{"total":263,"rows":[{"id":"2401.05566","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","created":"2024-01-10","cited_by_count":529,"area":"agents"},{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2206.12654","title":"BackdoorBench: A Comprehensive Benchmark of Backdoor Learning","created":"2022-06-25","cited_by_count":128,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110,"area":"safety"},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94,"area":"safety"},{"id":"2305.04175","title":"Text-to-Image Diffusion Models can be Easily Backdoored through Multimodal Data Poisoning","created":"2023-05-07","cited_by_count":92,"area":"diffusion"},{"id":"2106.06361","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","created":"2021-06-11","cited_by_count":89,"area":"safety"},{"id":"2110.02467","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","created":"2021-10-06","cited_by_count":85,"area":"safety"},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2209.08773","title":"CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks","created":"2022-09-19","cited_by_count":76,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73,"area":"safety"},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72,"area":"safety"},{"id":"2111.07970","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","created":"2021-11-15","cited_by_count":66,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2204.05239","title":"Exploring the Universal Vulnerability of Prompt-based Learning Paradigm","created":"2022-04-11","cited_by_count":57,"area":null},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2401.05949","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","created":"2024-01-11","cited_by_count":53,"area":"safety"},{"id":"2402.14872","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","created":"2024-02-21","cited_by_count":53,"area":"safety"},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49,"area":"safety"},{"id":"2205.08305","title":"A Study of the Attention Abnormality in Trojaned BERTs","created":"2022-05-13","cited_by_count":48,"area":null},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2505.16916","title":"Backdoor Cleaning without External Guidance in MLLM Fine-tuning","created":"2025-05-22","cited_by_count":35,"area":"mllm"},{"id":"2106.01810","title":"Defending Against Backdoor Attacks in Natural Language Generation","created":"2021-06-03","cited_by_count":33,"area":"safety"},{"id":"2309.13256","title":"Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attacks","created":"2023-09-23","cited_by_count":33,"area":"safety"},{"id":"2411.12768","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","created":"2024-11-18","cited_by_count":33,"area":"safety"},{"id":"2310.14480","title":"Attention-Enhancing Backdoor Attacks Against BERT-based Models","created":"2023-10-23","cited_by_count":32,"area":"safety"},{"id":"2304.14475","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","created":"2023-04-27","cited_by_count":31,"area":"safety"},{"id":"2408.02882","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","created":"2024-08-06","cited_by_count":31,"area":"agents"},{"id":"2504.05605","title":"ShadowCoT: Cognitive Hijacking for Stealthy Reasoning Backdoors in LLMs","created":"2025-04-08","cited_by_count":30,"area":"lr"},{"id":"2309.16155","title":"The Trickle-down Impact of Reward (In-)consistency on RLHF","created":"2023-09-28","cited_by_count":29,"area":"alignment"},{"id":"2406.05948","title":"Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Models","created":"2024-06-10","cited_by_count":28,"area":"safety"},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2405.20774","title":"Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systems","created":"2024-05-27","cited_by_count":27,"area":"lr"},{"id":"2410.14425","title":"Unlearning Backdoor Attacks for LLMs with Weak-to-Strong Knowledge Distillation","created":"2024-10-18","cited_by_count":27,"area":"safety"},{"id":"2402.19334","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","created":"2024-02-29","cited_by_count":26,"area":null},{"id":"2305.02394","title":"Defending against Insertion-based Textual Backdoor Attacks via Attribution","created":"2023-05-03","cited_by_count":25,"area":"safety"},{"id":"2402.14845","title":"Purifying Large Language Models by Ensembling a Small Language Model","created":"2024-02-19","cited_by_count":25,"area":"safety"},{"id":"2311.17431","title":"Grounding Foundation Models through Federated Transfer Learning: A General Framework","created":"2023-11-29","cited_by_count":24,"area":null},{"id":"2306.08350","title":"Multi-target Backdoor Attacks for Code Pre-trained Models","created":"2023-06-14","cited_by_count":23,"area":"safety"},{"id":"2403.17155","title":"Task-Agnostic Detector for Insertion-Based Backdoor Attacks","created":"2024-03-25","cited_by_count":23,"area":null},{"id":"2502.12202","title":"To Think or Not to Think: Exploring the Unthinking Vulnerability in Large Reasoning Models","created":"2025-02-16","cited_by_count":22,"area":"lr"},{"id":"2305.02424","title":"Backdoor Learning on Sequence to Sequence Models","created":"2023-05-03","cited_by_count":21,"area":null},{"id":"2305.11596","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","created":"2023-05-19","cited_by_count":21,"area":null},{"id":"2311.09763","title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations","created":"2023-11-16","cited_by_count":21,"area":"safety"},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21,"area":null},{"id":"2109.10855","title":"BFClass: A Backdoor-free Text Classification Framework","created":"2021-09-22","cited_by_count":19,"area":"safety"},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2308.02122","title":"ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP","created":"2023-08-04","cited_by_count":19,"area":"safety"},{"id":"2310.18633","title":"Setting the Trap: Capturing and Defeating Backdoors in Pretrained Language Models through Honeypots","created":"2023-10-28","cited_by_count":19,"area":"safety"},{"id":"2506.16447","title":"Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models","created":"2025-06-19","cited_by_count":19,"area":"alignment"},{"id":"2110.08247","title":"Textual Backdoor Attacks Can Be More Harmful via Two Simple Tricks","created":"2021-10-15","cited_by_count":18,"area":"safety"},{"id":"2503.00596","title":"BadJudge: Backdoor Vulnerabilities of LLM-as-a-Judge","created":"2025-03-01","cited_by_count":18,"area":"safety"},{"id":"2301.10412","title":"BDMMT: Backdoor Sample Detection for Language Models through Model Mutation Testing","created":"2023-01-25","cited_by_count":16,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2402.12168","title":"Defending Against Weight-Poisoning Backdoor Attacks for Parameter-Efficient Fine-Tuning","created":"2024-02-19","cited_by_count":16,"area":null},{"id":"2402.13459","title":"Learning to Poison Large Language Models for Downstream Manipulation","created":"2024-02-21","cited_by_count":16,"area":"lr"},{"id":"2502.13141","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","created":"2025-02-18","cited_by_count":16,"area":"safety"},{"id":"2205.11803","title":"WeDef: Weakly Supervised Backdoor Defense for Text Classification","created":"2022-05-24","cited_by_count":15,"area":"safety"},{"id":"2305.16503","title":"IMBERT: Making BERT Immune to Insertion-based Backdoor Attacks","created":"2023-05-25","cited_by_count":15,"area":"safety"},{"id":"2307.16680","title":"On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook","created":"2023-07-31","cited_by_count":15,"area":"diffusion"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2411.11683","title":"Robot Collapse: Supply Chain Backdoor Attacks Against VLM-based Robotic Manipulation","created":"2024-11-18","cited_by_count":15,"area":"safety"},{"id":"2505.12567","title":"A Survey of Attacks on Large Language Models","created":"2025-05-18","cited_by_count":15,"area":"agents"},{"id":"2211.11958","title":"A Survey on Backdoor Attack and Defense in Natural Language Processing","created":"2022-11-22","cited_by_count":14,"area":"safety"},{"id":"2310.18603","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","created":"2023-10-28","cited_by_count":14,"area":"safety"},{"id":"2404.19597","title":"TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuning","created":"2024-04-30","cited_by_count":14,"area":"safety"},{"id":"2504.18598","title":"BadMoE: Backdooring Mixture-of-Experts LLMs via Optimizing Routing Triggers and Infecting Dormant Experts","created":"2025-04-24","cited_by_count":14,"area":"moe"},{"id":"2404.02406","title":"Exploring Backdoor Vulnerabilities of Chat Models","created":"2024-04-03","cited_by_count":13,"area":"safety"},{"id":"2407.11282","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","created":"2024-07-15","cited_by_count":13,"area":"safety"},{"id":"2409.01193","title":"CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models","created":"2024-09-02","cited_by_count":13,"area":"safety"},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2505.14418","title":"Hidden Ghost Hand: Unveiling Backdoor Vulnerabilities in MLLM-Powered Mobile GUI Agents","created":"2025-05-20","cited_by_count":13,"area":"agents"},{"id":"2303.14325","title":"Backdoor Attacks with Input-unique Triggers in NLP","created":"2023-03-25","cited_by_count":12,"area":"safety"},{"id":"2305.07406","title":"Two-in-One: A Model Hijacking Attack Against Text Generation Models","created":"2023-05-12","cited_by_count":12,"area":null},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2405.07667","title":"Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models","created":"2024-05-13","cited_by_count":12,"area":"safety"},{"id":"2210.17029","title":"Poison Attack and Defense on Deep Source Code Processing Models","created":"2022-10-31","cited_by_count":11,"area":"safety"},{"id":"2305.19607","title":"Adversarial Clean Label Backdoor Attacks and Defenses on Text Classification Systems","created":"2023-05-31","cited_by_count":11,"area":"safety"},{"id":"2406.00240","title":"Exploring Vulnerabilities and Protections in Large Language Models: A Survey","created":"2024-06-01","cited_by_count":11,"area":"safety"},{"id":"2406.07778","title":"A Study of Backdoors in Instruction Fine-tuned Language Models","created":"2024-06-12","cited_by_count":11,"area":"safety"},{"id":"2506.14003","title":"Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputs","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2407.03160","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","created":"2024-07-03","cited_by_count":10,"area":"safety"}],"next_cursor":"100"}