{"total":33,"rows":[{"id":"2306.12001","title":"An Overview of Catastrophic AI Risks","created":"2023-06-21","cited_by_count":222,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2405.17067","title":"Tokenization Matters! Degrading Large Language Models through Challenging Their Tokenization","created":"2024-05-27","cited_by_count":32,"area":null},{"id":"2402.14968","title":"Mitigating Fine-tuning based Jailbreak Attack with Backdoor Enhanced Safety Alignment","created":"2024-02-22","cited_by_count":31,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2602.04863","title":"Subliminal Effects in Your Data: A General Mechanism via Log-Linearity","created":"2026-02-04","cited_by_count":19,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2501.17858","title":"Improving Your Model Ranking on Chatbot Arena by Vote Rigging","created":"2025-01-29","cited_by_count":17,"area":null},{"id":"2402.12168","title":"Defending Against Weight-Poisoning Backdoor Attacks for Parameter-Efficient Fine-Tuning","created":"2024-02-19","cited_by_count":16,"area":null},{"id":"2405.05466","title":"Poser: Unmasking Alignment Faking LLMs by Manipulating Their Internals","created":"2024-05-08","cited_by_count":13,"area":null},{"id":"2309.17319","title":"Building Privacy-Preserving and Secure Geospatial Artificial Intelligence Foundation Models","created":"2023-09-29","cited_by_count":12,"area":null},{"id":"2406.12259","title":"Adversarial Attacks on Large Language Models in Medicine","created":"2024-06-18","cited_by_count":10,"area":null},{"id":"2403.13309","title":"Mapping LLM Security Landscapes: A Comprehensive Stakeholder Risk Assessment Proposal","created":"2024-03-20","cited_by_count":9,"area":null},{"id":"2405.14061","title":"Meanings and Feelings of Large Language Models: Observability of Latent States in Generative AI","created":"2024-05-22","cited_by_count":5,"area":null},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2512.19297","title":"Causal-Guided Detoxify Backdoor Attack of Open-Weight LoRA Models","created":"2025-12-22","cited_by_count":3,"area":null},{"id":"2602.16984","title":"Fundamental Limits of Black-Box Safety Evaluation: Information-Theoretic and Computational Barriers from Latent Context Conditioning","created":"2026-02-19","cited_by_count":3,"area":null},{"id":"2410.23472","title":"Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems","created":"2024-10-30","cited_by_count":2,"area":null},{"id":"2504.09026","title":"Detecting Instruction Fine-tuning Attacks using Influence Function","created":"2025-04-12","cited_by_count":2,"area":null},{"id":"2308.10201","title":"Hiding Backdoors within Event Sequence Data via Poisoning Attacks","created":"2023-08-20","cited_by_count":1,"area":null},{"id":"2405.20234","title":"Hidden in Plain Sight: Exploring Chat History Tampering in Interactive Language Models","created":"2024-05-30","cited_by_count":1,"area":null},{"id":"2505.23223","title":"Daunce: Data Attribution through Uncertainty Estimation","created":"2025-05-29","cited_by_count":1,"area":null},{"id":"2508.08559","title":"Multi-Target Backdoor Attacks Against Speaker Recognition","created":"2025-08-12","cited_by_count":1,"area":null},{"id":"2602.09757","title":"Towards Poisoning Robustness Certification for Natural Language Generation","created":"2026-02-10","cited_by_count":1,"area":null},{"id":"2605.27631","title":"Poison with Style: A Practical Poisoning Attack on Code Large Language Models","created":"2026-05-26","cited_by_count":1,"area":null},{"id":"2510.01288","title":"Microsaccade-Inspired Probing: Positional Encoding Perturbations Reveal LLM Misbehaviours","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2511.02600","title":"On The Dangers of Poisoned LLMs In Security Automation","created":"2025-11-04","cited_by_count":0,"area":null},{"id":"2607.28862","title":"TextCloak: Thwarting Unauthorized LLM Exploitation via RL-Driven Unlearnable Text","created":"2026-07-30","cited_by_count":0,"area":null},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.33985","title":"The Privacy Fallacy of Crowdsourced Fine-Tuning: Extracting Proprietary Data via Topic-Based Poisoning","created":"2026-09-27","cited_by_count":0,"area":null},{"id":"2610.03960","title":"Localize-and-Detect: Auditing Task-Level Poisoning in Instruction-Tuned Models","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.13928","title":"AI Models Can Provably Hide Arbitrary Capabilities","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}