{"total":38,"rows":[{"id":"2309.01933","title":"Provably safe systems: the only path to controllable AGI","created":"2023-09-05","cited_by_count":29,"area":null},{"id":"2406.18400","title":"Do LLMs dream of elephants (when told not to)? Latent concept association and associative memory in transformers","created":"2024-06-26","cited_by_count":15,"area":null},{"id":"2305.00550","title":"SoK: Pragmatic Assessment of Machine Learning for Network Intrusion Detection","created":"2023-04-30","cited_by_count":13,"area":null},{"id":"2306.02895","title":"Evading Black-box Classifiers Without Breaking Eggs","created":"2023-06-05","cited_by_count":13,"area":null},{"id":"2309.01866","title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting","created":"2023-09-05","cited_by_count":10,"area":null},{"id":"2301.12993","title":"Benchmarking Robustness to Adversarial Image Obfuscations","created":"2023-01-30","cited_by_count":8,"area":null},{"id":"2302.10739","title":"MalProtect: Stateful Defense Against Adversarial Query Attacks in ML-based Malware Detection","created":"2023-02-21","cited_by_count":8,"area":null},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2310.03614","title":"Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally","created":"2023-10-05","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2306.15363","title":"Your Attack Is Too DUMB: Formalizing Attacker Scenarios for Adversarial Transferability","created":"2023-06-27","cited_by_count":5,"area":null},{"id":"2312.13435","title":"The Adaptive Arms Race: Redefining Robustness in AI Security","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2412.18442","title":"SoK: On the Offensive Potential of AI","created":"2024-12-24","cited_by_count":5,"area":null},{"id":"2502.15609","title":"On the Robustness of Transformers against Context Hijacking for Linear Classification","created":"2025-02-21","cited_by_count":4,"area":null},{"id":"2601.13082","title":"Adversarial News and Lost Profits: Manipulating Headlines in LLM-Driven Algorithmic Trading","created":"2026-01-19","cited_by_count":4,"area":null},{"id":"2405.02642","title":"Machine Learning in Space: Surveying the Robustness of on-board ML models to Radiation","created":"2024-05-04","cited_by_count":3,"area":null},{"id":"2403.10330","title":"Towards Non-Adversarial Algorithmic Recourse","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2501.13782","title":"Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systems","created":"2025-01-23","cited_by_count":2,"area":null},{"id":"2509.11398","title":"From Firewalls to Frontiers: AI Red-Teaming is a Domain-Specific Evolution of Cyber Red-Teaming","created":"2025-09-14","cited_by_count":2,"area":null},{"id":"2306.04064","title":"Transferable Adversarial Robustness for Categorical Data via Universal Robust Embeddings","created":"2023-06-06","cited_by_count":1,"area":null},{"id":"2309.03607","title":"Your Battery Is a Blast! Safeguarding Against Counterfeit Batteries with Authentication","created":"2023-09-07","cited_by_count":1,"area":null},{"id":"2311.00207","title":"Magmaw: Modality-Agnostic Adversarial Attacks on Machine Learning-Based Wireless Communication Systems","created":"2023-11-01","cited_by_count":1,"area":null},{"id":"2402.10527","title":"Assessing biomedical knowledge robustness in large language models by query-efficient sampling attacks","created":"2024-02-16","cited_by_count":1,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2409.07448","title":"A Novel Perturb-ability Score to Mitigate Evasion Adversarial Attacks on Flow-Based ML-NIDS","created":"2024-09-11","cited_by_count":1,"area":null},{"id":"2410.12076","title":"Taking off the Rose-Tinted Glasses: A Critical Look at Adversarial ML Through the Lens of Evasion Attacks","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2505.12586","title":"A Few Large Shifts: Layer-Inconsistency Based Minimal Overhead Adversarial Example Detection","created":"2025-05-19","cited_by_count":1,"area":null},{"id":"2507.05441","title":"Adversarial Machine Learning Attacks on Financial Reporting via Maximum Violated Multi-Objective Attack","created":"2025-07-07","cited_by_count":1,"area":null},{"id":"2507.23669","title":"Automating AI Failure Tracking: Semantic Association of Reports in AI Incident Database","created":"2025-07-31","cited_by_count":1,"area":null},{"id":"2312.09533","title":"Adversarial Robustness on Image Classification with $k$-means","created":"2023-12-15","cited_by_count":0,"area":null},{"id":"2410.05334","title":"TA3: Testing Against Adversarial Attacks on Machine Learning Models","created":"2024-10-06","cited_by_count":0,"area":null},{"id":"2507.12003","title":"Expanding ML-Documentation Standards For Better Security","created":"2025-07-16","cited_by_count":0,"area":null},{"id":"2508.10038","title":"Certifiably robust malware detectors by design","created":"2025-08-10","cited_by_count":0,"area":null},{"id":"2508.20307","title":"Surveying the Operational Cybersecurity and Supply Chain Threat Landscape when Developing and Deploying AI Systems","created":"2025-08-27","cited_by_count":0,"area":null},{"id":"2510.01676","title":"Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks","created":"2025-10-02","cited_by_count":0,"area":null},{"id":"2603.19204","title":"Robustness, Cost, and Attack-Surface Concentration in Phishing Detection","created":"2026-03-19","cited_by_count":0,"area":null},{"id":"2607.19837","title":"Know Your Agent: Reconnaissance-Driven Pentesting of AI Agents","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2609.03036","title":"Population-Calibrated Graph Screening at 835-Million-Address Scale, with Label-Free Transfer to New Chains","created":"2026-09-02","cited_by_count":0,"area":null}],"next_cursor":null}