{"total":105,"rows":[{"id":"2305.00944","title":"Poisoning Language Models During Instruction Tuning","created":"2023-05-01","cited_by_count":269,"area":null},{"id":"2309.15025","title":"Large Language Model Alignment: A Survey","created":"2023-09-26","cited_by_count":243,"area":"alignment"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2402.11208","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","created":"2024-02-17","cited_by_count":137,"area":"agents"},{"id":"2311.14455","title":"Universal Jailbreak Backdoors from Poisoned Human Feedback","created":"2023-11-24","cited_by_count":128,"area":"alignment"},{"id":"2108.13888","title":"Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning","created":"2021-08-31","cited_by_count":113,"area":null},{"id":"2110.07831","title":"RAP: Robustness-Aware Perturbations for Defending against Backdoor Attacks on NLP Models","created":"2021-10-15","cited_by_count":104,"area":"safety"},{"id":"2307.14692","title":"Backdoor Attacks for In-Context Learning with Language Models","created":"2023-07-27","cited_by_count":96,"area":"safety"},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2110.02467","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","created":"2021-10-06","cited_by_count":85,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2112.05224","title":"Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures","created":"2021-12-09","cited_by_count":73,"area":"safety"},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73,"area":"safety"},{"id":"2401.12255","title":"Instructional Fingerprinting of Large Language Models","created":"2024-01-21","cited_by_count":68,"area":null},{"id":"2305.10036","title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark","created":"2023-05-17","cited_by_count":67,"area":"safety"},{"id":"2111.07970","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","created":"2021-11-15","cited_by_count":66,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2210.09545","title":"Fine-mixing: Mitigating Backdoors in Fine-tuned Language Models","created":"2022-10-18","cited_by_count":57,"area":"safety"},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2210.07543","title":"Watermarking Pre-trained Language Models with Backdooring","created":"2022-10-14","cited_by_count":50,"area":"safety"},{"id":"2301.02496","title":"Stealthy Backdoor Attack for Code Models","created":"2023-01-06","cited_by_count":49,"area":"safety"},{"id":"2205.08305","title":"A Study of the Attention Abnormality in Trojaned BERTs","created":"2022-05-13","cited_by_count":48,"area":null},{"id":"2410.13722","title":"Persistent Pre-Training Poisoning of LLMs","created":"2024-10-17","cited_by_count":48,"area":null},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2308.14367","title":"A Comprehensive Overview of Backdoor Attacks in Large Language Models within Communication Networks","created":"2023-08-28","cited_by_count":42,"area":"safety"},{"id":"2210.15127","title":"Rethinking the Reverse-engineering of Trojan Triggers","created":"2022-10-27","cited_by_count":39,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2106.01810","title":"Defending Against Backdoor Attacks in Natural Language Generation","created":"2021-06-03","cited_by_count":33,"area":"safety"},{"id":"2309.13256","title":"Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attacks","created":"2023-09-23","cited_by_count":33,"area":"safety"},{"id":"2310.14480","title":"Attention-Enhancing Backdoor Attacks Against BERT-based Models","created":"2023-10-23","cited_by_count":32,"area":"safety"},{"id":"2302.04116","title":"Training-free Lexical Backdoor Attacks on Language Models","created":"2023-02-08","cited_by_count":31,"area":"safety"},{"id":"2304.14475","title":"ChatGPT as an Attack Tool: Stealthy Textual Backdoor Attack via Blackbox Generative Model Trigger","created":"2023-04-27","cited_by_count":31,"area":"safety"},{"id":"2402.14968","title":"Mitigating Fine-tuning based Jailbreak Attack with Backdoor Enhanced Safety Alignment","created":"2024-02-22","cited_by_count":31,"area":null},{"id":"2404.14461","title":"Competition Report: Finding Universal Jailbreak Backdoors in Aligned LLMs","created":"2024-04-22","cited_by_count":28,"area":"safety"},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2305.02394","title":"Defending against Insertion-based Textual Backdoor Attacks via Attribution","created":"2023-05-03","cited_by_count":25,"area":"safety"},{"id":"2109.01300","title":"How to Inject Backdoors with Better Consistency: Logit Anchoring on Clean Data","created":"2021-09-03","cited_by_count":24,"area":null},{"id":"2403.17155","title":"Task-Agnostic Detector for Insertion-Based Backdoor Attacks","created":"2024-03-25","cited_by_count":23,"area":null},{"id":"2502.12575","title":"DemonAgent: Dynamically Encrypted Multi-Backdoor Implantation Attack on LLM-based Agent","created":"2025-02-18","cited_by_count":23,"area":"agents"},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2402.14883","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","created":"2024-02-22","cited_by_count":21,"area":"safety"},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21,"area":null},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2308.02122","title":"ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP","created":"2023-08-04","cited_by_count":19,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2211.11958","title":"A Survey on Backdoor Attack and Defense in Natural Language Processing","created":"2022-11-22","cited_by_count":14,"area":"safety"},{"id":"2403.05750","title":"Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Text","created":"2024-03-09","cited_by_count":14,"area":null},{"id":"2504.18598","title":"BadMoE: Backdooring Mixture-of-Experts LLMs via Optimizing Routing Triggers and Infecting Dormant Experts","created":"2025-04-24","cited_by_count":14,"area":"moe"},{"id":"2404.02406","title":"Exploring Backdoor Vulnerabilities of Chat Models","created":"2024-04-03","cited_by_count":13,"area":"safety"},{"id":"2410.11272","title":"Cognitive Overload Attack:Prompt Injection for Long Context","created":"2024-10-15","cited_by_count":13,"area":"safety"},{"id":"2311.05863","title":"Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service","created":"2023-11-10","cited_by_count":11,"area":"mllm"},{"id":"2407.03160","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","created":"2024-07-03","cited_by_count":10,"area":"safety"},{"id":"2204.14017","title":"Backdoor Attacks in Federated Learning by Rare Embeddings and Gradient Ensembling","created":"2022-04-29","cited_by_count":9,"area":null},{"id":"2210.06894","title":"Dim-Krum: Backdoor-Resistant Federated Learning for NLP with Dimension-wise Krum-Based Aggregation","created":"2022-10-13","cited_by_count":8,"area":"safety"},{"id":"2305.04547","title":"Diffusion Theory as a Scalpel: Detecting and Purifying Poisonous Dimensions in Pre-trained Language Models Caused by Backdoor or Bias","created":"2023-05-08","cited_by_count":8,"area":"safety"},{"id":"2305.09574","title":"UOR: Universal Backdoor Attacks on Pre-trained Language Models","created":"2023-05-16","cited_by_count":8,"area":"safety"},{"id":"2408.10722","title":"MEGen: Generative Backdoor into Large Language Models via Model Editing","created":"2024-08-20","cited_by_count":8,"area":"safety"},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2404.02356","title":"Two Heads are Better than One: Nested PoE for Robust Defense Against Multi-Backdoors","created":"2024-04-02","cited_by_count":7,"area":"moe"},{"id":"2208.04946","title":"Attention Hijacking in Trojan Transformers","created":"2022-08-09","cited_by_count":6,"area":null},{"id":"2403.03846","title":"Can Distillation Mitigate Backdoor Attacks in Pre-trained Encoders?","created":"2024-03-06","cited_by_count":6,"area":"safety"},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2312.15867","title":"Punctuation Matters! Stealthy Backdoor Attack for Language Models","created":"2023-12-26","cited_by_count":5,"area":"safety"},{"id":"2402.18945","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","created":"2024-02-29","cited_by_count":5,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2407.11654","title":"R-SFLLM: Jamming Resilient Framework for Split Federated Learning with Large Language Models","created":"2024-07-16","cited_by_count":5,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2508.20032","title":"Pruning Strategies for Backdoor Defense in LLMs","created":"2025-08-27","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2111.14309","title":"A General Framework for Defending Against Backdoor Attacks via Influence Graph","created":"2021-11-29","cited_by_count":3,"area":null},{"id":"2406.12670","title":"Stealth edits to large language models","created":"2024-06-18","cited_by_count":3,"area":null},{"id":"2409.01952","title":"Exploiting the Vulnerability of Large Language Models via Defense-Aware Architectural Backdoor","created":"2024-09-03","cited_by_count":3,"area":"safety"},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2507.20783","title":"On The Role of Pretrained Language Models in General-Purpose Text Embeddings: A Survey","created":"2025-07-28","cited_by_count":3,"area":null},{"id":"2510.04347","title":"Unmasking Backdoors: An Explainable Defense via Gradient-Attention Anomaly Scoring for Pre-trained Language Models","created":"2025-10-05","cited_by_count":3,"area":"safety"},{"id":"2205.14246","title":"Defending Against Stealthy Backdoor Attacks","created":"2022-05-27","cited_by_count":2,"area":null},{"id":"2311.13957","title":"Efficient Trigger Word Insertion","created":"2023-11-23","cited_by_count":2,"area":"safety"},{"id":"2406.04478","title":"PromptFix: Few-shot Backdoor Removal via Adversarial Prompt Tuning","created":"2024-06-06","cited_by_count":2,"area":"safety"},{"id":"2408.11587","title":"Large Language Models are Good Attackers: Efficient and Stealthy Textual Backdoor Attacks","created":"2024-08-21","cited_by_count":2,"area":"safety"},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2201.02993","title":"Rethink the Evaluation for Attack Strength of Backdoor Attacks in Natural Language Processing","created":"2022-01-09","cited_by_count":1,"area":"safety"},{"id":"2204.04329","title":"An Adaptive Black-box Backdoor Detection Method for Deep Neural Networks","created":"2022-04-08","cited_by_count":1,"area":null},{"id":"2211.09717","title":"UPTON: Preventing Authorship Leakage from Public Text Release via Data Poisoning","created":"2022-11-17","cited_by_count":1,"area":"safety"},{"id":"2308.10201","title":"Hiding Backdoors within Event Sequence Data via Poisoning Attacks","created":"2023-08-20","cited_by_count":1,"area":null},{"id":"2310.00648","title":"PETA: Parameter-Efficient Trojan Attacks","created":"2023-10-01","cited_by_count":1,"area":"safety"},{"id":"2410.04009","title":"ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs","created":"2024-10-05","cited_by_count":1,"area":"safety"},{"id":"2412.20476","title":"Cut the Deadwood Out: Backdoor Purification via Guided Module Substitution","created":"2024-12-29","cited_by_count":1,"area":null},{"id":"2504.17070","title":"MuTRAP: Multi-trigger Trojans Attacking Robot Task Planning Systems","created":"2025-04-23","cited_by_count":1,"area":null},{"id":"2603.12089","title":"EmbTracker: Traceable Black-box Watermarking for Federated Language Models","created":"2026-03-12","cited_by_count":1,"area":"safety"},{"id":"2207.11500","title":"Catch Me If You Can: Deceiving Stance Detection and Geotagging Models to Protect Privacy of Individuals on Twitter","created":"2022-07-23","cited_by_count":0,"area":null},{"id":"2401.17865","title":"Manipulating Predictions over Discrete Inputs in Machine Teaching","created":"2024-01-31","cited_by_count":0,"area":null},{"id":"2404.00461","title":"Shortcuts Arising from Contrast: Effective and Covert Clean-Label Attacks in Prompt-Based Learning","created":"2024-03-30","cited_by_count":0,"area":"safety"},{"id":"2502.16901","title":"Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMs","created":"2025-02-24","cited_by_count":0,"area":"safety"},{"id":"2506.10722","title":"TED-LaST: Towards Robust Backdoor Defense Against Adaptive Attacks","created":"2025-06-12","cited_by_count":0,"area":null}],"next_cursor":"100"}