{"total":15,"rows":[{"id":"2306.09194","title":"Undetectable Watermarks for Language Models","created":"2023-05-25","cited_by_count":226,"area":"safety"},{"id":"2307.14692","title":"Backdoor Attacks for In-Context Learning with Language Models","created":"2023-07-27","cited_by_count":96,"area":"safety"},{"id":"2205.01992","title":"Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning","created":"2022-05-04","cited_by_count":94,"area":"safety"},{"id":"2310.18933","title":"Label Poisoning is All You Need","created":"2023-10-29","cited_by_count":29,"area":"safety"},{"id":"2302.12461","title":"Analyzing And Editing Inner Mechanisms Of Backdoored Language Models","created":"2023-02-24","cited_by_count":23,"area":"safety"},{"id":"2307.10163","title":"Rethinking Backdoor Attacks","created":"2023-07-19","cited_by_count":14,"area":"safety"},{"id":"2406.02619","title":"Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuits","created":"2024-06-03","cited_by_count":4,"area":"safety"},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2305.09671","title":"Pick your Poison: Undetectability versus Robustness in Data Poisoning Attacks","created":"2023-05-07","cited_by_count":1,"area":"safety"},{"id":"2503.17578","title":"Large Language Models Can Verbatim Reproduce Long Malicious Sequences","created":"2025-03-21","cited_by_count":1,"area":"safety"},{"id":"2411.13047","title":"Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors","created":"2024-11-20","cited_by_count":0,"area":"safety"},{"id":"2505.08138","title":"Mirror Mirror on the Wall, Have I Forgotten it All? A New Framework for Evaluating Machine Unlearning","created":"2025-05-13","cited_by_count":0,"area":"safety"},{"id":"2609.21515","title":"ServeGuard: Verifiable, Bounded-Residual Confinement of Operator-Invisible Channels Without Revealing the Certified Read Factor","created":"2026-09-18","cited_by_count":0,"area":"safety"},{"id":"2609.39768","title":"Security Properties of Neural Networks as Decision Problems","created":"2026-09-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}