{"total":60,"rows":[{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2204.05239","title":"Exploring the Universal Vulnerability of Prompt-based Learning Paradigm","created":"2022-04-11","cited_by_count":57,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2205.08305","title":"A Study of the Attention Abnormality in Trojaned BERTs","created":"2022-05-13","cited_by_count":48,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2402.19334","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","created":"2024-02-29","cited_by_count":26,"area":null},{"id":"2311.17431","title":"Grounding Foundation Models through Federated Transfer Learning: A General Framework","created":"2023-11-29","cited_by_count":24,"area":null},{"id":"2403.17155","title":"Task-Agnostic Detector for Insertion-Based Backdoor Attacks","created":"2024-03-25","cited_by_count":23,"area":null},{"id":"2305.02424","title":"Backdoor Learning on Sequence to Sequence Models","created":"2023-05-03","cited_by_count":21,"area":null},{"id":"2305.11596","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","created":"2023-05-19","cited_by_count":21,"area":null},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21,"area":null},{"id":"2402.12168","title":"Defending Against Weight-Poisoning Backdoor Attacks for Parameter-Efficient Fine-Tuning","created":"2024-02-19","cited_by_count":16,"area":null},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2305.07406","title":"Two-in-One: A Model Hijacking Attack Against Text Generation Models","created":"2023-05-12","cited_by_count":12,"area":null},{"id":"2312.10467","title":"TrojFSP: Trojan Insertion in Few-shot Prompt Tuning","created":"2023-12-16","cited_by_count":9,"area":null},{"id":"2409.14119","title":"Obliviate: Neutralizing Task-agnostic Backdoors within the Parameter-efficient Fine-tuning Paradigm","created":"2024-09-21","cited_by_count":9,"area":null},{"id":"2410.02182","title":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","created":"2024-10-03","cited_by_count":9,"area":null},{"id":"2406.11243","title":"FamiCom: Further Demystifying Prompts for Language Models with Task-Agnostic Performance Estimation","created":"2024-06-17","cited_by_count":8,"area":null},{"id":"2504.13938","title":"Never Start from Scratch: Expediting On-Device LLM Personalization via Explainable Model Selection","created":"2025-04-15","cited_by_count":8,"area":null},{"id":"2506.06518","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2509.26598","title":"Are Robust LLM Fingerprints Adversarially Robust?","created":"2025-09-30","cited_by_count":8,"area":null},{"id":"2405.19795","title":"SLM as Guardian: Pioneering AI Safety with Small Language Models","created":"2024-05-30","cited_by_count":7,"area":null},{"id":"2104.08453","title":"R&R: Metric-guided Adversarial Sentence Generation","created":"2021-04-17","cited_by_count":6,"area":null},{"id":"2208.04946","title":"Attention Hijacking in Trojan Transformers","created":"2022-08-09","cited_by_count":6,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2111.14309","title":"A General Framework for Defending Against Backdoor Attacks via Influence Graph","created":"2021-11-29","cited_by_count":3,"area":null},{"id":"2211.15363","title":"On the Security Vulnerabilities of Text-to-SQL Models","created":"2022-11-28","cited_by_count":3,"area":null},{"id":"2305.14794","title":"Debiasing Made State-of-the-art: Revisiting the Simple Seed-based Weak Supervision for Text Classification","created":"2023-05-24","cited_by_count":3,"area":null},{"id":"2403.16432","title":"$\\textit{LinkPrompt}$: Natural and Universal Adversarial Attacks on Prompt-based Language Models","created":"2024-03-25","cited_by_count":3,"area":null},{"id":"2405.11575","title":"SEEP: Training Dynamics Grounds Latent Representation Search for Mitigating Backdoor Poisoning Attacks","created":"2024-05-19","cited_by_count":3,"area":null},{"id":"2504.12344","title":"Propaganda AI: An Analysis of Semantic Divergence in Large Language Models","created":"2025-04-15","cited_by_count":3,"area":null},{"id":"2512.19297","title":"Causal-Guided Detoxify Backdoor Attack of Open-Weight LoRA Models","created":"2025-12-22","cited_by_count":3,"area":null},{"id":"2205.14246","title":"Defending Against Stealthy Backdoor Attacks","created":"2022-05-27","cited_by_count":2,"area":null},{"id":"2504.06669","title":"NLP Security and Ethics, in the Wild","created":"2025-04-09","cited_by_count":2,"area":null},{"id":"2505.10983","title":"GenoArmory: A Unified Evaluation Framework for Adversarial Attacks on Genomic Foundation Models","created":"2025-05-16","cited_by_count":2,"area":null},{"id":"2512.14805","title":"Sharing State Between Prompts and Programs","created":"2025-12-16","cited_by_count":2,"area":null},{"id":"2402.16896","title":"On Trojan Signatures in Large Language Models of Code","created":"2024-02-23","cited_by_count":1,"area":null},{"id":"2404.08672","title":"Taxonomy and Analysis of Sensitive User Queries in Generative AI Search","created":"2024-04-05","cited_by_count":1,"area":null},{"id":"2409.00614","title":"DAMe: Personalized Federated Social Event Detection with Dual Aggregation Mechanism","created":"2024-09-01","cited_by_count":1,"area":null},{"id":"2410.19427","title":"Expose Before You Defend: Unifying and Enhancing Backdoor Defenses via Exposed Models","created":"2024-10-25","cited_by_count":1,"area":null},{"id":"2412.20476","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","created":"2024-12-29","cited_by_count":1,"area":null},{"id":"2502.20246","title":"Beyond Natural Language Perplexity: Detecting Dead Code Poisoning in Code Generation Datasets","created":"2025-02-27","cited_by_count":1,"area":null},{"id":"2508.20333","title":"Poison Once, Refuse Forever: Weaponizing Alignment for Injecting Bias in LLMs","created":"2025-08-28","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2509.12386","title":"Amulet: a Python Library for Assessing Interactions Among ML Defenses and Risks","created":"2025-09-15","cited_by_count":1,"area":null},{"id":"2511.14301","title":"SteganoBackdoor: Evading Data-Poisoning Defenses via Steganographic Backdoors","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2603.18103","title":"STEP: Detecting Audio Backdoor Attacks via Stability-based Trigger Exposure Profiling","created":"2026-03-18","cited_by_count":1,"area":null},{"id":"2202.10320","title":"Resurrecting Trust in Facial Recognition: Mitigating Backdoor Attacks in Face Recognition to Prevent Potential Privacy Breaches","created":"2022-02-18","cited_by_count":0,"area":null},{"id":"2211.05410","title":"Robust Smart Home Face Recognition under Starving Federated Data","created":"2022-11-10","cited_by_count":0,"area":null},{"id":"2401.17196","title":"Single Word Change is All You Need: Using LLMs to Create Synthetic Training Examples for Text Classifiers","created":"2024-01-30","cited_by_count":0,"area":null},{"id":"2502.13459","title":"Poisoned Source Code Detection in Code Models","created":"2025-02-19","cited_by_count":0,"area":null},{"id":"2504.05902","title":"Defending against Backdoor Attacks via Module Switching","created":"2025-04-08","cited_by_count":0,"area":null},{"id":"2510.01288","title":"Microsaccade-Inspired Probing: Positional Encoding Perturbations Reveal LLM Misbehaviours","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2603.11949","title":"Delayed Backdoor Attacks: Exploring the Temporal Dimension as a New Attack Surface in Pre-Trained Models","created":"2026-03-12","cited_by_count":0,"area":null},{"id":"2605.16815","title":"Universal Graph Backdoor Defense: A Feature-based Homophily Perspective","created":"2026-05-16","cited_by_count":0,"area":null}],"next_cursor":null}