{"total":24,"rows":[{"id":"2309.02705","title":"Certifying LLM Safety against Adversarial Prompting","created":"2023-09-06","cited_by_count":266,"area":"safety"},{"id":"2504.11358","title":"DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks","created":"2025-04-15","cited_by_count":143,"area":"safety"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2409.18025","title":"An Adversarial Perspective on Machine Unlearning for AI Safety","created":"2024-09-26","cited_by_count":123,"area":"safety"},{"id":"2309.05274","title":"FuzzLLM: A Novel and Universal Fuzzing Framework for Proactively Discovering Jailbreak Vulnerabilities in Large Language Models","created":"2023-09-11","cited_by_count":51,"area":"safety"},{"id":"2106.14851","title":"Data Poisoning Won't Save You From Facial Recognition","created":"2021-06-28","cited_by_count":45,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2505.18333","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","created":"2025-05-23","cited_by_count":36,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2410.03489","title":"Gradient-based Jailbreak Images for Multimodal Fusion Models","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2306.14043","title":"Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks","created":"2023-06-24","cited_by_count":6,"area":"safety"},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2212.01688","title":"LDL: A Defense for Label-Based Membership Inference Attacks","created":"2022-12-03","cited_by_count":1,"area":"safety"},{"id":"2312.03419","title":"Synthesizing Physical Backdoor Datasets: An Automated Framework Leveraging Deep Generative Models","created":"2023-12-06","cited_by_count":1,"area":"safety"},{"id":"2403.02995","title":"Mitigating Label Flipping Attacks in Malicious URL Detectors Using Ensemble Trees","created":"2024-03-05","cited_by_count":1,"area":"safety"},{"id":"2410.05304","title":"Developing Assurance Cases for Adversarial Robustness and Regulatory Compliance in LLMs","created":"2024-10-04","cited_by_count":1,"area":"safety"},{"id":"2504.21042","title":"What's Pulling the Strings? Evaluating Integrity and Attribution in AI Training and Inference through Concept Shift","created":"2025-04-28","cited_by_count":0,"area":"safety"},{"id":"2511.01377","title":"Protecting the Neural Networks against FGSM Attack Using Machine Unlearning","created":"2025-11-03","cited_by_count":0,"area":"safety"},{"id":"2604.02780","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","created":"2026-04-03","cited_by_count":0,"area":"safety"},{"id":"2607.07903","title":"Mechanistic Interpretability of LLM Jailbreaks via Internal Attribution Graphs","created":"2026-07-08","cited_by_count":0,"area":"safety"}],"next_cursor":null}