{"total":63,"rows":[{"id":"2304.05197","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","created":"2023-04-11","cited_by_count":333,"area":"safety"},{"id":"2205.13636","title":"Quark: Controllable Text Generation with Reinforced Unlearning","created":"2022-05-26","cited_by_count":237,"area":"safety"},{"id":"2404.07921","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","created":"2024-04-11","cited_by_count":172,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2401.18018","title":"On Prompt-Driven Safeguarding for Large Language Models","created":"2024-01-31","cited_by_count":116,"area":"safety"},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94,"area":"safety"},{"id":"2208.12268","title":"FedPrompt: Communication-Efficient and Privacy Preserving Prompt Tuning in Federated Learning","created":"2022-08-25","cited_by_count":91,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2406.12038","title":"Soft Prompting for Unlearning in Large Language Models","created":"2024-06-17","cited_by_count":46,"area":"safety"},{"id":"2310.12439","title":"PoisonPrompt: Backdoor Attack on Prompt-based Large Language Models","created":"2023-10-19","cited_by_count":42,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2504.10957","title":"When is Task Vector Provably Effective for Model Editing? A Generalization Analysis of Nonlinear Transformers","created":"2025-04-15","cited_by_count":38,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2308.08090","title":"Separate the Wheat from the Chaff: Model Deficiency Unlearning via Parameter-Efficient Module Operation","created":"2023-08-16","cited_by_count":33,"area":"safety"},{"id":"2309.13256","title":"Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attacks","created":"2023-09-23","cited_by_count":33,"area":"safety"},{"id":"2507.07974","title":"Defending Against Prompt Injection With a Few DefensiveTokens","created":"2025-07-10","cited_by_count":33,"area":"safety"},{"id":"2502.01042","title":"SafeSwitch: Steering Unsafe LLM Behavior via Internal Activation Signals","created":"2025-02-03","cited_by_count":29,"area":"safety"},{"id":"2503.10566","title":"ASIDE: Architectural Separation of Instructions and Data in Language Models","created":"2025-03-13","cited_by_count":24,"area":"safety"},{"id":"2501.03544","title":"PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models","created":"2025-01-07","cited_by_count":17,"area":"safety"},{"id":"2412.16504","title":"Privacy in Fine-tuning Large Language Models: Attacks, Defenses, and Future Directions","created":"2024-12-21","cited_by_count":14,"area":"safety"},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2402.16578","title":"Multi-Bit Distortion-Free Watermarking for Large Language Models","created":"2024-02-26","cited_by_count":11,"area":"safety"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2407.03160","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","created":"2024-07-03","cited_by_count":10,"area":"safety"},{"id":"2506.10424","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","created":"2025-06-12","cited_by_count":10,"area":"safety"},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2312.04748","title":"Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attacks","created":"2023-12-07","cited_by_count":9,"area":"safety"},{"id":"2407.12281","title":"Turning Generative Models Degenerate: The Power of Data Poisoning Attacks","created":"2024-07-17","cited_by_count":9,"area":"safety"},{"id":"2310.11970","title":"Quantifying Privacy Risks of Prompts in Visual Prompt Learning","created":"2023-10-18","cited_by_count":8,"area":"safety"},{"id":"2402.12026","title":"Acquiring Clean Language Models from Backdoor Poisoned Datasets by Downscaling Frequency Space","created":"2024-02-19","cited_by_count":8,"area":"safety"},{"id":"2512.07375","title":"LUNE: Efficient LLM Unlearning via LoRA Fine-Tuning with Negative Examples","created":"2025-12-08","cited_by_count":8,"area":"safety"},{"id":"2308.11521","title":"Self-Deception: Reverse Penetrating the Semantic Firewall of Large Language Models","created":"2023-08-16","cited_by_count":7,"area":"safety"},{"id":"2406.19395","title":"Dataset Size Recovery from LoRA Weights","created":"2024-06-27","cited_by_count":7,"area":"safety"},{"id":"2306.04535","title":"PromptAttack: Probing Dialogue State Trackers with Adversarial Prompts","created":"2023-06-07","cited_by_count":6,"area":"safety"},{"id":"2504.14738","title":"PROMPTEVALS: A Dataset of Assertions and Guardrails for Custom Production Large Language Model Pipelines","created":"2025-04-20","cited_by_count":6,"area":"safety"},{"id":"2402.18945","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","created":"2024-02-29","cited_by_count":5,"area":"safety"},{"id":"2411.19335","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","created":"2024-11-28","cited_by_count":5,"area":"safety"},{"id":"2505.15674","title":"UniErase: Towards Balanced and Precise Unlearning in Language Models","created":"2025-05-21","cited_by_count":5,"area":"safety"},{"id":"2310.07632","title":"Prompt Backdoors in Visual Prompt Learning","created":"2023-10-11","cited_by_count":4,"area":"safety"},{"id":"2405.19563","title":"Unlearning Climate Misinformation in Large Language Models","created":"2024-05-29","cited_by_count":4,"area":"safety"},{"id":"2305.16371","title":"INTapt: Information-Theoretic Adversarial Prompt Tuning for Enhanced Non-Native Speech Recognition","created":"2023-05-25","cited_by_count":3,"area":"safety"},{"id":"2310.11079","title":"Learning from Red Teaming: Gender Bias Provocation and Mitigation in Large Language Models","created":"2023-10-17","cited_by_count":3,"area":"safety"},{"id":"2512.16292","title":"In-Context Probing for Membership Inference in Fine-Tuned Language Models","created":"2025-12-18","cited_by_count":3,"area":"safety"},{"id":"2604.21251","title":"CAP: Controllable Alignment Prompting for Unlearning in LLMs","created":"2026-04-23","cited_by_count":3,"area":"safety"},{"id":"2409.17946","title":"Breaking PEFT Limitations: Leveraging Weak-to-Strong Knowledge Transfer for Backdoor Attacks in LLMs","created":"2024-09-26","cited_by_count":2,"area":"safety"},{"id":"2604.12686","title":"BID-LoRA: A Parameter-Efficient Framework for Continual Learning and Unlearning","created":"2026-04-14","cited_by_count":2,"area":"safety"},{"id":"2609.10439","title":"Forgetting Only What Matters: Layer-Selective Unlearning toward Robust LLMs","created":"2026-09-09","cited_by_count":2,"area":"safety"},{"id":"2310.00648","title":"PETA: Parameter-Efficient Trojan Attacks","created":"2023-10-01","cited_by_count":1,"area":"safety"},{"id":"2603.12089","title":"EmbTracker: Traceable Black-box Watermarking for Federated Language Models","created":"2026-03-12","cited_by_count":1,"area":"safety"},{"id":"2404.00461","title":"Shortcuts Arising from Contrast: Effective and Covert Clean-Label Attacks in Prompt-Based Learning","created":"2024-03-30","cited_by_count":0,"area":"safety"},{"id":"2512.04457","title":"RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearning","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2512.08123","title":"Universal Adversarial Suffixes Using Calibrated Gumbel-Softmax Relaxation","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2512.08131","title":"Universal Adversarial Suffixes for Language Models Using Reinforcement Learning with Calibrated Reward","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2601.10045","title":"Privacy Enhanced PEFT: Tensor Train Decomposition Improves Privacy Utility Tradeoffs under DP-SGD","created":"2026-01-15","cited_by_count":0,"area":"safety"},{"id":"2605.31246","title":"BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning","created":"2026-05-29","cited_by_count":0,"area":"safety"},{"id":"2606.17123","title":"LineageMark: Multi-user White-box Watermarking for Contribution Tracing in Model Derivation Chains","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2607.27940","title":"TriShield: Zero-Utility-Loss Defense Against Privacy Backdoors in Federated Language Model Fine-Tuning via Orthogonal Gradient Projection and Optimizer State Entanglement","created":"2026-07-30","cited_by_count":0,"area":"safety"},{"id":"2608.09624","title":"Measuring the Wrong Thing: Internal Harmfulness Scores Anti-Rank Successful Jailbreaks","created":"2026-08-10","cited_by_count":0,"area":"safety"},{"id":"2608.20991","title":"Trojaning the Alignment: Stealthy Backdoor Attacks against Graph Foundation Models","created":"2026-08-21","cited_by_count":0,"area":"safety"},{"id":"2608.23873","title":"Semantic Overlays: Mitigating Prompt Injection with Annotations Beyond Tokens and Steering Vectors","created":"2026-08-24","cited_by_count":0,"area":"safety"},{"id":"2609.36657","title":"Constitutional adapters: Inference-time interventions for misalignment and misuse","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}