| REFINE: Inversion-Free Backdoor Defense via Model Reprogramming | Feb 22, 2025 | backdoor defense | CodeCode Available | 4 |
| Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents | Feb 17, 2024 | Backdoor Attackbackdoor defense | CodeCode Available | 2 |
| Gracefully Filtering Backdoor Samples for Generative Large Language Models without Retraining | Dec 3, 2024 | backdoor defenseComputational Efficiency | CodeCode Available | 1 |
| CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization | Nov 18, 2024 | backdoor defenseText Generation | CodeCode Available | 1 |
| BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation | Nov 17, 2024 | Action Recognitionbackdoor defense | CodeCode Available | 1 |
| Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense | Oct 13, 2024 | backdoor defense | CodeCode Available | 1 |
| Fisher Information guided Purification against Backdoor Attacks | Sep 1, 2024 | Action Recognitionbackdoor defense | CodeCode Available | 1 |
| VFLIP: A Backdoor Defense for Vertical Federated Learning via Identification and Purification | Aug 28, 2024 | Anomaly Detectionbackdoor defense | CodeCode Available | 1 |
| Lockdown: Backdoor Defense for Federated Learning with Isolated Subspace Training | Sep 21, 2023 | backdoor defenseDistributed Computing | CodeCode Available | 1 |
| Lockdown: Backdoor Defense for Federated Learning with Isolated Subspace Training | Sep 21, 2023 | backdoor defenseDistributed Computing | CodeCode Available | 1 |
| Reconstructive Neuron Pruning for Backdoor Defense | May 24, 2023 | backdoor defense | CodeCode Available | 1 |
| Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoning | May 7, 2023 | Backdoor Attackbackdoor defense | CodeCode Available | 1 |
| Backdoor Defense via Adaptively Splitting Poisoned Dataset | Mar 23, 2023 | backdoor defense | CodeCode Available | 1 |
| Black-box Backdoor Defense via Zero-shot Image Purification | Mar 21, 2023 | backdoor defense | CodeCode Available | 1 |
| Backdoor Defense via Deconfounded Representation Learning | Mar 13, 2023 | Backdoor Attackbackdoor defense | CodeCode Available | 1 |
| ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigms | Feb 22, 2023 | backdoor defenseSelf-Supervised Learning | CodeCode Available | 1 |
| Backdoor Attacks for Remote Sensing Data with Wavelet Transform | Nov 15, 2022 | Backdoor Attackbackdoor defense | CodeCode Available | 1 |
| Effective Backdoor Defense by Exploiting Sensitivity of Poisoned Samples | Nov 1, 2022 | backdoor defenseSensitivity | CodeCode Available | 1 |
| FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning | Oct 23, 2022 | Backdoor Attackbackdoor defense | CodeCode Available | 1 |
| Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks | Oct 14, 2022 | backdoor defenseSentiment Analysis | CodeCode Available | 1 |
| Trap and Replace: Defending Backdoor Attacks by Trapping Them into an Easy-to-Replace Subnetwork | Oct 12, 2022 | backdoor defenseClassification | CodeCode Available | 1 |
| MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic | May 13, 2022 | Adversarial AttackBackdoor Attack | CodeCode Available | 1 |
| Eliminating Backdoor Triggers for Deep Neural Networks Using Attention Relation Graph Distillation | Apr 21, 2022 | backdoor defenseKnowledge Distillation | CodeCode Available | 1 |
| Backdoor Defense via Decoupling the Training Process | Feb 5, 2022 | backdoor defenseSelf-Supervised Learning | CodeCode Available | 1 |
| FIBA: Frequency-Injection based Backdoor Attack in Medical Image Analysis | Dec 2, 2021 | Artifact DetectionBackdoor Attack | CodeCode Available | 1 |
| LIRA: Learnable, Imperceptible and Robust Backdoor Attacks | Jan 1, 2021 | Backdoor Attackbackdoor defense | CodeCode Available | 1 |
| ONION: A Simple and Effective Defense Against Textual Backdoor Attacks | Nov 20, 2020 | Backdoor Attackbackdoor defense | CodeCode Available | 1 |
| Towards Probabilistic Verification of Machine Unlearning | Mar 9, 2020 | backdoor defenseMachine Unlearning | CodeCode Available | 1 |
| Clean-Label Backdoor Attacks on Video Recognition Models | Mar 6, 2020 | Backdoor Attackbackdoor defense | CodeCode Available | 1 |
| CLIP-Guided Backdoor Defense through Entropy-Based Poisoned Dataset Separation | Jul 7, 2025 | backdoor defense | CodeCode Available | 0 |
| CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks | Jun 20, 2025 | Backdoor Attackbackdoor defense | —Unverified | 0 |
| InverTune: Removing Backdoors from Multimodal Contrastive Learning Models via Trigger Inversion and Activation Tuning | Jun 14, 2025 | backdoor defenseContrastive Learning | —Unverified | 0 |
| TED-LaST: Towards Robust Backdoor Defense Against Adaptive Attacks | Jun 12, 2025 | backdoor defenseData Poisoning | —Unverified | 0 |
| SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs | Jun 5, 2025 | backdoor defenseImage Captioning | —Unverified | 0 |
| Robust Anti-Backdoor Instruction Tuning in LVLMs | Jun 4, 2025 | backdoor defenseInstruction Following | —Unverified | 0 |
| Spectral Insights into Data-Oblivious Critical Layers in Large Language Models | May 31, 2025 | backdoor defenseDomain Adaptation | —Unverified | 0 |
| Heterogeneous Graph Backdoor Attack | May 30, 2025 | Backdoor Attackbackdoor defense | —Unverified | 0 |
| FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients | May 17, 2025 | backdoor defenseFederated Learning | CodeCode Available | 0 |
| Cert-SSB: Toward Certified Sample-Specific Backdoor Defense | Apr 30, 2025 | backdoor defense | CodeCode Available | 0 |
| TrojanDam: Detection-Free Backdoor Defense in Federated Learning through Proactive Model Robustification utilizing OOD Data | Apr 22, 2025 | backdoor defenseFederated Learning | CodeCode Available | 0 |
| Backdoor Defense in Diffusion Models via Spatial Attention Unlearning | Apr 21, 2025 | backdoor defense | —Unverified | 0 |
| Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks | Mar 31, 2025 | backdoor defenseFace Recognition | —Unverified | 0 |
| Prototype Guided Backdoor Defense | Mar 26, 2025 | backdoor defense | —Unverified | 0 |
| Gungnir: Exploiting Stylistic Features in Images for Backdoor Attacks on Diffusion Models | Feb 28, 2025 | Backdoor Attackbackdoor defense | CodeCode Available | 0 |
| A Dual-Purpose Framework for Backdoor Defense and Backdoor Amplification in Diffusion Models | Feb 26, 2025 | Backdoor Attackbackdoor defense | —Unverified | 0 |
| Class-Conditional Neural Polarizer: A Lightweight and Effective Backdoor Defense by Purifying Poisoned Features | Feb 23, 2025 | Adversarial Defensebackdoor defense | —Unverified | 0 |
| Gradient Norm-based Fine-Tuning for Backdoor Defense in Automatic Speech Recognition | Feb 3, 2025 | Automatic Speech Recognitionbackdoor defense | —Unverified | 0 |
| PCAP-Backdoor: Backdoor Poisoning Generator for Network Traffic in CPS/IoT Environments | Jan 26, 2025 | backdoor defenseDeep Learning | —Unverified | 0 |
| Towards Backdoor Stealthiness in Model Parameter Space | Jan 10, 2025 | backdoor defensemodel | CodeCode Available | 0 |
| Backdoor Token Unlearning: Exposing and Defending Backdoors in Pretrained Language Models | Jan 5, 2025 | backdoor defense | CodeCode Available | 0 |