{"total":491,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651,"area":"alignment"},{"id":"2106.07139","title":"Pre-Trained Models: Past, Present and Future","created":"2021-06-14","cited_by_count":319,"area":null},{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2210.09150","title":"Prompting GPT-3 To Be Reliable","created":"2022-10-17","cited_by_count":260,"area":null},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2306.04528","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","created":"2023-06-07","cited_by_count":226,"area":"safety"},{"id":"2311.17516","title":"MMA-Diffusion: MultiModal Attack on Diffusion Models","created":"2023-11-29","cited_by_count":194,"area":"diffusion"},{"id":"2303.04381","title":"Automatically Auditing Large Language Models via Discrete Optimization","created":"2023-03-08","cited_by_count":191,"area":null},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2310.19156","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","created":"2023-10-29","cited_by_count":159,"area":null},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2402.19255","title":"GSM-Plus: A Comprehensive Benchmark for Evaluating the Robustness of LLMs as Mathematical Problem Solvers","created":"2024-02-29","cited_by_count":158,"area":"lr"},{"id":"2206.09391","title":"Towards Adversarial Attack on Vision-Language Pre-training Models","created":"2022-06-19","cited_by_count":144,"area":"mllm"},{"id":"2302.08500","title":"Auditing large language models: a three-layered approach","created":"2023-02-16","cited_by_count":137,"area":null},{"id":"2409.18025","title":"An Adversarial Perspective on Machine Unlearning for AI Safety","created":"2024-09-26","cited_by_count":123,"area":"safety"},{"id":"2108.13888","title":"Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning","created":"2021-08-31","cited_by_count":113,"area":null},{"id":"2106.01065","title":"Towards Robustness of Text-to-SQL Models against Synonym Substitution","created":"2021-06-02","cited_by_count":110,"area":null},{"id":"2307.14061","title":"Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models","created":"2023-07-26","cited_by_count":108,"area":"mllm"},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2103.15670","title":"On the Adversarial Robustness of Vision Transformers","created":"2021-03-29","cited_by_count":106,"area":null},{"id":"2212.10264","title":"ReCode: Robustness Evaluation of Code Generation Models","created":"2022-12-20","cited_by_count":103,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2309.17167","title":"DyVal: Dynamic Evaluation of Large Language Models for Reasoning Tasks","created":"2023-09-29","cited_by_count":101,"area":"lr"},{"id":"2301.12867","title":"Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity","created":"2023-01-30","cited_by_count":89,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79,"area":null},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2111.07970","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","created":"2021-11-15","cited_by_count":66,"area":"safety"},{"id":"2106.06937","title":"Common Sense Beyond English: Evaluating and Improving Multilingual Language Models for Commonsense Reasoning","created":"2021-06-13","cited_by_count":65,"area":null},{"id":"2305.14950","title":"Adversarial Demonstration Attacks on Large Language Models","created":"2023-05-24","cited_by_count":63,"area":null},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2310.08903","title":"SeqXGPT: Sentence-Level AI-Generated Text Detection","created":"2023-10-13","cited_by_count":56,"area":null},{"id":"2305.19713","title":"Red Teaming Language Model Detectors with Language Models","created":"2023-05-31","cited_by_count":55,"area":"safety"},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53,"area":null},{"id":"2107.00440","title":"CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understanding","created":"2021-07-01","cited_by_count":50,"area":null},{"id":"2212.10020","title":"On the Blind Spots of Model-Based Evaluation Metrics for Text Generation","created":"2022-12-20","cited_by_count":49,"area":null},{"id":"2206.10128","title":"Bridging the Gap Between Indexing and Retrieval for Differentiable Search Index with Query Generation","created":"2022-06-21","cited_by_count":48,"area":null},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2306.14321","title":"RobuT: A Systematic Study of Table QA Robustness Against Human-Annotated Adversarial Perturbations","created":"2023-06-25","cited_by_count":43,"area":null},{"id":"2205.01287","title":"SemAttack: Natural Textual Attacks via Different Semantic Spaces","created":"2022-05-03","cited_by_count":42,"area":null},{"id":"2304.14072","title":"Origin Tracing and Detecting of LLMs","created":"2023-04-27","cited_by_count":40,"area":null},{"id":"2406.05491","title":"One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Models","created":"2024-06-08","cited_by_count":40,"area":"mllm"},{"id":"2312.04913","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","created":"2023-12-08","cited_by_count":39,"area":"mllm"},{"id":"2209.06506","title":"Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Models","created":"2022-09-14","cited_by_count":37,"area":null},{"id":"2210.09421","title":"Deepfake Text Detection: Limitations and Opportunities","created":"2022-10-17","cited_by_count":37,"area":null},{"id":"2312.04403","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","created":"2023-12-07","cited_by_count":37,"area":"mllm"},{"id":"2403.12445","title":"Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectory","created":"2024-03-19","cited_by_count":36,"area":"mllm"},{"id":"2601.06112","title":"ReliabilityBench: Evaluating LLM Agent Reliability Under Production-Like Stress Conditions","created":"2026-01-03","cited_by_count":36,"area":"agents"},{"id":"2108.02340","title":"Robust Transfer Learning with Pretrained Language Models through Adapters","created":"2021-08-05","cited_by_count":35,"area":null},{"id":"2305.09859","title":"Smaller Language Models are Better Black-box Machine-Generated Text Detectors","created":"2023-05-17","cited_by_count":35,"area":null},{"id":"2108.06332","title":"FlipDA: Effective and Robust Data Augmentation for Few-Shot Learning","created":"2021-08-13","cited_by_count":32,"area":null},{"id":"2203.01677","title":"Detection of Word Adversarial Examples in Text Classification: Benchmark and Baseline via Robust Density Estimation","created":"2022-03-03","cited_by_count":32,"area":null},{"id":"2309.01686","title":"MathAttack: Attacking Large Language Models Towards Math Solving Ability","created":"2023-09-04","cited_by_count":32,"area":null},{"id":"2309.11166","title":"Are Large Language Models Really Robust to Word-Level Perturbations?","created":"2023-09-20","cited_by_count":32,"area":"alignment"},{"id":"2304.14475","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","created":"2023-04-27","cited_by_count":31,"area":"safety"},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30,"area":null},{"id":"2305.10235","title":"Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2311.09433","title":"Trojan Activation Attack: Red-Teaming Large Language Models using Activation Steering for Safety-Alignment","created":"2023-11-15","cited_by_count":30,"area":"safety"},{"id":"2308.09861","title":"Black-box Adversarial Attacks against Dense Retrieval Models: A Multi-view Contrastive Learning Method","created":"2023-08-19","cited_by_count":29,"area":null},{"id":"2403.04306","title":"Effectiveness Assessment of Recent Large Vision-Language Models","created":"2024-03-07","cited_by_count":29,"area":"mllm"},{"id":"2109.05620","title":"RockNER: A Simple Method to Create Adversarial Examples for Evaluating the Robustness of Named Entity Recognition Models","created":"2021-09-12","cited_by_count":28,"area":null},{"id":"2110.15317","title":"Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Framework","created":"2021-10-28","cited_by_count":28,"area":null},{"id":"2210.17004","title":"Character-level White-Box Adversarial Attacks against Transformers via Attachable Subwords Substitution","created":"2022-10-31","cited_by_count":28,"area":null},{"id":"2212.09994","title":"Towards Robustness of Text-to-SQL Models Against Natural and Realistic Adversarial Table Perturbation","created":"2022-12-20","cited_by_count":28,"area":null},{"id":"2404.19287","title":"Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective","created":"2024-04-30","cited_by_count":28,"area":"mllm"},{"id":"2402.15833","title":"Prompt Perturbation Consistency Learning for Robust Language Models","created":"2024-02-24","cited_by_count":26,"area":null},{"id":"2403.09346","title":"B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions","created":"2024-03-14","cited_by_count":26,"area":"mllm"},{"id":"2504.11168","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","created":"2025-04-15","cited_by_count":26,"area":"safety"},{"id":"2105.02590","title":"Reliability Testing for Natural Language Processing Systems","created":"2021-05-06","cited_by_count":25,"area":null},{"id":"2110.04399","title":"Global Explainability of BERT-Based Evaluation Metrics by Disentangling along Linguistic Factors","created":"2021-10-08","cited_by_count":25,"area":null},{"id":"2106.08361","title":"Adversarial Attacks on Deep Models for Financial Transaction Records","created":"2021-06-15","cited_by_count":24,"area":null},{"id":"2204.04636","title":"\"That Is a Suspicious Reaction!\": Interpreting Logits Variation to Detect NLP Adversarial Attacks","created":"2022-04-10","cited_by_count":24,"area":null},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2306.13103","title":"Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks","created":"2023-06-16","cited_by_count":24,"area":"diffusion"},{"id":"2404.07234","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","created":"2024-04-06","cited_by_count":24,"area":"safety"},{"id":"2104.05062","title":"Achieving Model Robustness through Discrete Adversarial Training","created":"2021-04-11","cited_by_count":23,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2209.13020","title":"Law Informs Code: A Legal Informatics Approach to Aligning Artificial Intelligence with Humans","created":"2022-09-14","cited_by_count":23,"area":null},{"id":"2206.08575","title":"Query-Efficient and Scalable Black-Box Adversarial Attacks on Discrete Sequential Data via Bayesian Optimization","created":"2022-06-17","cited_by_count":22,"area":null},{"id":"2302.05706","title":"MTTM: Metamorphic Testing for Textual Content Moderation Software","created":"2023-02-11","cited_by_count":22,"area":null},{"id":"2402.19150","title":"Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model","created":"2024-02-29","cited_by_count":22,"area":"mllm"},{"id":"2104.08645","title":"Improving Zero-Shot Cross-Lingual Transfer Learning via Robust Training","created":"2021-04-17","cited_by_count":21,"area":null},{"id":"2109.04367","title":"Multi-granularity Textual Adversarial Attack with Behavior Cloning","created":"2021-09-09","cited_by_count":21,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2407.03993","title":"A Survey on Natural Language Counterfactual Generation","created":"2024-07-04","cited_by_count":21,"area":null},{"id":"2306.15261","title":"A Survey on Out-of-Distribution Evaluation of Neural NLP Models","created":"2023-06-27","cited_by_count":20,"area":null},{"id":"2404.04963","title":"SemEval-2024 Task 2: Safe Biomedical Natural Language Inference for Clinical Trials","created":"2024-04-07","cited_by_count":20,"area":null},{"id":"2203.03072","title":"Leashing the Inner Demons: Self-Detoxification for Language Models","created":"2022-03-06","cited_by_count":19,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2402.14836","title":"Stealthy Attack on Large Language Model based Recommendation","created":"2024-02-18","cited_by_count":19,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null}],"next_cursor":"100"}