{"total":27,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2308.10741","title":"On the Adversarial Robustness of Multi-Modal Foundation Models","created":"2023-08-21","cited_by_count":145,"area":"safety"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2105.10872","title":"CMUA-Watermark: A Cross-Model Universal Adversarial Watermark for Combating Deepfakes","created":"2021-05-23","cited_by_count":56,"area":"safety"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2303.15127","title":"Learning the Unlearnable: Adversarial Augmentations Suppress Unlearnable Example Attacks","created":"2023-03-27","cited_by_count":30,"area":"safety"},{"id":"2112.02797","title":"ML Attack Models: Adversarial Attacks and Data Poisoning Attacks","created":"2021-12-06","cited_by_count":24,"area":"safety"},{"id":"2306.01272","title":"DeepfakeArt Challenge: A Benchmark Dataset for Generative AI Art Forgery and Data Poisoning Detection","created":"2023-06-02","cited_by_count":9,"area":"safety"},{"id":"2404.13518","title":"Reliable Model Watermarking: Defending Against Theft without Compromising on Evasion","created":"2024-04-21","cited_by_count":9,"area":"safety"},{"id":"2101.06898","title":"What Do Deep Nets Learn? Class-wise Patterns Revealed in the Input Space","created":"2021-01-18","cited_by_count":8,"area":"safety"},{"id":"2306.14043","title":"Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks","created":"2023-06-24","cited_by_count":6,"area":"safety"},{"id":"2404.17674","title":"Center-Based Relaxed Learning Against Membership Inference Attacks","created":"2024-04-26","cited_by_count":4,"area":"safety"},{"id":"2410.04682","title":"On the Adversarial Risk of Test Time Adaptation: An Investigation into Realistic Test-Time Data Poisoning","created":"2024-10-07","cited_by_count":4,"area":"safety"},{"id":"2207.13572","title":"Membership Inference Attacks via Adversarial Examples","created":"2022-07-27","cited_by_count":2,"area":"safety"},{"id":"2504.05838","title":"Mind the Trojan Horse: Image Prompt Adapter Enabling Scalable and Deceptive Jailbreaking","created":"2025-04-08","cited_by_count":2,"area":"safety"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2307.05193","title":"Membership Inference Attacks on DNNs using Adversarial Perturbations","created":"2023-07-11","cited_by_count":1,"area":"safety"},{"id":"2503.11195","title":"Provenance Detection for AI-Generated Images: Combining Perceptual Hashing, Homomorphic Encryption, and AI Detection Models","created":"2025-03-14","cited_by_count":1,"area":"safety"},{"id":"2604.18970","title":"Mechanistic Anomaly Detection via Functional Attribution","created":"2026-04-21","cited_by_count":1,"area":"safety"},{"id":"2606.11409","title":"Risk Under Pressure: Compute-Aware Evaluation of Adversarial Robustness in Language Models","created":"2026-06-09","cited_by_count":1,"area":"safety"},{"id":"2606.12716","title":"Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Review","created":"2026-06-10","cited_by_count":1,"area":"safety"},{"id":"2409.01541","title":"Agentic Copyright Watermarking against Adversarial Evidence Forgery with Purification-Agnostic Curriculum Proxy Learning","created":"2024-09-03","cited_by_count":0,"area":"safety"},{"id":"2512.20865","title":"Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attacks","created":"2025-12-24","cited_by_count":0,"area":"safety"},{"id":"2604.02780","title":"A Unified Perspective on Adversarial Membership Manipulation in Vision Models","created":"2026-04-03","cited_by_count":0,"area":"safety"},{"id":"2605.20286","title":"Adaptive Probe-based Steering for Robust LLM Jailbreaking","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2606.29451","title":"The Platonic Defense: Backdoor Defense for Self-Supervised Encoders in the Era of Large Scale Pre-training","created":"2026-06-28","cited_by_count":0,"area":"safety"},{"id":"2609.12313","title":"Do Influence-Derived Data Perturbations Enable Machine Unlearning? A Controlled Study of Three Plausible Roles","created":"2026-09-11","cited_by_count":0,"area":"safety"}],"next_cursor":null}