{"total":381,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651,"area":"alignment"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2306.04528","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","created":"2023-06-07","cited_by_count":226,"area":"safety"},{"id":"2310.11868","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","created":"2023-10-18","cited_by_count":210,"area":"diffusion"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2309.14348","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","created":"2023-09-18","cited_by_count":192,"area":"alignment"},{"id":"2305.12082","title":"SneakyPrompt: Jailbreaking Text-to-image Generative Models","created":"2023-05-20","cited_by_count":189,"area":"diffusion"},{"id":"2405.15234","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","created":"2024-05-24","cited_by_count":168,"area":"diffusion"},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2306.09442","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","created":"2023-06-15","cited_by_count":114,"area":"safety"},{"id":"2103.11943","title":"BERT: A Review of Applications in Natural Language Processing and Understanding","created":"2021-03-22","cited_by_count":109,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2309.17167","title":"DyVal: Dynamic Evaluation of Large Language Models for Reasoning Tasks","created":"2023-09-29","cited_by_count":101,"area":"lr"},{"id":"2306.04618","title":"Revisiting Out-of-distribution Robustness in NLP: Benchmark, Analysis, and LLMs Evaluations","created":"2023-06-07","cited_by_count":97,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2407.20859","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","created":"2024-07-30","cited_by_count":81,"area":"agents"},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2106.06663","title":"TDGIA:Effective Injection Attacks on Graph Neural Networks","created":"2021-06-12","cited_by_count":67,"area":null},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2305.14950","title":"Adversarial Demonstration Attacks on Large Language Models","created":"2023-05-24","cited_by_count":63,"area":null},{"id":"2402.12329","title":"Query-Based Adversarial Prompt Generation","created":"2024-02-19","cited_by_count":62,"area":"alignment"},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2204.05239","title":"Exploring the Universal Vulnerability of Prompt-based Learning Paradigm","created":"2022-04-11","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2103.10013","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","created":"2021-03-18","cited_by_count":53,"area":null},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53,"area":null},{"id":"2406.07057","title":"MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models","created":"2024-06-11","cited_by_count":53,"area":"mllm"},{"id":"2405.20485","title":"Phantom: General Backdoor Attacks on Retrieval Augmented Language Generation","created":"2024-05-30","cited_by_count":49,"area":"rag"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2503.20823","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","created":"2025-03-26","cited_by_count":44,"area":"alignment"},{"id":"2112.13214","title":"NeuronFair: Interpretable White-Box Fairness Testing through Biased Neuron Identification","created":"2021-12-25","cited_by_count":42,"area":null},{"id":"2205.01287","title":"SemAttack: Natural Textual Attacks via Different Semantic Spaces","created":"2022-05-03","cited_by_count":42,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2304.08979","title":"In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPT","created":"2023-04-18","cited_by_count":37,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2309.01686","title":"MathAttack: Attacking Large Language Models Towards Math Solving Ability","created":"2023-09-04","cited_by_count":32,"area":null},{"id":"2108.04990","title":"Perturbing Inputs for Fragile Interpretations in Deep Natural Language Processing","created":"2021-08-11","cited_by_count":30,"area":null},{"id":"2305.10235","title":"Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2110.15317","title":"Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Framework","created":"2021-10-28","cited_by_count":28,"area":null},{"id":"2404.19287","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","created":"2024-04-30","cited_by_count":28,"area":"mllm"},{"id":"2408.00523","title":"Fuzz-Testing Meets LLM-Based Agents: An Automated and Efficient Framework for Jailbreaking Text-To-Image Generation Models","created":"2024-08-01","cited_by_count":27,"area":"agents"},{"id":"2111.02705","title":"Benchmarking Multimodal AutoML for Tabular Data with Text Fields","created":"2021-11-04","cited_by_count":26,"area":null},{"id":"2402.11638","title":"Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attacks","created":"2024-02-18","cited_by_count":26,"area":null},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2504.11168","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","created":"2025-04-15","cited_by_count":26,"area":"safety"},{"id":"2105.02590","title":"Reliability Testing for Natural Language Processing Systems","created":"2021-05-06","cited_by_count":25,"area":null},{"id":"2106.05251","title":"Bayesian Attention Belief Networks","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2407.19200","title":"On Behalf of the Stakeholders: Trends in NLP Model Interpretability in the Era of LLMs","created":"2024-07-27","cited_by_count":25,"area":"mechinterp"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2306.13103","title":"Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks","created":"2023-06-16","cited_by_count":24,"area":"diffusion"},{"id":"2404.07234","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","created":"2024-04-06","cited_by_count":24,"area":"safety"},{"id":"2508.13152","title":"RepreGuard: Detecting LLM-Generated Text by Revealing Hidden Representation Patterns","created":"2025-08-18","cited_by_count":24,"area":null},{"id":"2103.09593","title":"Code-Mixing on Sesame Street: Dawn of the Adversarial Polyglots","created":"2021-03-17","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2307.07171","title":"Certified Robustness for Large Language Models with Self-Denoising","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2302.05706","title":"MTTM: Metamorphic Testing for Textual Content Moderation Software","created":"2023-02-11","cited_by_count":22,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2302.10894","title":"Red Teaming Deep Neural Networks with Feature Synthesis Tools","created":"2023-02-08","cited_by_count":21,"area":"safety"},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2405.02764","title":"Assessing Adversarial Robustness of Large Language Models: An Empirical Study","created":"2024-05-04","cited_by_count":21,"area":null},{"id":"2306.15261","title":"A Survey on Out-of-Distribution Evaluation of Neural NLP Models","created":"2023-06-27","cited_by_count":20,"area":null},{"id":"2404.09754","title":"Resilience of Large Language Models for Noisy Instructions","created":"2024-04-15","cited_by_count":20,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2107.08362","title":"Probabilistic Verification of Neural Networks Against Group Fairness","created":"2021-07-18","cited_by_count":17,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2109.06777","title":"PETGEN: Personalized Text Generation Attack on Deep Sequence Embedding-based Classification Models","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2206.05511","title":"Improving the Adversarial Robustness of NLP Models by Information Bottleneck","created":"2022-06-11","cited_by_count":17,"area":null},{"id":"2504.02733","title":"Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study","created":"2025-04-03","cited_by_count":17,"area":null},{"id":"2109.04775","title":"A Strong Baseline for Query Efficient Attacks in a Black Box Setting","created":"2021-09-10","cited_by_count":16,"area":null},{"id":"2210.03696","title":"LLMEffiChecker: Understanding and Testing Efficiency Degradation of Large Language Models","created":"2022-10-07","cited_by_count":16,"area":null},{"id":"2211.03013","title":"Robust Lottery Tickets for Pre-trained Language Models","created":"2022-11-06","cited_by_count":16,"area":null},{"id":"2308.12636","title":"Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning","created":"2023-08-24","cited_by_count":16,"area":"mllm"},{"id":"2402.01806","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","created":"2024-02-02","cited_by_count":16,"area":null},{"id":"2403.10144","title":"NLP Verification: Towards a General Methodology for Certifying Robustness","created":"2024-03-15","cited_by_count":16,"area":null},{"id":"2404.12274","title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing","created":"2024-04-18","cited_by_count":16,"area":"safety"},{"id":"2506.06151","title":"Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2025-06-06","cited_by_count":16,"area":"rag"},{"id":"2202.03277","title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2202.06043","title":"RoPGen: Towards Robust Code Authorship Attribution via Automatic Coding Style Transformation","created":"2022-02-12","cited_by_count":15,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2205.06439","title":"AEON: A Method for Automatic Evaluation of NLP Test Cases","created":"2022-05-13","cited_by_count":15,"area":null},{"id":"2209.01882","title":"PromptAttack: Prompt-based Attack for Language Models via Gradient Search","created":"2022-09-05","cited_by_count":15,"area":null},{"id":"2210.15221","title":"TASA: Deceiving Question Answering Models by Twin Answer Sentences Attack","created":"2022-10-27","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2107.08176","title":"Automatic Fairness Testing of Neural Classifiers through Adversarial Sampling","created":"2021-07-17","cited_by_count":14,"area":null},{"id":"2110.12567","title":"Alignment Attention by Matching Key and Query Distributions","created":"2021-10-25","cited_by_count":14,"area":null},{"id":"2305.03655","title":"White-Box Multi-Objective Adversarial Attack on Dialogue Generation","created":"2023-05-05","cited_by_count":14,"area":null}],"next_cursor":"100"}