{"total":71,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420,"area":"safety"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2308.14132","title":"Detecting Language Model Attacks with Perplexity","created":"2023-08-27","cited_by_count":431,"area":"safety"},{"id":"2309.02705","title":"Certifying LLM Safety against Adversarial Prompting","created":"2023-09-06","cited_by_count":266,"area":"safety"},{"id":"2308.07308","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","created":"2023-08-14","cited_by_count":244,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2502.05374","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","created":"2025-02-07","cited_by_count":79,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2403.00867","title":"Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapes","created":"2024-03-01","cited_by_count":74,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2310.20448","title":"A Survey on Federated Unlearning: Challenges, Methods, and Future Directions","created":"2023-10-31","cited_by_count":63,"area":"safety"},{"id":"2403.13682","title":"Threats, Attacks, and Defenses in Machine Unlearning: A Survey","created":"2024-03-20","cited_by_count":39,"area":"safety"},{"id":"2311.11509","title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information","created":"2023-11-20","cited_by_count":33,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2410.19937","title":"RobustKV: Defending Large Language Models against Jailbreak Attacks via KV Eviction","created":"2024-10-25","cited_by_count":21,"area":"safety"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2205.13634","title":"BagFlip: A Certified Defense against Data Poisoning","created":"2022-05-26","cited_by_count":19,"area":"safety"},{"id":"2302.02300","title":"Run-Off Election: Improved Provable Defense against Data Poisoning Attacks","created":"2023-02-05","cited_by_count":17,"area":"safety"},{"id":"2402.01401","title":"An Information Theoretic Approach to Machine Unlearning","created":"2024-02-02","cited_by_count":16,"area":"safety"},{"id":"2404.12274","title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing","created":"2024-04-18","cited_by_count":16,"area":"safety"},{"id":"2210.02713","title":"On Optimal Learning Under Targeted Data Poisoning","created":"2022-10-06","cited_by_count":14,"area":"safety"},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2403.18774","title":"RAW: A Robust and Agile Plug-and-Play Watermark Framework for AI-Generated Images with Provable Guarantees","created":"2024-01-23","cited_by_count":8,"area":"safety"},{"id":"2501.16497","title":"Smoothed Embeddings for Robust Language Models","created":"2025-01-27","cited_by_count":8,"area":"safety"},{"id":"2502.19567","title":"Atlas: A Framework for ML Lifecycle Provenance & Transparency","created":"2025-02-26","cited_by_count":8,"area":"safety"},{"id":"2411.13553","title":"AI-generated Image Detection: Passive or Watermark?","created":"2024-11-20","cited_by_count":7,"area":"safety"},{"id":"2412.18171","title":"Token Highlighter: Inspecting and Mitigating Jailbreak Prompts for Large Language Models","created":"2024-12-24","cited_by_count":7,"area":"safety"},{"id":"2306.14043","title":"Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks","created":"2023-06-24","cited_by_count":6,"area":"safety"},{"id":"2512.08967","title":"CluCERT: Certifying LLM Robustness via Clustering-Guided Denoising Smoothing","created":"2025-12-01","cited_by_count":6,"area":"safety"},{"id":"2507.04365","title":"Attention Slipping: A Mechanistic Understanding of Jailbreak Attacks and Defenses in LLMs","created":"2025-07-06","cited_by_count":5,"area":"safety"},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2310.12665","title":"SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models","created":"2023-10-19","cited_by_count":4,"area":"safety"},{"id":"2410.09878","title":"Provably Reliable Conformal Prediction Sets in the Presence of Data Poisoning","created":"2024-10-13","cited_by_count":4,"area":"safety"},{"id":"2510.00761","title":"Downgrade to Upgrade: Optimizer Simplification Enhances Robustness in LLM Unlearning","created":"2025-10-01","cited_by_count":4,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2409.19708","title":"A Certified Robust Watermark For Large Language Models","created":"2024-09-29","cited_by_count":3,"area":"safety"},{"id":"2510.00451","title":"A Call to Action for a Secure-by-Design Generative AI Paradigm","created":"2025-10-01","cited_by_count":3,"area":"safety"},{"id":"2503.00917","title":"AMUN: Adversarial Machine UNlearning","created":"2025-03-02","cited_by_count":2,"area":"safety"},{"id":"2509.20924","title":"RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks","created":"2025-09-25","cited_by_count":2,"area":"safety"},{"id":"2510.15303","title":"DSSmoothing: Toward Certified Dataset Ownership Verification for Pre-trained Language Models via Dual-Space Smoothing","created":"2025-10-17","cited_by_count":2,"area":"safety"},{"id":"2604.06436","title":"The Defense Trilemma: Why Prompt Injection Defense Wrappers Fail?","created":"2026-04-07","cited_by_count":2,"area":"safety"},{"id":"2109.04566","title":"SanitAIs: Unsupervised Data Augmentation to Sanitize Trojaned Neural Networks","created":"2021-09-09","cited_by_count":1,"area":"safety"},{"id":"2212.01688","title":"LDL: A Defense for Label-Based Membership Inference Attacks","created":"2022-12-03","cited_by_count":1,"area":"safety"},{"id":"2307.05193","title":"Membership Inference Attacks on DNNs using Adversarial Perturbations","created":"2023-07-11","cited_by_count":1,"area":"safety"},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2402.01114","title":"Double-Dip: Thwarting Label-Only Membership Inference Attacks with Transfer Learning and Randomization","created":"2024-02-02","cited_by_count":1,"area":"safety"},{"id":"2503.11195","title":"Provenance Detection for AI-Generated Images: Combining Perceptual Hashing, Homomorphic Encryption, and AI Detection Models","created":"2025-03-14","cited_by_count":1,"area":"safety"},{"id":"2509.20230","title":"Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization","created":"2025-09-24","cited_by_count":1,"area":"safety"},{"id":"2511.18721","title":"Towards Realistic Guarantees: A Probabilistic Certificate for SmoothLLM","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2604.03912","title":"Automating Cloud Security and Forensics Through a Secure-by-Design Generative AI Framework","created":"2026-04-05","cited_by_count":1,"area":"safety"},{"id":"2605.02196","title":"DurableUn: Quantization-Induced Recovery Attacks in Machine Unlearning","created":"2026-05-04","cited_by_count":1,"area":"safety"},{"id":"2606.26036","title":"Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2202.10309","title":"HoneyModels: Machine Learning Honeypots","created":"2022-02-21","cited_by_count":0,"area":"safety"},{"id":"2506.13160","title":"CertDW: Towards Certified Dataset Ownership Verification via Conformal Calibration","created":"2025-06-16","cited_by_count":0,"area":"safety"},{"id":"2507.10162","title":"HASSLE: A Self-Supervised Learning Enhanced Hijacking Attack on Vertical Federated Learning","created":"2025-07-14","cited_by_count":0,"area":"safety"},{"id":"2511.01377","title":"Protecting the Neural Networks against FGSM Attack Using Machine Unlearning","created":"2025-11-03","cited_by_count":0,"area":"safety"},{"id":"2512.20865","title":"Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attacks","created":"2025-12-24","cited_by_count":0,"area":"safety"},{"id":"2602.01587","title":"Provable Defense Framework for LLM Jailbreaks via Noise-Augumented Alignment","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2603.18538","title":"Beyond Passive Aggregation: Active Auditing and Topology-Aware Defense in Decentralized Federated Learning","created":"2026-03-19","cited_by_count":0,"area":"safety"},{"id":"2604.16606","title":"SafeLM: Unified Privacy-Aware Optimization for Trustworthy Federated Large Language Models","created":"2026-04-17","cited_by_count":0,"area":"safety"},{"id":"2605.10582","title":"Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2607.13088","title":"Securing LLMs in the Wild: Privacy and Security Challenges at the Edge","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2608.20820","title":"Certified Multi-Turn Robustness for LLM Safety via Compositional Bounds and Safety Persistence","created":"2026-08-21","cited_by_count":0,"area":"safety"},{"id":"2609.09564","title":"Robust Industrial Cyber Physical Classification Using Neuromorphic Temporal Embeddings and Hybrid SNN XGBoost Under Machine Unlearning Attacks","created":"2026-09-09","cited_by_count":0,"area":"safety"},{"id":"2609.27378","title":"Psychoacoustically Aligned Latent Smoothing for Adversarial Robustness of Full-Duplex Speech-to-Speech Dialogue Models","created":"2026-09-23","cited_by_count":0,"area":"safety"},{"id":"2609.32116","title":"Escaping Alignment: A Physical Trap Model of Best-of-N Jailbreaking","created":"2026-09-26","cited_by_count":0,"area":"safety"},{"id":"2610.02853","title":"Bounded Reachability & Jailbreak Detection via Contraction-Constrained State Space Models","created":"2026-10-02","cited_by_count":0,"area":"safety"}],"next_cursor":null}