{"total":76,"rows":[{"id":"2309.15025","title":"Large Language Model Alignment: A Survey","created":"2023-09-26","cited_by_count":243,"area":"alignment"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2403.17710","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","created":"2024-03-26","cited_by_count":143,"area":"alignment"},{"id":"2311.14455","title":"Universal Jailbreak Backdoors from Poisoned Human Feedback","created":"2023-11-24","cited_by_count":128,"area":"alignment"},{"id":"2406.03007","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","created":"2024-06-05","cited_by_count":115,"area":"agents"},{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110,"area":"safety"},{"id":"2403.13355","title":"BadEdit: Backdooring large language models by model editing","created":"2024-03-20","cited_by_count":96,"area":"safety"},{"id":"2306.05949","title":"Evaluating the Social Impact of Generative AI Systems in Systems and Society","created":"2023-06-09","cited_by_count":92,"area":null},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2405.03644","title":"When LLMs Meet Cybersecurity: A Systematic Literature Review","created":"2024-05-06","cited_by_count":71,"area":null},{"id":"2405.13401","title":"TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Models","created":"2024-05-22","cited_by_count":67,"area":"rag"},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2305.08005","title":"Beyond the Safeguards: Exploring the Security Risks of ChatGPT","created":"2023-05-13","cited_by_count":36,"area":null},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2404.05530","title":"Best-of-Venom: Attacking RLHF by Injecting Poisoned Preference Data","created":"2024-04-08","cited_by_count":35,"area":"alignment"},{"id":"2306.05480","title":"Artificial General Intelligence for Medical Imaging Analysis","created":"2023-06-08","cited_by_count":32,"area":null},{"id":"2311.09641","title":"RLHFPoison: Reward Poisoning Attack for Reinforcement Learning with Human Feedback in Large Language Models","created":"2023-11-16","cited_by_count":32,"area":"alignment"},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2404.14461","title":"Competition Report: Finding Universal Jailbreak Backdoors in Aligned LLMs","created":"2024-04-22","cited_by_count":28,"area":"safety"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2410.14425","title":"Unlearning Backdoor Attacks for LLMs with Weak-to-Strong Knowledge Distillation","created":"2024-10-18","cited_by_count":27,"area":"safety"},{"id":"2509.03871","title":"A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models","created":"2025-09-04","cited_by_count":25,"area":"lr"},{"id":"2506.16447","title":"Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models","created":"2025-06-19","cited_by_count":19,"area":"alignment"},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2505.12567","title":"A Survey of Attacks on Large Language Models","created":"2025-05-18","cited_by_count":15,"area":"agents"},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2405.02765","title":"Has this Fact been Edited? Detecting Knowledge Edits in Language Models","created":"2024-05-04","cited_by_count":14,"area":null},{"id":"2412.05734","title":"LeakAgent: RL-based Red-teaming Agent for LLM Privacy Leakage","created":"2024-12-07","cited_by_count":13,"area":"agents"},{"id":"2309.17319","title":"Building Privacy-Preserving and Secure Geospatial Artificial Intelligence Foundation Models","created":"2023-09-29","cited_by_count":12,"area":null},{"id":"2311.11415","title":"A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models","created":"2023-11-19","cited_by_count":12,"area":null},{"id":"2501.18638","title":"Graph of Attacks with Pruning: Optimizing Stealthy Jailbreak Prompt Generation for Enhanced LLM Content Moderation","created":"2025-01-28","cited_by_count":11,"area":"safety"},{"id":"2312.12724","title":"Progressive Poisoned Data Isolation for Training-time Backdoor Defense","created":"2023-12-20","cited_by_count":10,"area":null},{"id":"2409.00787","title":"The Dark Side of Human Feedback: Poisoning Large Language Models via User Inputs","created":"2024-09-01","cited_by_count":10,"area":"alignment"},{"id":"2412.05829","title":"SABER: Model-agnostic Backdoor Attack on Chain-of-Thought in Neural Code Generation","created":"2024-12-08","cited_by_count":10,"area":"lr"},{"id":"2306.17170","title":"An Overview on Generative AI at Scale with Edge-Cloud Computing","created":"2023-06-02","cited_by_count":9,"area":null},{"id":"2401.01085","title":"Imperio: Language-Guided Backdoor Attacks for Arbitrary Model Control","created":"2024-01-02","cited_by_count":8,"area":"safety"},{"id":"2308.13768","title":"Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content","created":"2023-08-26","cited_by_count":7,"area":"safety"},{"id":"2505.23561","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2503.03039","title":"LLM Misalignment via Adversarial RLHF Platforms","created":"2025-03-04","cited_by_count":5,"area":"alignment"},{"id":"2412.08201","title":"Model-Editing-Based Jailbreak against Safety-aligned Large Language Models","created":"2024-12-11","cited_by_count":4,"area":"alignment"},{"id":"2604.12359","title":"Compiling Activation Steering into Weights via Null-Space Constraints for Stealthy Backdoors","created":"2026-04-14","cited_by_count":4,"area":"alignment"},{"id":"2401.10375","title":"Foundation Models in Federated Learning: Assessing Backdoor Vulnerabilities","created":"2024-01-18","cited_by_count":3,"area":"safety"},{"id":"2406.11039","title":"Dynamic Normativity: Necessary and Sufficient Conditions for Value Alignment","created":"2024-06-16","cited_by_count":3,"area":"alignment"},{"id":"2410.17573","title":"Securing Federated Learning against Backdoor Threats with Foundation Model Integration","created":"2024-10-23","cited_by_count":3,"area":"safety"},{"id":"2505.04578","title":"Fight Fire with Fire: Defending Against Malicious RL Fine-Tuning via Reward Neutralization","created":"2025-05-07","cited_by_count":3,"area":"safety"},{"id":"2510.03705","title":"Backdoor-Powered Prompt Injection Attacks Nullify Defense Methods","created":"2025-10-04","cited_by_count":3,"area":"safety"},{"id":"2604.09748","title":"Backdoors in RLVR: Jailbreak Backdoors in LLMs From Verifiable Reward","created":"2026-04-10","cited_by_count":3,"area":"lr"},{"id":"2409.17946","title":"Breaking PEFT Limitations: Leveraging Weak-to-Strong Knowledge Transfer for Backdoor Attacks in LLMs","created":"2024-09-26","cited_by_count":2,"area":"safety"},{"id":"2410.23472","title":"Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems","created":"2024-10-30","cited_by_count":2,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2503.10228","title":"Policy Teaching via Data Poisoning in Learning from Human Preferences","created":"2025-03-13","cited_by_count":2,"area":"alignment"},{"id":"2505.15175","title":"A Linear Approach to Data Poisoning","created":"2025-05-21","cited_by_count":2,"area":"safety"},{"id":"2602.10134","title":"Reverse-Engineering Model Editing on Language Models","created":"2026-02-07","cited_by_count":2,"area":null},{"id":"2506.13285","title":"DualEdit: Mitigating Safety Fallback in LLM Backdoor Editing via Affirmation-Refusal Regulation","created":"2025-06-16","cited_by_count":1,"area":"alignment"},{"id":"2509.19775","title":"bi-GRPO: Bidirectional Optimization for Jailbreak Backdoor Injection on LLMs","created":"2025-09-24","cited_by_count":1,"area":"lr"},{"id":"2510.09260","title":"GREAT: Generalizable Backdoor Attacks in RLHF via Emotion-Aware Trigger Synthesis","created":"2025-10-10","cited_by_count":1,"area":"alignment"},{"id":"2602.00822","title":"Safety-Efficacy Trade Off: Robustness against Data-Poisoning","created":"2026-01-31","cited_by_count":1,"area":"safety"},{"id":"2603.18235","title":"Toward Reliable, Safe, and Secure LLMs for Scientific Applications","created":"2026-03-18","cited_by_count":1,"area":"agents"},{"id":"2604.21700","title":"Stealthy Backdoor Attacks against LLMs Based on Natural Style Triggers","created":"2026-04-23","cited_by_count":1,"area":"safety"},{"id":"2402.12189","title":"Amplifying Training Data Exposure through Fine-Tuning with Pseudo-Labeled Memberships","created":"2024-02-19","cited_by_count":0,"area":"safety"},{"id":"2407.14573","title":"Trading Devil Final: Backdoor attack via Stock market and Bayesian Optimization","created":"2024-07-21","cited_by_count":0,"area":null},{"id":"2504.18044","title":"AI Ethics and Social Norms: Exploring ChatGPT's Capabilities From What to How","created":"2025-04-25","cited_by_count":0,"area":null},{"id":"2509.17070","title":"Localizing Malicious Outputs from CodeLLM","created":"2025-09-21","cited_by_count":0,"area":"safety"},{"id":"2510.12939","title":"Pruning Cannot Hurt Robustness: Certified Trade-offs in Reinforcement Learning","created":"2025-10-14","cited_by_count":0,"area":"deeprl"},{"id":"2603.28281","title":"Corruption-robust Offline Multi-agent Reinforcement Learning From Human Feedback","created":"2026-03-30","cited_by_count":0,"area":"alignment"},{"id":"2605.26574","title":"GradSentry: Gradient Spectral Entropy for Backdoor Sample Filtering in Large Language Model Fine-Tuning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2607.25227","title":"Decision-Level Hijacking: Injecting Cognitive Bias into Large Language Models via Bit-Flip Attacks","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2609.26184","title":"Silent Sabotage: Internal State Triggered Backdoor Attacks on LLM-Powered Robotic Systems","created":"2026-09-02","cited_by_count":0,"area":"safety"}],"next_cursor":null}