{"total":92,"rows":[{"id":"2305.06161","title":"StarCoder: may the source be with you!","created":"2023-05-09","cited_by_count":799,"area":null},{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2402.06619","title":"Aya Dataset: An Open-Access Collection for Multilingual Instruction Tuning","created":"2024-02-09","cited_by_count":177,"area":null},{"id":"2406.07358","title":"AI Sandbagging: Language Models can Strategically Underperform on Evaluations","created":"2024-06-11","cited_by_count":145,"area":null},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2407.18921","title":"Mobile Edge Intelligence for Large Language Models: A Contemporary Survey","created":"2024-07-09","cited_by_count":128,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2506.19823","title":"Persona Features Control Emergent Misalignment","created":"2025-06-24","cited_by_count":86,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2406.20053","title":"Covert Malicious Finetuning: Challenges in Safeguarding LLM Adaptation","created":"2024-06-28","cited_by_count":80,"area":null},{"id":"2310.11877","title":"The Curious Case of Hallucinatory (Un)answerability: Finding Truths in the Hidden States of Over-Confident Large Language Models","created":"2023-10-18","cited_by_count":55,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2410.13722","title":"Persistent Pre-Training Poisoning of LLMs","created":"2024-10-17","cited_by_count":48,"area":null},{"id":"2305.13252","title":"\"According to ...\": Prompting Language Models Improves Quoting from Pre-Training Data","created":"2023-05-22","cited_by_count":42,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2402.16382","title":"Immunization against harmful fine-tuning attacks","created":"2024-02-26","cited_by_count":35,"area":null},{"id":"2412.13879","title":"Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settings","created":"2024-12-18","cited_by_count":35,"area":null},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2402.19334","title":"Here's a Free Lunch: Sanitizing Backdoored Models with Model Merge","created":"2024-02-29","cited_by_count":26,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2405.11227","title":"BadActs: A Universal Backdoor Defense in the Activation Space","created":"2024-05-18","cited_by_count":21,"area":null},{"id":"2602.04863","title":"Subliminal Effects in Your Data: A General Mechanism via Log-Linearity","created":"2026-02-04","cited_by_count":19,"area":null},{"id":"2408.10053","title":"Privacy Checklist: Privacy Violation Detection Grounding on Contextual Integrity Theory","created":"2024-08-19","cited_by_count":18,"area":null},{"id":"2502.02180","title":"The Elicitation Game: Evaluating Capability Elicitation Techniques","created":"2025-02-04","cited_by_count":18,"area":null},{"id":"2310.17630","title":"InstOptima: Evolutionary Multi-objective Instruction Optimization via Large Language Model-based Instruction Operators","created":"2023-10-26","cited_by_count":17,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2310.09518","title":"Instruction Tuning with Human Curriculum","created":"2023-10-14","cited_by_count":15,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2310.02469","title":"PrivacyMind: Large Language Models Can Be Contextual Privacy Protection Learners","created":"2023-10-03","cited_by_count":14,"area":null},{"id":"2404.17733","title":"Building a Large Japanese Web Corpus for Large Language Models","created":"2024-04-27","cited_by_count":11,"area":null},{"id":"2406.12259","title":"Adversarial Attacks on Large Language Models in Medicine","created":"2024-06-18","cited_by_count":10,"area":null},{"id":"2312.07779","title":"Tell, don't show: Declarative facts influence how LLMs generalize","created":"2023-12-12","cited_by_count":9,"area":null},{"id":"2505.24842","title":"Cascading Adversarial Bias from Injection to Distillation in Language Models","created":"2025-05-30","cited_by_count":9,"area":null},{"id":"2510.25771","title":"Gaperon: A Peppered English-French Generative Language Model Suite","created":"2025-10-29","cited_by_count":9,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2504.09522","title":"How new data permeates LLM knowledge and how to dilute it","created":"2025-04-13","cited_by_count":8,"area":null},{"id":"2506.06518","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2310.00840","title":"Error Norm Truncation: Robust Training in the Presence of Data Noise for Text Generation Models","created":"2023-10-02","cited_by_count":6,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2412.00537","title":"Exact Certification of (Graph) Neural Networks Against Label Poisoning","created":"2024-11-30","cited_by_count":6,"area":null},{"id":"2310.00160","title":"Self-Specialization: Uncovering Latent Expertise within Large Language Models","created":"2023-09-29","cited_by_count":5,"area":null},{"id":"2407.10867","title":"Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks","created":"2024-07-15","cited_by_count":5,"area":null},{"id":"2407.11072","title":"MaPPing Your Model: Assessing the Impact of Adversarial Attacks on LLM-based Programming Assistants","created":"2024-07-12","cited_by_count":5,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2506.11111","title":"Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directions","created":"2025-06-08","cited_by_count":5,"area":null},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2602.09987","title":"Infusion: Shaping Model Behavior by Editing Training Data via Influence Functions","created":"2026-02-10","cited_by_count":5,"area":null},{"id":"2311.17228","title":"Survey on AI Ethics: A Socio-technical Perspective","created":"2023-11-28","cited_by_count":4,"area":null},{"id":"2410.17492","title":"BadFair: Backdoored Fairness Attacks with Group-conditioned Triggers","created":"2024-10-23","cited_by_count":4,"area":null},{"id":"2508.19445","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","created":"2025-08-26","cited_by_count":4,"area":null},{"id":"2312.03853","title":"Dr. Jekyll and Mr. Hyde: Two Faces of LLMs","created":"2023-12-06","cited_by_count":3,"area":null},{"id":"2405.05930","title":"Trustworthy AI-Generative Content for Intelligent Network Service: Robustness, Security, and Fairness","created":"2024-05-09","cited_by_count":3,"area":null},{"id":"2411.08506","title":"Towards Operationalizing Right to Data Protection","created":"2024-11-13","cited_by_count":3,"area":null},{"id":"2411.16512","title":"Guarding the Gate: ConceptGuard Battles Concept-Level Backdoors in Concept Bottleneck Models","created":"2024-11-25","cited_by_count":3,"area":null},{"id":"2503.01896","title":"Neuroplasticity and Corruption in Model Mechanisms: A Case Study Of Indirect Object Identification","created":"2025-02-27","cited_by_count":3,"area":null},{"id":"2503.04480","title":"Poisoning Bayesian Inference via Data Deletion and Replication","created":"2025-03-06","cited_by_count":3,"area":null},{"id":"2504.21700","title":"XBreaking: Understanding how LLMs security alignment can be broken","created":"2025-04-30","cited_by_count":3,"area":null},{"id":"2512.19297","title":"Causal-Guided Detoxify Backdoor Attack of Open-Weight LoRA Models","created":"2025-12-22","cited_by_count":3,"area":null},{"id":"2605.23168","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","created":"2026-05-22","cited_by_count":3,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2412.17614","title":"Emerging Security Challenges of Large Language Models","created":"2024-12-23","cited_by_count":2,"area":null},{"id":"2504.09026","title":"Detecting Instruction Fine-tuning Attacks using Influence Function","created":"2025-04-12","cited_by_count":2,"area":null},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2607.06963","title":"Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies","created":"2026-07-08","cited_by_count":2,"area":null},{"id":"2312.14712","title":"Balancing Privacy, Robustness, and Efficiency in Machine Learning","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2409.04787","title":"Selective Self-Rehearsal: A Fine-Tuning Approach to Improve Generalization in Large Language Models","created":"2024-09-07","cited_by_count":1,"area":null},{"id":"2410.04823","title":"CAT: Concept-level backdoor ATtacks for Concept Bottleneck Models","created":"2024-10-07","cited_by_count":1,"area":null},{"id":"2410.08872","title":"Fragile Giants: Understanding the Susceptibility of Models to Subpopulation Attacks","created":"2024-10-11","cited_by_count":1,"area":null},{"id":"2410.18114","title":"Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2505.18680","title":"$PD^3F$: A Pluggable and Dynamic DoS-Defense Framework Against Resource Consumption Attacks Targeting Large Language Models","created":"2025-05-24","cited_by_count":1,"area":null},{"id":"2508.20333","title":"Poison Once, Refuse Forever: Weaponizing Alignment for Injecting Bias in LLMs","created":"2025-08-28","cited_by_count":1,"area":null},{"id":"2511.14301","title":"SteganoBackdoor: Evading Data-Poisoning Defenses via Steganographic Backdoors","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2604.09688","title":"Immunizing 3D Gaussian Generative Models Against Unauthorized Fine-Tuning via Attribute-Space Traps","created":"2026-04-06","cited_by_count":1,"area":null},{"id":"2606.17110","title":"Loss Landscape Poisoning: Targeted Extraction of Unseen Training Data from LLMs","created":"2026-06-15","cited_by_count":1,"area":null},{"id":"2607.11881","title":"Metacognition in LLMs: Foundations, Progress, and Opportunities","created":"2026-07-13","cited_by_count":1,"area":null},{"id":"2607.23394","title":"Inference-Time Consensus for Mitigating Hidden Behaviors from LLM Fine-Tuning","created":"2026-07-25","cited_by_count":1,"area":null},{"id":"2504.03752","title":"Proof of Humanity: A Multi-Layer Network Framework for Certifying Human-Originated Content in an AI-Dominated Internet","created":"2025-04-02","cited_by_count":0,"area":null},{"id":"2505.16888","title":"PARASITE: Conditional System Prompt Poisoning to Hijack LLMs","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2507.13629","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2511.02600","title":"On The Dangers of Poisoned LLMs In Security Automation","created":"2025-11-04","cited_by_count":0,"area":null},{"id":"2603.04407","title":"Semantic Containment as a Fundamental Property of Emergent Misalignment","created":"2026-02-02","cited_by_count":0,"area":null},{"id":"2606.31639","title":"A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2607.05306","title":"Biologically Informed Deep Neural Networks for Multi-Omic Integration, Pathway Activity Inference and Risk Stratification in Cancer","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2607.28862","title":"TextCloak: Thwarting Unauthorized LLM Exploitation via RL-Driven Unlearnable Text","created":"2026-07-30","cited_by_count":0,"area":null},{"id":"2608.15893","title":"Breaking and Defending LLM-Powered Social Media Bot Detection Systems","created":"2026-08-16","cited_by_count":0,"area":null},{"id":"2608.23476","title":"On the Threat Model of Weird Generalization and Emergent Misalignment","created":"2026-08-24","cited_by_count":0,"area":null},{"id":"2609.33985","title":"The Privacy Fallacy of Crowdsourced Fine-Tuning: Extracting Proprietary Data via Topic-Based Poisoning","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2610.02886","title":"Misinformation Without Triggers: From Factual Answers to Downstream Decisions","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.03960","title":"Localize-and-Detect: Auditing Task-Level Poisoning in Instruction-Tuned Models","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.14487","title":"AlignPoison: Conditional Targeted Poisoning of Generative Recommenders via Decoding-Aligned Prefixes","created":"2026-10-10","cited_by_count":0,"area":null}],"next_cursor":null}