{"total":43,"rows":[{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486,"area":"safety"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2309.02705","title":"Certifying LLM Safety against Adversarial Prompting","created":"2023-09-06","cited_by_count":266,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2103.14991","title":"Graph Unlearning","created":"2021-03-27","cited_by_count":138,"area":"safety"},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2407.11969","title":"Does Refusal Training in LLMs Generalize to the Past Tense?","created":"2024-07-16","cited_by_count":79,"area":"safety"},{"id":"2104.09667","title":"Manipulating SGD with Data Ordering Attacks","created":"2021-04-19","cited_by_count":74,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2109.08045","title":"Membership Inference Attacks Against Recommender Systems","created":"2021-09-16","cited_by_count":57,"area":"safety"},{"id":"2309.05274","title":"FuzzLLM: A Novel and Universal Fuzzing Framework for Proactively Discovering Jailbreak Vulnerabilities in Large Language Models","created":"2023-09-11","cited_by_count":51,"area":"safety"},{"id":"2112.07668","title":"Dual-Key Multimodal Backdoors for Visual Question Answering","created":"2021-12-14","cited_by_count":37,"area":"safety"},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33,"area":"safety"},{"id":"2412.05934","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","created":"2024-12-08","cited_by_count":33,"area":"safety"},{"id":"2504.11168","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","created":"2025-04-15","cited_by_count":26,"area":"safety"},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2102.08355","title":"Adversarial Targeted Forgetting in Regularization and Generative Based Continual Learning Models","created":"2021-02-16","cited_by_count":9,"area":"safety"},{"id":"2103.12399","title":"The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?","created":"2021-03-23","cited_by_count":9,"area":"safety"},{"id":"2106.00660","title":"Markpainting: Adversarial Machine Learning meets Inpainting","created":"2021-06-01","cited_by_count":9,"area":"safety"},{"id":"2404.02462","title":"A Unified Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2024-04-03","cited_by_count":9,"area":"safety"},{"id":"2306.14043","title":"Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks","created":"2023-06-24","cited_by_count":6,"area":"safety"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2410.04682","title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning","created":"2024-10-07","cited_by_count":4,"area":"safety"},{"id":"2205.03894","title":"VPN: Verification of Poisoning in Neural Networks","created":"2022-05-08","cited_by_count":2,"area":"safety"},{"id":"2207.13572","title":"Membership Inference Attacks via Adversarial Examples","created":"2022-07-27","cited_by_count":2,"area":"safety"},{"id":"2209.14013","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","created":"2022-09-28","cited_by_count":2,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2501.10800","title":"Jailbreaking Large Language Models in Infinitely Many Ways","created":"2025-01-18","cited_by_count":2,"area":"safety"},{"id":"2505.10351","title":"A Unified and Scalable Membership Inference Method for Visual Self-supervised Encoder via Part-aware Capability","created":"2025-05-15","cited_by_count":1,"area":"safety"},{"id":"2508.02422","title":"Superior resilience to poisoning and amenability to unlearning in quantum machine learning","created":"2025-08-04","cited_by_count":1,"area":"safety"},{"id":"2512.21110","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2104.06744","title":"Defending Against Adversarial Denial-of-Service Data Poisoning Attacks","created":"2021-04-14","cited_by_count":0,"area":"safety"},{"id":"2105.13530","title":"A BIC-based Mixture Model Defense against Data Poisoning Attacks on Classifiers","created":"2021-05-28","cited_by_count":0,"area":"safety"},{"id":"2209.06397","title":"Federated Learning based on Defending Against Data Poisoning Attacks in IoT","created":"2022-09-14","cited_by_count":0,"area":"safety"},{"id":"2506.11615","title":"Machine Unlearning for Robust DNNs: Attribution-Guided Partitioning and Neuron Pruning in Noisy Environments","created":"2025-06-13","cited_by_count":0,"area":"safety"},{"id":"2603.10080","title":"Amnesia: Adversarial Semantic Layer Specific Activation Steering in Large Language Models","created":"2026-03-10","cited_by_count":0,"area":"safety"},{"id":"2606.03647","title":"All you need to break LLMs are Black-Box, Adapting, Efficient, Transferable, Harmful, Applicable ... Attacks","created":"2026-06-02","cited_by_count":0,"area":"safety"},{"id":"2610.01788","title":"SAGE: Similarity-Based Cleaning of Poisoned Training Data from Verified Examples","created":"2026-10-01","cited_by_count":0,"area":"safety"}],"next_cursor":null}