{"total":81,"rows":[{"id":"2310.06816","title":"Text Embeddings Reveal (Almost) As Much As Text","created":"2023-10-10","cited_by_count":192,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2405.13792","title":"xRAG: Extreme Context Compression for Retrieval-augmented Generation with One Token","created":"2024-05-22","cited_by_count":125,"area":"rag"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2503.09648","title":"A Survey on Trustworthy LLM Agents: Threats and Countermeasures","created":"2025-03-12","cited_by_count":96,"area":"agents"},{"id":"2311.13647","title":"Language Model Inversion","created":"2023-11-22","cited_by_count":68,"area":null},{"id":"2505.12540","title":"Harnessing the Universal Geometry of Embeddings","created":"2025-05-18","cited_by_count":55,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2311.04044","title":"PrivLM-Bench: A Multi-level Privacy Evaluation Benchmark for Language Models","created":"2023-11-07","cited_by_count":37,"area":null},{"id":"2505.14590","title":"MCIP: Protecting MCP Safety via Model Contextual Integrity Protocol","created":"2025-05-20","cited_by_count":34,"area":null},{"id":"2402.04013","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","created":"2024-02-06","cited_by_count":30,"area":null},{"id":"2406.01394","title":"PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration","created":"2024-06-03","cited_by_count":28,"area":null},{"id":"2401.12192","title":"Text Embedding Inversion Security for Multilingual Language Models","created":"2024-01-22","cited_by_count":26,"area":null},{"id":"2406.10280","title":"Transferable Embedding Inversion Attack: Uncovering Privacy Risks in Text Embeddings without Model Queries","created":"2024-06-12","cited_by_count":25,"area":null},{"id":"2508.09442","title":"Shadow in the Cache: Unveiling and Mitigating Privacy Risks of KV-cache in LLM Inference","created":"2025-08-13","cited_by_count":21,"area":"inference"},{"id":"2408.10053","title":"Privacy Checklist: Privacy Violation Detection Grounding on Contextual Integrity Theory","created":"2024-08-19","cited_by_count":18,"area":null},{"id":"2412.12775","title":"RemoteRAG: A Privacy-Preserving LLM Cloud RAG Service","created":"2024-12-17","cited_by_count":17,"area":"rag"},{"id":"2507.16372","title":"Depth Gives a False Sense of Privacy: LLM Internal States Inversion","created":"2025-07-22","cited_by_count":17,"area":null},{"id":"2405.20681","title":"No Free Lunch Theorem for Privacy-Preserving LLM Inference","created":"2024-05-31","cited_by_count":13,"area":null},{"id":"2502.15007","title":"LLM-Microscope: Uncovering the Hidden Role of Punctuation in Context Memory of Transformers","created":"2025-02-20","cited_by_count":12,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2405.11916","title":"Information Leakage from Embedding in Large Language Models","created":"2024-05-20","cited_by_count":10,"area":null},{"id":"2408.11749","title":"Against All Odds: Overcoming Typology, Script, and Language Confusion in Multilingual Embedding Inversion Attacks","created":"2024-08-21","cited_by_count":10,"area":"safety"},{"id":"2401.00793","title":"SecFormer: Fast and Accurate Privacy-Preserving Inference for Transformer Models via SMPC","created":"2024-01-01","cited_by_count":9,"area":null},{"id":"2506.17090","title":"Better Language Model Inversion by Compactly Representing Next-Token Distributions","created":"2025-06-20","cited_by_count":9,"area":null},{"id":"2411.05034","title":"Eguard: Defending LLM Embeddings Against Inversion Attacks via Text Mutual Information Optimization","created":"2024-11-06","cited_by_count":8,"area":null},{"id":"2504.00147","title":"Universal Zero-shot Embedding Inversion","created":"2025-03-31","cited_by_count":8,"area":null},{"id":"2504.19101","title":"Privacy-Preserving Federated Embedding Learning for Localized Retrieval-Augmented Generation","created":"2025-04-27","cited_by_count":8,"area":"rag"},{"id":"2405.20657","title":"DORY: Deliberative Prompt Recovery for LLM","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2511.06571","title":"Rep2Text: Decoding Full Text from a Single LLM Token Representation","created":"2025-11-09","cited_by_count":7,"area":null},{"id":"2403.04124","title":"Privacy-preserving Fine-tuning of Large Language Models through Flatness","created":"2024-03-07","cited_by_count":6,"area":null},{"id":"2411.05036","title":"From Word Vectors to Multimodal Embeddings: Techniques, Applications, and Future Directions For Large Language Models","created":"2024-11-06","cited_by_count":6,"area":null},{"id":"2506.15001","title":"Memory Tokens: Large Language Models Can Generate Reversible Sentence Embeddings","created":"2025-06-17","cited_by_count":6,"area":null},{"id":"2410.21637","title":"Mitigating Paraphrase Attacks on Machine-Text Detectors via Paraphrase Inversion","created":"2024-10-29","cited_by_count":5,"area":null},{"id":"2503.12896","title":"Privacy-Preserving LLM Embedding Transmission for End-Cloud Collaboration","created":"2025-03-17","cited_by_count":5,"area":"rag"},{"id":"2508.03097","title":"VFLAIR-LLM: A Comprehensive Framework and Benchmark for Split Learning of LLMs","created":"2025-08-05","cited_by_count":5,"area":null},{"id":"2407.02960","title":"ObfuscaTune: Obfuscated Offsite Fine-tuning and Inference of Proprietary LLMs on Private Datasets","created":"2024-07-03","cited_by_count":4,"area":null},{"id":"2502.11308","title":"ALGEN: Few-shot Inversion Attacks on Textual Embeddings using Alignment and Generation","created":"2025-02-16","cited_by_count":4,"area":null},{"id":"2602.01757","title":"Zero2Text: Zero-Training Cross-Domain Inversion Attacks on Textual Embeddings","created":"2026-02-02","cited_by_count":4,"area":"rag"},{"id":"2404.16587","title":"Understanding Privacy Risks of Embeddings Induced by Large Language Models","created":"2024-04-25","cited_by_count":3,"area":null},{"id":"2507.20783","title":"On The Role of Pretrained Language Models in General-Purpose Text Embeddings: A Survey","created":"2025-07-28","cited_by_count":3,"area":null},{"id":"2603.18377","title":"PlanTwin: Privacy-Preserving Planning Abstractions for Cloud-Assisted LLM Agents","created":"2026-03-19","cited_by_count":3,"area":"agents"},{"id":"2407.01110","title":"SecGenAI: Enhancing Security of Cloud-based Generative AI Applications within Australian Critical Technologies of National Interest","created":"2024-07-01","cited_by_count":2,"area":null},{"id":"2504.06669","title":"NLP Security and Ethics, in the Wild","created":"2025-04-09","cited_by_count":2,"area":null},{"id":"2505.18332","title":"An Attack to Break Permutation-Based Private Third-Party Inference Schemes for LLMs","created":"2025-05-23","cited_by_count":2,"area":null},{"id":"2506.08592","title":"Dense Retrievers Can Fail on Simple Queries: Revealing The Granularity Dilemma of Embeddings","created":"2025-06-10","cited_by_count":2,"area":null},{"id":"2507.01693","title":"GPT, But Backwards: Exactly Inverting Language Model Outputs","created":"2025-07-02","cited_by_count":2,"area":"safety"},{"id":"2602.01363","title":"Causally Disentangled Contrastive Learning for Multilingual Speaker Embeddings","created":"2026-02-01","cited_by_count":2,"area":null},{"id":"2602.07090","title":"Concept-Aware Privacy Mechanisms for Defending Embedding Inversion Attacks","created":"2026-02-06","cited_by_count":2,"area":null},{"id":"2609.03376","title":"Spruce: Scalable Private Outsourced Retrieval Using Compact Embeddings","created":"2026-09-03","cited_by_count":2,"area":"rag"},{"id":"2410.09508","title":"CollabEdit: Towards Non-destructive Collaborative Knowledge Editing","created":"2024-10-12","cited_by_count":1,"area":null},{"id":"2505.10354","title":"LDIR: Low-Dimensional Dense and Interpretable Text Embeddings with Relative Representations","created":"2025-05-15","cited_by_count":1,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2510.11599","title":"SemCSE-Multi: Multifaceted and Decodable Embeddings for Aspect-Specific and Interpretable Scientific Domain Mapping","created":"2025-10-13","cited_by_count":1,"area":null},{"id":"2601.16354","title":"NOIR: Privacy-Preserving Generation of Code with Open-Source LLMs","created":"2026-01-22","cited_by_count":1,"area":null},{"id":"2601.22752","title":"OSNIP: Breaking the Privacy-Utility-Efficiency Trilemma in LLM Inference via Obfuscated Semantic Null Space","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2604.02522","title":"Opal: Private Memory for Personal AI","created":"2026-04-02","cited_by_count":1,"area":null},{"id":"2604.06831","title":"Towards Privacy-Preserving Large Language Model: Text-free Inference Through Alignment and Adaptation","created":"2026-04-08","cited_by_count":1,"area":null},{"id":"2606.26373","title":"Hybrid privacy-aware semantic search: SVD-truncated document geometry and CKKS-encrypted query reranking under a restricted threat model","created":"2026-06-24","cited_by_count":1,"area":null},{"id":"2608.25735","title":"Pointing the Way, Hiding the Destination: Practical Private Dense Retrieval at Scale","created":"2026-08-26","cited_by_count":1,"area":"rag"},{"id":"2507.10582","title":"Transforming Sensitive Documents into Quantitative Data: An AI-Based Preprocessing Toolchain for Structured and Privacy-Conscious Analysis","created":"2025-07-11","cited_by_count":0,"area":null},{"id":"2512.01514","title":"Label Forensics: Interpreting Hard Labels in Black-Box Text Classifier","created":"2025-12-01","cited_by_count":0,"area":null},{"id":"2601.13824","title":"ELSA: Efficient LLM-Centric Split Aggregation for Privacy-Aware Hierarchical Federated Learning over the Network Edge","created":"2026-01-20","cited_by_count":0,"area":null},{"id":"2601.18796","title":"ctELM: Decoding and Manipulating Embeddings of Clinical Trials with Embedding Language Models","created":"2026-01-26","cited_by_count":0,"area":null},{"id":"2601.21543","title":"inversedMixup: Data Augmentation via Inverting Mixed Embeddings","created":"2026-01-29","cited_by_count":0,"area":null},{"id":"2601.22929","title":"Semantic Leakage from Image Embeddings","created":"2026-01-30","cited_by_count":0,"area":null},{"id":"2604.23563","title":"CyberCane: Neuro-Symbolic RAG for Privacy-Preserving Phishing Detection with Formal Ontology Reasoning","created":"2026-04-26","cited_by_count":0,"area":null},{"id":"2605.08343","title":"Private Vertical Federated Inference for Time-Series","created":"2026-05-08","cited_by_count":0,"area":null},{"id":"2605.26433","title":"Vectors Are Not Neutral: Sensitive-Information Inference from Exported LLM Representations in Summarization","created":"2026-05-26","cited_by_count":0,"area":null},{"id":"2606.16461","title":"Privacy from Symmetry: Orthogonally Equivariant Transformers for LLM Inference","created":"2026-06-15","cited_by_count":0,"area":null},{"id":"2606.27976","title":"SHARD: cell-keyed residual splitting for alignment-resistant private dense retrieval","created":"2026-06-26","cited_by_count":0,"area":null},{"id":"2606.28328","title":"TextClusterLab: An Integrated Framework for Reliable Text Clustering Studies","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2607.00852","title":"Recovering Input Text from Hidden States: Study of Gradient-Based Inversion of Decoder-Only Language Models","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2607.01276","title":"Embedding Inference Attack","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2608.06972","title":"Generative Embedding Benchmark: How Much Information Survives in a Dense Embedding?","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2608.18610","title":"Denoising-Aware Inversion: Revealing Privacy Risks in Noise-Protected Text Embeddings","created":"2026-08-19","cited_by_count":0,"area":null},{"id":"2609.04767","title":"Shadow Queries for Private Retrieval in Vector Databases","created":"2026-09-04","cited_by_count":0,"area":"rag"},{"id":"2609.15039","title":"SpliTEE: Fast and Private LLM Inference by Coupling GPU-Assisted Trusted Execution Environments with Differential Privacy","created":"2026-09-14","cited_by_count":0,"area":null},{"id":"2609.32706","title":"Learning to Refer: Client-Resolved Generation for Privacy-Aware Language Models","created":"2026-09-26","cited_by_count":0,"area":null},{"id":"2609.38374","title":"Doc2LoRA Provides Decodable Representations of Scientific Ideas","created":"2026-09-29","cited_by_count":0,"area":null}],"next_cursor":null}