{"total":68,"rows":[{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651,"area":"safety"},{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489,"area":"safety"},{"id":"2404.01833","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","created":"2024-04-02","cited_by_count":390,"area":"safety"},{"id":"2402.06363","title":"StruQ: Defending Against Prompt Injection with Structured Queries","created":"2024-02-09","cited_by_count":375,"area":"safety"},{"id":"2304.05197","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","created":"2023-04-11","cited_by_count":333,"area":"safety"},{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2312.17673","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","created":"2023-12-29","cited_by_count":106,"area":"safety"},{"id":"2404.08676","title":"ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming","created":"2024-04-06","cited_by_count":98,"area":"safety"},{"id":"2402.05668","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","created":"2024-02-08","cited_by_count":95,"area":"safety"},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2310.15007","title":"Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models","created":"2023-10-23","cited_by_count":56,"area":"safety"},{"id":"2402.00351","title":"Machine Unlearning for Image-to-Image Generative Models","created":"2024-02-01","cited_by_count":47,"area":"safety"},{"id":"2405.19103","title":"Voice Jailbreak Attacks Against GPT-4o","created":"2024-05-29","cited_by_count":42,"area":"safety"},{"id":"2310.10077","title":"Prompt Packer: Deceiving LLMs through Compositional Instruction with Hidden Attacks","created":"2023-10-16","cited_by_count":35,"area":"safety"},{"id":"2312.11658","title":"Traces of Memorisation in Large Language Models for Code","created":"2023-12-18","cited_by_count":29,"area":"safety"},{"id":"2406.05948","title":"Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Models","created":"2024-06-10","cited_by_count":28,"area":"safety"},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2502.03052","title":"Understanding and Enhancing the Transferability of Jailbreaking Attacks","created":"2025-02-05","cited_by_count":22,"area":"safety"},{"id":"2405.09113","title":"Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization","created":"2024-05-15","cited_by_count":18,"area":"safety"},{"id":"2408.11006","title":"Security Attacks on LLM-based Code Completion Tools","created":"2024-08-20","cited_by_count":16,"area":"safety"},{"id":"2307.10476","title":"What can we learn from Data Leakage and Unlearning for Law?","created":"2023-07-19","cited_by_count":15,"area":"safety"},{"id":"2502.19726","title":"Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Training","created":"2025-02-27","cited_by_count":15,"area":"safety"},{"id":"2312.11513","title":"Maatphor: Automated Variant Analysis for Prompt Injection Attacks","created":"2023-12-12","cited_by_count":14,"area":"safety"},{"id":"2412.16504","title":"Privacy in Fine-tuning Large Language Models: Attacks, Defenses, and Future Directions","created":"2024-12-21","cited_by_count":14,"area":"safety"},{"id":"2406.09325","title":"REVS: Unlearning Sensitive Information in Language Models via Rank Editing in the Vocabulary Space","created":"2024-06-13","cited_by_count":13,"area":"safety"},{"id":"2408.07291","title":"Evaluating LLM-based Personal Information Extraction and Countermeasures","created":"2024-08-14","cited_by_count":12,"area":"safety"},{"id":"2505.09921","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","created":"2025-05-15","cited_by_count":11,"area":"safety"},{"id":"2502.12658","title":"R.R.: Unveiling LLM Training Privacy through Recollection and Ranking","created":"2025-02-18","cited_by_count":10,"area":"safety"},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2412.08559","title":"Underestimated Privacy Risks for Minority Populations in Large Language Model Unlearning","created":"2024-12-11","cited_by_count":9,"area":"safety"},{"id":"2407.20181","title":"Blockchain for Large Language Model Security and Safety: A Holistic Survey","created":"2024-07-26","cited_by_count":8,"area":"safety"},{"id":"2411.05743","title":"Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods","created":"2024-11-08","cited_by_count":7,"area":"safety"},{"id":"2510.04261","title":"VortexPIA: Indirect Prompt Injection Attack against LLMs for Efficient Extraction of User Privacy","created":"2025-10-05","cited_by_count":7,"area":"safety"},{"id":"2408.17354","title":"Forget to Flourish: Leveraging Machine-Unlearning on Pretrained Language Models for Privacy Leakage","created":"2024-08-30","cited_by_count":6,"area":"safety"},{"id":"2507.04531","title":"DP-Fusion: Token-Level Differentially Private Inference for Large Language Models","created":"2025-07-06","cited_by_count":6,"area":"safety"},{"id":"2501.08454","title":"Tag&Tab: Pretraining Data Detection in Large Language Models Using Keyword-Based Membership Inference Attack","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2411.04388","title":"Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method","created":"2024-11-07","cited_by_count":4,"area":"safety"},{"id":"2603.04459","title":"Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks","created":"2026-03-03","cited_by_count":4,"area":"safety"},{"id":"2412.21123","title":"ExpShield: Safeguarding Web Text from Unauthorized Crawling and LLM Exploitation","created":"2024-12-30","cited_by_count":3,"area":"safety"},{"id":"2507.17259","title":"Tab-MIA: A Benchmark Dataset for Membership Inference Attacks on Tabular Data in LLMs","created":"2025-07-23","cited_by_count":3,"area":"safety"},{"id":"2509.05449","title":"Neural Breadcrumbs: Membership Inference Attacks on LLMs Through Hidden State and Attention Pattern Analysis","created":"2025-09-05","cited_by_count":3,"area":"safety"},{"id":"2511.20497","title":"Quantifying the Privacy Implications of High-Fidelity Synthetic Network Traffic","created":"2025-11-25","cited_by_count":3,"area":"safety"},{"id":"2603.07567","title":"Revisiting the LiRA Membership Inference Attack Under Realistic Assumptions","created":"2026-03-08","cited_by_count":3,"area":"safety"},{"id":"2407.03045","title":"JailbreakHunter: A Visual Analytics Approach for Jailbreak Prompts Discovery from Large-Scale Human-LLM Conversational Datasets","created":"2024-07-03","cited_by_count":2,"area":"safety"},{"id":"2504.13774","title":"DP2Unlearning: An Efficient and Guaranteed Unlearning Framework for LLMs","created":"2025-04-18","cited_by_count":2,"area":"safety"},{"id":"2507.08158","title":"A Unified Framework for Adversary-Aware Differential Privacy Bounds","created":"2025-07-10","cited_by_count":2,"area":"safety"},{"id":"2508.08629","title":"Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment","created":"2025-08-12","cited_by_count":2,"area":"safety"},{"id":"2510.19492","title":"Machine Text Detectors are Membership Inference Attacks","created":"2025-10-22","cited_by_count":2,"area":"safety"},{"id":"2607.02513","title":"LACUNA: A Testbed for Evaluating Localization Precision for LLM Unlearning","created":"2026-07-02","cited_by_count":2,"area":"safety"},{"id":"2502.05739","title":"Mitigating Sensitive Information Leakage in LLMs4Code through Machine Unlearning","created":"2025-02-09","cited_by_count":1,"area":"safety"},{"id":"2506.14474","title":"LexiMark: Robust Watermarking via Lexical Substitutions to Enhance Membership Verification of an LLM's Textual Training Data","created":"2025-06-17","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2510.25732","title":"What the \"Spotless\" Mind Remembers: How Knowledge Entanglement Shapes What Leaks After Unlearning in LLMs","created":"2025-10-29","cited_by_count":1,"area":"safety"},{"id":"2604.22076","title":"PrivUn: Unveiling Latent Ripple Effects and Shallow Forgetting in Privacy Unlearning","created":"2026-04-23","cited_by_count":1,"area":"safety"},{"id":"2605.26133","title":"Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implications","created":"2026-05-21","cited_by_count":1,"area":"safety"},{"id":"2504.08616","title":"Preserving Privacy Without Compromising Accuracy: Machine Unlearning for Handwritten Text Recognition","created":"2025-04-11","cited_by_count":0,"area":"safety"},{"id":"2505.13819","title":"Fragments to Facts: Partial-Information Fragment Inference from LLMs","created":"2025-05-20","cited_by_count":0,"area":"safety"},{"id":"2511.00192","title":"EL-MIA: Quantifying Membership Inference Risks of Sensitive Entities in LLMs","created":"2025-10-31","cited_by_count":0,"area":"safety"},{"id":"2512.12914","title":"CTIGuardian: A Few-Shot Framework for Mitigating Privacy Leakage in Fine-Tuned LLMs","created":"2025-12-15","cited_by_count":0,"area":"safety"},{"id":"2512.13352","title":"On the Effectiveness of Membership Inference in Targeted Data Extraction from Large Language Models","created":"2025-12-15","cited_by_count":0,"area":"safety"},{"id":"2605.06423","title":"Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.22373","title":"Boundary-targeted Membership Inference Attacks on Safety Classifiers","created":"2026-05-21","cited_by_count":0,"area":"safety"},{"id":"2608.00144","title":"Leak It: Per-Document Extraction Beyond Aggregate Membership Inference","created":"2026-07-31","cited_by_count":0,"area":"safety"},{"id":"2609.40286","title":"Linguistic Loopholes in LLM Unlearning: From a 174-Language Benchmark to Coverage-Aware Unlearning","created":"2026-09-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}