{"total":65,"rows":[{"id":"2403.14720","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","created":"2024-03-20","cited_by_count":267,"area":"safety"},{"id":"2312.14197","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","created":"2023-12-21","cited_by_count":264,"area":"safety"},{"id":"2310.20150","title":"Unlearn What You Want to Forget: Efficient Unlearning for LLMs","created":"2023-10-31","cited_by_count":215,"area":"safety"},{"id":"2305.15060","title":"Who Wrote this Code? Watermarking for Code Generation","created":"2023-05-24","cited_by_count":141,"area":"safety"},{"id":"2402.10058","title":"Towards Safer Large Language Models through Machine Unlearning","created":"2024-02-15","cited_by_count":139,"area":"safety"},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2402.13494","title":"GradSafe: Detecting Jailbreak Prompts for LLMs via Safety-Critical Gradient Analysis","created":"2024-02-21","cited_by_count":96,"area":"safety"},{"id":"2403.03329","title":"Guardrail Baselines for Unlearning in LLMs","created":"2024-03-05","cited_by_count":96,"area":"safety"},{"id":"2301.12867","title":"Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity","created":"2023-01-30","cited_by_count":89,"area":"safety"},{"id":"2310.12505","title":"Attack Prompt Generation for Red Teaming and Defending Large Language Models","created":"2023-10-19","cited_by_count":76,"area":"safety"},{"id":"2402.16459","title":"Defending LLMs against Jailbreaking Attacks via Backtranslation","created":"2024-02-26","cited_by_count":70,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2307.03941","title":"Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutions","created":"2023-07-08","cited_by_count":60,"area":"safety"},{"id":"2307.08487","title":"Latent Jailbreak: A Benchmark for Evaluating Text Safety and Output Robustness of Large Language Models","created":"2023-07-17","cited_by_count":60,"area":"safety"},{"id":"2310.15007","title":"Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models","created":"2023-10-23","cited_by_count":56,"area":"safety"},{"id":"2305.19713","title":"Red Teaming Language Model Detectors with Language Models","created":"2023-05-31","cited_by_count":55,"area":"safety"},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2405.03097","title":"To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models","created":"2024-05-06","cited_by_count":43,"area":"safety"},{"id":"2504.10957","title":"When is Task Vector Provably Effective for Model Editing? A Generalization Analysis of Nonlinear Transformers","created":"2025-04-15","cited_by_count":38,"area":"safety"},{"id":"2403.01251","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","created":"2024-03-02","cited_by_count":37,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2209.03118","title":"The Ethical Need for Watermarks in Machine-Generated Language","created":"2022-09-07","cited_by_count":32,"area":"safety"},{"id":"2305.17444","title":"Query-Efficient Black-Box Red Teaming via Bayesian Optimization","created":"2023-05-27","cited_by_count":32,"area":"safety"},{"id":"2311.09433","title":"Trojan Activation Attack: Red-Teaming Large Language Models using Activation Steering for Safety-Alignment","created":"2023-11-15","cited_by_count":30,"area":"safety"},{"id":"2304.13169","title":"SAFE: Machine Unlearning With Shard Graphs","created":"2023-04-25","cited_by_count":28,"area":"safety"},{"id":"2408.05868","title":"LaWa: Using Latent Space for In-Generation Image Watermarking","created":"2024-08-11","cited_by_count":28,"area":"safety"},{"id":"2402.14845","title":"Purifying Large Language Models by Ensembling a Small Language Model","created":"2024-02-19","cited_by_count":25,"area":"safety"},{"id":"2406.10952","title":"Avoiding Copyright Infringement via Large Language Model Unlearning","created":"2024-06-16","cited_by_count":24,"area":"safety"},{"id":"2409.00089","title":"Watermarking Techniques for Large Language Models: A Survey","created":"2024-08-26","cited_by_count":23,"area":"safety"},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2411.15477","title":"Towards Robust Evaluation of Unlearning in LLMs via Data Transformations","created":"2024-11-23","cited_by_count":20,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2406.10218","title":"Semantic Membership Inference Attack against Large Language Models","created":"2024-06-14","cited_by_count":17,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2311.09816","title":"Downstream Trade-offs of a Family of Text Watermarks","created":"2023-11-16","cited_by_count":14,"area":"safety"},{"id":"2503.08195","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","created":"2025-03-11","cited_by_count":14,"area":"safety"},{"id":"2312.07130","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","created":"2023-12-12","cited_by_count":12,"area":"safety"},{"id":"2402.16578","title":"Multi-Bit Distortion-Free Watermarking for Large Language Models","created":"2024-02-26","cited_by_count":11,"area":"safety"},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2503.02776","title":"Implicit Bias in LLMs: A Survey","created":"2025-03-04","cited_by_count":8,"area":"safety"},{"id":"2308.07847","title":"Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models","created":"2023-08-15","cited_by_count":7,"area":"safety"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2311.09668","title":"Improving the Generation Quality of Watermarked Large Language Models via Word Importance Scoring","created":"2023-11-16","cited_by_count":6,"area":"safety"},{"id":"2412.13475","title":"A Statistical and Multi-Perspective Revisiting of the Membership Inference Attack in Large Language Models","created":"2024-12-18","cited_by_count":6,"area":"safety"},{"id":"2502.19207","title":"FaithUn: Toward Faithful Forgetting in Language Models by Investigating the Interconnectedness of Knowledge","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2601.00590","title":"SafeMo: Linguistically Grounded Unlearning for Trustworthy Text-to-Motion Generation","created":"2026-01-02","cited_by_count":6,"area":"safety"},{"id":"2304.14364","title":"CONSCENDI: A Contrastive and Scenario-Guided Distillation Approach to Guardrail Models for Virtual Assistants","created":"2023-04-27","cited_by_count":5,"area":"safety"},{"id":"2506.06384","title":"Detection Method for Prompt Injection by Integrating Pre-trained Model and Heuristic Feature Engineering","created":"2025-06-05","cited_by_count":5,"area":"safety"},{"id":"2503.11324","title":"Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking","created":"2025-03-14","cited_by_count":4,"area":"safety"},{"id":"2508.13214","title":"Too Easily Fooled? Prompt Injection Breaks LLMs on Frustratingly Simple Multiple-Choice Questions","created":"2025-08-16","cited_by_count":4,"area":"safety"},{"id":"2502.05772","title":"Effective Black-Box Multi-Faceted Attacks Breach Vision Large Language Model Guardrails","created":"2025-02-09","cited_by_count":3,"area":"safety"},{"id":"2406.04478","title":"PromptFix: Few-shot Backdoor Removal via Adversarial Prompt Tuning","created":"2024-06-06","cited_by_count":2,"area":"safety"},{"id":"2503.05721","title":"What Are They Filtering Out? An Experimental Benchmark of Filtering Strategies for Harm Reduction in Pretraining Datasets","created":"2025-02-17","cited_by_count":2,"area":"safety"},{"id":"2505.03501","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2407.04179","title":"Defense Against Syntactic Textual Backdoor Attacks with Token Substitution","created":"2024-07-04","cited_by_count":1,"area":"safety"},{"id":"2504.13052","title":"GraphAttack: Exploiting Representational Blindspots in LLM Safety Mechanisms","created":"2025-04-17","cited_by_count":1,"area":"safety"},{"id":"2505.05712","title":"LLM-Text Watermarking based on Lagrange Interpolation","created":"2025-05-09","cited_by_count":1,"area":"safety"},{"id":"2606.25476","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2311.10236","title":"Latent Feature-based Data Splits to Improve Generalisation Evaluation: A Hate Speech Detection Case Study","created":"2023-11-16","cited_by_count":0,"area":"safety"},{"id":"2511.05532","title":"Beyond One-Size-Fits-All: Personalized Harmful Content Detection with In-Context Learning","created":"2025-10-29","cited_by_count":0,"area":"safety"},{"id":"2603.15692","title":"BadLLM-TG: A Backdoor Defender powered by LLM Trigger Generator","created":"2026-03-16","cited_by_count":0,"area":"safety"},{"id":"2606.27632","title":"Yuvion LLM: An Adversarially-Aware Large Language Model for Content And AI Safety","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2607.16227","title":"LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats","created":"2026-06-23","cited_by_count":0,"area":"safety"},{"id":"2607.16648","title":"Synchronization-Free Algebraic Fingerprints for Large Language Models: From Autoregressive to Diffusion Models","created":"2026-07-18","cited_by_count":0,"area":"safety"}],"next_cursor":null}