{"total":59,"rows":[{"id":"2402.06363","title":"StruQ: Defending Against Prompt Injection with Structured Queries","created":"2024-02-09","cited_by_count":375,"area":"safety"},{"id":"2311.03191","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","created":"2023-11-06","cited_by_count":367,"area":"safety"},{"id":"2308.07308","title":"LLM Self Defense: By Self Examination, LLMs Know They Are Being Tricked","created":"2023-08-14","cited_by_count":244,"area":"safety"},{"id":"2410.16454","title":"Catastrophic Failure of LLM Unlearning via Quantization","created":"2024-10-21","cited_by_count":81,"area":"safety"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2307.03941","title":"Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutions","created":"2023-07-08","cited_by_count":60,"area":"safety"},{"id":"2305.06360","title":"Exploring the Landscape of Machine Unlearning: A Comprehensive Survey and Taxonomy","created":"2023-05-10","cited_by_count":51,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2401.09002","title":"AttackEval: How to Evaluate the Effectiveness of Jailbreak Attacking on Large Language Models","created":"2024-01-17","cited_by_count":28,"area":"safety"},{"id":"2309.13322","title":"From Text to Source: Results in Detecting Large Language Model-Generated Content","created":"2023-09-23","cited_by_count":26,"area":"safety"},{"id":"2409.08087","title":"Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks","created":"2024-09-12","cited_by_count":26,"area":"safety"},{"id":"2410.17509","title":"WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models","created":"2024-10-23","cited_by_count":26,"area":"safety"},{"id":"2503.10566","title":"ASIDE: Architectural Separation of Instructions and Data in Language Models","created":"2025-03-13","cited_by_count":24,"area":"safety"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2403.03536","title":"Towards Efficient and Effective Unlearning of Large Language Models for Recommendation","created":"2024-03-06","cited_by_count":16,"area":"safety"},{"id":"2310.02164","title":"A Survey of Graph Unlearning","created":"2023-08-23","cited_by_count":12,"area":"safety"},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2503.09117","title":"GRU: Mitigating the Trade-off between Unlearning and Retention for LLMs","created":"2025-03-12","cited_by_count":12,"area":"safety"},{"id":"2504.18564","title":"DualBreach: Efficient Dual-Jailbreaking via Target-Driven Initialization and Multi-Target Optimization","created":"2025-04-21","cited_by_count":12,"area":"safety"},{"id":"2509.24296","title":"DiffuGuard: How Intrinsic Safety is Lost and Found in Diffusion Large Language Models","created":"2025-09-29","cited_by_count":12,"area":"safety"},{"id":"2306.08833","title":"Safeguarding Crowdsourcing Surveys from ChatGPT with Prompt Injection","created":"2023-06-15","cited_by_count":11,"area":"safety"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2505.02862","title":"Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMs","created":"2025-05-03","cited_by_count":9,"area":"safety"},{"id":"2404.18534","title":"Evaluating and Mitigating Linguistic Discrimination in Large Language Models","created":"2024-04-29","cited_by_count":8,"area":"safety"},{"id":"2407.20181","title":"Blockchain for Large Language Model Security and Safety: A Holistic Survey","created":"2024-07-26","cited_by_count":8,"area":"safety"},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2308.13768","title":"Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content","created":"2023-08-26","cited_by_count":7,"area":"safety"},{"id":"2411.07122","title":"SCAR: Sparse Conditioned Autoencoders for Concept Detection and Steering in LLMs","created":"2024-11-11","cited_by_count":7,"area":"safety"},{"id":"2402.07518","title":"Efficient and Universal Watermarking for LLM-Generated Code Detection","created":"2024-02-12","cited_by_count":6,"area":"safety"},{"id":"2509.06350","title":"Mask-GCG: Are All Tokens in Adversarial Suffixes Necessary for Jailbreak Attacks?","created":"2025-09-08","cited_by_count":6,"area":"safety"},{"id":"2407.20271","title":"Learn while Unlearn: An Iterative Unlearning Framework for Generative Language Models","created":"2024-07-25","cited_by_count":5,"area":"safety"},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2411.19335","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","created":"2024-11-28","cited_by_count":5,"area":"safety"},{"id":"2505.17519","title":"Chain-of-Lure: A Universal Jailbreak Attack Framework using Unconstrained Synthetic Narratives","created":"2025-05-23","cited_by_count":5,"area":"safety"},{"id":"2510.22124","title":"Efficient Utility-Preserving Machine Unlearning with Implicit Gradient Surgery","created":"2025-10-25","cited_by_count":5,"area":"safety"},{"id":"2510.18728","title":"HarmNet: A Framework for Adaptive Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-10-21","cited_by_count":4,"area":"safety"},{"id":"2606.06946","title":"Auditing Training Data in Domain-adapted LLMs: LoRA-MINT","created":"2026-06-05","cited_by_count":4,"area":"safety"},{"id":"2402.08290","title":"The Effect of Data Poisoning on Counterfactual Explanations","created":"2024-02-13","cited_by_count":3,"area":"safety"},{"id":"2405.14490","title":"Impact of Non-Standard Unicode Characters on Security and Comprehension in Large Language Models","created":"2024-05-23","cited_by_count":3,"area":"safety"},{"id":"2409.19708","title":"A Certified Robust Watermark For Large Language Models","created":"2024-09-29","cited_by_count":3,"area":"safety"},{"id":"2506.07795","title":"LLM Unlearning Should Be Form-Independent","created":"2025-06-09","cited_by_count":3,"area":"safety"},{"id":"2510.15106","title":"PoTS: Proof-of-Training-Steps for Backdoor Detection in Large Language Models","created":"2025-10-16","cited_by_count":3,"area":"safety"},{"id":"2511.16278","title":"\"To Survive, I Must Defect\": Jailbreaking LLMs via the Game-Theory Scenarios","created":"2025-11-20","cited_by_count":3,"area":"safety"},{"id":"2505.01315","title":"Helping Large Language Models Protect Themselves: An Enhanced Filtering and Summarization System","created":"2025-05-02","cited_by_count":2,"area":"safety"},{"id":"2508.08629","title":"Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment","created":"2025-08-12","cited_by_count":2,"area":"safety"},{"id":"2509.23362","title":"Dual-Space Smoothness for Robust and Balanced LLM Unlearning","created":"2025-09-27","cited_by_count":2,"area":"safety"},{"id":"2603.02588","title":"ExpGuard: LLM Content Moderation in Specialized Domains","created":"2026-03-03","cited_by_count":2,"area":"safety"},{"id":"2608.08027","title":"BASIS: Breach-Aware Selective Prompt Injection Shielding with Prefill Attention Probes","created":"2026-08-08","cited_by_count":2,"area":"safety"},{"id":"2508.06153","title":"SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs","created":"2025-08-08","cited_by_count":1,"area":"safety"},{"id":"2508.21004","title":"Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution","created":"2025-08-28","cited_by_count":1,"area":"safety"},{"id":"2503.05684","title":"Fairness-Aware Low-Rank Representation Fine-Tuning","created":"2025-03-07","cited_by_count":0,"area":"safety"},{"id":"2505.18672","title":"Concept Concentration for Faithful Representation Intervention","created":"2025-05-24","cited_by_count":0,"area":"safety"},{"id":"2509.12574","title":"Yet Another Watermark for Large Language Models","created":"2025-09-16","cited_by_count":0,"area":"safety"},{"id":"2511.11784","title":"NegBLEURT Forest: Leveraging Inconsistencies for Detecting Jailbreak Attacks","created":"2025-11-14","cited_by_count":0,"area":"safety"},{"id":"2512.13325","title":"Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models","created":"2025-12-15","cited_by_count":0,"area":"safety"},{"id":"2512.14753","title":"CODE ACROSTIC: Robust Watermarking for Code Generation","created":"2025-12-14","cited_by_count":0,"area":"safety"},{"id":"2602.20102","title":"BarrierSteer: LLM Safety via Learning Barrier Steering","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2606.13737","title":"FreoStream:Enhancing Stream Guardrails via Future-Aware Reasoning and Safety-Aligned Optimization","created":"2026-06-11","cited_by_count":0,"area":"safety"}],"next_cursor":null}