{"total":85,"rows":[{"id":"2310.03693","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","created":"2023-10-05","cited_by_count":1154,"area":"alignment"},{"id":"2406.03007","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","created":"2024-06-05","cited_by_count":115,"area":"agents"},{"id":"2403.13355","title":"BadEdit: Backdooring large language models by model editing","created":"2024-03-20","cited_by_count":96,"area":"safety"},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2112.05224","title":"Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures","created":"2021-12-09","cited_by_count":73,"area":"safety"},{"id":"2308.12488","title":"GPTEval: A Survey on Assessments of ChatGPT and GPT-4","created":"2023-08-24","cited_by_count":73,"area":null},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73,"area":"safety"},{"id":"2305.10036","title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark","created":"2023-05-17","cited_by_count":67,"area":"safety"},{"id":"2111.07970","title":"Triggerless Backdoor Attack for NLP Tasks with Clean Labels","created":"2021-11-15","cited_by_count":66,"area":"safety"},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2303.12175","title":"Black-box Backdoor Defense via Zero-shot Image Purification","created":"2023-03-21","cited_by_count":45,"area":null},{"id":"2308.14367","title":"A Comprehensive Overview of Backdoor Attacks in Large Language Models within Communication Networks","created":"2023-08-28","cited_by_count":42,"area":"safety"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2406.06822","title":"An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection","created":"2024-06-10","cited_by_count":40,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2407.10887","title":"Hey, That's My Model! Introducing Chain & Hash, An LLM Fingerprinting Technique","created":"2024-07-15","cited_by_count":37,"area":null},{"id":"2411.14110","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","created":"2024-11-21","cited_by_count":37,"area":"rag"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2312.03014","title":"Foundation Models for Weather and Climate Data Understanding: A Comprehensive Survey","created":"2023-12-05","cited_by_count":34,"area":null},{"id":"2203.00858","title":"Physical Backdoor Attacks to Lane Detection Systems in Autonomous Driving","created":"2022-03-02","cited_by_count":31,"area":null},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2307.08208","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","created":"2023-07-17","cited_by_count":30,"area":"safety"},{"id":"2303.02242","title":"TrojText: Test-time Invisible Textual Trojan Insertion","created":"2023-03-03","cited_by_count":28,"area":null},{"id":"2402.14845","title":"Purifying Large Language Models by Ensembling a Small Language Model","created":"2024-02-19","cited_by_count":25,"area":"safety"},{"id":"2311.17431","title":"Grounding Foundation Models through Federated Transfer Learning: A General Framework","created":"2023-11-29","cited_by_count":24,"area":null},{"id":"2306.08350","title":"Multi-target Backdoor Attacks for Code Pre-trained Models","created":"2023-06-14","cited_by_count":23,"area":"safety"},{"id":"2305.02424","title":"Backdoor Learning on Sequence to Sequence Models","created":"2023-05-03","cited_by_count":21,"area":null},{"id":"2305.11596","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","created":"2023-05-19","cited_by_count":21,"area":null},{"id":"2402.14883","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","created":"2024-02-22","cited_by_count":21,"area":"safety"},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2303.04729","title":"Stealing the Decoding Algorithms of Language Models","created":"2023-03-08","cited_by_count":19,"area":null},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2305.16503","title":"IMBERT: Making BERT Immune to Insertion-based Backdoor Attacks","created":"2023-05-25","cited_by_count":15,"area":"safety"},{"id":"2310.11397","title":"Last One Standing: A Comparative Analysis of Security and Privacy of Soft Prompt Tuning, LoRA, and In-Context Learning","created":"2023-10-17","cited_by_count":14,"area":"safety"},{"id":"2405.17984","title":"Cross-Context Backdoor Attacks against Graph Prompt Learning","created":"2024-05-28","cited_by_count":14,"area":"safety"},{"id":"2303.14325","title":"Backdoor Attacks with Input-unique Triggers in NLP","created":"2023-03-25","cited_by_count":12,"area":"safety"},{"id":"2305.07406","title":"Two-in-One: A Model Hijacking Attack Against Text Generation Models","created":"2023-05-12","cited_by_count":12,"area":null},{"id":"2308.03906","title":"TIJO: Trigger Inversion with Joint Optimization for Defending Multimodal Backdoored Models","created":"2023-08-07","cited_by_count":12,"area":"safety"},{"id":"2403.01472","title":"WARDEN: Multi-Directional Backdoor Watermarks for Embedding-as-a-Service Copyright Protection","created":"2024-03-03","cited_by_count":12,"area":null},{"id":"2411.19530","title":"Quantized Delta Weight Is Safety Keeper","created":"2024-11-29","cited_by_count":12,"area":"safety"},{"id":"2311.05863","title":"Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service","created":"2023-11-10","cited_by_count":11,"area":"mllm"},{"id":"2409.00787","title":"The Dark Side of Human Feedback: Poisoning Large Language Models via User Inputs","created":"2024-09-01","cited_by_count":10,"area":"alignment"},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2312.04748","title":"Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attacks","created":"2023-12-07","cited_by_count":9,"area":"safety"},{"id":"2407.12281","title":"Turning Generative Models Degenerate: The Power of Data Poisoning Attacks","created":"2024-07-17","cited_by_count":9,"area":"safety"},{"id":"2409.00399","title":"Rethinking Backdoor Detection Evaluation for Language Models","created":"2024-08-31","cited_by_count":9,"area":"lr"},{"id":"2409.14119","title":"Obliviate: Neutralizing Task-agnostic Backdoors within the Parameter-efficient Fine-tuning Paradigm","created":"2024-09-21","cited_by_count":9,"area":null},{"id":"2305.09574","title":"UOR: Universal Backdoor Attacks on Pre-trained Language Models","created":"2023-05-16","cited_by_count":8,"area":"safety"},{"id":"2408.10722","title":"MEGen: Generative Backdoor into Large Language Models via Model Editing","created":"2024-08-20","cited_by_count":8,"area":"safety"},{"id":"2506.06518","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2302.09360","title":"Backdoor Attacks to Pre-trained Unified Foundation Models","created":"2023-02-18","cited_by_count":7,"area":"safety"},{"id":"2505.23561","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2401.15883","title":"Model Supply Chain Poisoning: Backdooring Pre-trained Models via Embedding Indistinguishability","created":"2024-01-29","cited_by_count":6,"area":null},{"id":"2403.18136","title":"Identifying Backdoored Graphs in Graph Neural Network Training: An Explanation-Based Approach with Novel Metrics","created":"2024-03-26","cited_by_count":6,"area":null},{"id":"2504.20829","title":"GaussTrap: Stealthy Poisoning Attacks on 3D Gaussian Splatting for Targeted Scene Confusion","created":"2025-04-29","cited_by_count":6,"area":"safety"},{"id":"2402.18945","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","created":"2024-02-29","cited_by_count":5,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2407.08956","title":"Defending Code Language Models against Backdoor Attacks with Deceptive Cross-Entropy Loss","created":"2024-07-12","cited_by_count":5,"area":"safety"},{"id":"2508.20032","title":"Pruning Strategies for Backdoor Defense in LLMs","created":"2025-08-27","cited_by_count":5,"area":"safety"},{"id":"2302.06801","title":"Backdoor Learning for NLP: Recent Advances, Challenges, and Future Research Directions","created":"2023-02-14","cited_by_count":4,"area":"safety"},{"id":"2310.09795","title":"AFLOW: Developing Adversarial Examples under Extremely Noise-limited Settings","created":"2023-10-15","cited_by_count":4,"area":null},{"id":"2111.14309","title":"A General Framework for Defending Against Backdoor Attacks via Influence Graph","created":"2021-11-29","cited_by_count":3,"area":null},{"id":"2402.07689","title":"OrderBkd: Textual backdoor attack through repositioning","created":"2024-02-12","cited_by_count":3,"area":"safety"},{"id":"2405.11575","title":"SEEP: Training Dynamics Grounds Latent Representation Search for Mitigating Backdoor Poisoning Attacks","created":"2024-05-19","cited_by_count":3,"area":null},{"id":"2510.04347","title":"Unmasking Backdoors: An Explainable Defense via Gradient-Attention Anomaly Scoring for Pre-trained Language Models","created":"2025-10-05","cited_by_count":3,"area":"safety"},{"id":"2602.04195","title":"Semantic Consensus Decoding: Backdoor Defense for Verilog Code Generation","created":"2026-02-04","cited_by_count":3,"area":"safety"},{"id":"2210.11082","title":"Apple of Sodom: Hidden Backdoors in Superior Sentence Embeddings via Contrastive Learning","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2504.17300","title":"The Ultimate Cookbook for Invisible Poison: Crafting Subtle Clean-Label Text Backdoors with Style Attributes","created":"2025-04-24","cited_by_count":2,"area":"safety"},{"id":"2505.03501","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2310.00648","title":"PETA: Parameter-Efficient Trojan Attacks","created":"2023-10-01","cited_by_count":1,"area":"safety"},{"id":"2410.04823","title":"CAT: Concept-level backdoor ATtacks for Concept Bottleneck Models","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2505.11586","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2605.15172","title":"MetaBackdoor: Exploiting Positional Encoding as a Backdoor Attack Surface in LLMs","created":"2026-05-14","cited_by_count":1,"area":"safety"},{"id":"2607.15267","title":"Pretraining Data Can Be Poisoned through Computational Propaganda","created":"2026-07-16","cited_by_count":1,"area":null},{"id":"2211.05371","title":"MSDT: Masked Language Model Scoring Defense in Text Domain","created":"2022-11-10","cited_by_count":0,"area":"safety"},{"id":"2407.14573","title":"Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimization","created":"2024-07-21","cited_by_count":0,"area":null},{"id":"2507.11092","title":"MT4DP: Data Poisoning Attack Detection for DL-based Code Search Models via Metamorphic Testing","created":"2025-07-15","cited_by_count":0,"area":"safety"},{"id":"2509.05318","title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models","created":"2025-08-30","cited_by_count":0,"area":"safety"},{"id":"2603.17174","title":"Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2605.09397","title":"BadDLM: Backdooring Diffusion Language Models with Diverse Targets","created":"2026-05-10","cited_by_count":0,"area":"diffusion"},{"id":"2606.27511","title":"When the Aggregator Cheats: Data-Free Backdoors in Federated LLM-based QA Systems","created":"2026-06-25","cited_by_count":0,"area":"safety"}],"next_cursor":null}