{"total":127,"rows":[{"id":"2402.05044","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","created":"2024-02-07","cited_by_count":228,"area":null},{"id":"2310.19736","title":"Evaluating Large Language Models: A Comprehensive Survey","created":"2023-10-30","cited_by_count":202,"area":null},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2310.00746","title":"RoleLLM: Benchmarking, Eliciting, and Enhancing Role-Playing Abilities of Large Language Models","created":"2023-10-01","cited_by_count":175,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2405.16833","title":"Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Models","created":"2024-05-27","cited_by_count":125,"area":null},{"id":"2311.12786","title":"Mechanistically analyzing the effects of fine-tuning on procedurally defined tasks","created":"2023-11-21","cited_by_count":115,"area":null},{"id":"2402.18659","title":"Large Language Models and Games: A Survey and Roadmap","created":"2024-02-28","cited_by_count":93,"area":null},{"id":"2403.14472","title":"Detoxifying Large Language Models via Knowledge Editing","created":"2024-03-21","cited_by_count":87,"area":null},{"id":"2309.12247","title":"Bad Actor, Good Advisor: Exploring the Role of Large Language Models in Fake News Detection","created":"2023-09-21","cited_by_count":72,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2406.10279","title":"We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs","created":"2024-06-12","cited_by_count":65,"area":null},{"id":"2407.15847","title":"LLMmap: Fingerprinting For Large Language Models","created":"2024-07-22","cited_by_count":58,"area":null},{"id":"2307.10719","title":"LLM Censorship: A Machine Learning Challenge or a Computer Security Problem?","created":"2023-07-20","cited_by_count":49,"area":null},{"id":"2403.08946","title":"Usable XAI: 10 Strategies Towards Exploiting Explainability in the LLM Era","created":"2024-03-13","cited_by_count":46,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2505.21494","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","created":"2025-05-27","cited_by_count":43,"area":null},{"id":"2402.12959","title":"Prompt Stealing Attacks Against Large Language Models","created":"2024-02-20","cited_by_count":40,"area":null},{"id":"2309.12276","title":"LLMR: Real-time Prompting of Interactive Worlds using Large Language Models","created":"2023-09-21","cited_by_count":39,"area":null},{"id":"2311.05915","title":"Fake Alignment: Are LLMs Really Aligned Well?","created":"2023-11-10","cited_by_count":39,"area":null},{"id":"2505.17306","title":"Refusal Direction is Universal Across Safety-Aligned Languages","created":"2025-05-22","cited_by_count":38,"area":null},{"id":"2412.13879","title":"Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settings","created":"2024-12-18","cited_by_count":35,"area":null},{"id":"2306.06085","title":"Trapping LLM Hallucinations Using Tagged Context Prompts","created":"2023-06-09","cited_by_count":34,"area":null},{"id":"2312.06853","title":"LLF-Bench: Benchmark for Interactive Learning from Language Feedback","created":"2023-12-11","cited_by_count":33,"area":null},{"id":"2401.03315","title":"Malla: Demystifying Real-world Large Language Model Integrated Malicious Services","created":"2024-01-06","cited_by_count":33,"area":null},{"id":"2405.14191","title":"S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Models","created":"2024-05-23","cited_by_count":33,"area":null},{"id":"2407.18369","title":"AI Safety in Generative AI Large Language Models: A Survey","created":"2024-07-06","cited_by_count":33,"area":null},{"id":"2402.11889","title":"ROSE Doesn't Do That: Boosting the Safety of Instruction-Tuned Large Language Models with Reverse Prompt Contrastive Decoding","created":"2024-02-19","cited_by_count":32,"area":null},{"id":"2402.09216","title":"AutoTutor meets Large Language Models: A Language Model Tutor with Rich Pedagogy and Guardrails","created":"2024-02-14","cited_by_count":31,"area":null},{"id":"2312.00029","title":"Bergeron: Combating Adversarial Attacks through a Conscience-Based Alignment Framework","created":"2023-11-16","cited_by_count":30,"area":null},{"id":"2403.18249","title":"Exploring the Deceptive Power of LLM-Generated Fake News: A Study of Real-World Detection Challenges","created":"2024-03-27","cited_by_count":30,"area":null},{"id":"2404.09894","title":"Glitch Tokens in Large Language Models: Categorization Taxonomy and Effective Detection","created":"2024-04-15","cited_by_count":29,"area":null},{"id":"2306.05524","title":"On the Detectability of ChatGPT Content: Benchmarking, Methodology, and Evaluation through the Lens of Academic Writing","created":"2023-06-07","cited_by_count":27,"area":null},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2311.18580","title":"FFT: Towards Harmlessness Evaluation and Analysis for LLMs with Factuality, Fairness, Toxicity","created":"2023-11-30","cited_by_count":25,"area":null},{"id":"2310.04445","title":"LoFT: Local Proxy Fine-tuning For Improving Transferability Of Adversarial Attacks Against Large Language Model","created":"2023-10-02","cited_by_count":21,"area":null},{"id":"2404.07242","title":"Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs","created":"2024-04-09","cited_by_count":20,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2406.13843","title":"Generative AI Misuse: A Taxonomy of Tactics and Insights from Real-World Data","created":"2024-06-19","cited_by_count":20,"area":null},{"id":"2308.09183","title":"RatGPT: Turning online LLMs into Proxies for Malware Attacks","created":"2023-08-17","cited_by_count":18,"area":null},{"id":"2505.12038","title":"Safe Delta: Consistently Preserving Safety when Fine-Tuning LLMs on Diverse Datasets","created":"2025-05-17","cited_by_count":18,"area":null},{"id":"2410.10801","title":"Mix Data or Merge Models? Optimizing for Diverse Multi-Task Learning","created":"2024-10-14","cited_by_count":17,"area":null},{"id":"2405.10659","title":"Realistic Evaluation of Toxicity in Large Language Models","created":"2024-05-17","cited_by_count":15,"area":null},{"id":"2405.18822","title":"Toxicity Detection for Free","created":"2024-05-29","cited_by_count":15,"area":null},{"id":"2406.18400","title":"Do LLMs dream of elephants (when told not to)? Latent concept association and associative memory in transformers","created":"2024-06-26","cited_by_count":15,"area":null},{"id":"2504.07137","title":"Large Language Model (LLM) for Software Security: Code Analysis, Malware Analysis, Reverse Engineering","created":"2025-04-07","cited_by_count":15,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2408.11727","title":"Efficient Detection of Toxic Prompts in Large Language Models","created":"2024-08-21","cited_by_count":13,"area":null},{"id":"2404.02637","title":"Vocabulary Attack to Hijack Large Language Model Applications","created":"2024-04-03","cited_by_count":12,"area":null},{"id":"2410.19160","title":"Adversarial Attacks on Large Language Models Using Regularized Relaxation","created":"2024-10-24","cited_by_count":12,"area":null},{"id":"2512.24848","title":"PrivacyBench: A Conversational Benchmark for Evaluating Privacy in Personalized AI","created":"2025-12-31","cited_by_count":12,"area":null},{"id":"2404.02548","title":"AI-Tutoring in Software Engineering Education","created":"2024-04-03","cited_by_count":11,"area":null},{"id":"2309.16573","title":"Language Models as a Service: Overview of a New Paradigm and its Challenges","created":"2023-09-28","cited_by_count":10,"area":null},{"id":"2402.15951","title":"DetoxLLM: A Framework for Detoxification with Explanations","created":"2024-02-25","cited_by_count":10,"area":null},{"id":"2407.12581","title":"Towards Understanding Unsafe Video Generation","created":"2024-07-17","cited_by_count":10,"area":null},{"id":"2409.11026","title":"Prompt Obfuscation for Large Language Models","created":"2024-09-17","cited_by_count":10,"area":null},{"id":"2311.08883","title":"Distilling Rule-based Knowledge into Large Language Models","created":"2023-11-15","cited_by_count":9,"area":null},{"id":"2402.09728","title":"AbuseGPT: Abuse of Generative AI ChatBots to Create Smishing Campaigns","created":"2024-02-15","cited_by_count":9,"area":null},{"id":"2402.14268","title":"Can Large Language Models Detect Misinformation in Scientific News Reporting?","created":"2024-02-22","cited_by_count":9,"area":null},{"id":"2505.17441","title":"Discovering Forbidden Topics in Language Models","created":"2025-05-23","cited_by_count":9,"area":null},{"id":"2407.02596","title":"Towards More Realistic Extraction Attacks: An Adversarial Perspective","created":"2024-07-02","cited_by_count":8,"area":null},{"id":"2405.20657","title":"DORY: Deliberative Prompt Recovery for LLM","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2410.13901","title":"SoK: Prompt Hacking of Large Language Models","created":"2024-10-16","cited_by_count":7,"area":null},{"id":"2410.18491","title":"ChineseSafe: A Chinese Benchmark for Evaluating Safety in Large Language Models","created":"2024-10-24","cited_by_count":7,"area":null},{"id":"2505.22860","title":"Permissioned LLMs: Enforcing Access Control in Large Language Models","created":"2025-05-28","cited_by_count":7,"area":null},{"id":"2310.04072","title":"AI Regulation in Europe: From the AI Act to Future Regulatory Challenges","created":"2023-10-06","cited_by_count":6,"area":null},{"id":"2404.08517","title":"Online Safety Analysis for LLMs: a Benchmark, an Assessment, and a Path Forward","created":"2024-04-12","cited_by_count":6,"area":null},{"id":"2404.08788","title":"Detecting AI-Generated Images via CLIP","created":"2024-04-12","cited_by_count":5,"area":null},{"id":"2409.09493","title":"Hacking, The Lazy Way: LLM Augmented Pentesting","created":"2024-09-14","cited_by_count":5,"area":null},{"id":"2410.23182","title":"ProTransformer: Robustify Transformers via Plug-and-Play Paradigm","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2501.18712","title":"Invisible Traces: Using Hybrid Fingerprinting to identify underlying LLMs in GenAI Apps","created":"2025-01-30","cited_by_count":5,"area":null},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2402.10983","title":"Quantum-Inspired Analysis of Neural Network Vulnerabilities: The Role of Conjugate Variables in System Attacks","created":"2024-02-16","cited_by_count":4,"area":null},{"id":"2402.12617","title":"Generative AI Security: Challenges and Countermeasures","created":"2024-02-20","cited_by_count":4,"area":null},{"id":"2402.14258","title":"Eagle: Ethical Dataset Given from Real Interactions","created":"2024-02-22","cited_by_count":4,"area":null},{"id":"2508.19445","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","created":"2025-08-26","cited_by_count":4,"area":null},{"id":"2308.02448","title":"From Military to Healthcare: Adopting and Expanding Ethical Principles for Generative Artificial Intelligence","created":"2023-08-04","cited_by_count":3,"area":null},{"id":"2402.01723","title":"An Empirical Study on Large Language Models in Accuracy and Robustness under Chinese Industrial Scenarios","created":"2024-01-27","cited_by_count":3,"area":null},{"id":"2403.06904","title":"Human Pose Descriptions and Subject-Focused Attention for Improved Zero-Shot Transfer in Human-Centric Classification Tasks","created":"2024-03-11","cited_by_count":3,"area":null},{"id":"2407.01157","title":"Unaligning Everything: Or Aligning Any Text to Any Image in Multimodal Models","created":"2024-07-01","cited_by_count":3,"area":null},{"id":"2408.00024","title":"Deceptive AI systems that give explanations are more convincing than honest AI systems and can amplify belief in misinformation","created":"2024-07-31","cited_by_count":3,"area":null},{"id":"2409.01688","title":"Differentially Private Kernel Density Estimation","created":"2024-09-03","cited_by_count":3,"area":null},{"id":"2506.13593","title":"Calibrated Predictive Lower Bounds on Time-to-Unsafe-Sampling in LLMs","created":"2025-06-16","cited_by_count":3,"area":null},{"id":"2601.21028","title":"\"Unlimited Realm of Exploration and Experimentation\": Methods and Motivations of AI-Generated Sexual Content Creators","created":"2026-01-28","cited_by_count":3,"area":null},{"id":"2602.11528","title":"Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs","created":"2026-02-12","cited_by_count":3,"area":null},{"id":"2603.01185","title":"Token-level Data Selection for Safe LLM Fine-tuning","created":"2026-03-01","cited_by_count":3,"area":null},{"id":"2306.07567","title":"Large Language Models Sometimes Generate Purely Negatively-Reinforced Text","created":"2023-06-13","cited_by_count":2,"area":null},{"id":"2309.17157","title":"LatticeGen: A Cooperative Framework which Hides Generated Text in a Lattice for Privacy-Aware Generation on Cloud","created":"2023-09-29","cited_by_count":2,"area":null},{"id":"2311.14685","title":"Comprehensive Assessment of Toxicity in ChatGPT","created":"2023-11-03","cited_by_count":2,"area":null},{"id":"2406.10950","title":"E-Bench: Towards Evaluating the Ease-of-Use of Large Language Models","created":"2024-06-16","cited_by_count":2,"area":null},{"id":"2407.01110","title":"SecGenAI: Enhancing Security of Cloud-based Generative AI Applications within Australian Critical Technologies of National Interest","created":"2024-07-01","cited_by_count":2,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2503.16505","title":"Designing Synthetic Discussion Generation Systems: A Case Study for Online Facilitation","created":"2025-03-13","cited_by_count":2,"area":null},{"id":"2504.02793","title":"A Framework for Situating Innovations, Opportunities, and Challenges in Advancing Vertical Systems with Large AI Models","created":"2025-04-03","cited_by_count":2,"area":null},{"id":"2504.04373","title":"StyleRec: A Benchmark Dataset for Prompt Recovery in Writing Style Transformation","created":"2025-04-06","cited_by_count":2,"area":null},{"id":"2509.12152","title":"Beyond PII: How Users Attempt to Estimate and Mitigate Implicit LLM Inference","created":"2025-09-15","cited_by_count":2,"area":null}],"next_cursor":"100"}