{"total":102,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2504.11358","title":"DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks","created":"2025-04-15","cited_by_count":143,"area":"safety"},{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2402.02309","title":"Jailbreaking Attack against Multimodal Large Language Model","created":"2024-02-04","cited_by_count":135,"area":"safety"},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2101.01341","title":"Practical Blind Membership Inference Attack via Differential Comparisons","created":"2021-01-05","cited_by_count":78,"area":"safety"},{"id":"2305.03807","title":"Evading Watermark based Detection of AI-Generated Content","created":"2023-05-05","cited_by_count":78,"area":"safety"},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2301.11578","title":"Learning to Unlearn: Instance-wise Unlearning for Pre-trained Classifiers","created":"2023-01-27","cited_by_count":67,"area":"safety"},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2112.05588","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models","created":"2021-12-10","cited_by_count":46,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2210.10750","title":"Canary in a Coalmine: Better Membership Inference with Ensembled Adversarial Queries","created":"2022-10-19","cited_by_count":40,"area":"safety"},{"id":"2403.13682","title":"Threats, Attacks, and Defenses in Machine Unlearning: A Survey","created":"2024-03-20","cited_by_count":39,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2211.00463","title":"Amplifying Membership Exposure via Data Poisoning","created":"2022-11-01","cited_by_count":34,"area":"safety"},{"id":"2309.08230","title":"A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services","created":"2023-09-15","cited_by_count":34,"area":"safety"},{"id":"2307.01610","title":"Overconfidence is a Dangerous Thing: Mitigating Membership Inference Attacks by Enforcing Less Confident Prediction","created":"2023-07-04","cited_by_count":29,"area":"safety"},{"id":"2412.18693","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","created":"2024-12-24","cited_by_count":25,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2203.04160","title":"Robustly-reliable learners under poisoning attacks","created":"2022-03-08","cited_by_count":20,"area":"safety"},{"id":"2505.14103","title":"AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Models","created":"2025-05-20","cited_by_count":18,"area":"safety"},{"id":"2405.14189","title":"Efficient Universal Goal Hijacking with Semantics-guided Prompt Organization","created":"2024-05-23","cited_by_count":16,"area":"safety"},{"id":"2406.06186","title":"A Survey on Machine Unlearning: Techniques and New Emerged Privacy Risks","created":"2024-06-10","cited_by_count":15,"area":"safety"},{"id":"2507.07417","title":"May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks","created":"2025-07-10","cited_by_count":15,"area":"safety"},{"id":"2206.01367","title":"Adversarial Unlearning: Reducing Confidence Along Adversarial Directions","created":"2022-06-03","cited_by_count":14,"area":"safety"},{"id":"2402.05467","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","created":"2024-02-08","cited_by_count":14,"area":"safety"},{"id":"2405.16978","title":"OSLO: One-Shot Label-Only Membership Inference Attacks","created":"2024-05-27","cited_by_count":13,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2401.17523","title":"Game-Theoretic Unlearnable Example Generator","created":"2024-01-31","cited_by_count":12,"area":"safety"},{"id":"2503.08704","title":"Life-Cycle Routing Vulnerabilities of LLM Router","created":"2025-03-09","cited_by_count":11,"area":"safety"},{"id":"2102.08355","title":"Adversarial Targeted Forgetting in Regularization and Generative Based Continual Learning Models","created":"2021-02-16","cited_by_count":9,"area":"safety"},{"id":"2103.12399","title":"The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?","created":"2021-03-23","cited_by_count":9,"area":"safety"},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2407.17447","title":"FLRT: Fluent Student-Teacher Redteaming","created":"2024-07-24","cited_by_count":9,"area":"safety"},{"id":"2502.15427","title":"Adversarial Prompt Evaluation: Systematic Benchmarking of Guardrails Against Prompt Input Attacks on LLMs","created":"2025-02-21","cited_by_count":9,"area":"safety"},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8,"area":"safety"},{"id":"2205.06986","title":"Evaluating Membership Inference Through Adversarial Robustness","created":"2022-05-14","cited_by_count":8,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2308.07847","title":"Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models","created":"2023-08-15","cited_by_count":7,"area":"safety"},{"id":"2203.00915","title":"MIAShield: Defending Membership Inference Attacks via Preemptive Exclusion of Members","created":"2022-03-02","cited_by_count":6,"area":"safety"},{"id":"2211.15875","title":"Data Poisoning Attack Aiming the Vulnerability of Continual Learning","created":"2022-11-29","cited_by_count":6,"area":"safety"},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2410.01906","title":"Social Media Authentication and Combating Deepfakes using Semi-fragile Invisible Image Watermarking","created":"2024-10-02","cited_by_count":6,"area":"safety"},{"id":"2412.16780","title":"Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification","created":"2024-12-21","cited_by_count":6,"area":"safety"},{"id":"2602.12418","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","created":"2026-02-12","cited_by_count":6,"area":"safety"},{"id":"2310.03838","title":"Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning","created":"2023-10-05","cited_by_count":5,"area":"safety"},{"id":"2402.05723","title":"In-Context Learning Can Re-learn Forbidden Tasks","created":"2024-02-08","cited_by_count":5,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2402.14977","title":"Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models","created":"2024-02-22","cited_by_count":4,"area":"safety"},{"id":"2410.04234","title":"Functional Homotopy: Smoothing Discrete Optimization via Continuous Parameters for LLM Jailbreak Attacks","created":"2024-10-05","cited_by_count":4,"area":"safety"},{"id":"2508.03365","title":"When Good Sounds Go Adversarial: Jailbreaking Audio-Language Models with Benign Inputs","created":"2025-08-05","cited_by_count":4,"area":"safety"},{"id":"2206.05565","title":"NeuGuard: Lightweight Neuron-Guided Defense against Membership Inference Attacks","created":"2022-06-11","cited_by_count":3,"area":"safety"},{"id":"2211.01086","title":"Generative Poisoning Using Random Discriminators","created":"2022-11-02","cited_by_count":3,"area":"safety"},{"id":"2407.14738","title":"Flatness-aware Sequential Learning Generates Resilient Backdoors","created":"2024-07-20","cited_by_count":3,"area":"safety"},{"id":"2501.19403","title":"Tackling Fake Forgetting through Uncertainty Quantification","created":"2025-01-31","cited_by_count":3,"area":"safety"},{"id":"2510.00451","title":"A Call to Action for a Secure-by-Design Generative AI Paradigm","created":"2025-10-01","cited_by_count":3,"area":"safety"},{"id":"2604.14604","title":"Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2206.08788","title":"Is Multi-Modal Necessarily Better? Robustness Evaluation of Multi-modal Fake News Detection","created":"2022-06-17","cited_by_count":2,"area":"safety"},{"id":"2401.04385","title":"Machine unlearning through fine-grained model parameters perturbation","created":"2024-01-09","cited_by_count":2,"area":"safety"},{"id":"2506.02711","title":"Privacy Leaks by Adversaries: Adversarial Iterations for Membership Inference Attack","created":"2025-06-03","cited_by_count":2,"area":"safety"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2512.20677","title":"Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models","created":"2025-12-21","cited_by_count":2,"area":"safety"},{"id":"2604.06436","title":"The Defense Trilemma: Why Prompt Injection Defense Wrappers Fail?","created":"2026-04-07","cited_by_count":2,"area":"safety"},{"id":"2605.04700","title":"Sparse Tokens Suffice: Jailbreaking Audio Language Models via Token-Aware Gradient Optimization","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2103.01527","title":"ActiveGuard: An Active DNN IP Protection Technique via Adversarial Examples","created":"2021-03-02","cited_by_count":1,"area":"safety"},{"id":"2305.05503","title":"BadCS: A Backdoor Attack Framework for Code search","created":"2023-05-09","cited_by_count":1,"area":"safety"},{"id":"2307.05193","title":"Membership Inference Attacks on DNNs using Adversarial Perturbations","created":"2023-07-11","cited_by_count":1,"area":"safety"},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2507.21738","title":"Zero-Shot Machine Unlearning with Proxy Adversarial Data Generation","created":"2025-07-29","cited_by_count":1,"area":"safety"},{"id":"2510.22014","title":"Toward Understanding the Transferability of Adversarial Suffixes in Large Language Models","created":"2025-10-24","cited_by_count":1,"area":"safety"},{"id":"2602.12138","title":"BlackCATT: Black-box Collusion Aware Traitor Tracing in Federated Learning","created":"2026-02-12","cited_by_count":1,"area":"safety"},{"id":"2604.03912","title":"Automating Cloud Security and Forensics Through a Secure-by-Design Generative AI Framework","created":"2026-04-05","cited_by_count":1,"area":"safety"},{"id":"2605.01462","title":"LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training","created":"2026-05-02","cited_by_count":1,"area":"safety"},{"id":"2605.17163","title":"STRIDE-AI: A Threat Modeling Framework for Generative AI Security Assessment","created":"2026-05-16","cited_by_count":1,"area":"safety"},{"id":"2606.12716","title":"Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Review","created":"2026-06-10","cited_by_count":1,"area":"safety"},{"id":"2202.10309","title":"HoneyModels: Machine Learning Honeypots","created":"2022-02-21","cited_by_count":0,"area":"safety"},{"id":"2302.09420","title":"RobustNLP: A Technique to Defend NLP Models Against Backdoor Attacks","created":"2023-02-18","cited_by_count":0,"area":"safety"},{"id":"2309.13579","title":"Seeing Is Not Always Believing: Invisible Collision Attack and Defence on Pre-Trained Models","created":"2023-09-24","cited_by_count":0,"area":"safety"},{"id":"2401.09740","title":"Hijacking Attacks against Neural Networks by Analyzing Training Data","created":"2024-01-18","cited_by_count":0,"area":"safety"},{"id":"2407.04589","title":"Remembering Everything Makes You Vulnerable: A Limelight on Machine Unlearning for Personalized Healthcare Sector","created":"2024-07-05","cited_by_count":0,"area":"safety"},{"id":"2504.21042","title":"What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift","created":"2025-04-28","cited_by_count":0,"area":"safety"},{"id":"2506.13160","title":"CertDW: Towards Certified Dataset Ownership Verification via Conformal Calibration","created":"2025-06-16","cited_by_count":0,"area":"safety"},{"id":"2602.02602","title":"Position: 3D Gaussian Splatting Watermarking Should Be Scenario-Driven and Threat-Model Explicit","created":"2026-02-01","cited_by_count":0,"area":"safety"},{"id":"2604.00422","title":"Shapley-Guided Neural Repair Approach via Derivative-Free Optimization","created":"2026-04-01","cited_by_count":0,"area":"safety"},{"id":"2604.02780","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","created":"2026-04-03","cited_by_count":0,"area":"safety"},{"id":"2605.08898","title":"LLM-Agnostic Semantic Representation Attack","created":"2026-05-09","cited_by_count":0,"area":"safety"},{"id":"2605.11996","title":"BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2606.29451","title":"The Platonic Defense: Backdoor Defense for Self-Supervised Encoders in the Era of Large Scale Pre-training","created":"2026-06-28","cited_by_count":0,"area":"safety"},{"id":"2607.07527","title":"A Unified Detection Framework for AI-Related Content and Artifacts","created":"2026-07-08","cited_by_count":0,"area":"safety"},{"id":"2607.07903","title":"Mechanistic Interpretability of LLM Jailbreaks via Internal Attribution Graphs","created":"2026-07-08","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}