{"total":139,"rows":[{"id":"2406.08464","title":"Magpie: Alignment Data Synthesis from Scratch by Prompting Aligned LLMs with Nothing","created":"2024-06-12","cited_by_count":346,"area":"lr"},{"id":"2305.15717","title":"The False Promise of Imitating Proprietary LLMs","created":"2023-05-25","cited_by_count":263,"area":"synth"},{"id":"2503.21460","title":"Large Language Model Agent: A Survey on Methodology, Applications and Challenges","created":"2025-03-27","cited_by_count":205,"area":"agents"},{"id":"2208.14933","title":"Membership Inference Attacks by Exploiting Loss Trajectory","created":"2022-08-31","cited_by_count":101,"area":"safety"},{"id":"2209.15003","title":"Compositional Semantic Parsing with Large Language Models","created":"2022-09-29","cited_by_count":95,"area":null},{"id":"2302.03162","title":"Protecting Language Generation Models via Invisible Watermarking","created":"2023-02-06","cited_by_count":90,"area":"safety"},{"id":"2102.02551","title":"ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models","created":"2021-02-04","cited_by_count":85,"area":"safety"},{"id":"2112.02701","title":"Protecting Intellectual Property of Language Generation APIs with Lexical Watermark","created":"2021-12-05","cited_by_count":84,"area":"safety"},{"id":"2209.08773","title":"CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks","created":"2022-09-19","cited_by_count":76,"area":"safety"},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2201.08531","title":"Black-box Prompt Learning for Pre-trained Language Models","created":"2022-01-21","cited_by_count":70,"area":null},{"id":"2108.04974","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking? (Extended Version)","created":"2021-08-11","cited_by_count":69,"area":null},{"id":"2311.13647","title":"Language Model Inversion","created":"2023-11-22","cited_by_count":68,"area":null},{"id":"2401.12255","title":"Instructional Fingerprinting of Large Language Models","created":"2024-01-21","cited_by_count":68,"area":null},{"id":"2110.08324","title":"Mitigating Membership Inference Attacks by Self-Distillation Through a Novel Ensemble Architecture","created":"2021-10-15","cited_by_count":67,"area":"safety"},{"id":"2305.10036","title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark","created":"2023-05-17","cited_by_count":67,"area":"safety"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2204.11022","title":"Towards Data-Free Model Stealing in a Hard Label Setting","created":"2022-04-23","cited_by_count":58,"area":null},{"id":"2103.10013","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","created":"2021-03-18","cited_by_count":53,"area":null},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2112.08331","title":"Model Stealing Attacks Against Inductive Graph Neural Networks","created":"2021-12-15","cited_by_count":50,"area":null},{"id":"2201.11692","title":"SSLGuard: A Watermarking Scheme for Self-supervised Learning Pre-trained Encoders","created":"2022-01-27","cited_by_count":45,"area":null},{"id":"2101.03453","title":"BERT & Family Eat Word Salad: Experiments with Text Understanding","created":"2021-01-10","cited_by_count":44,"area":null},{"id":"2107.01614","title":"Survey: Leakage and Privacy at Inference Time","created":"2021-07-04","cited_by_count":44,"area":null},{"id":"2403.09539","title":"Logits of API-Protected LLMs Leak Proprietary Information","created":"2024-03-14","cited_by_count":40,"area":null},{"id":"2105.13880","title":"Knowledge Inheritance for Pre-trained Language Models","created":"2021-05-28","cited_by_count":38,"area":null},{"id":"2109.11295","title":"Dynamic Knowledge Distillation for Pre-trained Language Models","created":"2021-09-23","cited_by_count":38,"area":"distill"},{"id":"2109.01165","title":"Black-Box Attacks on Sequential Recommenders via Data-Free Model Extraction","created":"2021-09-01","cited_by_count":37,"area":null},{"id":"2209.06506","title":"Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Models","created":"2022-09-14","cited_by_count":37,"area":null},{"id":"2102.04140","title":"Quantifying and Mitigating Privacy Risks of Contrastive Learning","created":"2021-02-08","cited_by_count":36,"area":"safety"},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2205.06504","title":"DualCF: Efficient Model Extraction Attack from Counterfactual Explanations","created":"2022-05-13","cited_by_count":32,"area":null},{"id":"2405.17067","title":"Tokenization Matters! Degrading Large Language Models through Challenging Their Tokenization","created":"2024-05-27","cited_by_count":32,"area":null},{"id":"2201.07513","title":"Can't Steal? Cont-Steal! Contrastive Stealing Attacks Against Image Encoders","created":"2022-01-19","cited_by_count":31,"area":null},{"id":"2206.05483","title":"Bilateral Dependency Optimization: Defending Against Model-inversion Attacks","created":"2022-06-11","cited_by_count":30,"area":null},{"id":"2210.03312","title":"Distillation-Resistant Watermarking for Model Protection in NLP","created":"2022-10-07","cited_by_count":30,"area":"safety"},{"id":"2310.01424","title":"Identifying and Mitigating Privacy Risks Stemming from Language Models: A Survey","created":"2023-09-27","cited_by_count":30,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2406.10280","title":"Transferable Embedding Inversion Attack: Uncovering Privacy Risks in Text Embeddings without Model Queries","created":"2024-06-12","cited_by_count":25,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2309.10544","title":"Model Leeching: An Extraction Attack Targeting LLMs","created":"2023-09-19","cited_by_count":22,"area":null},{"id":"2201.09243","title":"Increasing the Cost of Model Extraction with Calibrated Proof of Work","created":"2022-01-23","cited_by_count":21,"area":null},{"id":"2206.14157","title":"How to Steer Your Adversary: Targeted and Efficient Model Stealing Defenses with Gradient Redirection","created":"2022-06-28","cited_by_count":21,"area":null},{"id":"2312.05386","title":"Model Extraction Attacks Revisited","created":"2023-12-08","cited_by_count":21,"area":null},{"id":"2409.00426","title":"Is Difficulty Calibration All We Need? Towards More Practical Membership Inference Attacks","created":"2024-08-31","cited_by_count":21,"area":"safety"},{"id":"2102.01065","title":"Do Question Answering Modeling Improvements Hold Across Benchmarks?","created":"2021-02-01","cited_by_count":20,"area":null},{"id":"2303.04729","title":"Stealing the Decoding Algorithms of Language Models","created":"2023-03-08","cited_by_count":19,"area":null},{"id":"2506.22521","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","created":"2025-06-26","cited_by_count":19,"area":null},{"id":"2108.13873","title":"Student Surpasses Teacher: Imitation Attack for Black-Box NLP APIs","created":"2021-08-29","cited_by_count":18,"area":null},{"id":"2304.06607","title":"False Claims against Model Ownership Resolution","created":"2023-04-13","cited_by_count":17,"area":null},{"id":"2305.08702","title":"Recyclable Tuning for Continual Pre-training","created":"2023-05-15","cited_by_count":17,"area":null},{"id":"2401.15239","title":"MEA-Defender: A Robust Watermark against Model Extraction Attack","created":"2024-01-26","cited_by_count":17,"area":"safety"},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2501.16750","title":"HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns","created":"2025-01-28","cited_by_count":14,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2201.07406","title":"Fooling MOSS Detection with Pretrained Language Models","created":"2022-01-19","cited_by_count":12,"area":null},{"id":"2205.10364","title":"Learning to Reverse DNNs from AI Programs Automatically","created":"2022-05-20","cited_by_count":12,"area":null},{"id":"2403.01472","title":"WARDEN: Multi-Directional Backdoor Watermarks for Embedding-as-a-Service Copyright Protection","created":"2024-03-03","cited_by_count":12,"area":null},{"id":"2109.10104","title":"InvBERT: Reconstructing Text from Contextualized Word Embeddings by inverting the BERT pipeline","created":"2021-09-21","cited_by_count":11,"area":null},{"id":"2311.05863","title":"Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service","created":"2023-11-10","cited_by_count":11,"area":"mllm"},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2104.05921","title":"Thief, Beware of What Get You There: Towards Understanding Model Extraction Attack","created":"2021-04-13","cited_by_count":9,"area":null},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2101.02069","title":"Model Extraction and Defenses on Generative Adversarial Networks","created":"2021-01-06","cited_by_count":8,"area":null},{"id":"2105.10909","title":"Killing One Bird with Two Stones: Model Extraction and Attribute Inference Attacks against BERT-based APIs","created":"2021-05-23","cited_by_count":8,"area":null},{"id":"2603.01919","title":"Real Money, Fake Models: Deceptive Model Claims in Shadow APIs","created":"2026-03-02","cited_by_count":8,"area":null},{"id":"2405.02365","title":"ModelShield: Adaptive and Robust Watermark against Model Extraction Attack","created":"2024-05-03","cited_by_count":7,"area":"safety"},{"id":"2409.04459","title":"WET: Overcoming Paraphrasing Vulnerabilities in Embeddings-as-a-Service with Linear Transformation Watermarks","created":"2024-08-29","cited_by_count":7,"area":null},{"id":"2110.15444","title":"10 Security and Privacy Problems in Large Foundation Models","created":"2021-10-28","cited_by_count":6,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2212.10522","title":"Transformers Go for the LOLs: Generating (Humourous) Titles from Scientific Abstracts End-to-End","created":"2022-12-20","cited_by_count":6,"area":null},{"id":"2310.14047","title":"MeaeQ: Mount Model Extraction Attacks with Efficient Queries","created":"2023-10-21","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2312.04542","title":"SoK: Unintended Interactions among Machine Learning Defenses and Risks","created":"2023-12-07","cited_by_count":6,"area":null},{"id":"2409.18214","title":"Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Survey","created":"2024-09-26","cited_by_count":6,"area":"diffusion"},{"id":"2204.09852","title":"The Risks of Machine Learning Systems","created":"2022-04-21","cited_by_count":5,"area":null},{"id":"2302.11982","title":"A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2311.15936","title":"Towards Responsible Governance of Biological Design Tools","created":"2023-11-27","cited_by_count":5,"area":null},{"id":"2409.02718","title":"\"Yes, My LoRD.\" Guiding Language Model Extraction with Locality Reinforced Distillation","created":"2024-09-04","cited_by_count":5,"area":null},{"id":"2502.02438","title":"Medical Multimodal Model Stealing Attacks via Adversarial Domain Alignment","created":"2025-02-04","cited_by_count":5,"area":null},{"id":"2510.12950","title":"An Investigation of Memorization Risk in Healthcare Foundation Models","created":"2025-10-14","cited_by_count":5,"area":null},{"id":"2209.04022","title":"Privacy of Autonomous Vehicles: Risks, Protection Methods, and Future Directions","created":"2022-09-08","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2310.12665","title":"SecurityNet: Assessing Machine Learning Vulnerabilities on Public Models","created":"2023-10-19","cited_by_count":4,"area":"safety"},{"id":"2402.19054","title":"RobWE: Robust Watermark Embedding for Personalized Federated Learning Model Ownership Protection","created":"2024-02-29","cited_by_count":4,"area":"safety"},{"id":"2511.13329","title":"RegionMarker: A Region-Triggered Semantic Watermarking Framework for Embedding-as-a-Service Copyright Protection","created":"2025-11-17","cited_by_count":4,"area":null},{"id":"2512.09403","title":"Black-Box Behavioral Distillation Breaks Safety Alignment in Medical LLMs","created":"2025-12-10","cited_by_count":4,"area":"alignment"},{"id":"2104.12623","title":"Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models","created":"2021-04-26","cited_by_count":3,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2211.06716","title":"PriMask: Cascadable and Collusion-Resilient Data Masking for Mobile Cloud Inference","created":"2022-11-12","cited_by_count":3,"area":null},{"id":"2304.03388","title":"InferNet: Exploiting Aggregate GPU Profiles as Side-Channel for DNN Architecture Inference","created":"2023-04-06","cited_by_count":3,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2402.02144","title":"Probing Critical Learning Dynamics of PLMs for Hate Speech Detection","created":"2024-02-03","cited_by_count":3,"area":null},{"id":"2405.12295","title":"Efficient Model-Stealing Attacks Against Inductive Graph Neural Networks","created":"2024-05-20","cited_by_count":3,"area":null},{"id":"2406.11667","title":"Is Efficient PAC Learning Possible with an Oracle That Responds 'Yes' or 'No'?","created":"2024-06-17","cited_by_count":3,"area":null},{"id":"2606.05725","title":"An Embarrassingly Simple Detector for Model Extraction Attacks in Large Language Model API Traffic","created":"2026-06-04","cited_by_count":3,"area":null},{"id":"2606.15810","title":"Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot","created":"2026-06-14","cited_by_count":3,"area":null}],"next_cursor":"100"}