{"total":28,"rows":[{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420,"area":"safety"},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2403.00867","title":"Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapes","created":"2024-03-01","cited_by_count":74,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2404.03233","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","created":"2024-04-04","cited_by_count":48,"area":"safety"},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2403.13682","title":"Threats, Attacks, and Defenses in Machine Unlearning: A Survey","created":"2024-03-20","cited_by_count":39,"area":"safety"},{"id":"2309.08230","title":"A Duty to Forget, a Right to be Assured? Exposing Vulnerabilities in Machine Unlearning Services","created":"2023-09-15","cited_by_count":34,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2106.00660","title":"Markpainting: Adversarial Machine Learning meets Inpainting","created":"2021-06-01","cited_by_count":9,"area":"safety"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2510.16794","title":"Black-box Optimization of LLM Outputs by Asking for Directions","created":"2025-10-19","cited_by_count":7,"area":"safety"},{"id":"2405.09863","title":"Box-Free Model Watermarks Are Prone to Black-Box Removal Attacks","created":"2024-05-16","cited_by_count":6,"area":"safety"},{"id":"2209.01721","title":"An Adaptive Black-box Defense against Trojan Attacks (TrojDef)","created":"2022-09-05","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2410.04682","title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning","created":"2024-10-07","cited_by_count":4,"area":"safety"},{"id":"2503.20257","title":"How Secure is Forgetting? Linking Machine Unlearning to Machine Learning Attacks","created":"2025-03-26","cited_by_count":4,"area":"safety"},{"id":"2101.00157","title":"Active Learning Under Malicious Mislabeling and Poisoning Attacks","created":"2021-01-01","cited_by_count":3,"area":"safety"},{"id":"2508.14013","title":"Efficient Knowledge Graph Unlearning with Zeroth-order Information","created":"2025-08-19","cited_by_count":3,"area":"safety"},{"id":"2502.15836","title":"Soft Token Attacks Cannot Reliably Audit Unlearning in Large Language Models","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2505.19364","title":"RADEP: A Resilient Adaptive Defense Framework Against Model Extraction Attacks","created":"2025-05-25","cited_by_count":1,"area":"safety"},{"id":"2605.14868","title":"Fast Adversarial Attacks with Gradient Prediction","created":"2026-05-14","cited_by_count":1,"area":"safety"},{"id":"2403.10313","title":"Interactive Trimming against Evasive Online Data Manipulation Attacks: A Game-Theoretic Approach","created":"2024-03-15","cited_by_count":0,"area":"safety"},{"id":"2511.05289","title":"Embedding-Space Data Augmentation to Prevent Membership Inference Attacks in Clinical Time Series Forecasting","created":"2025-11-07","cited_by_count":0,"area":"safety"},{"id":"2606.06334","title":"Quantifying the Privacy of Counterfactuals by Leveraging Membership Inference Attacks Against Synthetic Data","created":"2026-06-04","cited_by_count":0,"area":"safety"}],"next_cursor":null}