{"total":22,"rows":[{"id":"2308.14132","title":"Detecting Language Model Attacks with Perplexity","created":"2023-08-27","cited_by_count":431,"area":"safety"},{"id":"2403.14720","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","created":"2024-03-20","cited_by_count":267,"area":"safety"},{"id":"2306.04528","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","created":"2023-06-07","cited_by_count":226,"area":"safety"},{"id":"2306.09442","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","created":"2023-06-15","cited_by_count":114,"area":"safety"},{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110,"area":"safety"},{"id":"2401.03729","title":"The Butterfly Effect of Altering Prompts: How Small Changes and Jailbreaks Affect Large Language Model Performance","created":"2024-01-08","cited_by_count":100,"area":"safety"},{"id":"2104.08305","title":"Membership Inference Attack Susceptibility of Clinical Language Models","created":"2021-04-16","cited_by_count":52,"area":"safety"},{"id":"2206.11349","title":"Prompt Injection: Parameterization of Fixed Inputs","created":"2022-05-31","cited_by_count":36,"area":"safety"},{"id":"2406.16257","title":"Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning","created":"2024-06-24","cited_by_count":27,"area":"safety"},{"id":"2202.08578","title":"An Equivalence Between Data Poisoning and Byzantine Gradient Attacks","created":"2022-02-17","cited_by_count":16,"area":"safety"},{"id":"2311.09816","title":"Downstream Trade-offs of a Family of Text Watermarks","created":"2023-11-16","cited_by_count":14,"area":"safety"},{"id":"2509.14558","title":"LLM Jailbreak Detection for (Almost) Free!","created":"2025-09-18","cited_by_count":13,"area":"safety"},{"id":"2506.12551","title":"MEraser: An Effective Fingerprint Erasure Approach for Large Language Models","created":"2025-06-14","cited_by_count":11,"area":"safety"},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2410.21750","title":"Learning and Unlearning of Fabricated Knowledge in Language Models","created":"2024-10-29","cited_by_count":4,"area":"safety"},{"id":"2511.08905","title":"iSeal: Encrypted Fingerprinting for Reliable LLM Ownership Verification","created":"2025-11-12","cited_by_count":4,"area":"safety"},{"id":"2507.23453","title":"Counterfactual Evaluation for Blind Attack Detection in LLM-based Evaluation Systems","created":"2025-07-31","cited_by_count":3,"area":"safety"},{"id":"2503.05721","title":"What Are They Filtering Out? An Experimental Benchmark of Filtering Strategies for Harm Reduction in Pretraining Datasets","created":"2025-02-17","cited_by_count":2,"area":"safety"},{"id":"2406.05364","title":"Is On-Device AI Broken and Exploitable? Assessing the Trust and Ethics in Small Language Models","created":"2024-06-08","cited_by_count":1,"area":"safety"},{"id":"2412.12563","title":"Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers","created":"2024-12-17","cited_by_count":1,"area":"safety"},{"id":"2311.10236","title":"Latent Feature-based Data Splits to Improve Generalisation Evaluation: A Hate Speech Detection Case Study","created":"2023-11-16","cited_by_count":0,"area":"safety"}],"next_cursor":null}