{"total":103,"rows":[{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2404.16873","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","created":"2024-04-21","cited_by_count":156,"area":"safety"},{"id":"2305.00118","title":"Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4","created":"2023-04-28","cited_by_count":125,"area":"safety"},{"id":"2406.07933","title":"Large Language Model Unlearning via Embedding-Corrupted Prompts","created":"2024-06-12","cited_by_count":116,"area":"safety"},{"id":"2406.06443","title":"LLM Dataset Inference: Did you train on my dataset?","created":"2024-06-10","cited_by_count":110,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2402.19464","title":"Curiosity-driven Red-teaming for Large Language Models","created":"2024-02-29","cited_by_count":88,"area":"safety"},{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72,"area":"safety"},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2409.19798","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","created":"2024-09-29","cited_by_count":50,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2502.17578","title":"How Do Large Language Monkeys Get Their Power (Laws)?","created":"2025-02-24","cited_by_count":43,"area":"safety"},{"id":"2403.01267","title":"Dissecting Language Models: Machine Unlearning via Selective Pruning","created":"2024-03-02","cited_by_count":42,"area":"safety"},{"id":"2402.10892","title":"Proving membership in LLM pretraining data via data watermarks","created":"2024-02-16","cited_by_count":40,"area":"safety"},{"id":"2404.02062","title":"Digital Forgetting in Large Language Models: A Survey of Unlearning Methods","created":"2024-04-02","cited_by_count":40,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2410.12949","title":"Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization","created":"2024-10-16","cited_by_count":35,"area":"safety"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2312.11658","title":"Traces of Memorisation in Large Language Models for Code","created":"2023-12-18","cited_by_count":29,"area":"safety"},{"id":"2309.13322","title":"From Text to Source: Results in Detecting Large Language Model-Generated Content","created":"2023-09-23","cited_by_count":26,"area":"safety"},{"id":"2402.14845","title":"Purifying Large Language Models by Ensembling a Small Language Model","created":"2024-02-19","cited_by_count":25,"area":"safety"},{"id":"2411.00154","title":"Scaling Up Membership Inference: When and How Attacks Succeed on Large Language Models","created":"2024-10-31","cited_by_count":24,"area":"safety"},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2409.13745","title":"Context-Aware Membership Inference Attacks against Pre-trained Large Language Models","created":"2024-09-11","cited_by_count":22,"area":"safety"},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2404.11262","title":"Sampling-based Pseudo-Likelihood for Membership Inference Attacks","created":"2024-04-17","cited_by_count":20,"area":"safety"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2409.11844","title":"MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts","created":"2024-09-18","cited_by_count":18,"area":"safety"},{"id":"2406.10218","title":"Semantic Membership Inference Attack against Large Language Models","created":"2024-06-14","cited_by_count":17,"area":"safety"},{"id":"2601.02671","title":"Extracting books from production language models","created":"2026-01-06","cited_by_count":17,"area":"safety"},{"id":"2502.19726","title":"Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Training","created":"2025-02-27","cited_by_count":15,"area":"safety"},{"id":"2404.13660","title":"Trojan Detection in Large Language Models: Insights from The Trojan Detection Challenge","created":"2024-04-21","cited_by_count":14,"area":"safety"},{"id":"2406.13348","title":"Textual Unlearning Gives a False Sense of Unlearning","created":"2024-06-19","cited_by_count":13,"area":"safety"},{"id":"2408.15488","title":"Legilimens: Practical and Unified Content Moderation for Large Language Model Services","created":"2024-08-28","cited_by_count":13,"area":"safety"},{"id":"2409.01193","title":"CLIBE: Detecting Dynamic Backdoors in Transformer-based NLP Models","created":"2024-09-02","cited_by_count":13,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2408.09878","title":"Transferring Backdoors between Large Language Models by Knowledge Distillation","created":"2024-08-19","cited_by_count":12,"area":"safety"},{"id":"2410.02159","title":"Mitigating Memorization In Language Models","created":"2024-10-03","cited_by_count":12,"area":"safety"},{"id":"2410.06467","title":"WAPITI: A Watermark for Finetuned Open-Source LLMs","created":"2024-10-09","cited_by_count":12,"area":"safety"},{"id":"2503.04036","title":"Robust Data Watermarking in Language Models by Injecting Fictitious Knowledge","created":"2025-03-06","cited_by_count":12,"area":"safety"},{"id":"2510.19796","title":"Blackbox Model Provenance via Palimpsestic Membership Inference","created":"2025-10-22","cited_by_count":11,"area":"safety"},{"id":"2411.19876","title":"LUMIA: Linear probing for Unimodal and MultiModal Membership Inference Attacks leveraging internal LLM states","created":"2024-11-29","cited_by_count":10,"area":"safety"},{"id":"2506.10424","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","created":"2025-06-12","cited_by_count":10,"area":"safety"},{"id":"2506.13009","title":"Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective","created":"2025-06-16","cited_by_count":9,"area":"safety"},{"id":"2507.18302","title":"LoRA-Leak: Membership Inference Attacks Against LoRA Fine-tuned Language Models","created":"2025-07-24","cited_by_count":9,"area":"safety"},{"id":"2408.15207","title":"Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attacks","created":"2024-08-27","cited_by_count":8,"area":"safety"},{"id":"2508.09603","title":"The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage","created":"2025-08-13","cited_by_count":7,"area":"safety"},{"id":"2509.13755","title":"Scrub It Out! Erasing Sensitive Memorization in Code Language Models via Machine Unlearning","created":"2025-09-17","cited_by_count":7,"area":"safety"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2412.13475","title":"A Statistical and Multi-Perspective Revisiting of the Membership Inference Attack in Large Language Models","created":"2024-12-18","cited_by_count":6,"area":"safety"},{"id":"2506.05126","title":"Membership Inference Attacks on Sequence Models","created":"2025-06-05","cited_by_count":6,"area":"safety"},{"id":"2509.25673","title":"Mitigating Biases in Language Models via Bias Unlearning","created":"2025-09-30","cited_by_count":6,"area":"safety"},{"id":"2408.05968","title":"Nob-MIAs: Non-biased Membership Inference Attacks Assessment on Large Language Models with Ex-Post Dataset Construction","created":"2024-08-12","cited_by_count":5,"area":"safety"},{"id":"2409.14513","title":"Order of Magnitude Speedups for LLM Membership Inference","created":"2024-09-22","cited_by_count":5,"area":"safety"},{"id":"2501.08454","title":"Tag&Tab: Pretraining Data Detection in Large Language Models Using Keyword-Based Membership Inference Attack","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2506.12484","title":"Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization","created":"2025-06-14","cited_by_count":4,"area":"safety"},{"id":"2507.11128","title":"What Should LLMs Forget? Quantifying Personal Data in LLMs for Right-to-Be-Forgotten Requests","created":"2025-07-15","cited_by_count":4,"area":"safety"},{"id":"2510.25117","title":"A Survey on Unlearning in Large Language Models","created":"2025-10-29","cited_by_count":4,"area":"safety"},{"id":"2601.18110","title":"AttenMIA: LLM Membership Inference Attack through Attention Signals","created":"2026-01-26","cited_by_count":4,"area":"safety"},{"id":"2403.15740","title":"Protecting Copyrighted Material with Unique Identifiers in Large Language Model Training","created":"2024-03-23","cited_by_count":3,"area":"safety"},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2509.05449","title":"Neural Breadcrumbs: Membership Inference Attacks on LLMs Through Hidden State and Attention Pattern Analysis","created":"2025-09-05","cited_by_count":3,"area":"safety"},{"id":"2510.05699","title":"Membership Inference Attacks on Tokenizers of Large Language Models","created":"2025-10-07","cited_by_count":3,"area":"safety"},{"id":"2510.17006","title":"Online Learning Defense against Iterative Jailbreak Attacks via Prompt Optimization","created":"2025-10-19","cited_by_count":3,"area":"safety"},{"id":"2512.16292","title":"In-Context Probing for Membership Inference in Fine-Tuned Language Models","created":"2025-12-18","cited_by_count":3,"area":"safety"},{"id":"2601.11314","title":"Membership Inference on LLMs in the Wild","created":"2026-01-16","cited_by_count":3,"area":"safety"},{"id":"2606.17464","title":"CheckMIABench: Firm Foundations For Membership Inference Attacks on Language Models","created":"2026-06-16","cited_by_count":3,"area":"safety"},{"id":"2506.06003","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","created":"2025-06-06","cited_by_count":2,"area":"safety"},{"id":"2506.20941","title":"Revisiting the Past: Data Unlearning with Model State History","created":"2025-06-26","cited_by_count":2,"area":"safety"},{"id":"2510.19492","title":"Machine Text Detectors are Membership Inference Attacks","created":"2025-10-22","cited_by_count":2,"area":"safety"},{"id":"2602.02819","title":"Causal Evaluation of Membership Inference Attacks","created":"2026-02-02","cited_by_count":2,"area":"safety"},{"id":"2605.01129","title":"Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2410.08069","title":"Unlearning-based Neural Interpretations","created":"2024-10-10","cited_by_count":1,"area":"safety"},{"id":"2505.11837","title":"On Membership Inference Attacks in Knowledge Distillation","created":"2025-05-17","cited_by_count":1,"area":"safety"},{"id":"2506.14474","title":"LexiMark: Robust Watermarking via Lexical Substitutions to Enhance Membership Verification of an LLM's Textual Training Data","created":"2025-06-17","cited_by_count":1,"area":"safety"},{"id":"2508.01268","title":"Win-k: Improved Membership Inference Attacks on Small Language Models","created":"2025-08-02","cited_by_count":1,"area":"safety"},{"id":"2508.12220","title":"Unlearning at Scale: State-Exact Trace-Preserving Deletion in Billion-Parameter Language Models","created":"2025-08-17","cited_by_count":1,"area":"safety"},{"id":"2601.01296","title":"Aggressive Compression Enables LLM Weight Theft","created":"2026-01-03","cited_by_count":1,"area":"safety"},{"id":"2601.15595","title":"Data-Free Privacy-Preserving for LLMs via Model Inversion and Selective Unlearning","created":"2026-01-22","cited_by_count":1,"area":"safety"},{"id":"2604.03199","title":"Learning the Signature of Memorization in Autoregressive Language Models","created":"2026-04-03","cited_by_count":1,"area":"safety"},{"id":"2607.05694","title":"Beyond Heuristic Tuning: Power-Calibrated LLM Watermarking","created":"2026-07-06","cited_by_count":1,"area":"safety"},{"id":"2607.13003","title":"Watermark Forensics for Generative Models: An Information-Theoretic Perspective","created":"2026-07-14","cited_by_count":1,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2510.09471","title":"Getting Your Indices in a Row: Full-Text Search for LLM Training Data for Real World","created":"2025-10-10","cited_by_count":0,"area":"safety"},{"id":"2511.00192","title":"EL-MIA: Quantifying Membership Inference Risks of Sensitive Entities in LLMs","created":"2025-10-31","cited_by_count":0,"area":"safety"},{"id":"2601.12937","title":"On the Evidentiary Limits of Membership Inference for Copyright Auditing","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2605.01699","title":"Probe-Geometry Alignment: Erasing the Cross-Sequence Memorization Signature Below Chance","created":"2026-05-03","cited_by_count":0,"area":"safety"},{"id":"2605.04116","title":"Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering","created":"2026-05-05","cited_by_count":0,"area":"safety"},{"id":"2605.19377","title":"The Evaluation Game: Beyond Static LLM Benchmarking","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2605.30462","title":"idSCD: Identifying Training Datasets through Semantic Correlation Descriptors","created":"2026-05-28","cited_by_count":0,"area":"safety"},{"id":"2606.06502","title":"Subtle Injection for Ground-truth Inference of LLM Training Data","created":"2026-05-18","cited_by_count":0,"area":"safety"},{"id":"2606.23030","title":"Have You Ever Seen Them? Entity-level Membership Inference through Interrogating Large Language Models","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2607.25451","title":"Bits and Memories: Measuring Verbatim Extraction Across LLM Quantization","created":"2026-07-28","cited_by_count":0,"area":"safety"},{"id":"2608.00144","title":"Leak It: Per-Document Extraction Beyond Aggregate Membership Inference","created":"2026-07-31","cited_by_count":0,"area":"safety"},{"id":"2608.12652","title":"Excess Separability: Nuisance-Controlled Residual-Stream Probing for Benchmark Contamination Detection","created":"2026-08-12","cited_by_count":0,"area":"safety"},{"id":"2608.22218","title":"PURA: Provably Unbiased and Robust Multi-Bit Watermarking for AI-Generated Text Attribution","created":"2026-08-23","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}