{"total":113,"rows":[{"id":"2308.05374","title":"Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment","created":"2023-08-10","cited_by_count":401,"area":null},{"id":"2403.08319","title":"Knowledge Conflicts for LLMs: A Survey","created":"2024-03-13","cited_by_count":283,"area":null},{"id":"2307.10169","title":"Challenges and Applications of Large Language Models","created":"2023-07-19","cited_by_count":254,"area":null},{"id":"2406.10162","title":"Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Models","created":"2024-06-14","cited_by_count":178,"area":null},{"id":"2406.07358","title":"AI Sandbagging: Language Models can Strategically Underperform on Evaluations","created":"2024-06-11","cited_by_count":145,"area":null},{"id":"2305.13661","title":"On the Risk of Misinformation Pollution with Large Language Models","created":"2023-05-23","cited_by_count":128,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2308.14840","title":"Identifying and Mitigating the Security Risks of Generative AI","created":"2023-08-28","cited_by_count":91,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2405.18137","title":"Exploiting LLM Quantization","created":"2024-05-28","cited_by_count":65,"area":null},{"id":"2410.13722","title":"Persistent Pre-Training Poisoning of LLMs","created":"2024-10-17","cited_by_count":48,"area":null},{"id":"2407.14933","title":"Consent in Crisis: The Rapid Decline of the AI Data Commons","created":"2024-07-20","cited_by_count":46,"area":null},{"id":"2305.16157","title":"Training Data Extraction From Pre-trained Language Models: A Survey","created":"2023-05-25","cited_by_count":45,"area":null},{"id":"2504.10374","title":"Ctrl-Z: Controlling AI Agents via Resampling","created":"2025-04-14","cited_by_count":44,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2405.19334","title":"LLMs Meet Multimodal Generation and Editing: A Survey","created":"2024-05-29","cited_by_count":35,"area":null},{"id":"2303.15772","title":"Ecosystem Graphs: The Social Footprint of Foundation Models","created":"2023-03-28","cited_by_count":32,"area":null},{"id":"2310.01875","title":"Towards Stable Backdoor Purification through Feature Shift Tuning","created":"2023-10-03","cited_by_count":32,"area":null},{"id":"2403.00871","title":"Teach LLMs to Phish: Stealing Private Information from Language Models","created":"2024-03-01","cited_by_count":32,"area":null},{"id":"2310.15264","title":"Towards Possibilities & Impossibilities of AI-generated Text Detection: A Survey","created":"2023-10-23","cited_by_count":28,"area":null},{"id":"2311.12202","title":"Nepotistically Trained Generative-AI Models Collapse","created":"2023-11-20","cited_by_count":27,"area":null},{"id":"2406.13843","title":"Generative AI Misuse: A Taxonomy of Tactics and Insights from Real-World Data","created":"2024-06-19","cited_by_count":20,"area":null},{"id":"2405.12725","title":"Nearest is Not Dearest: Towards Practical Defense against Quantization-conditioned Backdoor Attacks","created":"2024-05-21","cited_by_count":18,"area":null},{"id":"2402.01909","title":"On Catastrophic Inheritance of Large Foundation Models","created":"2024-02-02","cited_by_count":15,"area":null},{"id":"2502.00706","title":"Model Provenance Testing for Large Language Models","created":"2025-02-02","cited_by_count":15,"area":null},{"id":"2307.10569","title":"Deceptive Alignment Monitoring","created":"2023-07-20","cited_by_count":14,"area":null},{"id":"2404.19460","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","created":"2024-04-30","cited_by_count":14,"area":null},{"id":"2408.02509","title":"Black-Box Adversarial Attacks on LLM-Based Code Completion","created":"2024-08-05","cited_by_count":14,"area":null},{"id":"2308.14597","title":"Adversarial Attacks on Foundational Vision Models","created":"2023-08-28","cited_by_count":13,"area":null},{"id":"2406.04662","title":"Evaluating and Mitigating IP Infringement in Visual Generative AI","created":"2024-06-07","cited_by_count":13,"area":null},{"id":"2407.16607","title":"Data Mixture Inference: What do BPE Tokenizers Reveal about their Training Data?","created":"2024-07-23","cited_by_count":13,"area":null},{"id":"2402.06957","title":"Architectural Neural Backdoors from First Principles","created":"2024-02-10","cited_by_count":11,"area":null},{"id":"2403.12693","title":"As Firm As Their Foundations: Can open-sourced foundation models be used to create adversarial examples for downstream tasks?","created":"2024-03-19","cited_by_count":11,"area":null},{"id":"2309.16511","title":"Toloka Visual Question Answering Benchmark","created":"2023-09-28","cited_by_count":10,"area":null},{"id":"2312.09057","title":"On the Difficulty of Defending Contrastive Learning against Backdoor Attacks","created":"2023-12-14","cited_by_count":9,"area":null},{"id":"2510.25771","title":"Gaperon: A Peppered English-French Generative Language Model Suite","created":"2025-10-29","cited_by_count":9,"area":null},{"id":"2310.00542","title":"Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defense","created":"2023-10-01","cited_by_count":8,"area":null},{"id":"2504.09522","title":"How new data permeates LLM knowledge and how to dilute it","created":"2025-04-13","cited_by_count":8,"area":null},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2505.12682","title":"RAFP: Identifying LLM Lineages via Rare-Region Fingerprints","created":"2025-05-19","cited_by_count":8,"area":null},{"id":"2312.10188","title":"WordScape: a Pipeline to extract multilingual, visually rich Documents with Layout Annotations from Web Crawl Data","created":"2023-12-15","cited_by_count":7,"area":null},{"id":"2408.04556","title":"BA-LoRA: Bias-Alleviating Low-Rank Adaptation to Mitigate Catastrophic Inheritance in Large Language Models","created":"2024-08-08","cited_by_count":7,"area":null},{"id":"2410.09838","title":"Uncovering, Explaining, and Mitigating the Superficial Safety of Backdoor Defense","created":"2024-10-13","cited_by_count":7,"area":null},{"id":"2503.16861","title":"In-House Evaluation Is Not Enough: Towards Robust Third-Party Flaw Disclosure for General-Purpose AI","created":"2025-03-21","cited_by_count":7,"area":null},{"id":"2510.07985","title":"Fewer Weights, More Problems: A Practical Attack on LLM Pruning","created":"2025-10-09","cited_by_count":7,"area":null},{"id":"2310.03614","title":"Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally","created":"2023-10-05","cited_by_count":6,"area":null},{"id":"2401.12292","title":"GRATH: Gradual Self-Truthifying for Large Language Models","created":"2024-01-22","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2508.14927","title":"AI Testing Should Account for Sophisticated Strategic Behaviour","created":"2025-08-19","cited_by_count":6,"area":null},{"id":"2305.02383","title":"On the Security Risks of Knowledge Graph Reasoning","created":"2023-05-03","cited_by_count":5,"area":null},{"id":"2404.08788","title":"Detecting AI-Generated Images via CLIP","created":"2024-04-12","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2402.12617","title":"Generative AI Security: Challenges and Countermeasures","created":"2024-02-20","cited_by_count":4,"area":null},{"id":"2407.12999","title":"Securing the Future of GenAI: Policy and Technology","created":"2024-05-21","cited_by_count":4,"area":null},{"id":"2505.22778","title":"Machine Learning Models Have a Supply Chain Problem","created":"2025-05-28","cited_by_count":4,"area":null},{"id":"2307.01073","title":"What Distributions are Robust to Indiscriminate Poisoning Attacks for Linear Learners?","created":"2023-07-03","cited_by_count":3,"area":null},{"id":"2411.13778","title":"A Survey on Adversarial Robustness of LiDAR-based Machine Learning Perception in Autonomous Vehicles","created":"2024-11-21","cited_by_count":3,"area":null},{"id":"2503.01896","title":"Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identification","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2506.02032","title":"Towards Secure MLOps: Surveying Attacks, Mitigation Strategies, and Research Challenges","created":"2025-05-30","cited_by_count":3,"area":null},{"id":"2510.17098","title":"Can Transformer Memory Be Corrupted? Investigating Cache-Side Vulnerabilities in Large Language Models","created":"2025-10-20","cited_by_count":3,"area":null},{"id":"2510.22242","title":"PaperAsk: A Benchmark for Reliability Evaluation of LLMs in Paper Search and Reading","created":"2025-10-25","cited_by_count":3,"area":null},{"id":"2512.08946","title":"Large Language Models as Search Engines: Societal Challenges","created":"2025-11-24","cited_by_count":3,"area":null},{"id":"2406.14473","title":"Data-Centric AI in the Age of Large Language Models","created":"2024-06-20","cited_by_count":2,"area":null},{"id":"2410.09411","title":"Towards the Effect of Examples on In-Context Learning: A Theoretical Case Study","created":"2024-10-12","cited_by_count":2,"area":null},{"id":"2505.01067","title":"A Rusty Link in the AI Supply Chain: Detecting Evil Configurations in Model Repositories","created":"2025-05-02","cited_by_count":2,"area":null},{"id":"2506.05394","title":"Attacking Attention of Foundation Models Disrupts Downstream Tasks","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2506.07467","title":"Circumventing Backdoor Space via Weight Symmetry","created":"2025-06-09","cited_by_count":2,"area":null},{"id":"2506.10117","title":"A Manually Annotated Image-Caption Dataset for Detecting Children in the Wild","created":"2025-06-11","cited_by_count":2,"area":null},{"id":"2509.02372","title":"Scam2Prompt: A Scalable Framework for Auditing Malicious Scam Endpoints in Production LLMs","created":"2025-09-02","cited_by_count":2,"area":null},{"id":"2510.06823","title":"Exposing Citation Vulnerabilities in Generative Engines","created":"2025-10-08","cited_by_count":2,"area":null},{"id":"2311.10919","title":"PACOL: Poisoning Attacks Against Continual Learners","created":"2023-11-18","cited_by_count":1,"area":null},{"id":"2311.11544","title":"Understanding Variation in Subpopulation Susceptibility to Poisoning Attacks","created":"2023-11-20","cited_by_count":1,"area":null},{"id":"2403.19790","title":"Bespoke Large Language Models for Digital Triage Assistance in Mental Health Care","created":"2024-03-28","cited_by_count":1,"area":null},{"id":"2404.02696","title":"Deep Privacy Funnel Model: From a Discriminative to a Generative Approach with an Application to Face Recognition","created":"2024-04-03","cited_by_count":1,"area":null},{"id":"2411.01742","title":"Learning from Convolution-based Unlearnable Datasets","created":"2024-11-04","cited_by_count":1,"area":null},{"id":"2502.03576","title":"Clone-Robust Weights in Metric Spaces: Handling Redundancy Bias for Benchmark Aggregation","created":"2025-02-05","cited_by_count":1,"area":null},{"id":"2502.16375","title":"Personhood Credentials: Human-Centered Design Recommendation Balancing Security, Usability, and Trust","created":"2025-02-22","cited_by_count":1,"area":null},{"id":"2508.20333","title":"Poison Once, Refuse Forever: Weaponizing Alignment for Injecting Bias in LLMs","created":"2025-08-28","cited_by_count":1,"area":null},{"id":"2509.05137","title":"On the Learnability of Distribution Classes with Adaptive Adversaries","created":"2025-09-05","cited_by_count":1,"area":null},{"id":"2510.23938","title":"Scalable GPU-Based Integrity Verification for Large Machine Learning Models","created":"2025-10-27","cited_by_count":1,"area":null},{"id":"2602.07259","title":"Incentive-Aware AI Safety via Strategic Resource Allocation: A Stackelberg Security Games Perspective","created":"2026-02-06","cited_by_count":1,"area":null},{"id":"2602.09757","title":"Towards Poisoning Robustness Certification for Natural Language Generation","created":"2026-02-10","cited_by_count":1,"area":null},{"id":"2605.23721","title":"Is a Document Educational or Just Wikipedia-Style? -- Pitfalls of Classifier-Based Quality Filtering","created":"2026-05-21","cited_by_count":1,"area":null},{"id":"2606.17110","title":"Loss Landscape Poisoning: Targeted Extraction of Unseen Training Data from LLMs","created":"2026-06-15","cited_by_count":1,"area":null},{"id":"2607.11881","title":"Metacognition in LLMs: Foundations, Progress, and Opportunities","created":"2026-07-13","cited_by_count":1,"area":null},{"id":"2607.15267","title":"Pretraining Data Can Be Poisoned through Computational Propaganda","created":"2026-07-16","cited_by_count":1,"area":null},{"id":"2407.08159","title":"Model-agnostic clean-label backdoor mitigation in cybersecurity environments","created":"2024-07-11","cited_by_count":0,"area":null},{"id":"2407.10180","title":"Defending Against Repetitive Backdoor Attacks on Semi-supervised Learning through Lens of Rate-Distortion-Perception Trade-off","created":"2024-07-14","cited_by_count":0,"area":null},{"id":"2408.07558","title":"Sonic: Fast and Transferable Data Poisoning on Clustering Algorithms","created":"2024-08-14","cited_by_count":0,"area":null},{"id":"2505.06315","title":"Threat Modeling for AI: The Case for an Asset-Centric Approach","created":"2025-05-08","cited_by_count":0,"area":null},{"id":"2506.05171","title":"Towards provable probabilistic safety for scalable embodied AI systems","created":"2025-06-05","cited_by_count":0,"area":null},{"id":"2506.20573","title":"LARP: Learner-Agnostic Robust Data Prefiltering","created":"2025-06-25","cited_by_count":0,"area":null},{"id":"2507.01607","title":"SoK: On the Survivability of Backdoor Attacks on Unconstrained Face Recognition Systems","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2508.08583","title":"AI Security Map: Holistic Organization of AI Security Technologies and Impacts on Stakeholders","created":"2025-08-12","cited_by_count":0,"area":null},{"id":"2510.01929","title":"Inverse Language Modeling towards Robust and Grounded LLMs","created":"2025-10-02","cited_by_count":0,"area":null},{"id":"2510.10486","title":"MEASER: Malware embedding attacks on open-source LLMs","created":"2025-10-12","cited_by_count":0,"area":null},{"id":"2511.15763","title":"Identifying the Supply Chain of AI for Trustworthiness and Risk Management in Critical Applications","created":"2025-11-19","cited_by_count":0,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2605.15152","title":"Widening the Gap: Exploiting LLM Quantization via Outlier Injection","created":"2026-05-14","cited_by_count":0,"area":null}],"next_cursor":"100"}