{"total":23,"rows":[{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2308.14132","title":"Detecting Language Model Attacks with Perplexity","created":"2023-08-27","cited_by_count":431,"area":"safety"},{"id":"2106.14851","title":"Data Poisoning Won't Save You From Facial Recognition","created":"2021-06-28","cited_by_count":45,"area":"safety"},{"id":"2304.14475","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","created":"2023-04-27","cited_by_count":31,"area":"safety"},{"id":"2203.06580","title":"One Parameter Defense -- Defending against Data Inference Attacks via Differential Privacy","created":"2022-03-13","cited_by_count":27,"area":"safety"},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18,"area":"safety"},{"id":"2305.19607","title":"Adversarial Clean Label Backdoor Attacks and Defenses on Text Classification Systems","created":"2023-05-31","cited_by_count":11,"area":"safety"},{"id":"2510.16794","title":"Black-box Optimization of LLM Outputs by Asking for Directions","created":"2025-10-19","cited_by_count":7,"area":"safety"},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2412.08969","title":"Deep Learning Model Security: Threats and Defenses","created":"2024-12-12","cited_by_count":4,"area":"safety"},{"id":"2503.01926","title":"Unnatural Languages Are Not Bugs but Features for LLMs","created":"2025-03-02","cited_by_count":4,"area":"safety"},{"id":"2304.14483","title":"Adversary Aware Continual Learning","created":"2023-04-27","cited_by_count":3,"area":"safety"},{"id":"2501.16534","title":"Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs","created":"2025-01-27","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2602.20170","title":"CAGE: A Framework for Culturally Adaptive Red-Teaming Benchmark Generation","created":"2026-02-09","cited_by_count":3,"area":"safety"},{"id":"2503.00917","title":"AMUN: Adversarial Machine UNlearning","created":"2025-03-02","cited_by_count":2,"area":"safety"},{"id":"2510.01494","title":"Understanding Adversarial Transfer: Why Representation-Space Attacks Fail Where Data-Space Attacks Succeed","created":"2025-10-01","cited_by_count":1,"area":"safety"},{"id":"2510.22014","title":"Toward Understanding the Transferability of Adversarial Suffixes in Large Language Models","created":"2025-10-24","cited_by_count":1,"area":"safety"},{"id":"2202.10309","title":"HoneyModels: Machine Learning Honeypots","created":"2022-02-21","cited_by_count":0,"area":"safety"},{"id":"2602.18934","title":"LoMime: Query-Efficient Membership Inference using Model Extraction in Label-Only Settings","created":"2026-02-21","cited_by_count":0,"area":"safety"},{"id":"2609.32602","title":"AnchorRep: Defending LLMs Against Cross-Model Adversarial Transfer via Representation Repulsion","created":"2026-09-26","cited_by_count":0,"area":"safety"}],"next_cursor":null}