{"total":98,"rows":[{"id":"2310.12815","title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses","created":"2023-10-19","cited_by_count":364,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157,"area":"safety"},{"id":"2404.01099","title":"What is in Your Safe Data? Identifying Benign Data that Breaks Safety","created":"2024-04-01","cited_by_count":118,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110,"area":"safety"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2403.13355","title":"BadEdit: Backdooring large language models by model editing","created":"2024-03-20","cited_by_count":96,"area":"safety"},{"id":"2403.17336","title":"Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models","created":"2024-03-26","cited_by_count":86,"area":"safety"},{"id":"2310.13828","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","created":"2023-10-20","cited_by_count":75,"area":"safety"},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72,"area":"safety"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2401.05949","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","created":"2024-01-11","cited_by_count":53,"area":"safety"},{"id":"2305.14965","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","created":"2023-05-24","cited_by_count":49,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2406.17216","title":"Machine Unlearning Fails to Remove Data Poisoning Attacks","created":"2024-06-25","cited_by_count":37,"area":"safety"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2411.12768","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","created":"2024-11-18","cited_by_count":33,"area":"safety"},{"id":"2311.09433","title":"Trojan Activation Attack: Red-Teaming Large Language Models using Activation Steering for Safety-Alignment","created":"2023-11-15","cited_by_count":30,"area":"safety"},{"id":"2408.02946","title":"Scaling Trends for Data Poisoning in LLMs","created":"2024-08-06","cited_by_count":30,"area":"safety"},{"id":"2404.14461","title":"Competition Report: Finding Universal Jailbreak Backdoors in Aligned LLMs","created":"2024-04-22","cited_by_count":28,"area":"safety"},{"id":"2402.15302","title":"How (un)ethical are instruction-centric responses of LLMs? Unveiling the vulnerabilities of safety guardrails to harmful queries","created":"2024-02-23","cited_by_count":27,"area":"safety"},{"id":"2604.09378","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","created":"2026-04-10","cited_by_count":27,"area":"safety"},{"id":"2407.20224","title":"Can Editing LLMs Inject Harm?","created":"2024-07-29","cited_by_count":22,"area":"safety"},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2411.12701","title":"When Backdoors Speak: Understanding LLM Backdoor Attacks Through Model-Generated Explanations","created":"2024-11-19","cited_by_count":20,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2503.00596","title":"BadJudge: Backdoor Vulnerabilities of LLM-as-a-Judge","created":"2025-03-01","cited_by_count":18,"area":"safety"},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17,"area":"safety"},{"id":"2407.04108","title":"Future Events as Backdoor Triggers: Investigating Temporal Vulnerabilities in LLMs","created":"2024-07-04","cited_by_count":15,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2310.18603","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","created":"2023-10-28","cited_by_count":14,"area":"safety"},{"id":"2404.19597","title":"TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuning","created":"2024-04-30","cited_by_count":14,"area":"safety"},{"id":"2412.16504","title":"Privacy in Fine-tuning Large Language Models: Attacks, Defenses, and Future Directions","created":"2024-12-21","cited_by_count":14,"area":"safety"},{"id":"2404.02406","title":"Exploring Backdoor Vulnerabilities of Chat Models","created":"2024-04-03","cited_by_count":13,"area":"safety"},{"id":"2406.00240","title":"Exploring Vulnerabilities and Protections in Large Language Models: A Survey","created":"2024-06-01","cited_by_count":11,"area":"safety"},{"id":"2406.07778","title":"A Study of Backdoors in Instruction Fine-tuned Language Models","created":"2024-06-12","cited_by_count":11,"area":"safety"},{"id":"2308.13449","title":"The Poison of Alignment","created":"2023-08-25","cited_by_count":10,"area":"safety"},{"id":"2502.09755","title":"Jailbreak Attack Initializations as Extractors of Compliance Directions","created":"2025-02-13","cited_by_count":10,"area":"safety"},{"id":"2505.17601","title":"Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs","created":"2025-05-23","cited_by_count":10,"area":"safety"},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2308.13768","title":"Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content","created":"2023-08-26","cited_by_count":7,"area":"safety"},{"id":"2403.09603","title":"Optimistic Verifiable Training by Controlling Hardware Nondeterminism","created":"2024-03-14","cited_by_count":7,"area":"safety"},{"id":"2603.13461","title":"Purifying Generative LLMs from Backdoors without Prior Knowledge or Clean Reference","created":"2026-03-13","cited_by_count":7,"area":"safety"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2504.11182","title":"Exploring Backdoor Attack and Defense for LLM-empowered Recommendations","created":"2025-04-15","cited_by_count":6,"area":"safety"},{"id":"2510.17021","title":"Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearning","created":"2025-10-19","cited_by_count":6,"area":"safety"},{"id":"2602.15143","title":"Protecting Language Models Against Unauthorized Distillation through Trace Rewriting","created":"2026-02-16","cited_by_count":6,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2407.04151","title":"Securing Multi-turn Conversational Language Models From Distributed Backdoor Triggers","created":"2024-07-04","cited_by_count":5,"area":"safety"},{"id":"2405.19563","title":"Unlearning Climate Misinformation in Large Language Models","created":"2024-05-29","cited_by_count":4,"area":"safety"},{"id":"2410.21750","title":"Learning and Unlearning of Fabricated Knowledge in Language Models","created":"2024-10-29","cited_by_count":4,"area":"safety"},{"id":"2505.12871","title":"Does Low Rank Adaptation Lead to Lower Robustness against Training-Time Attacks?","created":"2025-05-19","cited_by_count":4,"area":"safety"},{"id":"2507.11112","title":"Multi-Trigger Poisoning Amplifies Backdoor Vulnerabilities in LLMs","created":"2025-07-15","cited_by_count":4,"area":"safety"},{"id":"2604.06840","title":"MirageBackdoor: A Stealthy Attack that Induces Think-Well-Answer-Wrong Reasoning","created":"2026-04-08","cited_by_count":4,"area":"safety"},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2510.03705","title":"Backdoor-Powered Prompt Injection Attacks Nullify Defense Methods","created":"2025-10-04","cited_by_count":3,"area":"safety"},{"id":"2511.11020","title":"Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysis","created":"2025-11-14","cited_by_count":3,"area":"safety"},{"id":"2601.04448","title":"Merging Triggers, Breaking Backdoors: Defensive Poisoning for Instruction-Tuned Language Models","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2605.18168","title":"Acoustic Interference: A New Paradigm Weaponizing Acoustic Latent Semantic for Universal Jailbreak against Large Audio Language Models","created":"2026-05-18","cited_by_count":3,"area":"safety"},{"id":"2502.18518","title":"Swallowing the Poison Pills: Insights from Vulnerability Disparity Among LLMs","created":"2025-02-23","cited_by_count":2,"area":"safety"},{"id":"2602.10382","title":"Language Triggers Hijack Language Circuits: A Mechanistic Analysis of Backdoor Behaviors in Large Language Models","created":"2026-02-11","cited_by_count":2,"area":"safety"},{"id":"2604.09235","title":"Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor","created":"2026-04-10","cited_by_count":2,"area":"safety"},{"id":"2605.18646","title":"Language-Switching Triggers Take a Latent Detour Through Language Models","created":"2026-05-18","cited_by_count":2,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2412.12563","title":"Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers","created":"2024-12-17","cited_by_count":1,"area":"safety"},{"id":"2503.17578","title":"Large Language Models Can Verbatim Reproduce Long Malicious Sequences","created":"2025-03-21","cited_by_count":1,"area":"safety"},{"id":"2505.22852","title":"Operationalizing CaMeL: Strengthening LLM Defenses for Enterprise Deployment","created":"2025-05-28","cited_by_count":1,"area":"safety"},{"id":"2507.01752","title":"Tuning without Peeking: Provable Generalization Bounds and Robust LLM Post-Training","created":"2025-07-02","cited_by_count":1,"area":"safety"},{"id":"2605.20641","title":"Trusted Weights, Treacherous Optimizations? Optimization-Triggered Backdoor Attacks on LLMs","created":"2026-05-20","cited_by_count":1,"area":"safety"},{"id":"2605.25073","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","created":"2026-05-24","cited_by_count":1,"area":"safety"},{"id":"2606.03785","title":"Backdoor Unlearning Generalization: A Path Toward the Removal of Unknown Triggers in LLMs","created":"2026-06-02","cited_by_count":1,"area":"safety"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2610.04985","title":"Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use","created":"2026-10-04","cited_by_count":1,"area":"safety"},{"id":"2502.16901","title":"Char-mander Use mBackdoor! A Study of Cross-lingual Backdoor Attacks in Multilingual LLMs","created":"2025-02-24","cited_by_count":0,"area":"safety"},{"id":"2507.19195","title":"Can Small-Scale Data Poisoning Exacerbate Dialect-Linked Biases in Large Language Models?","created":"2025-07-25","cited_by_count":0,"area":"safety"},{"id":"2508.02312","title":"Data Security in Large Language Models: Risks, Defense, and Directions","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2512.03089","title":"Password-Activated Shutdown Protocols for Misaligned Frontier Agents","created":"2025-11-29","cited_by_count":0,"area":"safety"},{"id":"2604.12548","title":"DeepSeek Robustness Against Semantic-Character Dual-Space Mutated Prompt Injection","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2605.11612","title":"When Emotion Becomes Trigger: Emotion-style dynamic Backdoor Attack Parasitising Large Language Models","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2605.19147","title":"Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks","created":"2026-05-18","cited_by_count":0,"area":"safety"},{"id":"2605.26574","title":"GradSentry: Gradient Spectral Entropy for Backdoor Sample Filtering in Large Language Model Fine-Tuning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.05958","title":"Steering Vectors are an Adversarial Attack Surface","created":"2026-06-04","cited_by_count":0,"area":"safety"},{"id":"2606.16242","title":"Rapid Poison: Practical Poisoning Attacks Against the Rapid Response Framework","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2606.19660","title":"A Layered Security Framework Against Prompt Injection in RAG-Based Chatbots","created":"2026-06-17","cited_by_count":0,"area":"safety"},{"id":"2607.04146","title":"!Imperio, smolVLA: The Implications of Data Poisoning on Open Source Robotics","created":"2026-07-05","cited_by_count":0,"area":"safety"},{"id":"2609.07746","title":"LLM Forensics: Where Do Backdoors Hide? Localizing and Controlling Trigger Mechanisms with Sparse Autoencoders","created":"2026-09-07","cited_by_count":0,"area":"safety"},{"id":"2609.15044","title":"Data Attribution via Sketched Metadifferentiation","created":"2026-09-14","cited_by_count":0,"area":"safety"},{"id":"2609.37367","title":"Backdoor Mitigation in Decentralized LLM Fine-Tuning","created":"2026-09-29","cited_by_count":0,"area":"safety"},{"id":"2610.00348","title":"Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs via Weight Orthogonalisation","created":"2026-09-29","cited_by_count":0,"area":"safety"},{"id":"2610.00663","title":"Backdoor Containment via Expert Quarantine and Shutdown in LLMs","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.00685","title":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.12644","title":"Cancerous Backdoor Attack: Gradual Activation via Invisible Tokens and A Stage Controller","created":"2026-10-08","cited_by_count":0,"area":"safety"}],"next_cursor":null}