{"total":53,"rows":[{"id":"2308.14132","title":"Detecting Language Model Attacks with Perplexity","created":"2023-08-27","cited_by_count":431,"area":"safety"},{"id":"2303.13408","title":"Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense","created":"2023-03-23","cited_by_count":429,"area":"safety"},{"id":"2303.11156","title":"Can AI-Generated Text be Reliably Detected?","created":"2023-03-17","cited_by_count":386,"area":"safety"},{"id":"2403.14720","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","created":"2024-03-20","cited_by_count":267,"area":"safety"},{"id":"2310.07579","title":"In-Context Unlearning: Language Models as Few Shot Unlearners","created":"2023-10-11","cited_by_count":224,"area":"safety"},{"id":"2103.15543","title":"Be Careful about Poisoned Word Embeddings: Exploring the Vulnerability of the Embedding Layers in NLP Models","created":"2021-03-29","cited_by_count":105,"area":"safety"},{"id":"2208.12268","title":"FedPrompt: Communication-Efficient and Privacy Preserving Prompt Tuning in Federated Learning","created":"2022-08-25","cited_by_count":91,"area":"safety"},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2110.02467","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","created":"2021-10-06","cited_by_count":85,"area":"safety"},{"id":"2308.10819","title":"Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injection","created":"2023-08-17","cited_by_count":59,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2502.16580","title":"Can Indirect Prompt Injection Attacks Be Detected and Removed?","created":"2025-02-23","cited_by_count":52,"area":"safety"},{"id":"2305.06360","title":"Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy","created":"2023-05-10","cited_by_count":51,"area":"safety"},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2502.01042","title":"SafeSwitch: Steering Unsafe LLM Behavior via Internal Activation Signals","created":"2025-02-03","cited_by_count":29,"area":"safety"},{"id":"2505.11541","title":"MorphMark: Flexible Adaptive Watermarking for Large Language Models","created":"2025-05-14","cited_by_count":24,"area":"safety"},{"id":"2310.11237","title":"Watermarking LLMs with Weight Quantization","created":"2023-10-17","cited_by_count":22,"area":"safety"},{"id":"2411.15477","title":"Towards Robust Evaluation of Unlearning in LLMs via Data Transformations","created":"2024-11-23","cited_by_count":20,"area":"safety"},{"id":"2505.13312","title":"GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection","created":"2025-05-19","cited_by_count":17,"area":"safety"},{"id":"2507.13686","title":"TopicAttack: An Indirect Prompt Injection Attack via Topic Transition","created":"2025-07-18","cited_by_count":17,"area":"safety"},{"id":"2504.20472","title":"Robustness via Referencing: Defending against Prompt Injection Attacks by Referencing the Executed Instruction","created":"2025-04-29","cited_by_count":16,"area":"safety"},{"id":"2509.24384","title":"HarmMetric Eval: Benchmarking Metrics and Judges for LLM Harmfulness Assessment","created":"2025-09-29","cited_by_count":15,"area":"safety"},{"id":"2311.09816","title":"Downstream Trade-offs of a Family of Text Watermarks","created":"2023-11-16","cited_by_count":14,"area":"safety"},{"id":"2504.07467","title":"Defense against Prompt Injection Attacks via Mixture of Encodings","created":"2025-04-10","cited_by_count":14,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2312.15867","title":"Punctuation Matters! Stealthy Backdoor Attack for Language Models","created":"2023-12-26","cited_by_count":5,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2411.06611","title":"vTune: Verifiable Fine-Tuning for LLMs Through Backdooring","created":"2024-11-10","cited_by_count":4,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2510.25117","title":"A Survey on Unlearning in Large Language Models","created":"2025-10-29","cited_by_count":4,"area":"safety"},{"id":"2505.23015","title":"Detecting Stealthy Backdoor Samples based on Intra-class Distance for Large Language Models","created":"2025-05-29","cited_by_count":3,"area":"safety"},{"id":"2507.23453","title":"Counterfactual Evaluation for Blind Attack Detection in LLM-based Evaluation Systems","created":"2025-07-31","cited_by_count":3,"area":"safety"},{"id":"2508.17233","title":"Module-Aware Parameter-Efficient Machine Unlearning on Transformers","created":"2025-08-24","cited_by_count":3,"area":"safety"},{"id":"2410.14102","title":"Beyond Dataset Watermarking: Model-Level Copyright Protection for Code Summarization Models","created":"2024-10-18","cited_by_count":2,"area":"safety"},{"id":"2411.00204","title":"RESTOR: Knowledge Recovery in Machine Unlearning","created":"2024-10-31","cited_by_count":2,"area":"safety"},{"id":"2503.05721","title":"What Are They Filtering Out? An Experimental Benchmark of Filtering Strategies for Harm Reduction in Pretraining Datasets","created":"2025-02-17","cited_by_count":2,"area":"safety"},{"id":"2608.08027","title":"BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes","created":"2026-08-08","cited_by_count":2,"area":"safety"},{"id":"2403.05842","title":"TokenMark: A Modality-Agnostic Watermark for Pre-trained Transformers","created":"2024-03-09","cited_by_count":1,"area":"safety"},{"id":"2505.00843","title":"OET: Optimization-based prompt injection Evaluation Toolkit","created":"2025-05-01","cited_by_count":1,"area":"safety"},{"id":"2506.01825","title":"Backdoors in Code Summarizers: How Bad Is It?","created":"2025-06-02","cited_by_count":1,"area":"safety"},{"id":"2512.12583","title":"Detecting Prompt Injection Attacks Against Application Using Classifiers","created":"2025-12-14","cited_by_count":1,"area":"safety"},{"id":"2605.30501","title":"Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMs","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2606.20553","title":"From Efficiency to Leakage -- Privacy Backdoor in Federated Language Model Fine-Tuning","created":"2026-06-18","cited_by_count":1,"area":"safety"},{"id":"2606.25476","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2311.10236","title":"Latent Feature-based Data Splits to Improve Generalisation Evaluation: A Hate Speech Detection Case Study","created":"2023-11-16","cited_by_count":0,"area":"safety"},{"id":"2506.20926","title":"Towards Generalized and Stealthy Watermarking for Generative Code Models","created":"2025-06-26","cited_by_count":0,"area":"safety"},{"id":"2512.05254","title":"When unlearning is free: leveraging low influence points to reduce computational costs","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2602.18483","title":"Red Teaming LLMs as Socio-Technical Practice: From Exploration and Data Creation to Evaluation","created":"2026-02-10","cited_by_count":0,"area":"safety"},{"id":"2606.15788","title":"GAS-Leak-LLM: Genetic Algorithm-Based Suffix Optimization for Black-Box LLM Jailbreaking","created":"2026-06-14","cited_by_count":0,"area":"safety"},{"id":"2606.31748","title":"Addressing Over-Refusal in LLMs with Competing Rewards","created":"2026-06-30","cited_by_count":0,"area":"safety"},{"id":"2608.30703","title":"SingProbe Technical Report","created":"2026-08-31","cited_by_count":0,"area":"safety"}],"next_cursor":null}