{"total":24,"rows":[{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2401.05949","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","created":"2024-01-11","cited_by_count":53,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2402.00751","title":"Fast Exact Unlearning for In-Context Learning Data for LLMs","created":"2024-02-01","cited_by_count":34,"area":"safety"},{"id":"2311.09763","title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations","created":"2023-11-16","cited_by_count":21,"area":"safety"},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2402.14857","title":"Is the System Message Really Important to Jailbreaks in Large Language Models?","created":"2024-02-20","cited_by_count":20,"area":"safety"},{"id":"2310.09624","title":"ASSERT: Automated Safety Scenario Red Teaming for Evaluating the Robustness of Large Language Models","created":"2023-10-14","cited_by_count":12,"area":"safety"},{"id":"2412.12621","title":"Jailbreaking? One Step Is Enough!","created":"2024-12-17","cited_by_count":9,"area":"safety"},{"id":"2507.01321","title":"ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks","created":"2025-07-02","cited_by_count":9,"area":"safety"},{"id":"2505.19773","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","created":"2025-05-26","cited_by_count":8,"area":"safety"},{"id":"2605.06161","title":"Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges","created":"2026-05-07","cited_by_count":8,"area":"safety"},{"id":"2407.02534","title":"Image-to-Text Logic Jailbreak: Your Imagination can Help You Do Anything","created":"2024-07-01","cited_by_count":7,"area":"safety"},{"id":"2310.07632","title":"Prompt Backdoors in Visual Prompt Learning","created":"2023-10-11","cited_by_count":4,"area":"safety"},{"id":"2507.11128","title":"What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requests","created":"2025-07-15","cited_by_count":4,"area":"safety"},{"id":"2502.06653","title":"In-Context Learning (and Unlearning) of Length Biases","created":"2025-02-10","cited_by_count":3,"area":"safety"},{"id":"2502.09974","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","created":"2025-02-14","cited_by_count":3,"area":"safety"},{"id":"2411.16769","title":"Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewriting","created":"2024-11-25","cited_by_count":1,"area":"safety"},{"id":"2511.21752","title":"Semantics as a Shield: Label Disguise Defense (LDD) against Prompt Injection in LLM Sentiment Classification","created":"2025-11-23","cited_by_count":0,"area":"safety"},{"id":"2603.25201","title":"SafeMath: Safe Solutions for Unsafe Math Word Problems","created":"2026-03-26","cited_by_count":0,"area":"safety"},{"id":"2605.04116","title":"Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering","created":"2026-05-05","cited_by_count":0,"area":"safety"},{"id":"2606.23030","title":"Have You Ever Seen Them? Entity-level Membership Inference through Interrogating Large Language Models","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2608.08212","title":"Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment","created":"2026-08-08","cited_by_count":0,"area":"safety"}],"next_cursor":null}