{"total":105,"rows":[{"id":"2406.11717","title":"Refusal in Language Models Is Mediated by a Single Direction","created":"2024-06-17","cited_by_count":1032,"area":"safety"},{"id":"2210.01504","title":"Knowledge Unlearning for Mitigating Privacy Risks in Language Models","created":"2022-10-04","cited_by_count":437,"area":"safety"},{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2306.04634","title":"On the Reliability of Watermarks for Large Language Models","created":"2023-06-07","cited_by_count":189,"area":"safety"},{"id":"2408.00761","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","created":"2024-08-01","cited_by_count":138,"area":"safety"},{"id":"2305.00118","title":"Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4","created":"2023-04-28","cited_by_count":125,"area":"safety"},{"id":"2406.06443","title":"LLM Dataset Inference: Did you train on my dataset?","created":"2024-06-10","cited_by_count":110,"area":"safety"},{"id":"2307.14692","title":"Backdoor Attacks for In-Context Learning with Language Models","created":"2023-07-27","cited_by_count":96,"area":"safety"},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94,"area":"safety"},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72,"area":"safety"},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2410.02879","title":"Position: LLM Unlearning Benchmarks are Weak Measures of Progress","created":"2024-10-03","cited_by_count":63,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2310.15007","title":"Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models","created":"2023-10-23","cited_by_count":56,"area":"safety"},{"id":"2401.05949","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","created":"2024-01-11","cited_by_count":53,"area":"safety"},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2402.10052","title":"UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2407.20516","title":"Machine Unlearning in Generative AI: A Survey","created":"2024-07-30","cited_by_count":49,"area":"safety"},{"id":"2310.09573","title":"Self-Detoxifying Language Models via Toxification Reversal","created":"2023-10-14","cited_by_count":46,"area":"safety"},{"id":"2405.03097","title":"To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models","created":"2024-05-06","cited_by_count":43,"area":"safety"},{"id":"2403.01267","title":"Dissecting Language Models: Machine Unlearning via Selective Pruning","created":"2024-03-02","cited_by_count":42,"area":"safety"},{"id":"2402.10892","title":"Proving membership in LLM pretraining data via data watermarks","created":"2024-02-16","cited_by_count":40,"area":"safety"},{"id":"2404.02062","title":"Digital Forgetting in Large Language Models: A Survey of Unlearning Methods","created":"2024-04-02","cited_by_count":40,"area":"safety"},{"id":"2403.01251","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","created":"2024-03-02","cited_by_count":37,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2410.12949","title":"Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization","created":"2024-10-16","cited_by_count":35,"area":"safety"},{"id":"2402.14015","title":"Corrective Machine Unlearning","created":"2024-02-21","cited_by_count":29,"area":"safety"},{"id":"2309.13322","title":"From Text to Source: Results in Detecting Large Language Model-Generated Content","created":"2023-09-23","cited_by_count":26,"area":"safety"},{"id":"2204.09092","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","created":"2022-04-19","cited_by_count":25,"area":"safety"},{"id":"2411.00154","title":"Scaling Up Membership Inference: When and How Attacks Succeed on Large Language Models","created":"2024-10-31","cited_by_count":24,"area":"safety"},{"id":"2303.03592","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","created":"2023-03-07","cited_by_count":23,"area":"safety"},{"id":"2212.10440","title":"Perplexed by Quality: A Perplexity-based Method for Adult and Harmful Content Detection in Multilingual Heterogeneous Web Data","created":"2022-12-20","cited_by_count":22,"area":"safety"},{"id":"2409.13745","title":"Context-Aware Membership Inference Attacks against Pre-trained Large Language Models","created":"2024-09-11","cited_by_count":22,"area":"safety"},{"id":"2401.15241","title":"Unlearning Traces the Influential Training Data of Language Models","created":"2024-01-26","cited_by_count":18,"area":"safety"},{"id":"2406.10218","title":"Semantic Membership Inference Attack against Large Language Models","created":"2024-06-14","cited_by_count":17,"area":"safety"},{"id":"2508.12733","title":"LinguaSafe: A Comprehensive Multilingual Safety Benchmark for Large Language Models","created":"2025-08-18","cited_by_count":16,"area":"safety"},{"id":"2407.04411","title":"Waterfall: Framework for Robust and Scalable Text Watermarking and Provenance for LLMs","created":"2024-07-05","cited_by_count":15,"area":"safety"},{"id":"2406.09325","title":"REVS: Unlearning Sensitive Information in Language Models via Rank Editing in the Vocabulary Space","created":"2024-06-13","cited_by_count":13,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2308.04635","title":"Where's the Liability in Harmful AI Speech?","created":"2023-08-09","cited_by_count":12,"area":"safety"},{"id":"2410.02159","title":"Mitigating Memorization In Language Models","created":"2024-10-03","cited_by_count":12,"area":"safety"},{"id":"2510.19796","title":"Blackbox Model Provenance via Palimpsestic Membership Inference","created":"2025-10-22","cited_by_count":11,"area":"safety"},{"id":"2308.13449","title":"The Poison of Alignment","created":"2023-08-25","cited_by_count":10,"area":"safety"},{"id":"2406.14091","title":"Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models","created":"2024-06-20","cited_by_count":10,"area":"safety"},{"id":"2411.19876","title":"LUMIA: Linear probing for Unimodal and MultiModal Membership Inference Attacks leveraging internal LLM states","created":"2024-11-29","cited_by_count":10,"area":"safety"},{"id":"2506.10424","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","created":"2025-06-12","cited_by_count":10,"area":"safety"},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2302.07735","title":"Targeted Attack on GPT-Neo for the SATML Language Model Data Extraction Challenge","created":"2023-02-13","cited_by_count":8,"area":"safety"},{"id":"2306.03097","title":"Seeing Seeds Beyond Weeds: Green Teaming Generative AI for Beneficial Uses","created":"2023-05-30","cited_by_count":8,"area":"safety"},{"id":"2402.12626","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Feature Extractors","created":"2024-02-20","cited_by_count":8,"area":"safety"},{"id":"2507.21084","title":"Reviving Your MNEME: Predicting The Side Effects of LLM Unlearning and Fine-Tuning via Sparse Model Diffing","created":"2025-06-19","cited_by_count":8,"area":"safety"},{"id":"2506.00876","title":"Not Every Token Needs Forgetting: Selective Unlearning to Limit Change in Utility in Large Language Model Unlearning","created":"2025-06-01","cited_by_count":7,"area":"safety"},{"id":"2508.09603","title":"The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage","created":"2025-08-13","cited_by_count":7,"area":"safety"},{"id":"2412.13475","title":"A Statistical and Multi-Perspective Revisiting of the Membership Inference Attack in Large Language Models","created":"2024-12-18","cited_by_count":6,"area":"safety"},{"id":"2510.17210","title":"Wisdom is Knowing What not to Say: Hallucination-Free LLMs Unlearning via Attention Shifting","created":"2025-10-20","cited_by_count":6,"area":"safety"},{"id":"2407.20271","title":"Learn while Unlearn: An Iterative Unlearning Framework for Generative Language Models","created":"2024-07-25","cited_by_count":5,"area":"safety"},{"id":"2408.05968","title":"Nob-MIAs: Non-biased Membership Inference Attacks Assessment on Large Language Models with Ex-Post Dataset Construction","created":"2024-08-12","cited_by_count":5,"area":"safety"},{"id":"2501.08454","title":"Tag&Tab: Pretraining Data Detection in Large Language Models Using Keyword-Based Membership Inference Attack","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2508.06595","title":"LLM Unlearning Without an Expert Curated Dataset","created":"2025-08-08","cited_by_count":5,"area":"safety"},{"id":"2411.12600","title":"Provable unlearning in topic modeling and downstream tasks","created":"2024-11-19","cited_by_count":4,"area":"safety"},{"id":"2506.12484","title":"Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization","created":"2025-06-14","cited_by_count":4,"area":"safety"},{"id":"2510.25117","title":"A Survey on Unlearning in Large Language Models","created":"2025-10-29","cited_by_count":4,"area":"safety"},{"id":"2512.18035","title":"Towards Benchmarking Privacy Vulnerabilities in Selective Forgetting with Large Language Models","created":"2025-12-19","cited_by_count":4,"area":"safety"},{"id":"2601.18110","title":"AttenMIA: LLM Membership Inference Attack through Attention Signals","created":"2026-01-26","cited_by_count":4,"area":"safety"},{"id":"2403.15740","title":"Protecting Copyrighted Material with Unique Identifiers in Large Language Model Training","created":"2024-03-23","cited_by_count":3,"area":"safety"},{"id":"2412.21123","title":"ExpShield: Safeguarding Web Text from Unauthorized Crawling and LLM Exploitation","created":"2024-12-30","cited_by_count":3,"area":"safety"},{"id":"2503.06519","title":"Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation","created":"2025-03-09","cited_by_count":3,"area":"safety"},{"id":"2601.11314","title":"Membership Inference on LLMs in the Wild","created":"2026-01-16","cited_by_count":3,"area":"safety"},{"id":"2606.17464","title":"CheckMIABench: Firm Foundations For Membership Inference Attacks on Language Models","created":"2026-06-16","cited_by_count":3,"area":"safety"},{"id":"2503.05721","title":"What Are They Filtering Out? An Experimental Benchmark of Filtering Strategies for Harm Reduction in Pretraining Datasets","created":"2025-02-17","cited_by_count":2,"area":"safety"},{"id":"2505.03392","title":"Automatic Calibration for Membership Inference Attack on Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2510.00125","title":"Direct Token Optimization: A Self-contained Approach to Large Language Model Unlearning","created":"2025-09-30","cited_by_count":2,"area":"safety"},{"id":"2510.05582","title":"(Token-Level) InfoRMIA: Stronger Membership Inference and Memorization Assessment for LLMs","created":"2025-10-07","cited_by_count":2,"area":"safety"},{"id":"2510.19492","title":"Machine Text Detectors are Membership Inference Attacks","created":"2025-10-22","cited_by_count":2,"area":"safety"},{"id":"2510.26274","title":"PVMark: Enabling Public Verifiability for LLM Watermarking Schemes","created":"2025-10-30","cited_by_count":2,"area":"safety"},{"id":"2511.08637","title":"How Do Data Owners Say No? A Case Study of Data Consent Mechanisms in Web-Scraped Vision-Language AI Training Datasets","created":"2025-11-10","cited_by_count":2,"area":"safety"},{"id":"2604.16591","title":"Randomized Antipodal Search Done Right for Data Pareto Improvement of LLM Unlearning","created":"2026-04-17","cited_by_count":2,"area":"safety"},{"id":"2505.11837","title":"On Membership Inference Attacks in Knowledge Distillation","created":"2025-05-17","cited_by_count":1,"area":"safety"},{"id":"2506.14474","title":"LexiMark: Robust Watermarking via Lexical Substitutions to Enhance Membership Verification of an LLM's Textual Training Data","created":"2025-06-17","cited_by_count":1,"area":"safety"},{"id":"2510.19773","title":"Estimating Model-Level Membership Inference Vulnerability Without Reference Models","created":"2025-10-22","cited_by_count":1,"area":"safety"},{"id":"2602.05252","title":"Copyright Detective: A Forensic System to Evidence LLMs Flickering Copyright Leakage Risks","created":"2026-02-05","cited_by_count":1,"area":"safety"},{"id":"2604.18697","title":"Beyond Indistinguishability: Measuring Extraction Risk in LLM APIs","created":"2026-04-20","cited_by_count":1,"area":"safety"},{"id":"2608.28233","title":"REINS: Refusal-Enhanced Inhibitory Steering with Sparse Autoencoder Features","created":"2026-08-28","cited_by_count":1,"area":"safety"},{"id":"2402.12189","title":"Amplifying Training Data Exposure through Fine-Tuning with Pseudo-Labeled Memberships","created":"2024-02-19","cited_by_count":0,"area":"safety"},{"id":"2503.09365","title":"Membership Inference Attacks fueled by Few-Short Learning to detect privacy leakage tackling data integrity","created":"2025-03-12","cited_by_count":0,"area":"safety"},{"id":"2504.13388","title":"A mean teacher algorithm for unlearning of language models","created":"2025-04-18","cited_by_count":0,"area":"safety"},{"id":"2508.00602","title":"LeakSealer: A Semisupervised Defense for LLMs Against Prompt Injection and Leakage Attacks","created":"2025-08-01","cited_by_count":0,"area":"safety"},{"id":"2509.05318","title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models","created":"2025-08-30","cited_by_count":0,"area":"safety"},{"id":"2509.06896","title":"Are Targeted Data Poisoning Attacks as Effective as We Think?","created":"2025-09-08","cited_by_count":0,"area":"safety"},{"id":"2512.13352","title":"On the Effectiveness of Membership Inference in Targeted Data Extraction from Large Language Models","created":"2025-12-15","cited_by_count":0,"area":"safety"},{"id":"2601.02002","title":"Exploring Approaches for Detecting Memorization of Recommender System Data in Large Language Models","created":"2026-01-05","cited_by_count":0,"area":"safety"},{"id":"2605.00699","title":"STARE: Step-wise Temporal Alignment and Red-teaming Engine for Multi-modal Toxicity Attack","created":"2026-05-01","cited_by_count":0,"area":"safety"},{"id":"2605.01699","title":"Probe-Geometry Alignment: Erasing the Cross-Sequence Memorization Signature Below Chance","created":"2026-05-03","cited_by_count":0,"area":"safety"},{"id":"2605.14347","title":"Exemplar Partitioning for Mechanistic Interpretability","created":"2026-05-14","cited_by_count":0,"area":"safety"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.05936","title":"Epistemic Injustice in Language Models: An Audit of Pretraining Filters and Guardrails","created":"2026-06-04","cited_by_count":0,"area":"safety"},{"id":"2607.25451","title":"Bits and Memories: Measuring Verbatim Extraction Across LLM Quantization","created":"2026-07-28","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}