{"total":228,"rows":[{"id":"2412.05579","title":"LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methods","created":"2024-12-07","cited_by_count":465,"area":null},{"id":"2302.05733","title":"Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attacks","created":"2023-02-11","cited_by_count":278,"area":null},{"id":"2308.11483","title":"Large Language Models Sensitivity to The Order of Options in Multiple-Choice Questions","created":"2023-08-22","cited_by_count":263,"area":null},{"id":"2307.10169","title":"Challenges and Applications of Large Language Models","created":"2023-07-19","cited_by_count":254,"area":null},{"id":"2311.04076","title":"Do LLMs exhibit human-like response biases? A case study in survey design","created":"2023-11-07","cited_by_count":180,"area":null},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2304.00740","title":"Inspecting and Editing Knowledge Representations in Language Models","created":"2023-04-03","cited_by_count":141,"area":null},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2405.06823","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","created":"2024-05-10","cited_by_count":127,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2307.13721","title":"Foundational Models Defining a New Era in Vision: A Survey and Outlook","created":"2023-07-25","cited_by_count":110,"area":null},{"id":"2409.00729","title":"ContextCite: Attributing Model Generation to Context","created":"2024-09-01","cited_by_count":98,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2309.09128","title":"ChainForge: A Visual Toolkit for Prompt Engineering and LLM Hypothesis Testing","created":"2023-09-17","cited_by_count":88,"area":null},{"id":"2304.10436","title":"Safety Assessment of Chinese Large Language Models","created":"2023-04-20","cited_by_count":85,"area":null},{"id":"2307.06865","title":"Effective Prompt Extraction from Language Models","created":"2023-07-13","cited_by_count":85,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2403.06833","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","created":"2024-03-11","cited_by_count":81,"area":null},{"id":"2402.18649","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","created":"2024-02-28","cited_by_count":77,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2501.09674","title":"Authenticated Delegation and Authorized AI Agents","created":"2025-01-16","cited_by_count":65,"area":null},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2407.15847","title":"LLMmap: Fingerprinting For Large Language Models","created":"2024-07-22","cited_by_count":58,"area":null},{"id":"2311.16153","title":"Identifying and Mitigating Vulnerabilities in LLM-Integrated Applications","created":"2023-11-07","cited_by_count":54,"area":null},{"id":"2304.14670","title":"Prompt Engineering for Healthcare: Methodologies and Applications","created":"2023-04-28","cited_by_count":52,"area":null},{"id":"2309.10254","title":"LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Plugins","created":"2023-09-19","cited_by_count":51,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2311.17391","title":"Unveiling the Implicit Toxicity in Large Language Models","created":"2023-11-29","cited_by_count":51,"area":null},{"id":"2307.10719","title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?","created":"2023-07-20","cited_by_count":49,"area":null},{"id":"2306.11932","title":"Opportunities and Risks of LLMs for Scalable Deliberation with Polis","created":"2023-06-20","cited_by_count":42,"area":null},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2304.08979","title":"In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPT","created":"2023-04-18","cited_by_count":37,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2503.05788","title":"Emergent Abilities in Large Language Models: A Survey","created":"2025-02-28","cited_by_count":37,"area":null},{"id":"2305.18339","title":"A Survey on ChatGPT: AI-Generated Contents, Challenges, and Solutions","created":"2023-05-25","cited_by_count":35,"area":null},{"id":"2405.19334","title":"LLMs Meet Multimodal Generation and Editing: A Survey","created":"2024-05-29","cited_by_count":35,"area":null},{"id":"2412.13879","title":"Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settings","created":"2024-12-18","cited_by_count":35,"area":null},{"id":"2308.02575","title":"Is GPT-4 a reliable rater? Evaluating Consistency in GPT-4 Text Ratings","created":"2023-08-03","cited_by_count":34,"area":null},{"id":"2311.00237","title":"The Mystery of In-Context Learning: A Comprehensive Survey on Interpretation and Analysis","created":"2023-11-01","cited_by_count":34,"area":null},{"id":"2311.09447","title":"How Trustworthy are Open-Source LLMs? An Assessment under Malicious Demonstrations Shows their Vulnerabilities","created":"2023-11-15","cited_by_count":33,"area":null},{"id":"2401.03315","title":"Malla: Demystifying Real-world Large Language Model Integrated Malicious Services","created":"2024-01-06","cited_by_count":33,"area":null},{"id":"2407.12824","title":"Whispering Experts: Neural Interventions for Toxicity Mitigation in Language Models","created":"2024-07-02","cited_by_count":32,"area":null},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2406.01394","title":"PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration","created":"2024-06-03","cited_by_count":28,"area":null},{"id":"2402.11725","title":"How Susceptible are Large Language Models to Ideological Manipulation?","created":"2024-02-18","cited_by_count":26,"area":null},{"id":"2307.13912","title":"Embedding Democratic Values into Social Media AIs via Societal Objective Functions","created":"2023-07-26","cited_by_count":25,"area":null},{"id":"2404.06921","title":"GoEX: Perspectives and Designs Towards a Runtime for Autonomous LLM Applications","created":"2024-04-10","cited_by_count":23,"area":null},{"id":"2404.16251","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","created":"2024-04-24","cited_by_count":23,"area":null},{"id":"2310.16270","title":"Attention Lens: A Tool for Mechanistically Interpreting the Attention Head Information Retrieval Mechanism","created":"2023-10-25","cited_by_count":22,"area":null},{"id":"2302.09457","title":"Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspective","created":"2023-02-19","cited_by_count":20,"area":null},{"id":"2312.06056","title":"METAL: Metamorphic Testing Framework for Analyzing Large-Language Model Qualities","created":"2023-12-11","cited_by_count":20,"area":null},{"id":"2404.07242","title":"Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs","created":"2024-04-09","cited_by_count":20,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2406.13843","title":"Generative AI Misuse: A Taxonomy of Tactics and Insights from Real-World Data","created":"2024-06-19","cited_by_count":20,"area":null},{"id":"2407.05216","title":"Large Language Model as an Assignment Evaluator: Insights, Feedback, and Challenges in a 1000+ Student Course","created":"2024-07-07","cited_by_count":19,"area":null},{"id":"2506.22521","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","created":"2025-06-26","cited_by_count":19,"area":null},{"id":"2408.10053","title":"Privacy Checklist: Privacy Violation Detection Grounding on Contextual Integrity Theory","created":"2024-08-19","cited_by_count":18,"area":null},{"id":"2402.02987","title":"Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models","created":"2024-02-05","cited_by_count":16,"area":null},{"id":"2406.06737","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","created":"2024-06-10","cited_by_count":16,"area":null},{"id":"2502.04951","title":"Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search","created":"2025-02-07","cited_by_count":16,"area":null},{"id":"2506.06485","title":"Task Matters: Knowledge Requirements Shape LLM Responses to Context-Memory Conflict","created":"2025-06-06","cited_by_count":16,"area":null},{"id":"2406.18400","title":"Do LLMs dream of elephants (when told not to)? Latent concept association and associative memory in transformers","created":"2024-06-26","cited_by_count":15,"area":null},{"id":"2410.04772","title":"From Transparency to Accountability and Back: A Discussion of Access and Evidence in AI Auditing","created":"2024-10-07","cited_by_count":15,"area":null},{"id":"2302.09270","title":"Towards Safer Generative Language Models: A Survey on Safety Risks, Evaluations, and Improvements","created":"2023-02-18","cited_by_count":14,"area":null},{"id":"2312.12768","title":"Mutual-modality Adversarial Attack with Semantic Perturbation","created":"2023-12-20","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2406.01364","title":"BELLS: A Framework Towards Future Proof Benchmarks for the Evaluation of LLM Safeguards","created":"2024-06-03","cited_by_count":14,"area":null},{"id":"2502.19852","title":"ConvCodeWorld: Benchmarking Conversational Code Generation in Reproducible Feedback Environments","created":"2025-02-27","cited_by_count":14,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2407.11994","title":"Evaluating Contextually Personalized Programming Exercises Created with Generative AI","created":"2024-06-11","cited_by_count":13,"area":null},{"id":"2409.01630","title":"SafeEmbodAI: a Safety Framework for Mobile Robots in Embodied AI Systems","created":"2024-09-03","cited_by_count":13,"area":null},{"id":"2506.04202","title":"TracLLM: A Generic Framework for Attributing Long Context LLMs","created":"2025-06-04","cited_by_count":13,"area":null},{"id":"2309.17319","title":"Building Privacy-Preserving and Secure Geospatial Artificial Intelligence Foundation Models","created":"2023-09-29","cited_by_count":12,"area":null},{"id":"2404.02637","title":"Vocabulary Attack to Hijack Large Language Model Applications","created":"2024-04-03","cited_by_count":12,"area":null},{"id":"2410.19160","title":"Adversarial Attacks on Large Language Models Using Regularized Relaxation","created":"2024-10-24","cited_by_count":12,"area":null},{"id":"2511.02108","title":"Metamorphic Testing of Large Language Models for Natural Language Processing","created":"2025-11-03","cited_by_count":12,"area":null},{"id":"2312.17115","title":"How Far Are LLMs from Believable AI? A Benchmark for Evaluating the Believability of Human Behavior Simulation","created":"2023-12-28","cited_by_count":11,"area":null},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2406.03993","title":"Assessing LLMs for Zero-shot Abstractive Summarization Through the Lens of Relevance Paraphrasing","created":"2024-06-06","cited_by_count":11,"area":null},{"id":"2601.07185","title":"Defenses Against Prompt Attacks Learn Surface Heuristics","created":"2026-01-12","cited_by_count":11,"area":null},{"id":"2601.10440","title":"AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior","created":"2026-01-15","cited_by_count":11,"area":null},{"id":"2402.19200","title":"PRSA: Prompt Stealing Attacks against Real-World Prompt Services","created":"2024-02-29","cited_by_count":10,"area":null},{"id":"2502.07577","title":"Automated Capability Discovery via Foundation Model Self-Exploration","created":"2025-02-11","cited_by_count":10,"area":null},{"id":"2506.17090","title":"Better Language Model Inversion by Compactly Representing Next-Token Distributions","created":"2025-06-20","cited_by_count":9,"area":null},{"id":"2310.02174","title":"Ask Again, Then Fail: Large Language Models' Vacillations in Judgment","created":"2023-10-03","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2406.00199","title":"Exfiltration of personal information from ChatGPT via prompt injection","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2410.13901","title":"SoK: Prompt Hacking of Large Language Models","created":"2024-10-16","cited_by_count":7,"area":null},{"id":"2502.19320","title":"Shh, don't say that! Domain Certification in LLMs","created":"2025-02-26","cited_by_count":7,"area":null},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2410.20016","title":"Vulnerability of LLMs to Vertically Aligned Text Manipulations","created":"2024-10-26","cited_by_count":6,"area":null},{"id":"2505.00626","title":"The Illusion of Role Separation: Hidden Shortcuts in LLM Role Learning (and How to Fix Them)","created":"2025-05-01","cited_by_count":6,"area":null},{"id":"2510.00857","title":"ManagerBench: Evaluating the Safety-Pragmatism Trade-off in Autonomous LLMs","created":"2025-10-01","cited_by_count":6,"area":null},{"id":"2606.01494","title":"ClawHub Security Signals: When VirusTotal, Static Analysis, and SkillSpector Disagree","created":"2026-05-31","cited_by_count":6,"area":null},{"id":"2606.10581","title":"ParaBridge: Bridging Paralinguistic Perception and Dialogue Behavior in Speech Language Models","created":"2026-06-09","cited_by_count":6,"area":null}],"next_cursor":"100"}