{"total":348,"rows":[{"id":"2309.16039","title":"Effective Long-Context Scaling of Foundation Models","created":"2023-09-27","cited_by_count":303,"area":null},{"id":"2307.10169","title":"Challenges and Applications of Large Language Models","created":"2023-07-19","cited_by_count":254,"area":null},{"id":"2406.01171","title":"Two Tales of Persona in LLMs: A Survey of Role-Playing and Personalization","created":"2024-06-03","cited_by_count":208,"area":null},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2306.00622","title":"ReviewerGPT? An Exploratory Study on Using Large Language Models for Paper Reviewing","created":"2023-06-01","cited_by_count":122,"area":null},{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2409.00729","title":"ContextCite: Attributing Model Generation to Context","created":"2024-09-01","cited_by_count":98,"area":null},{"id":"2307.06865","title":"Effective Prompt Extraction from Language Models","created":"2023-07-13","cited_by_count":85,"area":null},{"id":"2403.06833","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","created":"2024-03-11","cited_by_count":81,"area":null},{"id":"2402.18649","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","created":"2024-02-28","cited_by_count":77,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2402.09880","title":"Inadequacies of Large Language Model Benchmarks in the Era of Generative Artificial Intelligence","created":"2024-02-15","cited_by_count":68,"area":null},{"id":"2405.04760","title":"Large Language Models for Cyber Security: A Systematic Literature Review","created":"2024-05-08","cited_by_count":68,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2402.01864","title":"(A)I Am Not a Lawyer, But...: Engaging Legal Experts towards Responsible LLM Policies for Legal Advice","created":"2024-02-02","cited_by_count":63,"area":null},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2404.01349","title":"Fairness in Large Language Models: A Taxonomic Survey","created":"2024-03-31","cited_by_count":58,"area":null},{"id":"2407.15847","title":"LLMmap: Fingerprinting For Large Language Models","created":"2024-07-22","cited_by_count":58,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2309.10254","title":"LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Plugins","created":"2023-09-19","cited_by_count":51,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2307.10719","title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?","created":"2023-07-20","cited_by_count":49,"area":null},{"id":"2402.04247","title":"Risks of AI Scientists: Prioritizing Safeguarding Over Autonomy","created":"2024-02-06","cited_by_count":49,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2306.11932","title":"Opportunities and Risks of LLMs for Scalable Deliberation with Polis","created":"2023-06-20","cited_by_count":42,"area":null},{"id":"2310.03185","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","created":"2023-10-04","cited_by_count":42,"area":null},{"id":"2501.10114","title":"Infrastructure for AI Agents","created":"2025-01-17","cited_by_count":41,"area":null},{"id":"2403.09539","title":"Logits of API-Protected LLMs Leak Proprietary Information","created":"2024-03-14","cited_by_count":40,"area":null},{"id":"2406.18382","title":"Adversarial Search Engine Optimization for Large Language Models","created":"2024-06-26","cited_by_count":40,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2402.16382","title":"Immunization against harmful fine-tuning attacks","created":"2024-02-26","cited_by_count":35,"area":null},{"id":"2402.11755","title":"SPML: A DSL for Defending Language Models Against Prompt Attacks","created":"2024-02-19","cited_by_count":34,"area":null},{"id":"2311.09447","title":"How Trustworthy are Open-Source LLMs? An Assessment under Malicious Demonstrations Shows their Vulnerabilities","created":"2023-11-15","cited_by_count":33,"area":null},{"id":"2401.03315","title":"Malla: Demystifying Real-world Large Language Model Integrated Malicious Services","created":"2024-01-06","cited_by_count":33,"area":null},{"id":"2407.18369","title":"AI Safety in Generative AI Large Language Models: A Survey","created":"2024-07-06","cited_by_count":33,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2310.11409","title":"LLMs as Hackers: Autonomous Linux Privilege Escalation Attacks","created":"2023-10-17","cited_by_count":27,"area":null},{"id":"2502.19145","title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems","created":"2025-02-26","cited_by_count":27,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2404.06921","title":"GoEX: Perspectives and Designs Towards a Runtime for Autonomous LLM Applications","created":"2024-04-10","cited_by_count":23,"area":null},{"id":"2404.16251","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","created":"2024-04-24","cited_by_count":23,"area":null},{"id":"2410.03055","title":"Permissive Information-Flow Analysis for Large Language Models","created":"2024-10-04","cited_by_count":22,"area":null},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2402.18216","title":"LLM Task Interference: An Initial Study on the Impact of Task-Switch in Conversational History","created":"2024-02-28","cited_by_count":19,"area":null},{"id":"2406.12137","title":"IDs for AI Systems","created":"2024-06-17","cited_by_count":19,"area":null},{"id":"2505.18893","title":"Reality Check: A New Evaluation Ecosystem Is Necessary to Understand AI's Real World Effects","created":"2025-05-24","cited_by_count":19,"area":null},{"id":"2308.09183","title":"RatGPT: Turning online LLMs into Proxies for Malware Attacks","created":"2023-08-17","cited_by_count":18,"area":null},{"id":"2405.15604","title":"Text Generation: A Systematic Literature Review of Tasks, Evaluation, and Challenges","created":"2024-05-24","cited_by_count":18,"area":null},{"id":"2602.11865","title":"Intelligent AI Delegation","created":"2026-02-12","cited_by_count":18,"area":null},{"id":"2312.11681","title":"Designing LLM Chains by Adapting Techniques from Crowdsourcing Workflows","created":"2023-12-18","cited_by_count":17,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2412.12140","title":"Frontier AI systems have surpassed the self-replicating red line","created":"2024-12-09","cited_by_count":17,"area":null},{"id":"2406.06737","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","created":"2024-06-10","cited_by_count":16,"area":null},{"id":"2502.04951","title":"Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search","created":"2025-02-07","cited_by_count":16,"area":null},{"id":"2506.06485","title":"Task Matters: Knowledge Requirements Shape LLM Responses to Context-Memory Conflict","created":"2025-06-06","cited_by_count":16,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2502.02958","title":"Position: Editing Large Language Models Poses Serious Safety Risks","created":"2025-02-05","cited_by_count":15,"area":null},{"id":"2406.01364","title":"BELLS: A Framework Towards Future Proof Benchmarks for the Evaluation of LLM Safeguards","created":"2024-06-03","cited_by_count":14,"area":null},{"id":"2408.13247","title":"An In-Depth Investigation of Data Collection in LLM App Ecosystems","created":"2024-08-23","cited_by_count":14,"area":null},{"id":"2502.19852","title":"ConvCodeWorld: Benchmarking Conversational Code Generation in Reproducible Feedback Environments","created":"2025-02-27","cited_by_count":14,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2310.19181","title":"From Chatbots to PhishBots? -- Preventing Phishing scams created using ChatGPT, Google Bard and Claude","created":"2023-10-29","cited_by_count":13,"area":null},{"id":"2409.01630","title":"SafeEmbodAI: a Safety Framework for Mobile Robots in Embodied AI Systems","created":"2024-09-03","cited_by_count":13,"area":null},{"id":"2506.04202","title":"TracLLM: A Generic Framework for Attributing Long Context LLMs","created":"2025-06-04","cited_by_count":13,"area":null},{"id":"2603.20953","title":"Before the Tool Call: Deterministic Pre-Action Authorization for Autonomous AI Agents","created":"2026-03-21","cited_by_count":13,"area":null},{"id":"2407.02472","title":"ValueScope: Unveiling Implicit Norms and Values via Return Potential Model of Social Interactions","created":"2024-07-02","cited_by_count":12,"area":null},{"id":"2512.16856","title":"Distributional AGI Safety","created":"2025-12-18","cited_by_count":12,"area":null},{"id":"2502.01349","title":"Bias Beware: The Impact of Cognitive Biases on LLM-Driven Product Recommendations","created":"2025-02-03","cited_by_count":11,"area":null},{"id":"2601.07185","title":"Defenses Against Prompt Attacks Learn Surface Heuristics","created":"2026-01-12","cited_by_count":11,"area":null},{"id":"2310.18360","title":"Guiding LLM to Fool Itself: Automatically Manipulating Machine Reading Comprehension Shortcut Triggers","created":"2023-10-24","cited_by_count":10,"area":null},{"id":"2407.00125","title":"A Survey on Failure Analysis and Fault Injection in AI Systems","created":"2024-06-28","cited_by_count":10,"area":null},{"id":"2505.13348","title":"Investigating the Vulnerability of LLM-as-a-Judge Architectures to Prompt-Injection Attacks","created":"2025-05-19","cited_by_count":10,"area":null},{"id":"2507.19364","title":"From the Fluency Fallacy to the Micro-to-Macro Validity Gap: Opportunities and Pitfalls of LLMs in Social Simulation","created":"2025-07-25","cited_by_count":10,"area":null},{"id":"2607.28802","title":"Model or Harness? An Interaction-Centric Taxonomy for Localizing Agent Failures","created":"2026-07-30","cited_by_count":10,"area":null},{"id":"2408.04643","title":"Risks, Causes, and Mitigations of Widespread Deployments of Large Language Models (LLMs): A Survey","created":"2024-08-01","cited_by_count":8,"area":null},{"id":"2411.08243","title":"Beyond the Safety Bundle: Auditing the Helpful and Harmless Dataset","created":"2024-11-12","cited_by_count":8,"area":null},{"id":"2503.19540","title":"FLEX: A Benchmark for Evaluating Robustness of Fairness in Large Language Models","created":"2025-03-25","cited_by_count":8,"area":null},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2603.12230","title":"Security Considerations for Artificial Intelligence Agents","created":"2026-03-12","cited_by_count":8,"area":null},{"id":"2604.03976","title":"Quantifying Trust: Financial Risk Management for Trustworthy AI Agents","created":"2026-04-05","cited_by_count":8,"area":null},{"id":"2406.00199","title":"Exfiltration of personal information from ChatGPT via prompt injection","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2405.11612","title":"Sociotechnical Implications of Generative Artificial Intelligence for Information Access","created":"2024-05-19","cited_by_count":6,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2412.08099","title":"Adversarial Vulnerabilities in Large Language Models for Time Series Forecasting","created":"2024-12-11","cited_by_count":6,"area":null},{"id":"2606.01494","title":"ClawHub Security Signals: When VirusTotal, Static Analysis, and SkillSpector Disagree","created":"2026-05-31","cited_by_count":6,"area":null},{"id":"2606.10581","title":"ParaBridge: Bridging Paralinguistic Perception and Dialogue Behavior in Speech Language Models","created":"2026-06-09","cited_by_count":6,"area":null},{"id":"2406.01882","title":"HoneyGPT: Breaking the Trilemma in Terminal Honeypots with Large Language Model","created":"2024-06-04","cited_by_count":5,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2410.09569","title":"Are You Human? An Adversarial Benchmark to Expose LLMs","created":"2024-10-12","cited_by_count":5,"area":null},{"id":"2501.00745","title":"Dynamics of Adversarial Attacks on Large Language Model-Based Search Engines","created":"2025-01-01","cited_by_count":5,"area":null},{"id":"2503.23175","title":"Large Language Models Are Unreliable for Cyber Threat Intelligence","created":"2025-03-29","cited_by_count":5,"area":null},{"id":"2506.18932","title":"AI Safety vs. AI Security: Demystifying the Distinction and Boundaries","created":"2025-06-21","cited_by_count":5,"area":null}],"next_cursor":"100"}