{"total":140,"rows":[{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2309.10253","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","created":"2023-09-19","cited_by_count":560,"area":"safety"},{"id":"2205.13636","title":"Quark: Controllable Text Generation with Reinforced Unlearning","created":"2022-05-26","cited_by_count":237,"area":"safety"},{"id":"2108.11577","title":"Machine Unlearning of Features and Labels","created":"2021-08-26","cited_by_count":229,"area":"safety"},{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222,"area":"safety"},{"id":"2308.07707","title":"Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampening","created":"2023-08-15","cited_by_count":181,"area":"safety"},{"id":"2203.07320","title":"The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retraining","created":"2022-03-14","cited_by_count":118,"area":"safety"},{"id":"2103.15543","title":"Be Careful about Poisoned Word Embeddings: Exploring the Vulnerability of the Embedding Layers in NLP Models","created":"2021-03-29","cited_by_count":105,"area":"safety"},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2305.06535","title":"KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignment","created":"2023-05-11","cited_by_count":99,"area":"safety"},{"id":"2302.03162","title":"Protecting Language Generation Models via Invisible Watermarking","created":"2023-02-06","cited_by_count":90,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2305.06321","title":"SepMark: Deep Separable Watermarking for Unified Source Tracing and Deepfake Detection","created":"2023-05-10","cited_by_count":44,"area":"safety"},{"id":"2212.10717","title":"Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks","created":"2022-12-21","cited_by_count":43,"area":"safety"},{"id":"2106.15093","title":"Certifiable Machine Unlearning for Linear Models","created":"2021-06-29","cited_by_count":42,"area":"safety"},{"id":"2410.22770","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","created":"2024-10-30","cited_by_count":42,"area":"safety"},{"id":"2210.10750","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","created":"2022-10-19","cited_by_count":40,"area":"safety"},{"id":"2302.02069","title":"Heterogeneous Federated Knowledge Graph Embedding Learning and Unlearning","created":"2023-02-04","cited_by_count":40,"area":"safety"},{"id":"2110.08335","title":"Trigger Hunting with a Topological Prior for Trojan Detection","created":"2021-10-15","cited_by_count":39,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2112.07668","title":"Dual-Key Multimodal Backdoors for Visual Question Answering","created":"2021-12-14","cited_by_count":37,"area":"safety"},{"id":"2304.07361","title":"PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators","created":"2023-04-14","cited_by_count":37,"area":"safety"},{"id":"2206.11349","title":"Prompt Injection: Parameterization of Fixed Inputs","created":"2022-05-31","cited_by_count":36,"area":"safety"},{"id":"2212.09573","title":"Privacy Adhering Machine Un-learning in NLP","created":"2022-12-19","cited_by_count":36,"area":"safety"},{"id":"2309.08230","title":"A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services","created":"2023-09-15","cited_by_count":34,"area":"safety"},{"id":"2308.04451","title":"Vulnerabilities in AI Code Generators: Exploring Targeted Data Poisoning Attacks","created":"2023-08-04","cited_by_count":33,"area":"safety"},{"id":"2305.17444","title":"Query-Efficient Black-Box Red Teaming via Bayesian Optimization","created":"2023-05-27","cited_by_count":32,"area":"safety"},{"id":"2211.03216","title":"Unlearning Graph Classifiers with Limited Data Resources","created":"2022-11-06","cited_by_count":31,"area":"safety"},{"id":"2304.14475","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","created":"2023-04-27","cited_by_count":31,"area":"safety"},{"id":"2412.06157","title":"Membership Inference Attacks and Defenses in Federated Learning: A Survey","created":"2024-12-09","cited_by_count":31,"area":"safety"},{"id":"2210.03312","title":"Distillation-Resistant Watermarking for Model Protection in NLP","created":"2022-10-07","cited_by_count":30,"area":"safety"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2401.05146","title":"Federated Unlearning: A Survey on Methods, Design Guidelines, and Evaluation Metrics","created":"2024-01-10","cited_by_count":27,"area":"safety"},{"id":"2305.02394","title":"Defending against Insertion-based Textual Backdoor Attacks via Attribution","created":"2023-05-03","cited_by_count":25,"area":"safety"},{"id":"2305.05773","title":"DeepTextMark: A Deep Learning-Driven Text Watermarking Approach for Identifying Large Language Model Generated Text","created":"2023-05-09","cited_by_count":23,"area":"safety"},{"id":"2306.08350","title":"Multi-target Backdoor Attacks for Code Pre-trained Models","created":"2023-06-14","cited_by_count":23,"area":"safety"},{"id":"2206.03317","title":"Subject Membership Inference Attacks in Federated Learning","created":"2022-06-07","cited_by_count":20,"area":"safety"},{"id":"2105.06209","title":"DeepObliviate: A Powerful Charm for Erasing Data Residual Memory in Deep Neural Networks","created":"2021-05-13","cited_by_count":19,"area":"safety"},{"id":"2109.10855","title":"BFClass: A Backdoor-free Text Classification Framework","created":"2021-09-22","cited_by_count":19,"area":"safety"},{"id":"2110.13541","title":"Qu-ANTI-zation: Exploiting Quantization Artifacts for Achieving Adversarial Outcomes","created":"2021-10-26","cited_by_count":19,"area":"safety"},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2305.17506","title":"Backdooring Neural Code Search","created":"2023-05-27","cited_by_count":19,"area":"safety"},{"id":"2205.14055","title":"A Blessing of Dimensionality in Membership Inference through Regularization","created":"2022-05-27","cited_by_count":18,"area":"safety"},{"id":"2401.15241","title":"Unlearning Traces the Influential Training Data of Language Models","created":"2024-01-26","cited_by_count":18,"area":"safety"},{"id":"2407.07735","title":"Protecting NeRFs' Copyright via Plug-And-Play Watermarking Base Model","created":"2024-07-10","cited_by_count":18,"area":"safety"},{"id":"2102.05257","title":"Robust Federated Learning with Attack-Adaptive Aggregation","created":"2021-02-10","cited_by_count":17,"area":"safety"},{"id":"2210.06516","title":"How to Sift Out a Clean Data Subset in the Presence of Data Poisoning?","created":"2022-10-12","cited_by_count":17,"area":"safety"},{"id":"2311.01357","title":"Robust Identity Perceptual Watermark Against Deepfake Face Swapping","created":"2023-11-02","cited_by_count":17,"area":"safety"},{"id":"2507.09709","title":"Large Language Models Encode Semantics and Alignment in Linearly Separable Representations","created":"2025-07-13","cited_by_count":17,"area":"safety"},{"id":"2105.12837","title":"Fooling Partial Dependence via Data Poisoning","created":"2021-05-26","cited_by_count":16,"area":"safety"},{"id":"2305.16503","title":"IMBERT: Making BERT Immune to Insertion-based Backdoor Attacks","created":"2023-05-25","cited_by_count":15,"area":"safety"},{"id":"2105.13697","title":"AdvParams: An Active DNN Intellectual Property Protection Technique via Adversarial Perturbation Based Parameter Encryption","created":"2021-05-28","cited_by_count":13,"area":"safety"},{"id":"2108.01644","title":"The Devil is in the GAN: Backdoor Attacks and Defenses in Deep Generative Models","created":"2021-08-03","cited_by_count":12,"area":"safety"},{"id":"2303.14325","title":"Backdoor Attacks with Input-unique Triggers in NLP","created":"2023-03-25","cited_by_count":12,"area":"safety"},{"id":"2401.17523","title":"Game-Theoretic Unlearnable Example Generator","created":"2024-01-31","cited_by_count":12,"area":"safety"},{"id":"2405.07667","title":"Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models","created":"2024-05-13","cited_by_count":12,"area":"safety"},{"id":"2111.09076","title":"To Trust or Not To Trust Prediction Scores for Membership Inference Attacks","created":"2021-11-17","cited_by_count":10,"area":"safety"},{"id":"2311.14056","title":"DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release","created":"2023-11-23","cited_by_count":10,"area":"safety"},{"id":"2411.19876","title":"LUMIA: Linear probing for Unimodal and MultiModal Membership Inference Attacks leveraging internal LLM states","created":"2024-11-29","cited_by_count":10,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2305.04547","title":"Diffusion Theory as a Scalpel: Detecting and Purifying Poisonous Dimensions in Pre-trained Language Models Caused by Backdoor or Bias","created":"2023-05-08","cited_by_count":8,"area":"safety"},{"id":"2305.11351","title":"Data Redaction from Conditional Generative Models","created":"2023-05-18","cited_by_count":8,"area":"safety"},{"id":"2309.05940","title":"Catch You Everything Everywhere: Guarding Textual Inversion via Concept Watermarking","created":"2023-09-12","cited_by_count":8,"area":"safety"},{"id":"2408.09093","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","created":"2024-08-17","cited_by_count":8,"area":"safety"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2305.12320","title":"Random Relabeling for Efficient Machine Unlearning","created":"2023-05-21","cited_by_count":7,"area":"safety"},{"id":"2311.10448","title":"DeepClean: Machine Unlearning on the Cheap by Resetting Privacy Sensitive Weights using the Fisher Diagonal","created":"2023-11-17","cited_by_count":7,"area":"safety"},{"id":"2503.02312","title":"Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalization","created":"2025-03-04","cited_by_count":7,"area":"safety"},{"id":"2205.04145","title":"Verifying Integrity of Deep Ensemble Models by Lossless Black-box Watermarking with Sensitive Samples","created":"2022-05-09","cited_by_count":6,"area":"safety"},{"id":"2310.00626","title":"GhostEncoder: Stealthy Backdoor Attacks with Dynamic Triggers to Pre-trained Encoders in Self-supervised Learning","created":"2023-10-01","cited_by_count":6,"area":"safety"},{"id":"2104.09203","title":"Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images","created":"2021-04-19","cited_by_count":5,"area":"safety"},{"id":"2306.16022","title":"Enrollment-stage Backdoor Attacks on Speaker Recognition Systems via Adversarial Ultrasound","created":"2023-06-28","cited_by_count":5,"area":"safety"},{"id":"2407.20271","title":"Learn while Unlearn: An Iterative Unlearning Framework for Generative Language Models","created":"2024-07-25","cited_by_count":5,"area":"safety"},{"id":"2601.02680","title":"Adversarial Contrastive Learning for LLM Quantization Attacks","created":"2026-01-06","cited_by_count":5,"area":"safety"},{"id":"2405.12786","title":"Rethinking the Vulnerabilities of Face Recognition Systems:From a Practical Perspective","created":"2024-05-21","cited_by_count":4,"area":"safety"},{"id":"2407.12069","title":"Unlearning Personal Data from a Single Image","created":"2024-07-16","cited_by_count":4,"area":"safety"},{"id":"2505.09820","title":"Adversarial Attack on Large Language Models using Exponentiated Gradient Descent","created":"2025-05-14","cited_by_count":4,"area":"safety"},{"id":"2508.20718","title":"Addressing Tokenization Inconsistency in Steganography and Watermarking Based on Large Language Models","created":"2025-08-28","cited_by_count":4,"area":"safety"},{"id":"2510.00761","title":"Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning","created":"2025-10-01","cited_by_count":4,"area":"safety"},{"id":"2510.02334","title":"Where Did It Go Wrong? Attributing Undesirable LLM Behaviors via Representation Gradient Tracing","created":"2025-09-26","cited_by_count":4,"area":"safety"},{"id":"2511.17100","title":"Geometric-disentangelment Unlearning","created":"2025-11-21","cited_by_count":4,"area":"safety"},{"id":"2602.08741","title":"Large Language Lobotomy: Jailbreaking Mixture-of-Experts via Expert Silencing","created":"2026-02-09","cited_by_count":4,"area":"safety"},{"id":"2602.10568","title":"Gauss-Newton Unlearning for the LLM Era","created":"2026-02-11","cited_by_count":4,"area":"safety"},{"id":"2602.15364","title":"MarkSweep: A No-box Removal Attack on AI-Generated Image Watermarking via Noise Intensification and Frequency-aware Denoising","created":"2026-02-17","cited_by_count":4,"area":"safety"},{"id":"2109.03975","title":"Membership Inference Attacks Against Temporally Correlated Data in Deep Reinforcement Learning","created":"2021-09-08","cited_by_count":3,"area":"safety"},{"id":"2203.16463","title":"Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning","created":"2022-03-30","cited_by_count":3,"area":"safety"},{"id":"2402.07689","title":"OrderBkd: Textual backdoor attack through repositioning","created":"2024-02-12","cited_by_count":3,"area":"safety"},{"id":"2406.07885","title":"GENIU: A Restricted Data Access Unlearning for Imbalanced Data","created":"2024-06-12","cited_by_count":3,"area":"safety"},{"id":"2409.19708","title":"A Certified Robust Watermark For Large Language Models","created":"2024-09-29","cited_by_count":3,"area":"safety"},{"id":"2502.12464","title":"SafeRoute: Adaptive Model Selection for Efficient and Accurate Safety Guardrails in Large Language Models","created":"2025-02-18","cited_by_count":3,"area":"safety"},{"id":"2505.09702","title":"Enabling Group Fairness in Graph Unlearning via Bi-level Debiasing","created":"2025-05-14","cited_by_count":3,"area":"safety"},{"id":"2506.17231","title":"Efficient and Stealthy Jailbreak Attacks via Adversarial Prompt Distillation from LLMs to SLMs","created":"2025-05-26","cited_by_count":3,"area":"safety"},{"id":"2508.14013","title":"Efficient Knowledge Graph Unlearning with Zeroth-order Information","created":"2025-08-19","cited_by_count":3,"area":"safety"},{"id":"2508.17247","title":"Uncovering and Mitigating Destructive Multi-Embedding Attacks in Deepfake Proactive Forensics","created":"2025-08-24","cited_by_count":3,"area":"safety"},{"id":"2510.17006","title":"Online Learning Defense against Iterative Jailbreak Attacks via Prompt Optimization","created":"2025-10-19","cited_by_count":3,"area":"safety"}],"next_cursor":"100"}