{"total":22,"rows":[{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420,"area":"safety"},{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2106.14851","title":"Data Poisoning Won't Save You From Facial Recognition","created":"2021-06-28","cited_by_count":45,"area":"safety"},{"id":"2309.08230","title":"A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services","created":"2023-09-15","cited_by_count":34,"area":"safety"},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18,"area":"safety"},{"id":"2304.11285","title":"Identifying Appropriate Intellectual Property Protection Mechanisms for Machine Learning Models: A Systematization of Watermarking, Fingerprinting, Model Access, and Attacks","created":"2023-04-22","cited_by_count":12,"area":"safety"},{"id":"2305.19607","title":"Adversarial Clean Label Backdoor Attacks and Defenses on Text Classification Systems","created":"2023-05-31","cited_by_count":11,"area":"safety"},{"id":"2103.12399","title":"The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?","created":"2021-03-23","cited_by_count":9,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2602.15001","title":"Boundary Point Jailbreaking of Black-Box LLMs","created":"2026-02-16","cited_by_count":8,"area":"safety"},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2604.15022","title":"Route to Rome Attack: Directing LLM Routers to Expensive Models via Adversarial Suffix Optimization","created":"2026-04-16","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2503.00917","title":"AMUN: Adversarial Machine UNlearning","created":"2025-03-02","cited_by_count":2,"area":"safety"},{"id":"2401.08984","title":"A GAN-based data poisoning framework against anomaly detection in vertical federated learning","created":"2024-01-17","cited_by_count":1,"area":"safety"},{"id":"2510.01494","title":"Understanding Adversarial Transfer: Why Representation-Space Attacks Fail Where Data-Space Attacks Succeed","created":"2025-10-01","cited_by_count":1,"area":"safety"},{"id":"2512.14751","title":"One Leak Away: How Pretrained Model Exposure Amplifies Jailbreak Risks in Finetuned LLMs","created":"2025-12-14","cited_by_count":1,"area":"safety"},{"id":"2403.10313","title":"Interactive Trimming against Evasive Online Data Manipulation Attacks: A Game-Theoretic Approach","created":"2024-03-15","cited_by_count":0,"area":"safety"},{"id":"2602.18934","title":"LoMime: Query-Efficient Membership Inference using Model Extraction in Label-Only Settings","created":"2026-02-21","cited_by_count":0,"area":"safety"},{"id":"2608.06211","title":"Reversible Unlearnable Examples: Towards the Copyright Protection in Deep Learning Era","created":"2026-08-06","cited_by_count":0,"area":"safety"}],"next_cursor":null}