{"total":27,"rows":[{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2407.11969","title":"Does Refusal Training in LLMs Generalize to the Past Tense?","created":"2024-07-16","cited_by_count":79,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2406.06822","title":"An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection","created":"2024-06-10","cited_by_count":40,"area":"safety"},{"id":"2202.11202","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","created":"2022-02-22","cited_by_count":34,"area":"safety"},{"id":"2105.03592","title":"De-Pois: An Attack-Agnostic Defense against Data Poisoning Attacks","created":"2021-05-08","cited_by_count":33,"area":"safety"},{"id":"2406.05670","title":"Certified Robustness to Data Poisoning in Gradient-Based Training","created":"2024-06-09","cited_by_count":18,"area":"safety"},{"id":"2111.03120","title":"Adversarial Attacks on Knowledge Graph Embeddings via Instance Attribution Methods","created":"2021-11-04","cited_by_count":16,"area":"safety"},{"id":"2202.10276","title":"Poisoning Attacks and Defenses on Artificial Intelligence: A Survey","created":"2022-02-21","cited_by_count":16,"area":"safety"},{"id":"2512.12594","title":"ceLLMate: Sandboxing Browser AI Agents","created":"2025-12-14","cited_by_count":16,"area":"safety"},{"id":"2108.01644","title":"The Devil is in the GAN: Backdoor Attacks and Defenses in Deep Generative Models","created":"2021-08-03","cited_by_count":12,"area":"safety"},{"id":"2111.06345","title":"Poisoning Knowledge Graph Embeddings via Relation Inference Patterns","created":"2021-11-11","cited_by_count":12,"area":"safety"},{"id":"2103.12399","title":"The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?","created":"2021-03-23","cited_by_count":9,"area":"safety"},{"id":"2106.00660","title":"Markpainting: Adversarial Machine Learning meets Inpainting","created":"2021-06-01","cited_by_count":9,"area":"safety"},{"id":"2210.09305","title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning","created":"2022-10-17","cited_by_count":7,"area":"safety"},{"id":"2602.16944","title":"Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming","created":"2026-02-18","cited_by_count":4,"area":"safety"},{"id":"2502.16737","title":"Keeping up with dynamic attackers: Certifying robustness to adaptive online data poisoning","created":"2025-02-23","cited_by_count":3,"area":"safety"},{"id":"2104.13230","title":"Influence Based Defense Against Data Poisoning Attacks in Online Learning","created":"2021-04-24","cited_by_count":2,"area":"safety"},{"id":"2210.11592","title":"New data poison attacks on machine learning classifiers for mobile exfiltration","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2608.05430","title":"Robust Context-Aware Detection of Malicious Instructions in Text","created":"2026-08-05","cited_by_count":1,"area":"safety"},{"id":"2105.13530","title":"A BIC-based Mixture Model Defense against Data Poisoning Attacks on Classifiers","created":"2021-05-28","cited_by_count":0,"area":"safety"},{"id":"2210.00122","title":"Adversarial Robustness of Representation Learning for Knowledge Graphs","created":"2022-09-30","cited_by_count":0,"area":"safety"},{"id":"2512.08123","title":"Universal Adversarial Suffixes Using Calibrated Gumbel-Softmax Relaxation","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2607.14006","title":"Rethinking Penetration Testing for AI-Enabled Systems: From Resource Compromise to Behavioral Objective Violation","created":"2026-07-15","cited_by_count":0,"area":"safety"},{"id":"2608.04602","title":"Adaptive Intrusion Detection System using Transformer-Based Neural Networks and Continual Learning Approach with Adversarial Investigation","created":"2026-08-05","cited_by_count":0,"area":"safety"}],"next_cursor":null}