{"total":48,"rows":[{"id":"2305.15324","title":"Model evaluation for extreme risks","created":"2023-05-24","cited_by_count":177,"area":null},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2412.08686","title":"LatentQA: Teaching LLMs to Decode Activations Into Natural Language","created":"2024-12-11","cited_by_count":51,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2402.11493","title":"Benchmarking Knowledge Boundary for Large Language Models: A Different Perspective on Model Evaluation","created":"2024-02-18","cited_by_count":38,"area":null},{"id":"2306.12105","title":"Mass-Producing Failures of Multimodal Systems with Language Models","created":"2023-06-21","cited_by_count":36,"area":null},{"id":"2405.19334","title":"LLMs Meet Multimodal Generation and Editing: A Survey","created":"2024-05-29","cited_by_count":35,"area":null},{"id":"2406.14595","title":"Adversaries Can Misuse Combinations of Safe Models","created":"2024-06-20","cited_by_count":32,"area":null},{"id":"2406.18841","title":"Navigating LLM Ethics: Advancements, Challenges, and Future Directions","created":"2024-05-14","cited_by_count":28,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2310.04445","title":"LoFT: Local Proxy Fine-tuning For Improving Transferability Of Adversarial Attacks Against Large Language Model","created":"2023-10-02","cited_by_count":21,"area":null},{"id":"2405.09373","title":"PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Models","created":"2024-05-15","cited_by_count":20,"area":null},{"id":"2502.16797","title":"Forecasting Rare Language Model Behaviors","created":"2025-02-24","cited_by_count":19,"area":null},{"id":"2405.02466","title":"ProFLingo: A Fingerprinting-based Intellectual Property Protection Scheme for Large Language Models","created":"2024-05-03","cited_by_count":16,"area":null},{"id":"2405.14488","title":"MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability","created":"2024-05-23","cited_by_count":15,"area":null},{"id":"2406.03993","title":"Assessing LLMs for Zero-shot Abstractive Summarization Through the Lens of Relevance Paraphrasing","created":"2024-06-06","cited_by_count":11,"area":null},{"id":"2405.00588","title":"Are Models Biased on Text without Gender-related Language?","created":"2024-05-01","cited_by_count":10,"area":null},{"id":"2402.09546","title":"How Secure Are Large Language Models (LLMs) for Navigation in Urban Environments?","created":"2024-02-14","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2410.13901","title":"SoK: Prompt Hacking of Large Language Models","created":"2024-10-16","cited_by_count":7,"area":null},{"id":"2502.00840","title":"Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense","created":"2025-02-02","cited_by_count":7,"area":null},{"id":"2502.19320","title":"Shh, don't say that! Domain Certification in LLMs","created":"2025-02-26","cited_by_count":7,"area":null},{"id":"2506.01790","title":"IF-GUIDE: Influence Function-Guided Detoxification of LLMs","created":"2025-06-02","cited_by_count":7,"area":null},{"id":"2406.14545","title":"Unmasking Database Vulnerabilities: Zero-Knowledge Schema Inference Attacks in Text-to-SQL Systems","created":"2024-06-20","cited_by_count":6,"area":null},{"id":"2501.02997","title":"CALM: Curiosity-Driven Auditing for Large Language Models","created":"2025-01-06","cited_by_count":6,"area":null},{"id":"2402.01702","title":"Fluent dreaming for language models","created":"2024-01-24","cited_by_count":5,"area":null},{"id":"2501.00745","title":"Dynamics of Adversarial Attacks on Large Language Model-Based Search Engines","created":"2025-01-01","cited_by_count":5,"area":null},{"id":"2503.04332","title":"The Challenge of Identifying the Origin of Black-Box Large Language Models","created":"2025-03-06","cited_by_count":5,"area":null},{"id":"2604.19790","title":"Hidden Reliability Risks in Large Language Models: Systematic Identification of Precision-Induced Output Disagreements","created":"2026-04-02","cited_by_count":5,"area":null},{"id":"2410.06287","title":"Non-Halting Queries: Exploiting Fixed Points in LLMs","created":"2024-10-08","cited_by_count":4,"area":null},{"id":"2503.04113","title":"Uncovering Gaps in How Humans and LLMs Interpret Subjective Language","created":"2025-03-06","cited_by_count":4,"area":null},{"id":"2407.01157","title":"Unaligning Everything: Or Aligning Any Text to Any Image in Multimodal Models","created":"2024-07-01","cited_by_count":3,"area":null},{"id":"2407.11059","title":"Was it Slander? Towards Exact Inversion of Generative Language Models","created":"2024-07-10","cited_by_count":3,"area":null},{"id":"2605.16198","title":"Formal Methods Meet LLMs: Auditing, Monitoring, and Intervention for Compliance of Advanced AI Systems","created":"2026-05-15","cited_by_count":3,"area":null},{"id":"2401.07441","title":"Stability Analysis of ChatGPT-based Sentiment Analysis in AI Quality Assurance","created":"2024-01-15","cited_by_count":2,"area":null},{"id":"2411.15222","title":"Rethinking the Intermediate Features in Adversarial Attacks: Misleading Robotic Models via Adversarial Distillation","created":"2024-11-21","cited_by_count":2,"area":null},{"id":"2509.06807","title":"MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security","created":"2025-09-08","cited_by_count":1,"area":null},{"id":"2512.11783","title":"Super Suffixes: Bypassing Text Generation Alignment and Guard Models Simultaneously","created":"2025-12-12","cited_by_count":1,"area":null},{"id":"2411.16702","title":"A Clinical Trial Design Approach to Auditing Language Models in Healthcare Setting","created":"2024-11-11","cited_by_count":0,"area":null},{"id":"2501.10606","title":"Differentiable Adversarial Attacks for Marked Temporal Point Processes","created":"2025-01-17","cited_by_count":0,"area":null},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2506.15735","title":"ContextBench: Modifying Contexts for Targeted Latent Activation","created":"2025-06-15","cited_by_count":0,"area":null},{"id":"2510.21184","title":"Reducing the Probability of Undesirable Outputs in Language Models Using Probabilistic Inference","created":"2025-10-24","cited_by_count":0,"area":null},{"id":"2602.11044","title":"Language Model Inversion through End-to-End Differentiation","created":"2026-02-11","cited_by_count":0,"area":null}],"next_cursor":null}