_a_run_with_no_instrument_failure":43,"every_run_a_failure_of_syntologys_instrument":19,"listed_with_a_run_with_no_instrument_failure":43,"listed_every_run_a_failure_of_syntologys_instrument":19,"filter":{"states":["a run with no instrument failure","any run, instrument failures included"],"default":"a run with no instrument failure","note":"on the 'only where code ran' pages the default hides, in the browser, the rows where every run was a failure of Syntology's instrument; the second state shows them again. Rows are hidden, never re-ordered; these twins list every row"}},"definition":"distinct papers the archive tags; 'where Syntology ran a sample' counts papers with at least one harvested sample that ran, which is not a correctness claim"},"first_page":"/task/data-poisoning","prev":"/task/data-poisoning/papers/4","next":null,"papers":[{"url":null,"slug":"a-bic-based-mixture-model-defense-against","title":"A BIC-based Mixture Model Defense against Data Poisoning Attacks on Classifiers","date":"2021-05-28","arxiv_id":"2105.13530","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-gradient-method-for-multilevel-optimization","title":"A Gradient Method for Multilevel Optimization","date":"2021-05-28","arxiv_id":"2105.13954","repositories_listed":0,"syntology":null},{"url":null,"slug":"de-pois-an-attack-agnostic-defense-against","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","date":"2021-05-08","arxiv_id":"2105.03592","repositories_listed":0,"syntology":null},{"url":null,"slug":"influence-based-defense-against-data","title":"Influence Based Defense Against Data Poisoning Attacks in Online Learning","date":"2021-04-24","arxiv_id":"2104.13230","repositories_listed":0,"syntology":null},{"url":null,"slug":"fedcom-a-byzantine-robust-local-model","title":"FedCom: A Byzantine-Robust Local Model Aggregation Rule Using Data Commitment for Federated Learning","date":"2021-04-16","arxiv_id":"2104.08020","repositories_listed":0,"syntology":null},{"url":null,"slug":"defening-against-adversarial-denial-of","title":"Defending Against Adversarial Denial-of-Service Data Poisoning Attacks","date":"2021-04-14","arxiv_id":"2104.06744","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-driven-control-and-data-poisoning","title":"Data-Driven Control and Data-Poisoning attacks in Buildings: the KTH Live-In Lab case study","date":"2021-03-10","arxiv_id":"2103.06208","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-learning-under-clean-label-attack","title":"Robust learning under clean-label attack","date":"2021-03-01","arxiv_id":"2103.00671","repositories_listed":0,"syntology":null},{"url":null,"slug":"oriole-thwarting-privacy-against-trustworthy","title":"Oriole: Thwarting Privacy against Trustworthy Deep Learning Models","date":"2021-02-23","arxiv_id":"2102.11502","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attacks-and-defenses-to","title":"Data Poisoning Attacks and Defenses to Crowdsourcing Systems","date":"2021-02-18","arxiv_id":"2102.09171","repositories_listed":0,"syntology":null},{"url":null,"slug":"preventing-unauthorized-use-of-proprietary","title":"Preventing Unauthorized Use of Proprietary Data: Poisoning for Secure Dataset Release","date":"2021-02-16","arxiv_id":"2103.02683","repositories_listed":0,"syntology":null},{"url":null,"slug":"secure-ucb-saving-stochastic-bandits-from","title":"Saving Stochastic Bandits from Poisoning Attacks via Limited Data Verification","date":"2021-02-15","arxiv_id":"2102.07711","repositories_listed":0,"syntology":null},{"url":null,"slug":"reinforcement-learning-for-data-poisoning-on","title":"Reinforcement Learning For Data Poisoning on Graph Neural Networks","date":"2021-02-12","arxiv_id":"2102.06800","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-poisoning-attacks-and-defense-for","title":"Adversarial Poisoning Attacks and Defense for General Multi-Class Models Based On Synthetic Reduced Nearest Neighbors","date":"2021-02-11","arxiv_id":"2102.05867","repositories_listed":0,"syntology":null},{"url":null,"slug":"generating-fake-cyber-threat-intelligence","title":"Generating Fake Cyber Threat Intelligence Using Transformer-Based Models","date":"2021-02-08","arxiv_id":"2102.04351","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-vulnerability-of-active-transfer","title":"Adversarial Vulnerability of Active Transfer Learning","date":"2021-01-26","arxiv_id":"2101.10792","repositories_listed":0,"syntology":null},{"url":null,"slug":"property-inference-from-poisoning","title":"Property Inference From Poisoning","date":"2021-01-26","arxiv_id":"2101.11073","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attacks-to-deep-learning-based","title":"Data Poisoning Attacks to Deep Learning Based Recommender Systems","date":"2021-01-07","arxiv_id":"2101.02644","repositories_listed":0,"syntology":null},{"url":null,"slug":"active-learning-under-malicious-mislabeling","title":"Active Learning Under Malicious Mislabeling and Poisoning Attacks","date":"2021-01-01","arxiv_id":"2101.00157","repositories_listed":0,"syntology":null},{"url":null,"slug":"clear-clean-up-sample-targeted-backdoor-in","title":"CLEAR: Clean-Up Sample-Targeted Backdoor in Neural Networks","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"just-how-toxic-is-data-poisoning-a-benchmark","title":"Just How Toxic is Data Poisoning? A Benchmark for Backdoor and Data Poisoning Attacks","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"sself-robust-federated-learning-against","title":"Sself: Robust Federated Learning against Stragglers and Adversaries","date":"2021-01-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"federated-unlearning","title":"Federated Unlearning","date":"2020-12-27","arxiv_id":"2012.13891","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-security-for-machine-learning-data","title":"Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses","date":"2020-12-18","arxiv_id":"2012.10544","repositories_listed":0,"syntology":null},{"url":null,"slug":"effective-and-efficient-data-poisoning-in","title":"Influence-Driven Data Poisoning in Graph-Based Semi-Supervised Classifiers","date":"2020-12-14","arxiv_id":"2012.07381","repositories_listed":0,"syntology":null},{"url":null,"slug":"mitigating-the-impact-of-adversarial-attacks","title":"Mitigating the Impact of Adversarial Attacks in Very Deep Networks","date":"2020-12-08","arxiv_id":"2012.04750","repositories_listed":0,"syntology":null},{"url":null,"slug":"certified-robustness-of-nearest-neighbors-1","title":"Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks","date":"2020-12-07","arxiv_id":"2012.03765","repositories_listed":0,"syntology":null},{"url":null,"slug":"bait-and-switch-online-training-data","title":"Bait and Switch: Online Training Data Poisoning of Autonomous Driving Systems","date":"2020-11-08","arxiv_id":"2011.04065","repositories_listed":0,"syntology":null},{"url":null,"slug":"targeted-poisoning-attacks-on-black-box","title":"A Targeted Attack on Black-Box Neural Machine Translation with Parallel Data Poisoning","date":"2020-11-02","arxiv_id":"2011.00675","repositories_listed":0,"syntology":null},{"url":null,"slug":"transparent-interpretation-with-knockouts","title":"Model-Agnostic Explanations using Minimal Forcing Subsets","date":"2020-11-01","arxiv_id":"2011.00639","repositories_listed":0,"syntology":null},{"url":null,"slug":"customizing-triggers-with-concealed-data","title":"Concealed Data Poisoning Attacks on NLP Models","date":"2020-10-23","arxiv_id":"2010.12563","repositories_listed":0,"syntology":null},{"url":null,"slug":"gfl-a-decentralized-federated-learning","title":"GFL: A Decentralized Federated Learning Framework Based On Blockchain","date":"2020-10-21","arxiv_id":"2010.10996","repositories_listed":0,"syntology":null},{"url":null,"slug":"sniper-gmms-structured-gaussian-mixtures","title":"Sniper GMMs: Structured Gaussian mixtures poison ML on large n small p data with high efficacy","date":"2020-10-19","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"reverse-engineering-imperceptible-backdoor","title":"Reverse Engineering Imperceptible Backdoor Attacks on Deep Neural Networks for Detection and Training Set Cleansing","date":"2020-10-15","arxiv_id":"2010.07489","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-attacks-to-machine-learning-based","title":"Adversarial Attacks to Machine Learning-Based Smart Healthcare Systems","date":"2020-10-07","arxiv_id":"2010.03671","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-framework-of-randomized-selection-based","title":"A Framework of Randomized Selection Based Certified Defenses Against Data Poisoning Attacks","date":"2020-09-18","arxiv_id":"2009.08739","repositories_listed":0,"syntology":null},{"url":null,"slug":"practical-poisoning-attacks-on-neural","title":"Practical Poisoning Attacks on Neural Networks","date":"2020-08-01","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"the-price-of-tailoring-the-index-to-your-data","title":"The Price of Tailoring the Index to Your Data: Poisoning Attacks on Learned Index Structures","date":"2020-08-01","arxiv_id":"2008.00297","repositories_listed":0,"syntology":null},{"url":null,"slug":"mitigating-backdoor-attacks-in-lstm-based","title":"Mitigating backdoor attacks in LSTM-based Text Classification Systems by Backdoor Keyword Identification","date":"2020-07-11","arxiv_id":"2007.12070","repositories_listed":0,"syntology":null},{"url":null,"slug":"you-autocomplete-me-poisoning-vulnerabilities","title":"You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion","date":"2020-07-05","arxiv_id":"2007.02220","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-variational-autoencoder-for-tabular","title":"Robust Variational Autoencoder for Tabular Data with Beta Divergence","date":"2020-06-15","arxiv_id":"2006.08204","repositories_listed":0,"syntology":null},{"url":null,"slug":"online-data-poisoning-attacks","title":"Online Data Poisoning Attacks","date":"2020-06-08","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"a-study-of-neural-training-with-non-gradient","title":"Provable Training of a ReLU Gate with an Iterative Non-Gradient Algorithm","date":"2020-05-08","arxiv_id":"2005.04211","repositories_listed":0,"syntology":null},{"url":null,"slug":"systematic-evaluation-of-backdoor-data","title":"Systematic Evaluation of Backdoor Data Poisoning Attacks on Image Classifiers","date":"2020-04-24","arxiv_id":"2004.11514","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attacks-on-federated-machine","title":"Data Poisoning Attacks on Federated Machine Learning","date":"2020-04-19","arxiv_id":"2004.10020","repositories_listed":0,"syntology":null},{"url":null,"slug":"practical-data-poisoning-attack-against-next","title":"Practical Data Poisoning Attack against Next-Item Recommendation","date":"2020-04-07","arxiv_id":"2004.03728","repositories_listed":0,"syntology":null},{"url":null,"slug":"poishygiene-detecting-and-mitigating","title":"PoisHygiene: Detecting and Mitigating Poisoning Attacks in Neural Networks","date":"2020-03-24","arxiv_id":"2003.11110","repositories_listed":0,"syntology":null},{"url":null,"slug":"security-of-distributed-machine-learning-a","title":"Security of Distributed Machine Learning: A Game-Theoretic Approach to Design Secure DSVM","date":"2020-03-08","arxiv_id":"2003.04735","repositories_listed":0,"syntology":null},{"url":null,"slug":"regularisation-can-mitigate-poisoning-attacks","title":"Regularisation Can Mitigate Poisoning Attacks: A Novel Analysis Based on Multiobjective Bilevel Optimisation","date":"2020-02-28","arxiv_id":"2003.00040","repositories_listed":0,"syntology":null},{"url":null,"slug":"defending-against-backdoor-attack-on-deep","title":"Defending against Backdoor Attack on Deep Neural Networks","date":"2020-02-26","arxiv_id":"2002.12162","repositories_listed":0,"syntology":null},{"url":null,"slug":"influence-function-based-data-poisoning","title":"Influence Function based Data Poisoning Attacks to Top-N Recommender Systems","date":"2020-02-19","arxiv_id":"2002.08025","repositories_listed":0,"syntology":null},{"url":null,"slug":"cant-boil-this-frog-robustness-of-online","title":"Can't Boil This Frog: Robustness of Online-Trained Autoencoder-Based Anomaly Detectors to Adversarial Poisoning Attacks","date":"2020-02-07","arxiv_id":"2002.02741","repositories_listed":0,"syntology":null},{"url":null,"slug":"certified-robustness-to-label-flipping","title":"Certified Robustness to Label-Flipping Attacks via Randomized Smoothing","date":"2020-02-07","arxiv_id":"2002.03018","repositories_listed":0,"syntology":null},{"url":null,"slug":"regularization-helps-with-mitigating","title":"Regularization Helps with Mitigating Poisoning Attacks: Distributionally-Robust Machine Learning Using the Wasserstein Distance","date":"2020-01-29","arxiv_id":"2001.10655","repositories_listed":0,"syntology":null},{"url":null,"slug":"humpty-dumpty-controlling-word-meanings-via","title":"Humpty Dumpty: Controlling Word Meanings via Corpus Poisoning","date":"2020-01-14","arxiv_id":"2001.04935","repositories_listed":0,"syntology":null},{"url":null,"slug":"deep-probabilistic-models-to-detect-data","title":"Deep Probabilistic Models to Detect Data Poisoning Attacks","date":"2019-12-03","arxiv_id":"1912.01206","repositories_listed":0,"syntology":null},{"url":null,"slug":"proving-data-poisoning-robustness-in-decision","title":"Proving Data-Poisoning Robustness in Decision Trees","date":"2019-12-02","arxiv_id":"1912.00981","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attacks-on-neighborhood-based","title":"Data Poisoning Attacks on Neighborhood-based Recommender Systems","date":"2019-12-01","arxiv_id":"1912.04109","repositories_listed":0,"syntology":null},{"url":null,"slug":"local-model-poisoning-attacks-to-byzantine","title":"Local Model Poisoning Attacks to Byzantine-Robust Federated Learning","date":"2019-11-26","arxiv_id":"1911.11815","repositories_listed":0,"syntology":null},{"url":null,"slug":"revealing-perceptible-backdoors-without-the","title":"Revealing Perceptible Backdoors, without the Training Set, via the Maximum Achievable Misclassification Fraction Statistic","date":"2019-11-18","arxiv_id":"1911.07970","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-unified-framework-for-data-poisoning-attack","title":"A Unified Framework for Data Poisoning Attack to Graph-based Semi-supervised Learning","date":"2019-10-30","arxiv_id":"1910.14147","repositories_listed":0,"syntology":null},{"url":null,"slug":"shapley-homology-topological-analysis-of","title":"Shapley Homology: Topological Analysis of Sample Influence for Neural Networks","date":"2019-10-15","arxiv_id":"1910.06509","repositories_listed":0,"syntology":null},{"url":null,"slug":"maximal-adversarial-perturbations-for","title":"Maximal adversarial perturbations for obfuscation: Hiding certain attributes while preserving rest","date":"2019-09-27","arxiv_id":"1909.12734","repositories_listed":0,"syntology":null},{"url":null,"slug":"certified-robustness-to-adversarial-label","title":"Certified Robustness to Adversarial Label-Flipping Attacks via Randomized Smoothing","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"fr-gan-fair-and-robust-training","title":"FR-GAN: Fair and Robust Training","date":"2019-09-25","arxiv_id":null,"repositories_listed":0,"syntology":null},{"url":null,"slug":"revealing-backdoors-post-training-in-dnn","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","date":"2019-08-27","arxiv_id":"1908.10498","repositories_listed":0,"syntology":null},{"url":null,"slug":"on-defending-against-label-flipping-attacks","title":"On Defending Against Label Flipping Attacks on Malware Detection Systems","date":"2019-08-13","arxiv_id":"1908.04473","repositories_listed":0,"syntology":null},{"url":null,"slug":"mixed-strategy-game-model-against-data","title":"Mixed Strategy Game Model Against Data Poisoning Attacks","date":"2019-06-07","arxiv_id":"1906.02872","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-investigation-of-data-poisoning-defenses","title":"An Investigation of Data Poisoning Defenses for Online Learning","date":"2019-05-28","arxiv_id":"1905.12121","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attacks-on-stochastic-bandits","title":"Data Poisoning Attacks on Stochastic Bandits","date":"2019-05-16","arxiv_id":"1905.06494","repositories_listed":0,"syntology":null},{"url":null,"slug":"robust-federated-training-via-collaborative","title":"Robust Federated Training via Collaborative Machine Teaching using Trusted Instances","date":"2019-05-08","arxiv_id":"1905.02941","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-data-poisoning-attack-against","title":"Data Poisoning Attack against Knowledge Graph Embedding","date":"2019-04-26","arxiv_id":"1904.12052","repositories_listed":0,"syntology":null},{"url":null,"slug":"can-machine-learning-model-with-static","title":"Can Machine Learning Model with Static Features be Fooled: an Adversarial Machine Learning Approach","date":"2019-04-20","arxiv_id":"1904.09433","repositories_listed":0,"syntology":null},{"url":null,"slug":"adversarial-learning-in-statistical","title":"Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks","date":"2019-04-12","arxiv_id":"1904.06292","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-against-differentially-private","title":"Data Poisoning against Differentially-Private Learners: Attacks and Defenses","date":"2019-03-23","arxiv_id":"1903.09860","repositories_listed":0,"syntology":null},{"url":null,"slug":"practical-distributed-learning-secure-machine","title":"SLSGD: Secure and Efficient Distributed On-device Machine Learning","date":"2019-03-16","arxiv_id":"1903.06996","repositories_listed":0,"syntology":null},{"url":null,"slug":"online-data-poisoning-attack","title":"Online Data Poisoning Attack","date":"2019-03-05","arxiv_id":"1903.01666","repositories_listed":0,"syntology":null},{"url":null,"slug":"snn-under-attack-are-spiking-deep-belief","title":"Is Spiking Secure? A Comparative Study on the Security Vulnerabilities of Spiking and Deep Neural Networks","date":"2019-02-04","arxiv_id":"1902.01147","repositories_listed":0,"syntology":null},{"url":null,"slug":"spectrum-data-poisoning-with-adversarial-deep","title":"Spectrum Data Poisoning with Adversarial Deep Learning","date":"2019-01-26","arxiv_id":"1901.09247","repositories_listed":0,"syntology":null},{"url":null,"slug":"reaching-data-confidentiality-and-model","title":"Reaching Data Confidentiality and Model Accountability on the CalTrain","date":"2018-12-07","arxiv_id":"1812.03230","repositories_listed":0,"syntology":null},{"url":null,"slug":"an-optimal-control-view-of-adversarial","title":"An Optimal Control View of Adversarial Machine Learning","date":"2018-11-11","arxiv_id":"1811.04422","repositories_listed":0,"syntology":null},{"url":null,"slug":"isa4ml-training-data-unaware-imperceptible","title":"TrISec: Training Data-Unaware Imperceptible Security Attacks on Deep Neural Networks","date":"2018-11-02","arxiv_id":"1811.01031","repositories_listed":0,"syntology":null},{"url":null,"slug":"a-mixture-model-based-defense-for-data","title":"A Mixture Model Based Defense for Data Poisoning Attacks Against Naive Bayes Spam Filters","date":"2018-10-31","arxiv_id":"1811.00121","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attack-against-unsupervised","title":"Data Poisoning Attack against Unsupervised Node Embedding Methods","date":"2018-10-30","arxiv_id":"1810.12881","repositories_listed":0,"syntology":null},{"url":null,"slug":"backdoor-embedding-in-convolutional-neural","title":"Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbation","date":"2018-08-30","arxiv_id":"1808.10307","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attacks-against-online","title":"Data Poisoning Attacks against Online Learning","date":"2018-08-27","arxiv_id":"1808.08994","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attacks-in-contextual-bandits","title":"Data Poisoning Attacks in Contextual Bandits","date":"2018-08-17","arxiv_id":"1808.05760","repositories_listed":0,"syntology":null},{"url":null,"slug":"is-feature-selection-secure-against-training","title":"Is feature selection secure against training data poisoning?","date":"2018-04-21","arxiv_id":"1804.07933","repositories_listed":0,"syntology":null},{"url":null,"slug":"label-sanitization-against-label-flipping","title":"Label Sanitization against Label Flipping Poisoning Attacks","date":"2018-03-02","arxiv_id":"1803.00992","repositories_listed":0,"syntology":null},{"url":null,"slug":"wolf-in-sheeps-clothing-the-downscaling","title":"Wolf in Sheep's Clothing - The Downscaling Attack Against Deep Learning Applications","date":"2017-12-21","arxiv_id":"1712.07805","repositories_listed":0,"syntology":null},{"url":null,"slug":"towards-poisoning-of-deep-learning-algorithms","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","date":"2017-08-29","arxiv_id":"1708.08689","repositories_listed":0,"syntology":null},{"url":null,"slug":"data-poisoning-attacks-on-factorization-based","title":"Data Poisoning Attacks on Factorization-Based Collaborative Filtering","date":"2016-08-29","arxiv_id":"1608.08182","repositories_listed":0,"syntology":null}],"record_sha256":"4513c533f85e70c2a74a0de31527b00a8ab10f1e8cd7fee789af7ea23c06ec95","record_changed_at":"2026-09-28","record_changed_at_basis":"first_hashed"}