{"total":56,"rows":[{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2306.05499","title":"Prompt Injection attack against LLM-integrated Applications","created":"2023-06-08","cited_by_count":605,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2307.08715","title":"MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots","created":"2023-07-16","cited_by_count":183,"area":"safety"},{"id":"2502.02542","title":"OverThink: Slowdown Attacks on Reasoning LLMs","created":"2025-02-04","cited_by_count":96,"area":"lr"},{"id":"2309.01933","title":"Provably safe systems: the only path to controllable AGI","created":"2023-09-05","cited_by_count":29,"area":null},{"id":"2410.22284","title":"Embedding-based classifiers can detect prompt injection attacks","created":"2024-10-29","cited_by_count":27,"area":"safety"},{"id":"2405.13077","title":"GPT-4 Jailbreaks Itself with Near-Perfect Success Using Self-Explanation","created":"2024-05-21","cited_by_count":25,"area":"safety"},{"id":"2501.07238","title":"Lessons From Red Teaming 100 Generative AI Products","created":"2025-01-13","cited_by_count":23,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2406.18400","title":"Do LLMs dream of elephants (when told not to)? Latent concept association and associative memory in transformers","created":"2024-06-26","cited_by_count":15,"area":null},{"id":"2305.00550","title":"SoK: Pragmatic Assessment of Machine Learning for Network Intrusion Detection","created":"2023-04-30","cited_by_count":13,"area":null},{"id":"2306.02895","title":"Evading Black-box Classifiers Without Breaking Eggs","created":"2023-06-05","cited_by_count":13,"area":null},{"id":"2309.01866","title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting","created":"2023-09-05","cited_by_count":10,"area":null},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2301.12993","title":"Benchmarking Robustness to Adversarial Image Obfuscations","created":"2023-01-30","cited_by_count":8,"area":null},{"id":"2302.10739","title":"MalProtect: Stateful Defense Against Adversarial Query Attacks in ML-based Malware Detection","created":"2023-02-21","cited_by_count":8,"area":null},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2305.05027","title":"Web Content Filtering through knowledge distillation of Large Language Models","created":"2023-05-08","cited_by_count":7,"area":"distill"},{"id":"2310.17645","title":"PubDef: Defending Against Transfer Attacks From Public Models","created":"2023-10-26","cited_by_count":7,"area":null},{"id":"2310.03614","title":"Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally","created":"2023-10-05","cited_by_count":6,"area":null},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2306.15363","title":"Your Attack Is Too DUMB: Formalizing Attacker Scenarios for Adversarial Transferability","created":"2023-06-27","cited_by_count":5,"area":null},{"id":"2312.13435","title":"The Adaptive Arms Race: Redefining Robustness in AI Security","created":"2023-12-20","cited_by_count":5,"area":null},{"id":"2412.18442","title":"SoK: On the Offensive Potential of AI","created":"2024-12-24","cited_by_count":5,"area":null},{"id":"2501.18416","title":"Exploring Potential Prompt Injection Attacks in Federated Military LLMs and Their Mitigation","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2502.15609","title":"On the Robustness of Transformers against Context Hijacking for Linear Classification","created":"2025-02-21","cited_by_count":4,"area":null},{"id":"2601.13082","title":"Adversarial News and Lost Profits: Manipulating Headlines in LLM-Driven Algorithmic Trading","created":"2026-01-19","cited_by_count":4,"area":null},{"id":"2405.02642","title":"Machine Learning in Space: Surveying the Robustness of on-board ML models to Radiation","created":"2024-05-04","cited_by_count":3,"area":null},{"id":"2510.09093","title":"Exploiting Web Search Tools of AI Agents for Data Exfiltration","created":"2025-10-10","cited_by_count":3,"area":"agents"},{"id":"2403.10330","title":"Towards Non-Adversarial Algorithmic Recourse","created":"2024-03-15","cited_by_count":2,"area":null},{"id":"2501.13782","title":"Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systems","created":"2025-01-23","cited_by_count":2,"area":null},{"id":"2505.13028","title":"Evaluating the efficacy of LLM Safety Solutions : The Palit Benchmark Dataset","created":"2025-05-19","cited_by_count":2,"area":"safety"},{"id":"2509.11398","title":"From Firewalls to Frontiers: AI Red-Teaming is a Domain-Specific Evolution of Cyber Red-Teaming","created":"2025-09-14","cited_by_count":2,"area":null},{"id":"2306.04064","title":"Transferable Adversarial Robustness for Categorical Data via Universal Robust Embeddings","created":"2023-06-06","cited_by_count":1,"area":null},{"id":"2309.03607","title":"Your Battery Is a Blast! Safeguarding Against Counterfeit Batteries with Authentication","created":"2023-09-07","cited_by_count":1,"area":null},{"id":"2311.00207","title":"Magmaw: Modality-Agnostic Adversarial Attacks on Machine Learning-Based Wireless Communication Systems","created":"2023-11-01","cited_by_count":1,"area":null},{"id":"2402.10527","title":"Assessing biomedical knowledge robustness in large language models by query-efficient sampling attacks","created":"2024-02-16","cited_by_count":1,"area":null},{"id":"2402.14937","title":"SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge","created":"2024-02-22","cited_by_count":1,"area":null},{"id":"2409.07448","title":"A Novel Perturb-ability Score to Mitigate Evasion Adversarial Attacks on Flow-Based ML-NIDS","created":"2024-09-11","cited_by_count":1,"area":null},{"id":"2410.12076","title":"Taking off the Rose-Tinted Glasses: A Critical Look at Adversarial ML Through the Lens of Evasion Attacks","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2505.12586","title":"A Few Large Shifts: Layer-Inconsistency Based Minimal Overhead Adversarial Example Detection","created":"2025-05-19","cited_by_count":1,"area":null},{"id":"2507.05441","title":"Adversarial Machine Learning Attacks on Financial Reporting via Maximum Violated Multi-Objective Attack","created":"2025-07-07","cited_by_count":1,"area":null},{"id":"2507.23669","title":"Automating AI Failure Tracking: Semantic Association of Reports in AI Incident Database","created":"2025-07-31","cited_by_count":1,"area":null},{"id":"2511.15107","title":"Effective Code Membership Inference for Code Completion Models via Adversarial Prompts","created":"2025-11-19","cited_by_count":1,"area":"safety"},{"id":"2312.09533","title":"Adversarial Robustness on Image Classification with $k$-means","created":"2023-12-15","cited_by_count":0,"area":null},{"id":"2410.05334","title":"TA3: Testing Against Adversarial Attacks on Machine Learning Models","created":"2024-10-06","cited_by_count":0,"area":null},{"id":"2507.12003","title":"Expanding ML-Documentation Standards For Better Security","created":"2025-07-16","cited_by_count":0,"area":null},{"id":"2508.10038","title":"Certifiably robust malware detectors by design","created":"2025-08-10","cited_by_count":0,"area":null},{"id":"2508.20307","title":"Surveying the Operational Cybersecurity and Supply Chain Threat Landscape when Developing and Deploying AI Systems","created":"2025-08-27","cited_by_count":0,"area":null},{"id":"2510.01676","title":"Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks","created":"2025-10-02","cited_by_count":0,"area":null},{"id":"2603.19204","title":"Robustness, Cost, and Attack-Surface Concentration in Phishing Detection","created":"2026-03-19","cited_by_count":0,"area":null},{"id":"2604.04349","title":"Adversarial Robustness Analysis of Cloud-Assisted Autonomous Driving Systems","created":"2026-04-06","cited_by_count":0,"area":"driving"},{"id":"2607.19837","title":"Know Your Agent: Reconnaissance-Driven Pentesting of AI Agents","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2609.03036","title":"Population-Calibrated Graph Screening at 835-Million-Address Scale, with Label-Free Transfer to New Chains","created":"2026-09-02","cited_by_count":0,"area":null}],"next_cursor":null}