{"total":345,"rows":[{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651,"area":"alignment"},{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2306.04528","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","created":"2023-06-07","cited_by_count":226,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2309.14348","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","created":"2023-09-18","cited_by_count":192,"area":"alignment"},{"id":"2405.07940","title":"RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectors","created":"2024-05-13","cited_by_count":163,"area":null},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2307.14061","title":"Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models","created":"2023-07-26","cited_by_count":108,"area":"mllm"},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2310.14724","title":"A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directions","created":"2023-10-23","cited_by_count":105,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2309.17167","title":"DyVal: Dynamic Evaluation of Large Language Models for Reasoning Tasks","created":"2023-09-29","cited_by_count":101,"area":"lr"},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79,"area":null},{"id":"2210.07321","title":"Machine Generated Text: A Comprehensive Survey of Threat Models and Detection Methods","created":"2022-10-13","cited_by_count":79,"area":null},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2404.13948","title":"Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations","created":"2024-04-22","cited_by_count":65,"area":"rag"},{"id":"2305.14950","title":"Adversarial Demonstration Attacks on Large Language Models","created":"2023-05-24","cited_by_count":63,"area":null},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2103.10013","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","created":"2021-03-18","cited_by_count":53,"area":null},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53,"area":null},{"id":"2112.11668","title":"How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?","created":"2021-12-22","cited_by_count":49,"area":null},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2210.10488","title":"Attribution and Obfuscation of Neural Text Authorship: A Data Mining Perspective","created":"2022-10-19","cited_by_count":41,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38,"area":null},{"id":"2410.23746","title":"DetectRL: Benchmarking LLM-Generated Text Detection in Real-World Scenarios","created":"2024-10-31","cited_by_count":38,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30,"area":null},{"id":"2108.04990","title":"Perturbing Inputs for Fragile Interpretations in Deep Natural Language Processing","created":"2021-08-11","cited_by_count":30,"area":null},{"id":"2305.10235","title":"Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2209.08891","title":"Exploiting Cultural Biases via Homoglyphs in Text-to-Image Synthesis","created":"2022-09-19","cited_by_count":29,"area":"diffusion"},{"id":"2309.16155","title":"The Trickle-down Impact of Reward (In-)consistency on RLHF","created":"2023-09-28","cited_by_count":29,"area":"alignment"},{"id":"2210.17004","title":"Character-level White-Box Adversarial Attacks against Transformers via Attachable Subwords Substitution","created":"2022-10-31","cited_by_count":28,"area":null},{"id":"2212.09994","title":"Towards Robustness of Text-to-SQL Models Against Natural and Realistic Adversarial Table Perturbation","created":"2022-12-20","cited_by_count":28,"area":null},{"id":"2405.04286","title":"Who Wrote This? The Key to Zero-Shot LLM-Generated Text Detection Is GECScore","created":"2024-05-07","cited_by_count":27,"area":null},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2504.11168","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","created":"2025-04-15","cited_by_count":26,"area":"safety"},{"id":"2203.07983","title":"Adversarial Robustness of Neural-Statistical Features in Detection of Generative Transformers","created":"2022-03-02","cited_by_count":25,"area":null},{"id":"2504.13192","title":"CheatAgent: Attacking LLM-Empowered Recommender Systems via LLM Agent","created":"2025-04-13","cited_by_count":25,"area":"agents"},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2204.04636","title":"\"That Is a Suspicious Reaction!\": Interpreting Logits Variation to Detect NLP Adversarial Attacks","created":"2022-04-10","cited_by_count":24,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2404.07234","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","created":"2024-04-06","cited_by_count":24,"area":"safety"},{"id":"2106.01202","title":"Framing RNN as a kernel method: A neural ODE approach","created":"2021-06-02","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2307.07171","title":"Certified Robustness for Large Language Models with Self-Denoising","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2302.05706","title":"MTTM: Metamorphic Testing for Textual Content Moderation Software","created":"2023-02-11","cited_by_count":22,"area":null},{"id":"2408.04585","title":"Towards Resilient and Efficient LLMs: A Comparative Study of Efficiency, Performance, and Adversarial Robustness","created":"2024-08-08","cited_by_count":22,"area":null},{"id":"2109.04367","title":"Multi-granularity Textual Adversarial Attack with Behavior Cloning","created":"2021-09-09","cited_by_count":21,"area":null},{"id":"2306.15261","title":"A Survey on Out-of-Distribution Evaluation of Neural NLP Models","created":"2023-06-27","cited_by_count":20,"area":null},{"id":"2404.09754","title":"Resilience of Large Language Models for Noisy Instructions","created":"2024-04-15","cited_by_count":20,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2402.14836","title":"Stealthy Attack on Large Language Model based Recommendation","created":"2024-02-18","cited_by_count":19,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2405.15604","title":"Text Generation: A Systematic Literature Review of Tasks, Evaluation, and Challenges","created":"2024-05-24","cited_by_count":18,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2206.05511","title":"Improving the Adversarial Robustness of NLP Models by Information Bottleneck","created":"2022-06-11","cited_by_count":17,"area":null},{"id":"2402.11138","title":"Contrastive Instruction Tuning","created":"2024-02-17","cited_by_count":17,"area":null},{"id":"2504.02733","title":"Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study","created":"2025-04-03","cited_by_count":17,"area":null},{"id":"2110.08460","title":"A Short Study on Compressing Decoder-Based Language Models","created":"2021-10-16","cited_by_count":16,"area":null},{"id":"2112.07605","title":"The King is Naked: on the Notion of Robustness for Natural Language Processing","created":"2021-12-13","cited_by_count":16,"area":null},{"id":"2211.03013","title":"Robust Lottery Tickets for Pre-trained Language Models","created":"2022-11-06","cited_by_count":16,"area":null},{"id":"2403.10144","title":"NLP Verification: Towards a General Methodology for Certifying Robustness","created":"2024-03-15","cited_by_count":16,"area":null},{"id":"2404.12274","title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing","created":"2024-04-18","cited_by_count":16,"area":"safety"},{"id":"2406.01179","title":"Are AI-Generated Text Detectors Robust to Adversarial Perturbations?","created":"2024-06-03","cited_by_count":16,"area":null},{"id":"2506.11113","title":"Breaking the Reviewer: Assessing the Vulnerability of Large Language Models in Automated Peer Review Under Textual Adversarial Attacks","created":"2025-06-08","cited_by_count":16,"area":null},{"id":"2202.03277","title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2202.09817","title":"$\\mathcal{Y}$-Tuning: An Efficient Tuning Paradigm for Large-Scale Pre-Trained Models via Label Representation Learning","created":"2022-02-20","cited_by_count":15,"area":null},{"id":"2102.01563","title":"On Robustness of Neural Semantic Parsers","created":"2021-02-02","cited_by_count":14,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2211.03769","title":"Are AlphaZero-like Agents Robust to Adversarial Perturbations?","created":"2022-11-07","cited_by_count":14,"area":null},{"id":"2404.08690","title":"Towards Building a Robust Toxicity Predictor","created":"2024-04-09","cited_by_count":14,"area":null},{"id":"2501.16750","title":"HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns","created":"2025-01-28","cited_by_count":14,"area":null},{"id":"2104.05996","title":"Fall of Giants: How popular text-based MLaaS fall against a simple evasion attack","created":"2021-04-13","cited_by_count":13,"area":null},{"id":"2203.10346","title":"Perturbations in the Wild: Leveraging Human-Written Text Perturbations for Realistic Adversarial Attack and Defense","created":"2022-03-19","cited_by_count":13,"area":null},{"id":"2405.19740","title":"PertEval: Unveiling Real Knowledge Capacity of LLMs with Knowledge-Invariant Perturbations","created":"2024-05-30","cited_by_count":13,"area":null},{"id":"2405.20701","title":"Unveiling the Lexical Sensitivity of LLMs: Combinatorial Optimization for Prompt Enhancement","created":"2024-05-31","cited_by_count":13,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2203.12709","title":"Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation","created":"2022-03-23","cited_by_count":12,"area":null},{"id":"2311.11861","title":"Generating Valid and Natural Adversarial Examples with Large Language Models","created":"2023-11-20","cited_by_count":12,"area":null},{"id":"2503.23804","title":"DrunkAgent: Stealthy Memory Corruption in LLM-Powered Recommender Agents","created":"2025-03-31","cited_by_count":12,"area":"agents"},{"id":"2101.06930","title":"Generative Counterfactuals for Neural Networks via Attribute-Informed Perturbation","created":"2021-01-18","cited_by_count":11,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2310.00646","title":"Source Attribution for Large Language Model-Generated Data","created":"2023-10-01","cited_by_count":11,"area":"synth"},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2503.08704","title":"Life-Cycle Routing Vulnerabilities of LLM Router","created":"2025-03-09","cited_by_count":11,"area":"safety"},{"id":"2107.13955","title":"Local Structure Matters Most: Perturbation Study in NLU","created":"2021-07-29","cited_by_count":10,"area":null},{"id":"2201.08193","title":"TextHacker: Learning based Hybrid Local Search Algorithm for Text Hard-label Adversarial Attack","created":"2022-01-20","cited_by_count":10,"area":null},{"id":"2305.04557","title":"Toward Adversarial Training on Contextualized Language Representation","created":"2023-05-08","cited_by_count":10,"area":null},{"id":"2311.17400","title":"Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention","created":"2023-11-29","cited_by_count":10,"area":null}],"next_cursor":"100"}