{"total":41,"rows":[{"id":"2305.03807","title":"Evading Watermark based Detection of AI-Generated Content","created":"2023-05-05","cited_by_count":78,"area":"safety"},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2210.00968","title":"Membership Inference Attacks Against Text-to-image Generation Models","created":"2022-10-03","cited_by_count":69,"area":"safety"},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2211.02408","title":"Rickrolling the Artist: Injecting Backdoors into Text Encoders for Text-to-Image Synthesis","created":"2022-11-04","cited_by_count":59,"area":"safety"},{"id":"2310.15007","title":"Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models","created":"2023-10-23","cited_by_count":56,"area":"safety"},{"id":"2405.18540","title":"Learning diverse attacks on large language models for robust red-teaming and safety tuning","created":"2024-05-28","cited_by_count":54,"area":"safety"},{"id":"2206.03693","title":"Autoregressive Perturbations for Data Poisoning","created":"2022-06-08","cited_by_count":46,"area":"safety"},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2402.00898","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","created":"2024-01-31","cited_by_count":30,"area":"safety"},{"id":"2306.07754","title":"Generative Watermarking Against Unauthorized Subject-Driven Image Synthesis","created":"2023-06-13","cited_by_count":23,"area":"safety"},{"id":"2403.12075","title":"Adversarial Nibbler: An Open Red-Teaming Method for Identifying Diverse Harms in Text-to-Image Generation","created":"2024-02-14","cited_by_count":20,"area":"safety"},{"id":"2405.09879","title":"Generative Unlearning for Any Identity","created":"2024-05-16","cited_by_count":19,"area":"safety"},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2311.00919","title":"MIST: Defending Against Membership Inference Attacks Through Membership-Invariant Subspace Training","created":"2023-11-02","cited_by_count":12,"area":"safety"},{"id":"2309.14054","title":"Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networks","created":"2023-09-25","cited_by_count":11,"area":"safety"},{"id":"2305.14851","title":"Sharpness-Aware Data Poisoning Attack","created":"2023-05-24","cited_by_count":10,"area":"safety"},{"id":"2306.01272","title":"DeepfakeArt Challenge: A Benchmark Dataset for Generative AI Art Forgery and Data Poisoning Detection","created":"2023-06-02","cited_by_count":9,"area":"safety"},{"id":"2305.11351","title":"Data Redaction from Conditional Generative Models","created":"2023-05-18","cited_by_count":8,"area":"safety"},{"id":"2311.13619","title":"Steal My Artworks for Fine-tuning? A Watermarking Framework for Detecting Art Theft Mimicry in Text-to-Image Models","created":"2023-11-22","cited_by_count":8,"area":"safety"},{"id":"2506.21209","title":"BitMark: Watermarking Bitwise Autoregressive Image Generative Models","created":"2025-06-26","cited_by_count":5,"area":"safety"},{"id":"2510.02384","title":"Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey","created":"2025-09-30","cited_by_count":5,"area":"safety"},{"id":"2402.16889","title":"Generative Models are Self-Watermarked: Declaring Model Authentication through Re-Generation","created":"2024-02-23","cited_by_count":3,"area":"safety"},{"id":"2412.08156","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","created":"2024-12-11","cited_by_count":3,"area":"safety"},{"id":"2504.03765","title":"Watermarking for AI Content Detection: A Review on Text, Visual, and Audio Modalities","created":"2025-04-02","cited_by_count":3,"area":"safety"},{"id":"2506.18325","title":"NSFW-Classifier Guided Prompt Sanitization for Safe Text-to-Image Generation","created":"2025-06-23","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2601.16140","title":"Learning to Watermark in the Latent Space of Generative Models","created":"2026-01-22","cited_by_count":3,"area":"safety"},{"id":"2511.08637","title":"How Do Data Owners Say No? A Case Study of Data Consent Mechanisms in Web-Scraped Vision-Language AI Training Datasets","created":"2025-11-10","cited_by_count":2,"area":"safety"},{"id":"2312.03419","title":"Synthesizing Physical Backdoor Datasets: An Automated Framework Leveraging Deep Generative Models","created":"2023-12-06","cited_by_count":1,"area":"safety"},{"id":"2509.06277","title":"No Encore: Unlearning as Opt-Out in Music Generation","created":"2025-09-08","cited_by_count":1,"area":"safety"},{"id":"2509.15230","title":"Pre-Forgettable Models: Prompt Learning as a Native Mechanism for Unlearning","created":"2025-09-05","cited_by_count":1,"area":"safety"},{"id":"2509.15551","title":"PolyJuice Makes It Real: Black-Box, Universal Red Teaming for Synthetic Image Detectors","created":"2025-09-19","cited_by_count":1,"area":"safety"},{"id":"2512.09687","title":"Unconsciously Forget: Mitigating Memorization; Without Knowing What is being Memorized","created":"2025-12-10","cited_by_count":1,"area":"safety"},{"id":"2604.10460","title":"Toward Accountable AI-Generated Content on Social Platforms: Steganographic Attribution and Multimodal Harm Detection","created":"2026-04-12","cited_by_count":1,"area":"safety"},{"id":"2605.19227","title":"Token by Token, Compromised: Backdoor Vulnerabilities in Unified Autoregressive Models","created":"2026-05-19","cited_by_count":1,"area":"safety"},{"id":"2507.17922","title":"From Seed to Harvest: Augmenting Human Creativity with AI for Red-teaming Text-to-Image Models","created":"2025-07-23","cited_by_count":0,"area":"safety"},{"id":"2608.17067","title":"DiSCO: Defending text-to-image generation through distribution-guided contrastive prompt optimization","created":"2026-08-17","cited_by_count":0,"area":"safety"},{"id":"2610.06503","title":"Harmful Content Generation in Text-to-Image Models: Capabilities and Moderation Limitations","created":"2026-10-05","cited_by_count":0,"area":"safety"}],"next_cursor":null}