{"total":336,"rows":[{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104,"area":"alignment"},{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2309.03409","title":"Large Language Models as Optimizers","created":"2023-09-07","cited_by_count":864,"area":null},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651,"area":"alignment"},{"id":"2404.01318","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","created":"2024-03-28","cited_by_count":536,"area":"safety"},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2406.11695","title":"Optimizing Instructions and Demonstrations for Multi-Stage Language Model Programs","created":"2024-06-17","cited_by_count":291,"area":null},{"id":"2310.10012","title":"Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?","created":"2023-10-16","cited_by_count":250,"area":"diffusion"},{"id":"2311.06668","title":"In-context Vectors: Making In Context Learning More Effective and Controllable Through Latent Space Steering","created":"2023-11-11","cited_by_count":245,"area":null},{"id":"2310.16427","title":"PromptAgent: Strategic Planning with Language Models Enables Expert-level Prompt Optimization","created":"2023-10-25","cited_by_count":233,"area":null},{"id":"2310.11868","title":"To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now","created":"2023-10-18","cited_by_count":210,"area":"diffusion"},{"id":"2305.20086","title":"Understanding and Mitigating Copying in Diffusion Models","created":"2023-05-31","cited_by_count":209,"area":"diffusion"},{"id":"2302.04222","title":"Glaze: Protecting Artists from Style Mimicry by Text-to-Image Models","created":"2023-02-08","cited_by_count":205,"area":"diffusion"},{"id":"2306.00983","title":"StyleDrop: Text-to-Image Generation in Any Style","created":"2023-06-01","cited_by_count":199,"area":null},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2309.06135","title":"Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts","created":"2023-09-12","cited_by_count":171,"area":"diffusion"},{"id":"2405.15234","title":"Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models","created":"2024-05-24","cited_by_count":168,"area":"diffusion"},{"id":"2402.02309","title":"Jailbreaking Attack against Multimodal Large Language Model","created":"2024-02-04","cited_by_count":135,"area":"safety"},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2306.09442","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","created":"2023-06-15","cited_by_count":114,"area":"safety"},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111,"area":"alignment"},{"id":"2405.21018","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","created":"2024-05-31","cited_by_count":110,"area":"safety"},{"id":"2310.10325","title":"Towards image compression with perfect realism at ultra-low bitrates","created":"2023-10-16","cited_by_count":103,"area":null},{"id":"2407.21720","title":"Detecting, Explaining, and Mitigating Memorization in Diffusion Models","created":"2024-07-31","cited_by_count":95,"area":"diffusion"},{"id":"2402.09154","title":"Attacking Large Language Models with Projected Gradient Descent","created":"2024-02-14","cited_by_count":94,"area":"alignment"},{"id":"2402.09063","title":"Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Space","created":"2024-02-14","cited_by_count":91,"area":"alignment"},{"id":"2304.06720","title":"Expressive Text-to-Image Generation with Rich Text","created":"2023-04-13","cited_by_count":89,"area":null},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2303.16378","title":"A Pilot Study of Query-Free Adversarial Attack against Stable Diffusion","created":"2023-03-29","cited_by_count":76,"area":"diffusion"},{"id":"2305.16225","title":"ProSpect: Prompt Spectrum for Attribute-Aware Personalization of Diffusion Models","created":"2023-05-25","cited_by_count":75,"area":"diffusion"},{"id":"2402.16192","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","created":"2024-02-25","cited_by_count":74,"area":"alignment"},{"id":"2404.02928","title":"Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models","created":"2024-04-02","cited_by_count":72,"area":"diffusion"},{"id":"2405.11157","title":"Towards Modular LLMs by Building and Reusing a Library of LoRAs","created":"2024-05-18","cited_by_count":72,"area":null},{"id":"2404.08031","title":"Latent Guard: a Safety Framework for Text-to-image Generation","created":"2024-04-11","cited_by_count":71,"area":null},{"id":"2410.14923","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","created":"2024-10-19","cited_by_count":68,"area":"agents"},{"id":"2304.09337","title":"Promptify: Text-to-Image Generation through Interactive Prompt Exploration with Large Language Models","created":"2023-04-18","cited_by_count":67,"area":null},{"id":"2307.01944","title":"Text + Sketch: Image Compression at Ultra Low Rates","created":"2023-07-04","cited_by_count":67,"area":null},{"id":"2310.17419","title":"AntifakePrompt: Prompt-Tuned Vision-Language Models are Fake Image Detectors","created":"2023-10-26","cited_by_count":64,"area":"mllm"},{"id":"2403.04014","title":"PromptCharm: Text-to-Image Generation through Multi-modal Prompting and Refinement","created":"2024-03-06","cited_by_count":62,"area":"diffusion"},{"id":"2406.09400","title":"Yo'LLaVA: Your Personalized Language and Vision Assistant","created":"2024-06-13","cited_by_count":62,"area":"mllm"},{"id":"2308.00906","title":"ImageBrush: Learning Visual In-Context Instructions for Exemplar-Based Image Manipulation","created":"2023-08-02","cited_by_count":59,"area":null},{"id":"2405.16341","title":"R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model","created":"2024-05-25","cited_by_count":58,"area":"diffusion"},{"id":"2312.03724","title":"DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineer","created":"2023-11-27","cited_by_count":57,"area":null},{"id":"2404.16369","title":"Don't Say No: Jailbreaking LLM by Suppressing Refusal","created":"2024-04-25","cited_by_count":56,"area":"alignment"},{"id":"2411.11706","title":"MC-LLaVA: Multi-Concept Personalized Vision-Language Model","created":"2024-11-18","cited_by_count":54,"area":"mllm"},{"id":"2410.12189","title":"DocETL: Agentic Query Rewriting and Evaluation for Complex Document Processing","created":"2024-10-16","cited_by_count":52,"area":"agents"},{"id":"2404.01077","title":"Efficient Prompting Methods for Large Language Models: A Survey","created":"2024-04-01","cited_by_count":47,"area":null},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2405.10255","title":"When LLMs step into the 3D World: A Survey and Meta-Analysis of 3D Tasks via Multi-modal Large Language Models","created":"2024-05-16","cited_by_count":43,"area":"mllm"},{"id":"2310.04444","title":"What's the Magic Word? A Control Theory of LLM Prompting","created":"2023-10-02","cited_by_count":41,"area":null},{"id":"2402.02651","title":"Vision-Language Models Provide Promptable Representations for Reinforcement Learning","created":"2024-02-05","cited_by_count":41,"area":"mllm"},{"id":"2312.12416","title":"Prompting Hard or Hardly Prompting: Prompt Inversion for Text-to-Image Diffusion Models","created":"2023-12-19","cited_by_count":40,"area":"diffusion"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2312.00027","title":"Stealthy and Persistent Unalignment on Large Language Models via Backdoor Injections","created":"2023-11-15","cited_by_count":39,"area":"safety"},{"id":"2402.11493","title":"Benchmarking Knowledge Boundary for Large Language Models: A Different Perspective on Model Evaluation","created":"2024-02-18","cited_by_count":38,"area":null},{"id":"2402.09723","title":"Efficient Prompt Optimization Through the Lens of Best Arm Identification","created":"2024-02-15","cited_by_count":37,"area":null},{"id":"2403.01251","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","created":"2024-03-02","cited_by_count":37,"area":"safety"},{"id":"2306.12105","title":"Mass-Producing Failures of Multimodal Systems with Language Models","created":"2023-06-21","cited_by_count":36,"area":null},{"id":"2510.04885","title":"RL Is a Hammer and LLMs Are Nails: A Simple Reinforcement Learning Recipe for Strong Prompt Injection","created":"2025-10-06","cited_by_count":36,"area":"agents"},{"id":"2303.03751","title":"Zeroth-Order Optimization Meets Human Feedback: Provable Learning via Ranking Oracles","created":"2023-03-07","cited_by_count":35,"area":"alignment"},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35,"area":"alignment"},{"id":"2510.15511","title":"Language Models are Injective and Hence Invertible","created":"2025-10-17","cited_by_count":35,"area":null},{"id":"2306.00966","title":"The Hidden Language of Diffusion Models","created":"2023-06-01","cited_by_count":34,"area":"diffusion"},{"id":"2303.00262","title":"Collage Diffusion","created":"2023-03-01","cited_by_count":33,"area":"diffusion"},{"id":"2311.09447","title":"How Trustworthy are Open-Source LLMs? An Assessment under Malicious Demonstrations Shows their Vulnerabilities","created":"2023-11-15","cited_by_count":33,"area":null},{"id":"2503.12356","title":"Localized Concept Erasure for Text-to-Image Diffusion Models Using Training-Free Gated Low-Rank Adaptation","created":"2025-03-16","cited_by_count":33,"area":"diffusion"},{"id":"2404.18001","title":"LLMParser: An Exploratory Study on Using Large Language Models for Log Parsing","created":"2024-04-27","cited_by_count":32,"area":null},{"id":"2504.07717","title":"PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization","created":"2025-04-10","cited_by_count":32,"area":"rag"},{"id":"2310.06827","title":"Teaching Language Models to Hallucinate Less with Synthetic Tasks","created":"2023-10-10","cited_by_count":31,"area":null},{"id":"2403.14291","title":"Open-Vocabulary Attention Maps with Token Optimization for Semantic Segmentation in Diffusion Models","created":"2024-03-21","cited_by_count":29,"area":"diffusion"},{"id":"2407.01606","title":"On Discrete Prompt Optimization for Diffusion Models","created":"2024-06-27","cited_by_count":29,"area":"diffusion"},{"id":"2502.01633","title":"Adversarial Reasoning at Jailbreaking Time","created":"2025-02-03","cited_by_count":29,"area":"lr"},{"id":"2506.08123","title":"QA-LIGN: Aligning LLMs through Constitutionally Decomposed QA","created":"2025-06-09","cited_by_count":28,"area":"alignment"},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2307.14331","title":"Visual Instruction Inversion: Image Editing via Visual Prompting","created":"2023-07-26","cited_by_count":26,"area":null},{"id":"2406.03589","title":"Ranking Manipulation for Conversational Search Engines","created":"2024-06-05","cited_by_count":26,"area":"safety"},{"id":"2306.00974","title":"Discovering Failure Modes of Text-guided Diffusion Models via Adversarial Search","created":"2023-06-01","cited_by_count":25,"area":"diffusion"},{"id":"2406.11668","title":"\"Not Aligned\" is Not \"Malicious\": Being Careful about Hallucinations of Large Language Models' Jailbreak","created":"2024-06-17","cited_by_count":25,"area":"safety"},{"id":"2501.09815","title":"Lossy Compression with Pretrained Diffusion Models","created":"2025-01-16","cited_by_count":25,"area":"diffusion"},{"id":"2310.14303","title":"Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases","created":"2023-10-22","cited_by_count":24,"area":"safety"},{"id":"2312.16720","title":"Prompt Expansion for Adaptive Text-to-Image Generation","created":"2023-12-27","cited_by_count":24,"area":null},{"id":"2403.18920","title":"CPR: Retrieval Augmented Generation for Copyright Protection","created":"2024-03-27","cited_by_count":24,"area":"rag"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2312.04127","title":"Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreak","created":"2023-12-07","cited_by_count":23,"area":"safety"},{"id":"2402.10196","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","created":"2024-02-15","cited_by_count":22,"area":"agents"},{"id":"2509.11864","title":"NeuroStrike: Neuron-Level Attacks on Aligned LLMs","created":"2025-09-15","cited_by_count":22,"area":"alignment"},{"id":"2406.05087","title":"Corpus Poisoning via Approximate Greedy Gradient Descent","created":"2024-06-07","cited_by_count":21,"area":"rag"},{"id":"2312.05288","title":"MotionCrafter: One-Shot Motion Customization of Diffusion Models","created":"2023-12-08","cited_by_count":20,"area":"diffusion"},{"id":"2410.16983","title":"Order Matters: Exploring Order Sensitivity in Multimodal Large Language Models","created":"2024-10-22","cited_by_count":20,"area":"mllm"},{"id":"2504.20998","title":"YoChameleon: Personalized Vision and Language Generation","created":"2025-04-29","cited_by_count":20,"area":"mllm"},{"id":"2505.08281","title":"Ultra Lowrate Image Compression with Semantic Residual Coding and Compression-aware Diffusion","created":"2025-05-13","cited_by_count":20,"area":"diffusion"},{"id":"2405.09113","title":"Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization","created":"2024-05-15","cited_by_count":18,"area":"safety"},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18,"area":"safety"},{"id":"2409.20255","title":"PerCo (SD): Open Perceptual Compression","created":"2024-09-30","cited_by_count":18,"area":"diffusion"},{"id":"2502.11027","title":"On the Effect of Sampling Diversity in Scaling LLM Inference","created":"2025-02-16","cited_by_count":18,"area":null},{"id":"2307.16686","title":"Guiding Image Captioning Models Toward More Specific Captions","created":"2023-07-31","cited_by_count":17,"area":null},{"id":"2406.04344","title":"Verbalized Machine Learning: Revisiting Machine Learning with Language Models","created":"2024-06-06","cited_by_count":17,"area":null}],"next_cursor":"100"}