{"total":52,"rows":[{"id":"2310.12815","title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses","created":"2023-10-19","cited_by_count":364,"area":"safety"},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73,"area":"safety"},{"id":"2408.12798","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","created":"2024-08-23","cited_by_count":50,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2308.14367","title":"A Comprehensive Overview of Backdoor Attacks in Large Language Models within Communication Networks","created":"2023-08-28","cited_by_count":42,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2411.12768","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","created":"2024-11-18","cited_by_count":33,"area":"safety"},{"id":"2406.05948","title":"Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Models","created":"2024-06-10","cited_by_count":28,"area":"safety"},{"id":"2604.09378","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","created":"2026-04-10","cited_by_count":27,"area":"safety"},{"id":"2407.20224","title":"Can Editing LLMs Inject Harm?","created":"2024-07-29","cited_by_count":22,"area":"safety"},{"id":"2406.16565","title":"Noisy Neighbors: Efficient membership inference attacks against LLMs","created":"2024-06-24","cited_by_count":21,"area":"safety"},{"id":"2410.14827","title":"Enhancing Prompt Injection Attacks to LLMs via Poisoning Alignment","created":"2024-10-18","cited_by_count":21,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2503.04636","title":"Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking","created":"2025-03-06","cited_by_count":19,"area":"safety"},{"id":"2404.16841","title":"Machine Unlearning in Large Language Models","created":"2024-02-03","cited_by_count":17,"area":"safety"},{"id":"2409.14729","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","created":"2024-09-23","cited_by_count":17,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2505.17601","title":"Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs","created":"2025-05-23","cited_by_count":10,"area":"safety"},{"id":"2312.04748","title":"Forcing Generative Models to Degenerate Ones: The Power of Data Poisoning Attacks","created":"2023-12-07","cited_by_count":9,"area":"safety"},{"id":"2407.12281","title":"Turning Generative Models Degenerate: The Power of Data Poisoning Attacks","created":"2024-07-17","cited_by_count":9,"area":"safety"},{"id":"2507.01321","title":"ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks","created":"2025-07-02","cited_by_count":9,"area":"safety"},{"id":"2308.11521","title":"Self-Deception: Reverse Penetrating the Semantic Firewall of Large Language Models","created":"2023-08-16","cited_by_count":7,"area":"safety"},{"id":"2510.18333","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","created":"2025-10-21","cited_by_count":7,"area":"safety"},{"id":"2409.01247","title":"Conversational Complexity for Assessing Risk in Large Language Models","created":"2024-09-02","cited_by_count":6,"area":"safety"},{"id":"2504.11182","title":"Exploring Backdoor Attack and Defense for LLM-empowered Recommendations","created":"2025-04-15","cited_by_count":6,"area":"safety"},{"id":"2510.17021","title":"Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearning","created":"2025-10-19","cited_by_count":6,"area":"safety"},{"id":"2405.16783","title":"TrojFM: Resource-efficient Backdoor Attacks against Very Large Foundation Models","created":"2024-05-27","cited_by_count":5,"area":"safety"},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2505.15656","title":"Be Careful When Fine-tuning On Open-Source LLMs: Your Fine-tuning Data Could Be Secretly Stolen!","created":"2025-05-21","cited_by_count":5,"area":"safety"},{"id":"2401.10375","title":"Foundation Models in Federated Learning: Assessing Backdoor Vulnerabilities","created":"2024-01-18","cited_by_count":3,"area":"safety"},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2410.17573","title":"Securing Federated Learning against Backdoor Threats with Foundation Model Integration","created":"2024-10-23","cited_by_count":3,"area":"safety"},{"id":"2602.04195","title":"Semantic Consensus Decoding: Backdoor Defense for Verilog Code Generation","created":"2026-02-04","cited_by_count":3,"area":"safety"},{"id":"2604.09235","title":"Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor","created":"2026-04-10","cited_by_count":2,"area":"safety"},{"id":"2408.13221","title":"Protecting against simultaneous data poisoning attacks","created":"2024-08-23","cited_by_count":1,"area":"safety"},{"id":"2503.17578","title":"Large Language Models Can Verbatim Reproduce Long Malicious Sequences","created":"2025-03-21","cited_by_count":1,"area":"safety"},{"id":"2602.05401","title":"BadTemplate: A Training-Free Backdoor Attack via Chat Template Against Large Language Models","created":"2026-02-05","cited_by_count":1,"area":"safety"},{"id":"2603.02262","title":"Silent Sabotage During Fine-Tuning: Few-Shot Rationale Poisoning of Compact Medical LLMs","created":"2026-02-28","cited_by_count":1,"area":"safety"},{"id":"2604.21700","title":"Stealthy Backdoor Attacks against LLMs Based on Natural Style Triggers","created":"2026-04-23","cited_by_count":1,"area":"safety"},{"id":"2605.25073","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","created":"2026-05-24","cited_by_count":1,"area":"safety"},{"id":"2602.06887","title":"Plato's Form: Toward Backdoor Defense-as-a-Service for LLMs with Prototype Representations","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2604.27426","title":"Secret Stealing Attacks on Local LLM Fine-Tuning through Supply-Chain Model Code Backdoors","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2605.11612","title":"When Emotion Becomes Trigger: Emotion-style dynamic Backdoor Attack Parasitising Large Language Models","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.30899","title":"Curvature-Guided Module Localization for Low-Rank Detoxification of Backdoored Large Language Models","created":"2026-06-29","cited_by_count":0,"area":"safety"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2609.26131","title":"StepTrigger: Contact-State-Triggered Backdoor Attacks on VLM-Powered Legged Robots","created":"2026-08-07","cited_by_count":0,"area":"safety"},{"id":"2609.37367","title":"Backdoor Mitigation in Decentralized LLM Fine-Tuning","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}