{"total":132,"rows":[{"id":"2308.05374","title":"Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment","created":"2023-08-10","cited_by_count":401,"area":null},{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2305.00944","title":"Poisoning Language Models During Instruction Tuning","created":"2023-05-01","cited_by_count":269,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2108.13888","title":"Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning","created":"2021-08-31","cited_by_count":113,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2111.00197","title":"Backdoor Pre-trained Models Can Transfer to All","created":"2021-10-30","cited_by_count":86,"area":null},{"id":"2208.11857","title":"Shortcut Learning of Large Language Models in Natural Language Understanding","created":"2022-08-25","cited_by_count":85,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2103.06922","title":"Towards Interpreting and Mitigating Shortcut Learning Behavior of NLU Models","created":"2021-03-11","cited_by_count":78,"area":null},{"id":"2401.12255","title":"Instructional Fingerprinting of Large Language Models","created":"2024-01-21","cited_by_count":68,"area":null},{"id":"2202.06335","title":"ET-BERT: A Contextualized Datagram Representation with Pre-training Transformers for Encrypted Traffic Classification","created":"2022-02-13","cited_by_count":66,"area":null},{"id":"2204.05239","title":"Exploring the Universal Vulnerability of Prompt-based Learning Paradigm","created":"2022-04-11","cited_by_count":57,"area":null},{"id":"2310.08903","title":"SeqXGPT: Sentence-Level AI-Generated Text Detection","created":"2023-10-13","cited_by_count":56,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2101.06969","title":"Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attacks","created":"2021-01-18","cited_by_count":49,"area":null},{"id":"2410.13722","title":"Persistent Pre-Training Poisoning of LLMs","created":"2024-10-17","cited_by_count":48,"area":null},{"id":"2303.02552","title":"An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registry","created":"2023-03-05","cited_by_count":47,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2205.14497","title":"BadDet: Backdoor Attacks on Object Detection","created":"2022-05-28","cited_by_count":45,"area":null},{"id":"2305.15004","title":"LLMDet: A Third Party Large Language Models Generated Text Detection Tool","created":"2023-05-24","cited_by_count":45,"area":null},{"id":"2305.16157","title":"Training Data Extraction From Pre-trained Language Models: A Survey","created":"2023-05-25","cited_by_count":45,"area":null},{"id":"2111.08429","title":"An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defences","created":"2021-11-16","cited_by_count":42,"area":null},{"id":"2304.14072","title":"Origin Tracing and Detecting of LLMs","created":"2023-04-27","cited_by_count":40,"area":null},{"id":"2106.06469","title":"Topological Detection of Trojaned Neural Networks","created":"2021-06-11","cited_by_count":34,"area":null},{"id":"2111.12965","title":"Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks","created":"2021-11-25","cited_by_count":34,"area":null},{"id":"2210.09194","title":"Marksman Backdoor: Backdoor Attacks with Arbitrary Target Class","created":"2022-10-17","cited_by_count":33,"area":null},{"id":"2306.06815","title":"TrojLLM: A Black-box Trojan Prompt Attack on Large Language Models","created":"2023-06-12","cited_by_count":31,"area":null},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2108.01661","title":"Grounding Representation Similarity with Statistical Testing","created":"2021-08-03","cited_by_count":29,"area":null},{"id":"2103.14625","title":"Dodrio: Exploring Transformer Models with Interactive Visualization","created":"2021-03-26","cited_by_count":28,"area":null},{"id":"2303.02242","title":"TrojText: Test-time Invisible Textual Trojan Insertion","created":"2023-03-03","cited_by_count":28,"area":null},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2109.07437","title":"Should We Be Pre-training? An Argument for End-task Aware Training as an Alternative","created":"2021-09-15","cited_by_count":26,"area":null},{"id":"2402.19334","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","created":"2024-02-29","cited_by_count":26,"area":null},{"id":"2109.01300","title":"How to Inject Backdoors with Better Consistency: Logit Anchoring on Clean Data","created":"2021-09-03","cited_by_count":24,"area":null},{"id":"2402.01749","title":"Towards Urban General Intelligence: A Review and Outlook of Urban Foundation Models","created":"2024-01-30","cited_by_count":23,"area":null},{"id":"2403.17155","title":"Task-Agnostic Detector for Insertion-Based Backdoor Attacks","created":"2024-03-25","cited_by_count":23,"area":null},{"id":"2405.10757","title":"Rethinking Graph Backdoor Attacks: A Distribution-Preserving Perspective","created":"2024-05-17","cited_by_count":22,"area":null},{"id":"2107.07240","title":"Subnet Replacement: Deployment-stage backdoor attack against deep neural networks in gray-box setting","created":"2021-07-15","cited_by_count":21,"area":null},{"id":"2305.02424","title":"Backdoor Learning on Sequence to Sequence Models","created":"2023-05-03","cited_by_count":21,"area":null},{"id":"2305.11596","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","created":"2023-05-19","cited_by_count":21,"area":null},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21,"area":null},{"id":"2201.12686","title":"Rank List Sensitivity of Recommender Systems to Interaction Perturbations","created":"2022-01-29","cited_by_count":20,"area":null},{"id":"2310.00633","title":"A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attacks","created":"2023-10-01","cited_by_count":19,"area":null},{"id":"2402.12168","title":"Defending Against Weight-Poisoning Backdoor Attacks for Parameter-Efficient Fine-Tuning","created":"2024-02-19","cited_by_count":16,"area":null},{"id":"2111.05077","title":"Enhancing Backdoor Attacks with Multi-Level MMD Regularization","created":"2021-11-09","cited_by_count":15,"area":null},{"id":"2209.01882","title":"PromptAttack: Prompt-based Attack for Language Models via Gradient Search","created":"2022-09-05","cited_by_count":15,"area":null},{"id":"2502.02958","title":"Position: Editing Large Language Models Poses Serious Safety Risks","created":"2025-02-05","cited_by_count":15,"area":null},{"id":"2410.04490","title":"A Large-Scale Exploit Instrumentation Study of AI/ML Supply Chain Attacks in Hugging Face Models","created":"2024-10-06","cited_by_count":14,"area":null},{"id":"2502.07760","title":"Scalable Fingerprinting of Large Language Models","created":"2025-02-11","cited_by_count":14,"area":null},{"id":"2204.12281","title":"Data-Efficient Backdoor Attacks","created":"2022-04-22","cited_by_count":13,"area":null},{"id":"2211.15929","title":"Backdoor Vulnerabilities in Normally Trained Deep Learning Models","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2212.06295","title":"Despite \"super-human\" performance, current LLMs are unsuited for decisions about ethics and safety","created":"2022-12-13","cited_by_count":13,"area":null},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2503.07661","title":"Disrupting Model Merging: A Parameter-Level Defense Without Sacrificing Accuracy","created":"2025-03-08","cited_by_count":11,"area":null},{"id":"2204.14017","title":"Backdoor Attacks in Federated Learning by Rare Embeddings and Gradient Ensembling","created":"2022-04-29","cited_by_count":9,"area":null},{"id":"2409.14119","title":"Obliviate: Neutralizing Task-agnostic Backdoors within the Parameter-efficient Fine-tuning Paradigm","created":"2024-09-21","cited_by_count":9,"area":null},{"id":"2410.02182","title":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","created":"2024-10-03","cited_by_count":9,"area":null},{"id":"2410.19406","title":"An Auditing Test To Detect Behavioral Shift in Language Models","created":"2024-10-25","cited_by_count":9,"area":null},{"id":"2504.09522","title":"How new data permeates LLM knowledge and how to dilute it","created":"2025-04-13","cited_by_count":8,"area":null},{"id":"2505.12682","title":"RAFP: Identifying LLM Lineages via Rare-Region Fingerprints","created":"2025-05-19","cited_by_count":8,"area":null},{"id":"2506.06518","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2105.15035","title":"Machine Learning for Security in Vehicular Networks: A Comprehensive Survey","created":"2021-05-31","cited_by_count":7,"area":null},{"id":"2201.06202","title":"Neighboring Backdoor Attacks on Graph Convolutional Network","created":"2022-01-17","cited_by_count":7,"area":null},{"id":"2306.08386","title":"Efficient Backdoor Attacks for Deep Neural Networks in Real-world Scenarios","created":"2023-06-14","cited_by_count":7,"area":null},{"id":"2310.09744","title":"Explore the Effect of Data Selection on Poison Efficiency in Backdoor Attacks","created":"2023-10-15","cited_by_count":7,"area":null},{"id":"2406.09836","title":"Robustness Inspired Graph Backdoor Defense","created":"2024-06-14","cited_by_count":7,"area":null},{"id":"2507.19598","title":"MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts?","created":"2025-07-25","cited_by_count":7,"area":null},{"id":"2104.08453","title":"R&R: Metric-guided Adversarial Sentence Generation","created":"2021-04-17","cited_by_count":6,"area":null},{"id":"2212.11415","title":"Circumventing interpretability: How to defeat mind-readers","created":"2022-12-21","cited_by_count":6,"area":null},{"id":"2401.15883","title":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability","created":"2024-01-29","cited_by_count":6,"area":null},{"id":"2404.19417","title":"Physical Backdoor: Towards Temperature-based Backdoor Attacks in the Physical World","created":"2024-04-30","cited_by_count":6,"area":null},{"id":"2502.04484","title":"An Empirical Analysis of Machine Learning Model and Dataset Documentation, Supply Chain, and Licensing Challenges on Hugging Face","created":"2025-02-06","cited_by_count":6,"area":null},{"id":"2510.02314","title":"StealthAttack: Robust 3D Gaussian Splatting Poisoning via Density-Guided Illusions","created":"2025-10-02","cited_by_count":6,"area":null},{"id":"2103.08820","title":"EX-RAY: Distinguishing Injected Backdoor from Natural Features in Neural Networks by Examining Differential Feature Symmetry","created":"2021-03-16","cited_by_count":5,"area":null},{"id":"2303.12054","title":"Influencer Backdoor Attack on Semantic Segmentation","created":"2023-03-21","cited_by_count":5,"area":null},{"id":"2404.02393","title":"Backdoor Attack on Multilingual Machine Translation","created":"2024-04-03","cited_by_count":5,"area":null},{"id":"2407.11072","title":"MaPPing Your Model: Assessing the Impact of Adversarial Attacks on LLM-based Programming Assistants","created":"2024-07-12","cited_by_count":5,"area":null},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2105.03251","title":"Exploiting Vulnerabilities in Deep Neural Networks: Adversarial and Fault-Injection Attacks","created":"2021-05-05","cited_by_count":4,"area":null},{"id":"2206.09272","title":"DECK: Model Hardening for Defending Pervasive Backdoors","created":"2022-06-18","cited_by_count":4,"area":null},{"id":"2306.08720","title":"A Client-server Deep Federated Learning for Cross-domain Surgical Image Segmentation","created":"2023-06-14","cited_by_count":4,"area":null},{"id":"2410.17492","title":"BadFair: Backdoored Fairness Attacks with Group-conditioned Triggers","created":"2024-10-23","cited_by_count":4,"area":null},{"id":"2503.09712","title":"Revisiting Backdoor Attacks on Time Series Classification in the Frequency Domain","created":"2025-03-12","cited_by_count":4,"area":null},{"id":"2505.22778","title":"Machine Learning Models Have a Supply Chain Problem","created":"2025-05-28","cited_by_count":4,"area":null},{"id":"2111.14309","title":"A General Framework for Defending Against Backdoor Attacks via Influence Graph","created":"2021-11-29","cited_by_count":3,"area":null},{"id":"2211.15363","title":"On the Security Vulnerabilities of Text-to-SQL Models","created":"2022-11-28","cited_by_count":3,"area":null},{"id":"2305.14794","title":"Debiasing Made State-of-the-art: Revisiting the Simple Seed-based Weak Supervision for Text Classification","created":"2023-05-24","cited_by_count":3,"area":null},{"id":"2311.09428","title":"Beyond Detection: Unveiling Fairness Vulnerabilities in Abusive Language Models","created":"2023-11-15","cited_by_count":3,"area":null},{"id":"2403.16432","title":"$\\textit{LinkPrompt}$: Natural and Universal Adversarial Attacks on Prompt-based Language Models","created":"2024-03-25","cited_by_count":3,"area":null},{"id":"2405.09550","title":"Mask-based Invisible Backdoor Attacks on Object Detection","created":"2024-03-20","cited_by_count":3,"area":null},{"id":"2405.11575","title":"SEEP: Training Dynamics Grounds Latent Representation Search for Mitigating Backdoor Poisoning Attacks","created":"2024-05-19","cited_by_count":3,"area":null},{"id":"2411.13778","title":"A Survey on Adversarial Robustness of LiDAR-based Machine Learning Perception in Autonomous Vehicles","created":"2024-11-21","cited_by_count":3,"area":null},{"id":"2504.12344","title":"Propaganda AI: An Analysis of Semantic Divergence in Large Language Models","created":"2025-04-15","cited_by_count":3,"area":null},{"id":"2109.02889","title":"Adversarial Parameter Defense by Multi-Step Risk Minimization","created":"2021-09-07","cited_by_count":2,"area":null},{"id":"2205.14246","title":"Defending Against Stealthy Backdoor Attacks","created":"2022-05-27","cited_by_count":2,"area":null},{"id":"2212.10318","title":"Learned-Database Systems Security","created":"2022-12-20","cited_by_count":2,"area":null}],"next_cursor":"100"}