{"total":51,"rows":[{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2208.11857","title":"Shortcut Learning of Large Language Models in Natural Language Understanding","created":"2022-08-25","cited_by_count":85,"area":null},{"id":"2305.17256","title":"Large Language Models Can be Lazy Learners: Analyze Shortcuts in In-Context Learning","created":"2023-05-26","cited_by_count":69,"area":null},{"id":"2204.05239","title":"Exploring the Universal Vulnerability of Prompt-based Learning Paradigm","created":"2022-04-11","cited_by_count":57,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2304.02786","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","created":"2023-04-05","cited_by_count":46,"area":null},{"id":"2110.15317","title":"Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Framework","created":"2021-10-28","cited_by_count":28,"area":null},{"id":"2303.02242","title":"TrojText: Test-time Invisible Textual Trojan Insertion","created":"2023-03-03","cited_by_count":28,"area":null},{"id":"2305.14910","title":"From Shortcuts to Triggers: Backdoor Defense with Denoised PoE","created":"2023-05-24","cited_by_count":27,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2403.17155","title":"Task-Agnostic Detector for Insertion-Based Backdoor Attacks","created":"2024-03-25","cited_by_count":23,"area":null},{"id":"2211.03117","title":"Going In Style: Audio Backdoors Through Stylistic Transformations","created":"2022-11-06","cited_by_count":21,"area":null},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21,"area":null},{"id":"2306.15261","title":"A Survey on Out-of-Distribution Evaluation of Neural NLP Models","created":"2023-06-27","cited_by_count":20,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2410.02195","title":"BACKTIME: Backdoor Attacks on Multivariate Time Series Forecasting","created":"2024-10-03","cited_by_count":18,"area":null},{"id":"2506.11113","title":"Breaking the Reviewer: Assessing the Vulnerability of Large Language Models in Automated Peer Review Under Textual Adversarial Attacks","created":"2025-06-08","cited_by_count":16,"area":null},{"id":"2504.12691","title":"Why and How LLMs Hallucinate: Connecting the Dots with Subsequence Associations","created":"2025-04-17","cited_by_count":15,"area":null},{"id":"2211.15929","title":"Backdoor Vulnerabilities in Normally Trained Deep Learning Models","created":"2022-11-29","cited_by_count":13,"area":null},{"id":"2210.00108","title":"ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks","created":"2022-09-30","cited_by_count":9,"area":null},{"id":"2409.14119","title":"Obliviate: Neutralizing Task-agnostic Backdoors within the Parameter-efficient Fine-tuning Paradigm","created":"2024-09-21","cited_by_count":9,"area":null},{"id":"2410.02182","title":"BadCM: Invisible Backdoor Attack Against Cross-Modal Learning","created":"2024-10-03","cited_by_count":9,"area":null},{"id":"2411.02018","title":"Shortcut Learning in In-Context Learning: A Survey","created":"2024-11-04","cited_by_count":8,"area":null},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2503.19099","title":"Masks and Mimicry: Strategic Obfuscation and Impersonation Attacks on Authorship Verification","created":"2025-03-24","cited_by_count":7,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2205.09891","title":"Interpolating Compressed Parameter Subspaces","created":"2022-05-19","cited_by_count":3,"area":null},{"id":"2305.18503","title":"From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Framework","created":"2023-05-29","cited_by_count":3,"area":null},{"id":"2306.05659","title":"COVER: A Heuristic Greedy Adversarial Attack on Prompt-based Learning in Language Models","created":"2023-06-09","cited_by_count":3,"area":null},{"id":"2311.09428","title":"Beyond Detection: Unveiling Fairness Vulnerabilities in Abusive Language Models","created":"2023-11-15","cited_by_count":3,"area":null},{"id":"2401.11373","title":"Finding a Needle in the Adversarial Haystack: A Targeted Paraphrasing Approach For Uncovering Edge Cases with Minimal Distribution Distortion","created":"2024-01-21","cited_by_count":3,"area":null},{"id":"2409.15126","title":"UTrace: Poisoning Forensics for Private Collaborative Learning","created":"2024-09-23","cited_by_count":3,"area":null},{"id":"2501.01473","title":"Unraveling Indirect In-Context Learning Using Influence Functions","created":"2025-01-01","cited_by_count":3,"area":null},{"id":"2210.07916","title":"Style Transfer as Data Augmentation: A Case Study on Named Entity Recognition","created":"2022-10-14","cited_by_count":2,"area":null},{"id":"2405.11904","title":"A Constraint-Enforcing Reward for Adversarial Attacks on Text Classifiers","created":"2024-05-20","cited_by_count":2,"area":null},{"id":"2408.00728","title":"CERT-ED: Certifiably Robust Text Classification for Edit Distance","created":"2024-08-01","cited_by_count":2,"area":null},{"id":"2408.13985","title":"TF-Attack: Transferable and Fast Adversarial Attacks on Large Language Models","created":"2024-08-26","cited_by_count":2,"area":null},{"id":"2504.06669","title":"NLP Security and Ethics, in the Wild","created":"2025-04-09","cited_by_count":2,"area":null},{"id":"2310.01452","title":"Fooling the Textual Fooler via Randomizing Latent Representations","created":"2023-10-02","cited_by_count":1,"area":null},{"id":"2404.06838","title":"Simpler becomes Harder: Do LLMs Exhibit a Coherent Behavior on Simplified Corpora?","created":"2024-04-10","cited_by_count":1,"area":null},{"id":"2408.11189","title":"Emotional RAG LLMs: Reading Comprehension for the Open Internet","created":"2024-08-20","cited_by_count":1,"area":null},{"id":"2411.18648","title":"MADE: Graph Backdoor Defense with Masked Unlearning","created":"2024-11-26","cited_by_count":1,"area":null},{"id":"2412.10617","title":"BinarySelect to Improve Accessibility of Black-Box Attack Research","created":"2024-12-13","cited_by_count":1,"area":null},{"id":"2504.10551","title":"MiMu: Mitigating Multiple Shortcut Learning Behavior of Transformers","created":"2025-04-14","cited_by_count":1,"area":null},{"id":"2506.23799","title":"KAIROS: Scalable Model-Agnostic Data Valuation","created":"2025-06-30","cited_by_count":1,"area":null},{"id":"2605.27631","title":"Poison with Style: A Practical Poisoning Attack on Code Large Language Models","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2402.02418","title":"eXplainable Bayesian Multi-Perspective Generative Retrieval","created":"2024-02-04","cited_by_count":0,"area":null},{"id":"2407.16737","title":"A Survey of Text Style Transfer: Applications and Ethical Implications","created":"2024-07-23","cited_by_count":0,"area":null},{"id":"2509.20691","title":"RedHerring Attack: Testing the Reliability of Attack Detection","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2510.13570","title":"Selective Adversarial Attacks on LLM Benchmarks","created":"2025-10-15","cited_by_count":0,"area":null}],"next_cursor":null}