{"total":237,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2209.07858","title":"Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learned","created":"2022-08-23","cited_by_count":729,"area":"alignment"},{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222,"area":"safety"},{"id":"2309.14348","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","created":"2023-09-18","cited_by_count":192,"area":"alignment"},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2107.06641","title":"Trustworthy AI: A Computational Perspective","created":"2021-07-12","cited_by_count":93,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2102.05429","title":"Node-Level Membership Inference Attacks Against Graph Neural Networks","created":"2021-02-10","cited_by_count":84,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2107.04086","title":"Robust Counterfactual Explanations on Graph Neural Networks","created":"2021-07-08","cited_by_count":72,"area":null},{"id":"2303.14773","title":"BlackVIP: Black-Box Visual Prompting for Robust Transfer Learning","created":"2023-03-26","cited_by_count":70,"area":null},{"id":"2305.10862","title":"How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defenses","created":"2023-05-18","cited_by_count":66,"area":null},{"id":"2104.04448","title":"Relating Adversarially Robust Generalization to Flat Minima","created":"2021-04-09","cited_by_count":57,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2205.06900","title":"MM-BD: Post-Training Detection of Backdoor Attacks with Arbitrary Backdoor Pattern Types Using a Maximum Margin Statistic","created":"2022-05-13","cited_by_count":55,"area":null},{"id":"2105.00203","title":"Adversarial Example Detection for DNN Models: A Review and Experimental Comparison","created":"2021-05-01","cited_by_count":52,"area":null},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2101.06969","title":"Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attacks","created":"2021-01-18","cited_by_count":49,"area":null},{"id":"2102.06986","title":"How Framelets Enhance Graph Neural Networks","created":"2021-02-13","cited_by_count":46,"area":null},{"id":"2108.13049","title":"Single Node Injection Attack against Graph Neural Networks","created":"2021-08-30","cited_by_count":45,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2106.03734","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","created":"2021-06-07","cited_by_count":43,"area":null},{"id":"2208.03160","title":"Almost-Orthogonal Layers for Efficient General-Purpose Lipschitz Networks","created":"2022-08-05","cited_by_count":39,"area":null},{"id":"2110.08300","title":"The Dangers of Underclaiming: Reasons for Caution When Reporting How NLP Systems Fail","created":"2021-10-15","cited_by_count":38,"area":null},{"id":"2110.10942","title":"Generalization of Neural Combinatorial Solvers Through the Lens of Adversarial Robustness","created":"2021-10-21","cited_by_count":35,"area":null},{"id":"2309.01686","title":"MathAttack: Attacking Large Language Models Towards Math Solving Ability","created":"2023-09-04","cited_by_count":32,"area":null},{"id":"2102.10454","title":"On Fast Adversarial Robustness Adaptation in Model-Agnostic Meta-Learning","created":"2021-02-20","cited_by_count":29,"area":null},{"id":"2111.09961","title":"A Review of Adversarial Attack and Defense for Classification Methods","created":"2021-11-18","cited_by_count":29,"area":null},{"id":"2201.08474","title":"Post-Training Detection of Backdoor Attacks for Two-Class and Multi-Attack Scenarios","created":"2022-01-20","cited_by_count":29,"area":null},{"id":"2210.02447","title":"Practical Adversarial Attacks on Spatiotemporal Traffic Forecasting Models","created":"2022-10-05","cited_by_count":29,"area":null},{"id":"2208.09191","title":"Synthetic Data in Human Analysis: A Survey","created":"2022-08-19","cited_by_count":28,"area":null},{"id":"2207.04806","title":"Repairing Neural Networks by Leaving the Right Past Behind","created":"2022-07-11","cited_by_count":27,"area":null},{"id":"2203.07983","title":"Adversarial Robustness of Neural-Statistical Features in Detection of Generative Transformers","created":"2022-03-02","cited_by_count":25,"area":null},{"id":"2103.05347","title":"Understanding the Robustness of Skeleton-based Action Recognition under Adversarial Attack","created":"2021-03-09","cited_by_count":24,"area":null},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2202.07054","title":"Universal Adversarial Examples in Remote Sensing: Methodology and Benchmark","created":"2022-02-14","cited_by_count":24,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2307.10235","title":"Towards Viewpoint-Invariant Visual Recognition via Adversarial Training","created":"2023-07-16","cited_by_count":19,"area":null},{"id":"2108.03388","title":"Jointly Attacking Graph Neural Network and its Explanations","created":"2021-08-07","cited_by_count":18,"area":null},{"id":"2301.12230","title":"Continual Graph Learning: A Survey","created":"2023-01-28","cited_by_count":18,"area":null},{"id":"2101.11466","title":"Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Voting","created":"2021-01-27","cited_by_count":16,"area":null},{"id":"2105.11521","title":"Deep neural network enabled corrective source term approach to hybrid analysis and modeling","created":"2021-05-24","cited_by_count":16,"area":null},{"id":"2111.03120","title":"Adversarial Attacks on Knowledge Graph Embeddings via Instance Attribution Methods","created":"2021-11-04","cited_by_count":16,"area":"safety"},{"id":"2203.13214","title":"A Perturbation-Constrained Adversarial Attack for Evaluating the Robustness of Optical Flow","created":"2022-03-24","cited_by_count":16,"area":null},{"id":"2302.02829","title":"Collective Robustness Certificates: Exploiting Interdependence in Graph Neural Networks","created":"2023-02-06","cited_by_count":16,"area":null},{"id":"2304.00010","title":"Towards Reasonable Budget Allocation in Untargeted Graph Structure Attacks via Gradient Debias","created":"2023-03-29","cited_by_count":16,"area":null},{"id":"2103.16255","title":"Towards Understanding Adversarial Robustness of Optical Flow Networks","created":"2021-03-30","cited_by_count":15,"area":null},{"id":"2403.10175","title":"A Short Survey on Importance Weighting for Machine Learning","created":"2024-03-15","cited_by_count":15,"area":null},{"id":"2502.17254","title":"REINFORCE Adversarial Attacks on Large Language Models: An Adaptive, Distributional, and Semantic Objective","created":"2025-02-24","cited_by_count":15,"area":"alignment"},{"id":"2103.14629","title":"Hybrid analysis and modeling, eclecticism, and multifidelity computing toward digital twin revolution","created":"2021-03-26","cited_by_count":14,"area":null},{"id":"2104.03356","title":"Universal Spectral Adversarial Attacks for Deformable Shapes","created":"2021-04-07","cited_by_count":14,"area":null},{"id":"2305.08598","title":"Humans, AI, and Context: Understanding End-Users' Trust in a Real-World Computer Vision Application","created":"2023-05-15","cited_by_count":14,"area":null},{"id":"2308.12857","title":"Fast Adversarial Training with Smooth Convergence","created":"2023-08-24","cited_by_count":14,"area":null},{"id":"2201.12765","title":"Improving Robustness by Enhancing Weak Subnets","created":"2022-01-30","cited_by_count":13,"area":null},{"id":"2203.11805","title":"Robust Classification using Contractive Hamiltonian Neural ODEs","created":"2022-03-22","cited_by_count":13,"area":null},{"id":"2111.06345","title":"Poisoning Knowledge Graph Embeddings via Relation Inference Patterns","created":"2021-11-11","cited_by_count":12,"area":"safety"},{"id":"2210.16114","title":"Towards Reliable Neural Specifications","created":"2022-10-28","cited_by_count":12,"area":null},{"id":"2403.20254","title":"Benchmarking the Robustness of Temporal Action Detection Models Against Temporal Corruptions","created":"2024-03-29","cited_by_count":12,"area":null},{"id":"2411.09973","title":"Establishing and Evaluating Trustworthy AI: Overview and Research Challenges","created":"2024-11-15","cited_by_count":12,"area":null},{"id":"2107.13639","title":"Imbalanced Adversarial Training with Reweighting","created":"2021-07-28","cited_by_count":11,"area":null},{"id":"2208.08297","title":"An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networks","created":"2022-08-17","cited_by_count":11,"area":null},{"id":"2405.11034","title":"Safety in Graph Machine Learning: Threats and Safeguards","created":"2024-05-17","cited_by_count":11,"area":null},{"id":"2208.05514","title":"Are Gradients on Graph Structure Reliable in Gray-box Attacks?","created":"2022-08-07","cited_by_count":10,"area":null},{"id":"2409.11690","title":"ID-Free Not Risk-Free: LLM-Powered Agents Unveil Risks in ID-Free Recommender Systems","created":"2024-09-18","cited_by_count":10,"area":"agents"},{"id":"2501.03562","title":"Rethinking Adversarial Attacks in Reinforcement Learning from Policy Distribution Perspective","created":"2025-01-07","cited_by_count":10,"area":"deeprl"},{"id":"2103.05354","title":"Revisiting Model's Uncertainty and Confidences for Adversarial Example Detection","created":"2021-03-09","cited_by_count":9,"area":null},{"id":"2107.11275","title":"A Differentiable Language Model Adversarial Attack on Text Classifiers","created":"2021-07-23","cited_by_count":9,"area":null},{"id":"2206.06257","title":"Distributed Adversarial Training to Robustify Deep Neural Networks at Scale","created":"2022-06-13","cited_by_count":9,"area":null},{"id":"2303.16633","title":"Targeted Adversarial Attacks on Wind Power Forecasts","created":"2023-03-29","cited_by_count":9,"area":null},{"id":"2305.03355","title":"A Comprehensive Study on Dataset Distillation: Performance, Privacy, Robustness and Fairness","created":"2023-05-05","cited_by_count":9,"area":null},{"id":"2307.10586","title":"A Holistic Assessment of the Reliability of Machine Learning Systems","created":"2023-07-20","cited_by_count":9,"area":null},{"id":"2403.11297","title":"A Modified Word Saliency-Based Adversarial Attack on Text Classification Models","created":"2024-03-17","cited_by_count":9,"area":null},{"id":"2504.14921","title":"Fast Adversarial Training with Weak-to-Strong Spatial-Temporal Consistency in the Frequency Domain on Videos","created":"2025-04-21","cited_by_count":9,"area":null},{"id":"2210.12871","title":"Tighter Abstract Queries in Neural Network Verification","created":"2022-10-23","cited_by_count":8,"area":null},{"id":"2310.06227","title":"Exploring adversarial attacks in federated learning for medical imaging","created":"2023-10-10","cited_by_count":8,"area":null},{"id":"2506.09237","title":"PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomalies","created":"2025-06-10","cited_by_count":8,"area":null},{"id":"2112.04598","title":"InvGAN: Invertible GANs","created":"2021-12-08","cited_by_count":7,"area":null},{"id":"2205.03824","title":"A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges","created":"2022-05-08","cited_by_count":7,"area":null},{"id":"2211.14207","title":"Invariance-Aware Randomized Smoothing Certificates","created":"2022-11-25","cited_by_count":7,"area":null},{"id":"2304.11405","title":"Digital Twins in Wind Energy: Emerging Technologies and Industry-Informed Future Directions","created":"2023-04-16","cited_by_count":7,"area":null},{"id":"2104.08323","title":"Random and Adversarial Bit Error Robustness: Energy-Efficient and Secure DNN Accelerators","created":"2021-04-16","cited_by_count":6,"area":null},{"id":"2111.06961","title":"Adversarially Robust Learning for Security-Constrained Optimal Power Flow","created":"2021-11-12","cited_by_count":6,"area":null},{"id":"2202.04936","title":"Robust Graph Representation Learning for Local Corruption Recovery","created":"2022-02-10","cited_by_count":6,"area":null},{"id":"2203.10502","title":"Adversarial Parameter Attack on Deep Neural Networks","created":"2022-03-20","cited_by_count":6,"area":null},{"id":"2304.08275","title":"Implementing Responsible AI: Tensions and Trade-Offs Between Ethics Aspects","created":"2023-04-17","cited_by_count":6,"area":null},{"id":"2308.05983","title":"Face Encryption via Frequency-Restricted Identity-Agnostic Attacks","created":"2023-08-11","cited_by_count":6,"area":null},{"id":"2308.06887","title":"Robustified ANNs Reveal Wormholes Between Human Category Percepts","created":"2023-08-14","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2412.08099","title":"Adversarial Vulnerabilities in Large Language Models for Time Series Forecasting","created":"2024-12-11","cited_by_count":6,"area":null},{"id":"2504.10888","title":"CDUPatch: Color-Driven Universal Adversarial Patch Attack for Dual-Modal Visible-Infrared Detectors","created":"2025-04-15","cited_by_count":6,"area":null},{"id":"2506.23908","title":"Beyond Statistical Learning: Exact Learning Is Essential for General Intelligence","created":"2025-06-30","cited_by_count":6,"area":"lr"},{"id":"2201.08318","title":"Cheating Automatic Short Answer Grading: On the Adversarial Usage of Adjectives and Adverbs","created":"2022-01-20","cited_by_count":5,"area":null},{"id":"2209.12935","title":"A Comprehensive Review of Trends, Applications and Challenges In Out-of-Distribution Detection","created":"2022-09-26","cited_by_count":5,"area":null},{"id":"2211.00543","title":"Geo-Information Harvesting from Social Media Data","created":"2022-11-01","cited_by_count":5,"area":null},{"id":"2307.00309","title":"Adversarial Attacks and Defenses on 3D Point Cloud Classification: A Survey","created":"2023-07-01","cited_by_count":5,"area":null},{"id":"2402.00418","title":"Benchmarking Transferable Adversarial Attacks","created":"2024-02-01","cited_by_count":5,"area":null}],"next_cursor":"100"}