{"total":133,"rows":[{"id":"2210.01504","title":"Knowledge Unlearning for Mitigating Privacy Risks in Language Models","created":"2022-10-04","cited_by_count":437,"area":"safety"},{"id":"2303.13408","title":"Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense","created":"2023-03-23","cited_by_count":429,"area":"safety"},{"id":"2303.11156","title":"Can AI-Generated Text be Reliably Detected?","created":"2023-03-17","cited_by_count":386,"area":"safety"},{"id":"2310.10683","title":"Large Language Model Unlearning","created":"2023-10-14","cited_by_count":302,"area":"safety"},{"id":"2306.17439","title":"Provable Robust Watermarking for AI-Generated Text","created":"2023-06-30","cited_by_count":299,"area":"safety"},{"id":"2312.14197","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","created":"2023-12-21","cited_by_count":264,"area":"safety"},{"id":"2205.13636","title":"Quark: Controllable Text Generation with Reinforced Unlearning","created":"2022-05-26","cited_by_count":237,"area":"safety"},{"id":"2306.04634","title":"On the Reliability of Watermarks for Large Language Models","created":"2023-06-07","cited_by_count":189,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2402.10058","title":"Towards Safer Large Language Models through Machine Unlearning","created":"2024-02-15","cited_by_count":139,"area":"safety"},{"id":"2305.00118","title":"Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4","created":"2023-04-28","cited_by_count":125,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2406.07933","title":"Large Language Model Unlearning via Embedding-Corrupted Prompts","created":"2024-06-12","cited_by_count":116,"area":"safety"},{"id":"2310.06356","title":"A Semantic Invariant Robust Watermark for Large Language Models","created":"2023-10-10","cited_by_count":112,"area":"safety"},{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2404.18239","title":"SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning","created":"2024-04-28","cited_by_count":104,"area":"safety"},{"id":"2405.10051","title":"MarkLLM: An Open-Source Toolkit for LLM Watermarking","created":"2024-05-16","cited_by_count":95,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2311.08721","title":"A Robust Semantics-based Watermark for Large Language Model against Paraphrasing","created":"2023-11-15","cited_by_count":82,"area":"safety"},{"id":"2310.18491","title":"Publicly-Detectable Watermarking for Language Models","created":"2023-10-27","cited_by_count":76,"area":"safety"},{"id":"2403.13485","title":"An Entropy-based Text Watermarking Detection Method","created":"2024-03-20","cited_by_count":75,"area":"safety"},{"id":"2410.11143","title":"LLM Unlearning via Loss Adjustment with Only Forget Data","created":"2024-10-14","cited_by_count":75,"area":"safety"},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73,"area":"safety"},{"id":"2401.13927","title":"Adaptive Text Watermark for Large Language Models","created":"2024-01-25","cited_by_count":67,"area":"safety"},{"id":"2307.16230","title":"An Unforgeable Publicly Verifiable Watermark for Large Language Models","created":"2023-07-30","cited_by_count":65,"area":"safety"},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2308.00221","title":"Advancing Beyond Identification: Multi-bit Watermark for Large Language Models","created":"2023-08-01","cited_by_count":57,"area":"safety"},{"id":"2307.15992","title":"Towards Codable Watermarking for Injecting Multi-bits Information to LLMs","created":"2023-07-29","cited_by_count":54,"area":"safety"},{"id":"2403.04808","title":"WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off","created":"2024-03-06","cited_by_count":54,"area":"safety"},{"id":"2401.05949","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","created":"2024-01-11","cited_by_count":53,"area":"safety"},{"id":"2402.11399","title":"k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text","created":"2024-02-17","cited_by_count":51,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2305.14965","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","created":"2023-05-24","cited_by_count":49,"area":"safety"},{"id":"2406.12038","title":"Soft Prompting for Unlearning in Large Language Models","created":"2024-06-17","cited_by_count":46,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2403.01267","title":"Dissecting Language Models: Machine Unlearning via Selective Pruning","created":"2024-03-02","cited_by_count":42,"area":"safety"},{"id":"2402.18059","title":"Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models","created":"2024-02-28","cited_by_count":34,"area":"safety"},{"id":"2308.08090","title":"Separate the Wheat from the Chaff: Model Deficiency Unlearning via Parameter-Efficient Module Operation","created":"2023-08-16","cited_by_count":33,"area":"safety"},{"id":"2305.17444","title":"Query-Efficient Black-Box Red Teaming via Bayesian Optimization","created":"2023-05-27","cited_by_count":32,"area":"safety"},{"id":"2406.14517","title":"PostMark: A Robust Blackbox Watermark for Large Language Models","created":"2024-06-20","cited_by_count":29,"area":"safety"},{"id":"2309.13322","title":"From Text to Source: Results in Detecting Large Language Model-Generated Content","created":"2023-09-23","cited_by_count":26,"area":"safety"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2406.01946","title":"Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature","created":"2024-06-04","cited_by_count":25,"area":"safety"},{"id":"2505.11541","title":"MorphMark: Flexible Adaptive Watermarking for Large Language Models","created":"2025-05-14","cited_by_count":24,"area":"safety"},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2410.02890","title":"Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach","created":"2024-10-03","cited_by_count":22,"area":"safety"},{"id":"2404.11262","title":"Sampling-based Pseudo-Likelihood for Membership Inference Attacks","created":"2024-04-17","cited_by_count":20,"area":"safety"},{"id":"2310.00833","title":"Necessary and Sufficient Watermark for Large Language Models","created":"2023-10-02","cited_by_count":19,"area":"safety"},{"id":"2401.15241","title":"Unlearning Traces the Influential Training Data of Language Models","created":"2024-01-26","cited_by_count":18,"area":"safety"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2505.05190","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","created":"2025-05-08","cited_by_count":18,"area":"safety"},{"id":"2505.13312","title":"GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection","created":"2025-05-19","cited_by_count":17,"area":"safety"},{"id":"2403.13027","title":"Towards Better Statistical Understanding of Watermarking LLMs","created":"2024-03-19","cited_by_count":16,"area":"safety"},{"id":"2509.21057","title":"PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints","created":"2025-09-25","cited_by_count":16,"area":"safety"},{"id":"2311.09816","title":"Downstream Trade-offs of a Family of Text Watermarks","created":"2023-11-16","cited_by_count":14,"area":"safety"},{"id":"2405.19677","title":"Large Language Model Watermark Stealing With Mixed Integer Programming","created":"2024-05-30","cited_by_count":14,"area":"safety"},{"id":"2406.13348","title":"Textual Unlearning Gives a False Sense of Unlearning","created":"2024-06-19","cited_by_count":13,"area":"safety"},{"id":"2409.01193","title":"CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models","created":"2024-09-02","cited_by_count":13,"area":"safety"},{"id":"2410.03168","title":"Can Watermarked LLMs be Identified by Users via Crafted Prompts?","created":"2024-10-04","cited_by_count":13,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2410.18861","title":"Provably Robust Watermarks for Open-Source Language Models","created":"2024-10-24","cited_by_count":13,"area":"safety"},{"id":"2408.09878","title":"Transferring Backdoors between Large Language Models by Knowledge Distillation","created":"2024-08-19","cited_by_count":12,"area":"safety"},{"id":"2410.02159","title":"Mitigating Memorization In Language Models","created":"2024-10-03","cited_by_count":12,"area":"safety"},{"id":"2402.16578","title":"Multi-Bit Distortion-Free Watermarking for Large Language Models","created":"2024-02-26","cited_by_count":11,"area":"safety"},{"id":"2402.17938","title":"EmMark: Robust Watermarks for IP Protection of Embedded Quantized Large Language Models","created":"2024-02-27","cited_by_count":11,"area":"safety"},{"id":"2506.12551","title":"MEraser: An Effective Fingerprint Erasure Approach for Large Language Models","created":"2025-06-14","cited_by_count":11,"area":"safety"},{"id":"2309.04777","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability","created":"2023-09-09","cited_by_count":10,"area":"safety"},{"id":"2406.10281","title":"Watermarking Language Models with Error Correcting Codes","created":"2024-06-12","cited_by_count":10,"area":"safety"},{"id":"2406.14091","title":"Protecting Privacy Through Approximating Optimal Parameters for Sequence Unlearning in Language Models","created":"2024-06-20","cited_by_count":10,"area":"safety"},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2412.08559","title":"Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearning","created":"2024-12-11","cited_by_count":9,"area":"safety"},{"id":"2507.01321","title":"ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks","created":"2025-07-02","cited_by_count":9,"area":"safety"},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2509.09112","title":"Character-Level Perturbations Disrupt LLM Watermarks","created":"2025-09-11","cited_by_count":9,"area":"safety"},{"id":"2402.01053","title":"Plan-Grounded Large Language Models for Dual Goal Conversational Settings","created":"2024-02-01","cited_by_count":8,"area":"safety"},{"id":"2404.02138","title":"Topic-Based Watermarks for Large Language Models","created":"2024-04-02","cited_by_count":8,"area":"safety"},{"id":"2408.15207","title":"Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attacks","created":"2024-08-27","cited_by_count":8,"area":"safety"},{"id":"2505.17160","title":"Harry Potter is Still Here! Probing Knowledge Leakage in Targeted Unlearned Large Language Models via Automated Adversarial Prompting","created":"2025-05-22","cited_by_count":7,"area":"safety"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2411.03806","title":"Understanding the Effects of Human-written Paraphrases in LLM-generated Text Detection","created":"2024-11-06","cited_by_count":6,"area":"safety"},{"id":"2602.06441","title":"Is Gradient Ascent Really Necessary? Memorize to Forget for Machine Unlearning","created":"2026-02-06","cited_by_count":6,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2407.20271","title":"Learn while Unlearn: An Iterative Unlearning Framework for Generative Language Models","created":"2024-07-25","cited_by_count":5,"area":"safety"},{"id":"2409.14513","title":"Order of Magnitude Speedups for LLM Membership Inference","created":"2024-09-22","cited_by_count":5,"area":"safety"},{"id":"2505.09924","title":"From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models","created":"2025-05-15","cited_by_count":5,"area":"safety"},{"id":"2403.10020","title":"Lost in Overlap: Exploring Logit-based Watermark Collision in LLMs","created":"2024-03-15","cited_by_count":4,"area":"safety"},{"id":"2409.17518","title":"Multi-Designated Detector Watermarking for Language Models","created":"2024-09-26","cited_by_count":4,"area":"safety"},{"id":"2505.02344","title":"An End-to-End Model for Logits-Based Large Language Models Watermarking","created":"2025-05-05","cited_by_count":4,"area":"safety"},{"id":"2511.08905","title":"iSeal: Encrypted Fingerprinting for Reliable LLM Ownership Verification","created":"2025-11-12","cited_by_count":4,"area":"safety"},{"id":"2601.18110","title":"AttenMIA: LLM Membership Inference Attack through Attention Signals","created":"2026-01-26","cited_by_count":4,"area":"safety"},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2408.09459","title":"WPN: An Unlearning Method Based on N-pair Contrastive Learning in Language Models","created":"2024-08-18","cited_by_count":3,"area":"safety"},{"id":"2409.14700","title":"Adaptive and Robust Watermark for Generative Tabular Data","created":"2024-09-23","cited_by_count":3,"area":"safety"},{"id":"2409.19708","title":"A Certified Robust Watermark For Large Language Models","created":"2024-09-29","cited_by_count":3,"area":"safety"},{"id":"2412.21123","title":"ExpShield: Safeguarding Web Text from Unauthorized Crawling and LLM Exploitation","created":"2024-12-30","cited_by_count":3,"area":"safety"},{"id":"2501.12174","title":"BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarks","created":"2025-01-21","cited_by_count":3,"area":"safety"},{"id":"2502.06653","title":"In-Context Learning (and Unlearning) of Length Biases","created":"2025-02-10","cited_by_count":3,"area":"safety"},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2504.12108","title":"Entropy-Guided Watermarking for LLMs: A Test-Time Framework for Robust and Traceable Text Generation","created":"2025-04-16","cited_by_count":3,"area":"safety"}],"next_cursor":"100"}