{"total":57,"rows":[{"id":"2205.12548","title":"RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learning","created":"2022-05-25","cited_by_count":366,"area":null},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2312.17673","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","created":"2023-12-29","cited_by_count":106,"area":"safety"},{"id":"2311.10081","title":"DRESS: Instructing Large Vision-Language Models to Align and Interact with Humans via Natural Language Feedback","created":"2023-11-16","cited_by_count":103,"area":"mllm"},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2305.01219","title":"Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Models","created":"2023-05-02","cited_by_count":94,"area":"safety"},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2401.12242","title":"BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models","created":"2024-01-20","cited_by_count":80,"area":"lr"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2211.14719","title":"BadPrompt: Backdoor Attacks on Continuous Prompts","created":"2022-11-27","cited_by_count":63,"area":"safety"},{"id":"2302.04237","title":"Black Box Adversarial Prompting for Foundation Models","created":"2023-02-08","cited_by_count":62,"area":"safety"},{"id":"2401.05949","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","created":"2024-01-11","cited_by_count":53,"area":"safety"},{"id":"2310.12439","title":"PoisonPrompt: Backdoor Attack on Prompt-based Large Language Models","created":"2023-10-19","cited_by_count":42,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2305.17826","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","created":"2023-05-28","cited_by_count":37,"area":"safety"},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2309.13256","title":"Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attacks","created":"2023-09-23","cited_by_count":33,"area":"safety"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2306.06815","title":"TrojLLM: A Black-box Trojan Prompt Attack on Large Language Models","created":"2023-06-12","cited_by_count":31,"area":null},{"id":"2402.10882","title":"Universal Prompt Optimizer for Safe Text-to-Image Generation","created":"2024-02-16","cited_by_count":28,"area":null},{"id":"2306.13103","title":"Evaluating the Robustness of Text-to-image Diffusion Models against Real-world Attacks","created":"2023-06-16","cited_by_count":24,"area":"diffusion"},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2308.02122","title":"ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP","created":"2023-08-04","cited_by_count":19,"area":"safety"},{"id":"2402.12168","title":"Defending Against Weight-Poisoning Backdoor Attacks for Parameter-Efficient Fine-Tuning","created":"2024-02-19","cited_by_count":16,"area":null},{"id":"2209.01882","title":"PromptAttack: Prompt-based Attack for Language Models via Gradient Search","created":"2022-09-05","cited_by_count":15,"area":null},{"id":"2410.04772","title":"From Transparency to Accountability and Back: A Discussion of Access and Evidence in AI Auditing","created":"2024-10-07","cited_by_count":15,"area":null},{"id":"2404.19597","title":"TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuning","created":"2024-04-30","cited_by_count":14,"area":"safety"},{"id":"2407.11282","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","created":"2024-07-15","cited_by_count":13,"area":"safety"},{"id":"2307.12980","title":"A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models","created":"2023-07-24","cited_by_count":12,"area":"mllm"},{"id":"2308.13904","title":"LMSanitator: Defending Prompt-Tuning Against Task-Agnostic Backdoors","created":"2023-08-26","cited_by_count":9,"area":"safety"},{"id":"2312.04748","title":"Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attacks","created":"2023-12-07","cited_by_count":9,"area":"safety"},{"id":"2407.12281","title":"Turning Generative Models Degenerate: The Power of Data Poisoning Attacks","created":"2024-07-17","cited_by_count":9,"area":"safety"},{"id":"2412.11934","title":"Stepwise Reasoning Error Disruption Attack of LLMs","created":"2024-12-16","cited_by_count":8,"area":"lr"},{"id":"2506.06518","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2211.07730","title":"QueryForm: A Simple Zero-shot Form Entity Query Framework","created":"2022-11-14","cited_by_count":7,"area":null},{"id":"2304.03609","title":"Revisiting Automated Prompting: Are We Actually Doing Better?","created":"2023-04-07","cited_by_count":7,"area":null},{"id":"2306.10645","title":"Developing Effective Educational Chatbots with ChatGPT prompts: Insights from Preliminary Tests in a Case Study on Social Media Literacy (with appendix)","created":"2023-06-18","cited_by_count":6,"area":null},{"id":"2307.01540","title":"Learning to Prompt in the Classroom to Understand AI Limits: A pilot study","created":"2023-07-04","cited_by_count":6,"area":null},{"id":"2510.18541","title":"Pay Attention to the Triggers: Constructing Backdoors That Survive Distillation","created":"2025-10-21","cited_by_count":6,"area":"distill"},{"id":"2405.15269","title":"Test-Time Multimodal Backdoor Detection by Contrastive Prompting","created":"2024-05-24","cited_by_count":5,"area":"safety"},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2410.21337","title":"Fine-tuned Large Language Models (LLMs): Improved Prompt Injection Attacks Detection","created":"2024-10-28","cited_by_count":5,"area":"safety"},{"id":"2601.06305","title":"Why LoRA Fails to Forget: Regularized Low-Rank Adaptation Against Backdoors in Language Models","created":"2026-01-09","cited_by_count":4,"area":"safety"},{"id":"2306.05659","title":"COVER: A Heuristic Greedy Adversarial Attack on Prompt-based Learning in Language Models","created":"2023-06-09","cited_by_count":3,"area":null},{"id":"2311.17429","title":"TARGET: Template-Transferable Backdoor Attack Against Prompt-based NLP Models via GPT4","created":"2023-11-29","cited_by_count":3,"area":"safety"},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2502.12630","title":"Automating Prompt Leakage Attacks on Large Language Models Using Agentic Approach","created":"2025-02-18","cited_by_count":3,"area":"agents"},{"id":"2409.17946","title":"Breaking PEFT Limitations: Leveraging Weak-to-Strong Knowledge Transfer for Backdoor Attacks in LLMs","created":"2024-09-26","cited_by_count":2,"area":"safety"},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2510.14381","title":"Are My Optimized Prompts Compromised? Exploring Vulnerabilities of LLM-based Optimizers","created":"2025-10-16","cited_by_count":2,"area":null},{"id":"2310.00648","title":"PETA: Parameter-Efficient Trojan Attacks","created":"2023-10-01","cited_by_count":1,"area":"safety"},{"id":"2408.02651","title":"Can Reinforcement Learning Unlock the Hidden Dangers in Aligned Large Language Models?","created":"2024-08-05","cited_by_count":1,"area":"alignment"},{"id":"2506.23107","title":"Can Large Language Models Capture Human Risk Preferences? A Cross-Cultural Study","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2510.09260","title":"GREAT: Generalizable Backdoor Attacks in RLHF via Emotion-Aware Trigger Synthesis","created":"2025-10-10","cited_by_count":1,"area":"alignment"},{"id":"2404.00461","title":"Shortcuts Arising from Contrast: Effective and Covert Clean-Label Attacks in Prompt-Based Learning","created":"2024-03-30","cited_by_count":0,"area":"safety"},{"id":"2512.12154","title":"Keep the Lights On, Keep the Lengths in Check: Plug-In Adversarial Detection for Time-Series LLMs in Energy Forecasting","created":"2025-12-13","cited_by_count":0,"area":null}],"next_cursor":null}