Poisoning

Ask about this topic

Momentum

19 papers in the last four weeks, up 111% on the four weeks before. 0.2% of all new papers.

Jul 13Week of Sep 28
View on map

Latest papers 154

All topics
CardsList

  1. Online AutoML: Evaluating Poisoning Attacks on Adversarial Training Defense Strategy in IoT Networks

    Oct 5, 2026Chukwunonso Henry Nwokoye, Khalil El-Khatib, Li YangPoisoning

    Faculty of Business and Information Technology, Ontario Tech University, Oshawa, Ontario, Canada · Department of Computer Science, Alex Ekwueme Federal University, Nigeria

  2. SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples

    Oct 1, 2026Chaeeun Han, Soodeh Atefi, Yevgeniy Vorobeychik +1PoisoningTraining Data

    College of Information Sciences and Technology, Pennsylvania State University, University Park, PA, USA · Department of Computer Science and Engineering, University of Louisville, Louisville, KY, USA · Department of Computer Science and Engineering, Washington University in St. Louis, St. Louis, MO, USA

  3. Compression Footprints as Security Signals for Model-Poisoning Defense in Federated Learning

    Sep 30, 2026Sachi Shome, William EiersFederated LearningPoisoning

    Stevens Institute of Technology

  4. Cybersecurity in Edge Computing: A Trust-Aware Federated Hybrid Intrusion Detection Framework

    Sep 30, 2026Zawad Yalmie Sazid, Robert AbbasEdge DevicesIntrusion Detection

    Victoria University, Sydney, Australia

  5. ActionGuard: Tool Call Authorization under Poisoned Skills

    Sep 30, 2026Jihun Han, Yejin Jang, Byung Il Kwak +1Tool InvocationAuthorization

    Korea University Republic of Korea

  6. Hiding in Plain Sight: Decoupling Pretext from Actuation for Skill Poisoning in LLM Agents

    Sep 30, 2026Wenxin Wu, Lingyong Yan, Lei Sha +2PoisoningMalicious Agents

    Beihang University · Baidu Inc · Wilfrid Laurier University

  7. VirusCascade: Hijacking Collaborative Reflection in LLM-Powered Recommender Agents

    Sep 29, 2026Yurong Hao, Wen Zhou, Guowei Guan +3CyberattacksPoisoning

    College of Computing and Data Science, Nanyang Technological University

  8. Similarity Is Not Validity: Defending LLM Semantic Caches Against Poisoning

    Sep 28, 2026Zihan Zhang, Shuangjie Yao, Zesen Liu +8PoisoningAttacker Large Language Model

    The Hong Kong University of Science and Technology · Tsinghua University

  9. The Privacy Fallacy of Crowdsourced Fine-Tuning: Extracting Proprietary Data via Topic-Based Poisoning

    Sep 27, 2026Sae Furukawa, Alina OpreaModel Fine-TuningPoisoning

    Khoury College of Computer Sciences, Northeastern University

  10. BRFID: Toward Byzantine-Robust Federated Intrusion Detection

    Sep 23, 2026Asmah Muallem, Firdous Kausar, Sajid Hussain +1Federated LearningIntrusion Detection

    Computer Science and Data Science Meharry Medical College Nashville, TN, USA

  11. The Like Trap: Multi-Stage Poisoning against Agents in Similarity-based Recommendation Systems

    Sep 22, 2026Yue Xing, Pengfei He, Zitao LiPoisoningSocial Media

    Michigan State University

  12. FairMean: Promoting Fairness in Distributed Learning under Label Poisoning Attacks

    Sep 22, 2026Huigan Zheng, Jiaojiao Zhang, Yongxiang LiuAlgorithmic FairnessBalanced Learning

    Sun Yat-Sen University · Pengcheng Laboratory · Great Bay University

  13. RAG-NAROK: Retrieval-Aware Knowledge Corpus Poisoning in RAG with Source-specific Refutation

    Sep 21, 2026Abdullahil Kafi, Alvi Ataur KhalilPoisoningAttacker Large Language Model

    Transformative Innovation for Trustworthy AI and Network Security (TITANS) Lab, Computer Science, Southern Illinois University, USA

  14. Contagion on the Trading Floor: How Adversarial Signals Spread in Multi-Agent Trading Systems

    Sep 17, 2026Qi Rong Sua, Junhao Dong, Nguyen Duc Thai +3Multi-Agent Large Language Model SystemsTrading

    Nanyang Technological University, Singapore · Centre for Frontier AI Research, IHPC, A*STAR, Singapore · National University of Singapore, Singapore

  15. Reflections on Trusting Trust, Revisited: Contaminating Self-Modifying AI Coding Agents with Poisoned Benchmarks

    Sep 15, 2026Franziska Roesner, Tadayoshi KohnoCoding AgentsPoisoning

    University of Washington · Georgetown University

  16. End-to-End Verifiable and Robust Federated Learning

    Sep 14, 2026Doryan Lesaignoux, Enrique Mármol Campos, Gabriele Spini +2Federated LearningZero-Knowledge Proofs

    AIT Austrian Institute of Technology · Vienna, Austria · Department of Computer Engineering +2

  17. Pick Your Poison: Learning to Select Poison Sets for Stronger LLM Backdoor Attacks

    Sep 14, 2026Aashiq Muhamed, Mona T. Diab, Virginia Smith +2PoisoningAttacker Large Language Model

    Carnegie Mellon University · Anthropic

  18. In RAG We Trust? Measuring Robustness of Retrieval-Augmented Generation Under Document Poisoning

    Sep 10, 2026Iliano FasolinoAgentic Retrieval-Augmented Generation SystemsLarge Language Model Reliability

    Department of Computer Science University of Milan Milan, Italy

  19. Empirical Evaluation of Data Poisoning Attacks in Supervised Learning

    Sep 10, 2026Toshif Khan, Muhammad AbusaqerPoisoningTraining Data

    Minot State University · Department of Math, Data & Technology Minot State University Minot, ND, 58707 · Trustworthy Language Intelligence Lab, Minot State University

  20. CrACK: Adversarial Attacks on Cross-Model Consistency in Collaborative Vision Foundation Models

    Sep 7, 2026Feifei Liu, Jintao Cheng, Chi Man Vong +1Adversarial ExamplesContrastive Language-Image Pre-Training Model

    the School of Data science and Engineering, South China Normal University · Hong Kong University of Science and Technology · University of Macau

  21. Evaluating Deep-Search Agents under Hierarchical Web Evidence Poisoning

    Sep 5, 2026Zhongan Bi, Qiwen Wang, Jianrong Jiang +11PoisoningGeogs-Slam

    Zhejiang University · Ant Group

  22. VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Models

    Sep 1, 2026Zhiqi Huang, Vivek Datla, Zhichao Xu +3PoisoningLarge Language Model Reranking

    Capital One · University of Utah · Snowflake Inc.

  23. TRIS: A Tri-Layer Retrieval Integrity Sieve Against Knowledge Poisoning

    Aug 31, 2026Muhaimin Bin Munir, Akib Jawad Ononto, Nazia Shehnaz Joynab +2Agentic Retrieval-Augmented Generation SystemsPoisoning

    University of Texas at Dallas

  24. Beyond the Payload: How User Invocation Shapes Coding Agent Vulnerability to Repository Poisoning

    Aug 31, 2026Fukang Zhu, Binbin Zhao, Ruixiao Lin +3Coding AgentsVulnerable Code

    1Zhejiang University · 2State Key Laboratory of Internet Architecture, Tsinghua University

  25. When Detection Does Not Guarantee Resistance: Reasoning and Poisoned Context in RAG

    Aug 17, 2026Mehrdad Ghassabi, Audrina Ebrahimi, Sadra Hakim +3PoisoningDeliberation

    University of Isfahan · University of Texas at Dallas · University of Windsor

  26. RAGSieve: Self-Referenced Local Contrast for Knowledge-Poison Detection in Retrieval-Augmented Generation

    Aug 13, 2026Xinlong Xu, Yoshua Y. LiAgentic Retrieval-Augmented Generation SystemsPoisoning

    Nanjing University of Information Science and Technology · Meituan

  27. Analysis of Federated Aggregation under Model Poisoning and Backdoor Attacks: A Reconstructed Cross-Dataset and Cross-Architecture Benchmark

    Aug 11, 2026Soumya Mazumdar, Vineet Kumar Rakesh, Tapas SamantaSecure AggregationCross-Dataset Benchmark

    Department of Computer Science and Business Systems Gargi Memorial Institute of Technology Affiliated to Maulana Abul Kalam Azad University of Technology Balarampur, Mouza Beralia, Baruipur, Kolkata 700144, West Bengal, India · Computer and Informatics Group, Variable Energy Cyclotron Centre 1/AF, Bidhannagar, Kolkata 700064, West Bengal, India · Engineering Sciences, Homi Bhabha National Institute Anushaktinagar, Mumbai, Maharashtra 400094, India

  28. Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs

    Aug 11, 2026Tao Lin, Gaojie Jin, Zongxin Liu +2Poisoning

    Key Laboratory of System Software (Chinese Academy of Sciences), Beijing, China · Institute of Software, Chinese Academy of Sciences, Beijing, China · University of Chinese Academy of Sciences, Beijing, China +2

  29. Diversity Matters: Distributional Feature Coverage Sample Selection for Data-Efficient Backdoor Attacks

    Aug 10, 2026Yi Yang, Xiaoke Chen, Jinyang Huang +6Clean Label Backdoor AttackPoisoning

    School of Computer Science and Information Engineering, Hefei University of Technology, Hefei 230601, China · School of Information Science and Technology, University of Science and Technology of China, Hefei 230026, China · John Hopcroft Center for Computer Science, Shanghai Jiao Tong University, Shanghai 200240, China +1

  30. Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection

    Aug 8, 2026Kaysarul Anas Apurba, Md. Hasibul Hasan, Mahedee Zaman Moon +2Intrusion DetectionHievi-Rag

    Laurentian University Ontario, Canada · Centennial College Ontario, Canada · The University of Osaka Osaka, Japan

  31. TOFD: Target-Oriented Feature Decoupling against Poisoning Attacks in Split Federated Learning

    Aug 7, 2026Yuhan Xie, Jingrong Huang, Chen LyuFederated LearningModel-Agnostic Defense

    Shanghai University of Finance and Economics MoE Key Laboratory of Interdisciplinary Research of Computation and Economics Shanghai, China

  32. Fairis: Fairness-Aware Aggregation with Provable Influence Containment against Fairness Poisoning Attacks in Collaborative Machine Learning

    Aug 6, 2026Devharsh Trivedi, Nesrine Kaaniche, Nikos Triandopoulos +2Algorithmic FairnessFederated Learning

    Department of Computer Science, Bowie State University, MD, USA · SAMOVAR, T´el´ecom SudParis, Institut Polytechnique de Paris, Palaiseau, France · Department of Computer Science, Brown University, RI, USA +1

  33. When Experience Becomes Instruction: Trajectory Poisoning in Self-Evolving Agent Skill Systems

    Aug 6, 2026Jialuo Chen, Lingqi Jiang, Xinhao Deng +7Skill EvolutionPoisoning

    Ant Group · Zhejiang University · Tsinghua University +3

  34. PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates

    Aug 5, 2026Zijian Wang, Yubo Zhu, Muzhi Dong +7PoisoningAttack-Success Rate

    School of Computer Science, Nanjing University, Nanjing 210023, China · State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing 210023, China

  35. MutMem: Cryptographically Authorized Mutation in Persistent Agent Memory

    Aug 3, 2026Walid SaidiPeak MemoryPoisoning

    Independent researcher

  36. Evading Chain-of-Thought Monitoring Through Model Poisoning

    Aug 3, 2026Giorgio Severi, Shujaat Mirza, Blake Bullwinkel +1PoisoningChain-of-Thought Reasoning

    Microsoft

  37. Salami Attack: Stealthy Collusive Memory Poisoning against OpenClaw

    Aug 3, 2026Zheng Lin, Yuzhe Huang, Zhenxing Niu +2PoisoningAttacker Large Language Model

    Xidian University Xi’an, Shaanxi, China

  38. DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial

    Aug 2, 2026Abay Zhurekbay, Tao Liu, Fan LiAgentic Retrieval-Augmented Generation SystemsPoisoning

    Lawrence Technological University

  39. MAPLE-Guard: Memory-Aware Link Enforcement Against Memory-Link Poisoning in Multi-Agent Systems

    Aug 1, 2026Wenjun Xiong, Yijin Zhou, Jiaqian Wang +6Poisoning

    Shanghai Jiao Tong University · Shanghai Innovation Institute · Xidian University +2

  40. Temporal Poisoning: Clean-Label Backdoors via Event Redistribution in SNNs

    Jul 30, 2026Roberto Riaño, Gorka Abad, Stjepan Picek +1Spiking Neural NetworksClean Label Backdoor Attack

    Radboud University, The Netherlands · Ikerlan Research Centre, Spain · University of Bergen, Norway +1

  41. Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy

    Jul 30, 2026Puning Zhao, Zhikun Zhang, Shaowei Wang +5Distributionally-Robust OptimizationPoisoning

    Shenzhen Campus of Sun Yat-sen University · Zhejiang University · Guangzhou University +2

  42. MemSecBench: Tracking Agent Memory Poisoning from Persistence to Consequence and Repair

    Jul 29, 2026Xuanze Chen, Xukang Xie, Wentao Fu +3PoisoningSecurity Evaluation

    Institute of Cyberspace Security, Zhejiang University of Technology, Hangzhou 310023, China · Binjiang Institute of Artificial Intelligence, ZJUT, Hangzhou 310056, China · College of Information Engineering, Zhejiang University of Technology, Hangzhou 310023, China

  43. RAGuard: A Layered Defense Framework for Retrieval-Augmented Generation Systems Against Data Poisoning

    Jul 28, 2026Pushkal Kumar, Tucker Nielson, Tanish Kolhe +2Agentic Retrieval-Augmented Generation SystemsPoisoning

  44. Anti-Backdoor Coreset Selection via Cumulative Entropy

    Jul 28, 2026Qi Zhao, Christian WressneggerModel-Agnostic DefenseGeometry-Aware Uncertainty Coresets

    KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT)

  45. TriShieldRAG: A Three-Ring Defense-in-Depth Framework Against Knowledge Corruption in Retrieval-Augmented Generation

    Jul 26, 2026Susil Kumar Mohanty, Rohit Patel, Kosuru Yuvaraj +2Agentic Retrieval-Augmented Generation SystemsPoisoning

    Department of Computer Science and Engineering, Indian Institute of Technology Jodhpur, Jodhpur, India

  46. Self-Poisoning in Adaptive Out-of-Distribution Detection: A Sharp-Threshold Theory and Certified Label-Free Calibration

    Jul 23, 2026Vishnu Bindu BalachandranOut-Of-Distribution DetectionLabel-Free

    Independent Researcher

  47. GPE: Evaluating Robust Evidence Aggregation for Fact Verification under Controllable GEO-Style Poisoning

    Jul 22, 2026Zhaoqi Wang, Zijian Zhang, Xiaomei Yuan +4Fact-CheckingEvidence-Grounded Questions

    School of Cyberspace Science and Technology, Beijing Institute of Technology · School of Computer Science, The University of Auckland

  48. Anatomy of a Sound Neural Reasoner: One-Shot Amortization, First-Pass Poisoning, and Search Inertness in Clue-Rich Completion

    Jul 22, 2026Aleksey KomissarovPuzzleNeural Solvers

    Neapolis University, Pafos, Cyprus

  49. The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems

    Jul 21, 2026Gjergji Kasneci, Enkelejda KasneciArtificial Intelligence SafetySocio-Technical Systems

    Technical University of Munich

  50. Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs

    Jul 21, 2026Seunghyun Lee, Dongyoon Han, Sangdoo YunInference-Time DefensePoisoning

    NAVER AI Lab

  51. Code-Poisoning Property Inference Attacks

    Jul 17, 2026Xukun Luan, Yuhui Gong, Gang Zhang +4Membership Inference AttacksPoisoning

    School of Computer Science and Technology, Beijing Institute of Technology · School of Computer Science and Engineering, Northeastern University

  52. Conditional Reliability of Toxicity Signals for Multilingual and Code-Mixed Abuse Detection

    Jul 17, 2026Indraveni Chebolu, Rohan Singh, Arnab Mallick +1ToxicityContent Moderation

    Centre for Development of Advanced Computing, Hyderabad, India

  53. MemPoison: Uncovering Persistent Memory Threats and Structural Blind Spots in LLM Agents

    Jul 16, 2026Jifeng Gao, Kang Xia, Yi Zhang +5PoisoningLarge Language Model Agents

    State Key Laboratory for Novel Software Technology, Nanjing University, China · NARI Group Corporation/State Grid Electric Power Research Institute, China

  54. Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems

    Jul 16, 2026Soham Gadgil, David Alexander, Sai Sunku +1Indirect Prompt InjectionAgentic Memory

    University of Washington Seattle, WA, USA

  55. Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions

    Jul 14, 2026Huihao Jing, Wenbin Hu, Shaojin Chen +10Multi-Llm AgentsProduction Agentic Systems

    HKUST · NYU · SWUPL

  56. Distributed Denial of Science: How Indirect Data Poisoning of AI Systems Can Industrialize Scientific Fraud

    Jul 12, 2026Bálint Gyevnár, Atoosa Kasirzadeh, Nihar B. ShahArtificial Intelligence ScientistsPoisoning

    Institute for Complex Social Dynamics, Carnegie Mellon University · Departments of Philosophy & Software and Societal Systems, Carnegie Mellon University · Machine Learning and Computer Science Departments, Carnegie Mellon University

  57. Securing Autonomous Vehicle Systems via Twin-Aware Federated Reinforcement Learning

    Jul 9, 2026Zifan Zhang, Minghong Fang, Dianwei Chen +5PoisoningDigital Twins

    North Carolina State University, USA · University of Louisville, USA · University of Maryland, USA +2

  58. Assessing the Operational Impact of Poisoning Attacks over Augmented 3D Point Cloud Public Datasets for Connected and Autonomous Vehicles

    Jul 7, 2026Marwan Lazrag, Badis Hammi, Lorena Gonzalez-Manzano +1Point CloudsData Augmentation

    SAMOVAR, Télécom SudParis, Institut Polytechnique de Paris Palaiseau, France · Universidad Carlos III de Madrid Leganes, Spain

  59. ORAN-DEFEND: Subspace Detection and Sanitization of Backdoor DRL xApps in Open RAN

    Jul 7, 2026Md Raihan Uddin, Fatemeh Lotfi, Tolunay Seyfi +1Clean Label Backdoor AttackModel-Agnostic Defense

    Department of Electrical and Computer Engineering, Clemson University, Clemson, SC, USA

  60. Two Sides of the Same Coin: Learning the Backdoor to Remove the Backdoor

    Jul 7, 2026Qi Zhao, Christian WressneggerPoisoningBenign

    KASTEL Security Research Labs · Karlsruhe Institute of Technology (KIT)