{"total":41,"rows":[{"id":"2310.12815","title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses","created":"2023-10-19","cited_by_count":364,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2303.15180","title":"Detecting Backdoors in Pre-trained Encoders","created":"2023-03-23","cited_by_count":55,"area":"safety"},{"id":"2202.05749","title":"Constrained Optimization with Dynamic Bound-scaling for Effective NLPBackdoor Defense","created":"2022-02-11","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2310.14480","title":"Attention-Enhancing Backdoor Attacks Against BERT-based Models","created":"2023-10-23","cited_by_count":32,"area":"safety"},{"id":"2302.04116","title":"Training-free Lexical Backdoor Attacks on Language Models","created":"2023-02-08","cited_by_count":31,"area":"safety"},{"id":"2306.08350","title":"Multi-target Backdoor Attacks for Code Pre-trained Models","created":"2023-06-14","cited_by_count":23,"area":"safety"},{"id":"2308.02122","title":"ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP","created":"2023-08-04","cited_by_count":19,"area":"safety"},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2311.11225","title":"TextGuard: Provable Defense against Backdoor Attacks on Text Classification","created":"2023-11-19","cited_by_count":16,"area":"safety"},{"id":"2211.11958","title":"A Survey on Backdoor Attack and Defense in Natural Language Processing","created":"2022-11-22","cited_by_count":14,"area":"safety"},{"id":"2310.18603","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","created":"2023-10-28","cited_by_count":14,"area":"safety"},{"id":"2409.01193","title":"CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models","created":"2024-09-02","cited_by_count":13,"area":"safety"},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2305.09574","title":"UOR: Universal Backdoor Attacks on Pre-trained Language Models","created":"2023-05-16","cited_by_count":8,"area":"safety"},{"id":"2408.10722","title":"MEGen: Generative Backdoor into Large Language Models via Model Editing","created":"2024-08-20","cited_by_count":8,"area":"safety"},{"id":"2302.14500","title":"FreeEagle: Detecting Complex Neural Trojans in Data-Free Cases","created":"2023-02-28","cited_by_count":7,"area":"safety"},{"id":"2505.23561","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2503.05445","title":"Are Your LLM-based Text-to-SQL Models Secure? Exploring SQL Injection via Backdoor Attacks","created":"2025-03-07","cited_by_count":6,"area":"safety"},{"id":"2312.15867","title":"Punctuation Matters! Stealthy Backdoor Attack for Language Models","created":"2023-12-26","cited_by_count":5,"area":"safety"},{"id":"2402.18945","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","created":"2024-02-29","cited_by_count":5,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2310.07632","title":"Prompt Backdoors in Visual Prompt Learning","created":"2023-10-11","cited_by_count":4,"area":"safety"},{"id":"2402.14977","title":"Mudjacking: Patching Backdoor Vulnerabilities in Foundation Models","created":"2024-02-22","cited_by_count":4,"area":"safety"},{"id":"2512.06899","title":"Patronus: Identifying and Mitigating Transferable Backdoors in Pre-trained Language Models","created":"2025-12-07","cited_by_count":4,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2210.11082","title":"Apple of Sodom: Hidden Backdoors in Superior Sentence Embeddings via Contrastive Learning","created":"2022-10-20","cited_by_count":2,"area":"safety"},{"id":"2406.04478","title":"PromptFix: Few-shot Backdoor Removal via Adversarial Prompt Tuning","created":"2024-06-06","cited_by_count":2,"area":"safety"},{"id":"2310.00648","title":"PETA: Parameter-Efficient Trojan Attacks","created":"2023-10-01","cited_by_count":1,"area":"safety"},{"id":"2603.12089","title":"EmbTracker: Traceable Black-box Watermarking for Federated Language Models","created":"2026-03-12","cited_by_count":1,"area":"safety"},{"id":"2309.13579","title":"Seeing Is Not Always Believing: Invisible Collision Attack and Defence on Pre-Trained Models","created":"2023-09-24","cited_by_count":0,"area":"safety"},{"id":"2409.10570","title":"Protecting Copyright of Medical Pre-trained Language Models: Training-Free Backdoor Model Watermarking","created":"2024-09-14","cited_by_count":0,"area":"safety"},{"id":"2605.31246","title":"BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning","created":"2026-05-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}