{"total":56,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489,"area":"safety"},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2402.05668","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","created":"2024-02-08","cited_by_count":95,"area":"safety"},{"id":"2106.06361","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","created":"2021-06-11","cited_by_count":89,"area":"safety"},{"id":"2305.01904","title":"Robust Multi-bit Natural Language Watermarking through Invariant Features","created":"2023-05-03","cited_by_count":82,"area":"safety"},{"id":"2305.08883","title":"Watermarking Text Generated by Black-Box Language Models","created":"2023-05-14","cited_by_count":76,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2305.19713","title":"Red Teaming Language Model Detectors with Language Models","created":"2023-05-31","cited_by_count":55,"area":"safety"},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2402.09177","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","created":"2024-02-14","cited_by_count":36,"area":"safety"},{"id":"2504.11168","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","created":"2025-04-15","cited_by_count":26,"area":"safety"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2404.07234","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","created":"2024-04-06","cited_by_count":24,"area":"safety"},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2404.12274","title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing","created":"2024-04-18","cited_by_count":16,"area":"safety"},{"id":"2503.11517","title":"Prompt Injection Detection and Mitigation via AI Multi-Agent NLP Frameworks","created":"2025-03-14","cited_by_count":15,"area":"safety"},{"id":"2303.14325","title":"Backdoor Attacks with Input-unique Triggers in NLP","created":"2023-03-25","cited_by_count":12,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2308.07847","title":"Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models","created":"2023-08-15","cited_by_count":7,"area":"safety"},{"id":"2408.00352","title":"Autonomous LLM-Enhanced Adversarial Attack for Text-to-Motion","created":"2024-08-01","cited_by_count":7,"area":"safety"},{"id":"2306.04535","title":"PromptAttack: Probing Dialogue State Trackers with Adversarial Prompts","created":"2023-06-07","cited_by_count":6,"area":"safety"},{"id":"2407.14644","title":"Human-Interpretable Adversarial Prompt Attack on Large Language Models with Situational Context","created":"2024-07-19","cited_by_count":6,"area":"safety"},{"id":"2512.08967","title":"CluCERT: Certifying LLM Robustness via Clustering-Guided Denoising Smoothing","created":"2025-12-01","cited_by_count":6,"area":"safety"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2412.16359","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","created":"2024-12-20","cited_by_count":3,"area":"safety"},{"id":"2206.08788","title":"Is Multi-Modal Necessarily Better? Robustness Evaluation of Multi-modal Fake News Detection","created":"2022-06-17","cited_by_count":2,"area":"safety"},{"id":"2211.02245","title":"Unintended Memorization and Timing Attacks in Named Entity Recognition Models","created":"2022-11-04","cited_by_count":2,"area":"safety"},{"id":"2410.20019","title":"Attacks against Abstractive Text Summarization Models through Lead Bias and Influence Functions","created":"2024-10-26","cited_by_count":2,"area":"safety"},{"id":"2502.01154","title":"Jailbreaking with Universal Multi-Prompts","created":"2025-02-03","cited_by_count":2,"area":"safety"},{"id":"2606.13044","title":"No Hidden Prompts Needed! You Can Game AI Peer Review with Presentation-Only Revisions","created":"2026-06-11","cited_by_count":2,"area":"safety"},{"id":"2201.02993","title":"Rethink the Evaluation for Attack Strength of Backdoor Attacks in Natural Language Processing","created":"2022-01-09","cited_by_count":1,"area":"safety"},{"id":"2211.09717","title":"UPTON: Preventing Authorship Leakage from Public Text Release via Data Poisoning","created":"2022-11-17","cited_by_count":1,"area":"safety"},{"id":"2502.00652","title":"Reformulation is All You Need: Addressing Malicious Text Features in DNNs","created":"2025-02-02","cited_by_count":1,"area":"safety"},{"id":"2512.21110","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2604.05318","title":"DIA-HARM: Dialectal Disparities in Harmful Content Detection Across 50 English Dialects","created":"2026-04-07","cited_by_count":1,"area":"safety"},{"id":"2606.12716","title":"Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Review","created":"2026-06-10","cited_by_count":1,"area":"safety"},{"id":"2606.26036","title":"Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2211.05371","title":"MSDT: Masked Language Model Scoring Defense in Text Domain","created":"2022-11-10","cited_by_count":0,"area":"safety"},{"id":"2505.08804","title":"TokenProber: Jailbreaking Text-to-image Models via Fine-grained Word Impact Analysis","created":"2025-05-11","cited_by_count":0,"area":"safety"},{"id":"2509.05318","title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models","created":"2025-08-30","cited_by_count":0,"area":"safety"},{"id":"2511.06212","title":"RAG-targeted Adversarial Attack on LLM-based Threat Detection and Mitigation Framework","created":"2025-11-09","cited_by_count":0,"area":"safety"},{"id":"2512.15081","title":"Quantifying Return on Security Controls in LLM Systems","created":"2025-12-17","cited_by_count":0,"area":"safety"},{"id":"2512.17367","title":"Adversarially Robust Detection of Harmful Online Content: A Computational Design Science Approach","created":"2025-12-19","cited_by_count":0,"area":"safety"},{"id":"2605.08898","title":"LLM-Agnostic Semantic Representation Attack","created":"2026-05-09","cited_by_count":0,"area":"safety"},{"id":"2606.04612","title":"Hybrid Adversarial Defence for Natural Language Understanding Tasks","created":"2026-06-03","cited_by_count":0,"area":"safety"},{"id":"2608.27844","title":"EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasion","created":"2026-08-28","cited_by_count":0,"area":"safety"},{"id":"2609.29948","title":"ENDOPROMPT: Victim-Side Pseudo-References for Utility Degradation","created":"2026-09-24","cited_by_count":0,"area":"safety"},{"id":"2610.19118","title":"DecisionRobust: Benchmarking Robustness for JEV Style Decision Models Across Text and Vision","created":"2026-10-13","cited_by_count":0,"area":"safety"}],"next_cursor":null}