{"total":20,"rows":[{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2404.07234","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","created":"2024-04-06","cited_by_count":24,"area":"safety"},{"id":"2206.01367","title":"Adversarial Unlearning: Reducing Confidence Along Adversarial Directions","created":"2022-06-03","cited_by_count":14,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2503.08704","title":"Life-Cycle Routing Vulnerabilities of LLM Router","created":"2025-03-09","cited_by_count":11,"area":"safety"},{"id":"2205.06986","title":"Evaluating Membership Inference Through Adversarial Robustness","created":"2022-05-14","cited_by_count":8,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2101.00157","title":"Active Learning Under Malicious Mislabeling and Poisoning Attacks","created":"2021-01-01","cited_by_count":3,"area":"safety"},{"id":"2501.17151","title":"Scanning Trojaned Models Using Out-of-Distribution Samples","created":"2025-01-28","cited_by_count":3,"area":"safety"},{"id":"2206.08788","title":"Is Multi-Modal Necessarily Better? Robustness Evaluation of Multi-modal Fake News Detection","created":"2022-06-17","cited_by_count":2,"area":"safety"},{"id":"2401.04385","title":"Machine unlearning through fine-grained model parameters perturbation","created":"2024-01-09","cited_by_count":2,"area":"safety"},{"id":"2305.05503","title":"BadCS: A Backdoor Attack Framework for Code search","created":"2023-05-09","cited_by_count":1,"area":"safety"},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2110.12948","title":"Generating Watermarked Adversarial Texts","created":"2021-10-25","cited_by_count":0,"area":"safety"},{"id":"2504.21042","title":"What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift","created":"2025-04-28","cited_by_count":0,"area":"safety"},{"id":"2607.07527","title":"A Unified Detection Framework for AI-Related Content and Artifacts","created":"2026-07-08","cited_by_count":0,"area":"safety"},{"id":"2608.06211","title":"Reversible Unlearnable Examples: Towards the Copyright Protection in Deep Learning Era","created":"2026-08-06","cited_by_count":0,"area":"safety"},{"id":"2609.05966","title":"On-the-go Forgetting without Explicit Unlearning via ERASE","created":"2026-09-05","cited_by_count":0,"area":"safety"}],"next_cursor":null}