{"total":103,"rows":[{"id":"2310.12815","title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses","created":"2023-10-19","cited_by_count":364,"area":"safety"},{"id":"2402.07841","title":"Do Membership Inference Attacks Work on Large Language Models?","created":"2024-02-12","cited_by_count":195,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2406.06443","title":"LLM Dataset Inference: Did you train on my dataset?","created":"2024-06-10","cited_by_count":110,"area":"safety"},{"id":"2311.06062","title":"Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibration","created":"2023-11-10","cited_by_count":98,"area":"safety"},{"id":"2406.01257","title":"What makes unlearning hard and what to do about it","created":"2024-06-03","cited_by_count":89,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2403.17336","title":"Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models","created":"2024-03-26","cited_by_count":86,"area":"safety"},{"id":"2406.15968","title":"ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods","created":"2024-06-23","cited_by_count":64,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2310.15007","title":"Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models","created":"2023-10-23","cited_by_count":56,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2405.03097","title":"To Each (Textual Sequence) Its Own: Improving Memorized-Data Unlearning in Large Language Models","created":"2024-05-06","cited_by_count":43,"area":"safety"},{"id":"2409.01380","title":"Membership Inference Attacks Against In-Context Learning","created":"2024-09-02","cited_by_count":43,"area":"safety"},{"id":"2502.18943","title":"Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models","created":"2025-02-26","cited_by_count":37,"area":"safety"},{"id":"2411.00154","title":"Scaling Up Membership Inference: When and How Attacks Succeed on Large Language Models","created":"2024-10-31","cited_by_count":24,"area":"safety"},{"id":"2403.09562","title":"PreCurious: How Innocent Pre-Trained Language Models Turn into Privacy Traps","created":"2024-03-14","cited_by_count":23,"area":"safety"},{"id":"2503.06808","title":"Privacy Auditing of Large Language Models","created":"2025-03-09","cited_by_count":23,"area":"safety"},{"id":"2409.13745","title":"Context-Aware Membership Inference Attacks against Pre-trained Large Language Models","created":"2024-09-11","cited_by_count":22,"area":"safety"},{"id":"2406.16565","title":"Noisy Neighbors: Efficient membership inference attacks against LLMs","created":"2024-06-24","cited_by_count":21,"area":"safety"},{"id":"2404.11262","title":"Sampling-based Pseudo-Likelihood for Membership Inference Attacks","created":"2024-04-17","cited_by_count":20,"area":"safety"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2406.10218","title":"Semantic Membership Inference Attack against Large Language Models","created":"2024-06-14","cited_by_count":17,"area":"safety"},{"id":"2409.14729","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","created":"2024-09-23","cited_by_count":17,"area":"safety"},{"id":"2502.19726","title":"Tokens for Learning, Tokens for Unlearning: Mitigating Membership Inference Attacks in Large Language Models via Dual-Purpose Training","created":"2025-02-27","cited_by_count":15,"area":"safety"},{"id":"2406.13348","title":"Textual Unlearning Gives a False Sense of Unlearning","created":"2024-06-19","cited_by_count":13,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2408.05131","title":"Range Membership Inference Attacks","created":"2024-08-09","cited_by_count":12,"area":"safety"},{"id":"2506.13972","title":"Membership Inference Attacks as Privacy Tools: Reliability, Disparity and Ensemble","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2502.12658","title":"R.R.: Unveiling LLM Training Privacy through Recollection and Ranking","created":"2025-02-18","cited_by_count":10,"area":"safety"},{"id":"2503.07384","title":"Is My Text in Your AI Model? Gradient-based Membership Inference Test applied to LLMs","created":"2025-03-10","cited_by_count":10,"area":"safety"},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2507.18302","title":"LoRA-Leak: Membership Inference Attacks Against LoRA Fine-tuned Language Models","created":"2025-07-24","cited_by_count":9,"area":"safety"},{"id":"2310.07219","title":"Improved Membership Inference Attacks Against Language Classification Models","created":"2023-10-11","cited_by_count":7,"area":"safety"},{"id":"2405.07562","title":"GLiRA: Black-Box Membership Inference Attack via Knowledge Distillation","created":"2024-05-13","cited_by_count":7,"area":"safety"},{"id":"2508.09603","title":"The Surprising Effectiveness of Membership Inference with Simple N-Gram Coverage","created":"2025-08-13","cited_by_count":7,"area":"safety"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2402.05453","title":"Mitigating Privacy Risk in Membership Inference by Convex-Concave Loss","created":"2024-02-08","cited_by_count":6,"area":"safety"},{"id":"2408.17354","title":"Forget to Flourish: Leveraging Machine-Unlearning on Pretrained Language Models for Privacy Leakage","created":"2024-08-30","cited_by_count":6,"area":"safety"},{"id":"2506.05126","title":"Membership Inference Attacks on Sequence Models","created":"2025-06-05","cited_by_count":6,"area":"safety"},{"id":"2409.14513","title":"Order of Magnitude Speedups for LLM Membership Inference","created":"2024-09-22","cited_by_count":5,"area":"safety"},{"id":"2501.08454","title":"Tag&Tab: Pretraining Data Detection in Large Language Models Using Keyword-Based Membership Inference Attack","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2411.04388","title":"Unlearning in- vs. out-of-distribution data in LLMs under gradient-based method","created":"2024-11-07","cited_by_count":4,"area":"safety"},{"id":"2508.18671","title":"Auditing Approximate Machine Unlearning for Differentially Private Models","created":"2025-08-26","cited_by_count":4,"area":"safety"},{"id":"2601.18110","title":"AttenMIA: LLM Membership Inference Attack through Attention Signals","created":"2026-01-26","cited_by_count":4,"area":"safety"},{"id":"2606.06946","title":"Auditing Training Data in Domain-adapted LLMs: LoRA-MINT","created":"2026-06-05","cited_by_count":4,"area":"safety"},{"id":"2403.15740","title":"Protecting Copyrighted Material with Unique Identifiers in Large Language Model Training","created":"2024-03-23","cited_by_count":3,"area":"safety"},{"id":"2505.00020","title":"Beyond Public Access in LLM Pre-Training Data","created":"2025-04-24","cited_by_count":3,"area":"safety"},{"id":"2509.05449","title":"Neural Breadcrumbs: Membership Inference Attacks on LLMs Through Hidden State and Attention Pattern Analysis","created":"2025-09-05","cited_by_count":3,"area":"safety"},{"id":"2511.20497","title":"Quantifying the Privacy Implications of High-Fidelity Synthetic Network Traffic","created":"2025-11-25","cited_by_count":3,"area":"safety"},{"id":"2512.16292","title":"In-Context Probing for Membership Inference in Fine-Tuned Language Models","created":"2025-12-18","cited_by_count":3,"area":"safety"},{"id":"2601.11314","title":"Membership Inference on LLMs in the Wild","created":"2026-01-16","cited_by_count":3,"area":"safety"},{"id":"2606.17464","title":"CheckMIABench: Firm Foundations For Membership Inference Attacks on Language Models","created":"2026-06-16","cited_by_count":3,"area":"safety"},{"id":"2405.08134","title":"Many-Shot Regurgitation (MSR) Prompting","created":"2024-05-13","cited_by_count":2,"area":"safety"},{"id":"2501.06399","title":"GenAI Confessions: Black-box Membership Inference for Generative Image Models","created":"2025-01-11","cited_by_count":2,"area":"safety"},{"id":"2503.07482","title":"How does Bayesian Sampling help Membership Inference Attacks?","created":"2025-03-10","cited_by_count":2,"area":"safety"},{"id":"2505.03392","title":"Automatic Calibration for Membership Inference Attack on Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2506.06003","title":"What Really is a Member? Discrediting Membership Inference via Poisoning","created":"2025-06-06","cited_by_count":2,"area":"safety"},{"id":"2508.04281","title":"Prompt Injection Vulnerability of Consensus Generating Applications in Digital Democracy","created":"2025-08-06","cited_by_count":2,"area":"safety"},{"id":"2510.05582","title":"(Token-Level) InfoRMIA: Stronger Membership Inference and Memorization Assessment for LLMs","created":"2025-10-07","cited_by_count":2,"area":"safety"},{"id":"2510.19492","title":"Machine Text Detectors are Membership Inference Attacks","created":"2025-10-22","cited_by_count":2,"area":"safety"},{"id":"2512.09654","title":"Membership and Dataset Inference Attacks on Large Audio Generative Models","created":"2025-12-10","cited_by_count":2,"area":"safety"},{"id":"2602.02819","title":"Causal Evaluation of Membership Inference Attacks","created":"2026-02-02","cited_by_count":2,"area":"safety"},{"id":"2603.28378","title":"Membership Inference Attacks against Large Audio Language Models","created":"2026-03-30","cited_by_count":2,"area":"safety"},{"id":"2605.01129","title":"Revisiting Privacy Leakage in Machine Unlearning: Membership Inference Beyond the Forgotten Set","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2605.27825","title":"MRMMIA: Membership Inference Attacks on Memory in Chat Agents","created":"2026-05-27","cited_by_count":2,"area":"safety"},{"id":"2401.13854","title":"Embedding Attack Project (Work Report)","created":"2024-01-24","cited_by_count":1,"area":"safety"},{"id":"2405.15140","title":"Better Membership Inference Privacy Measurement through Discrepancy","created":"2024-05-24","cited_by_count":1,"area":"safety"},{"id":"2410.18824","title":"PSY: Posterior Sampling Based Privacy Enhancer in Large Language Models","created":"2024-10-24","cited_by_count":1,"area":"safety"},{"id":"2411.11424","title":"Membership Inference Attack against Long-Context Large Language Models","created":"2024-11-18","cited_by_count":1,"area":"safety"},{"id":"2506.06488","title":"Membership Inference Attacks for Unseen Classes","created":"2025-06-06","cited_by_count":1,"area":"safety"},{"id":"2508.01268","title":"Win-k: Improved Membership Inference Attacks on Small Language Models","created":"2025-08-02","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2510.19773","title":"Estimating Model-Level Membership Inference Vulnerability Without Reference Models","created":"2025-10-22","cited_by_count":1,"area":"safety"},{"id":"2601.12104","title":"Powerful Training-Free Membership Inference Against Autoregressive Language Models","created":"2026-01-17","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2604.03199","title":"Learning the Signature of Memorization in Autoregressive Language Models","created":"2026-04-03","cited_by_count":1,"area":"safety"},{"id":"2605.26133","title":"Pretraining Data Exposure in Large Language Models: A Survey of Membership Inference, Data Contamination, and Security Implications","created":"2026-05-21","cited_by_count":1,"area":"safety"},{"id":"2605.29245","title":"Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2607.01686","title":"WARP: Weight-Space Analysis for Recovering Training Data Portfolios","created":"2026-07-02","cited_by_count":1,"area":"safety"},{"id":"2402.12189","title":"Amplifying Training Data Exposure through Fine-Tuning with Pseudo-Labeled Memberships","created":"2024-02-19","cited_by_count":0,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2505.13819","title":"Fragments to Facts: Partial-Information Fragment Inference from LLMs","created":"2025-05-20","cited_by_count":0,"area":"safety"},{"id":"2509.04169","title":"Privacy Risks in Time Series Forecasting: User- and Record-Level Membership Inference","created":"2025-09-04","cited_by_count":0,"area":"safety"},{"id":"2510.23074","title":"Fast-MIA: Efficient and Scalable Membership Inference for LLMs","created":"2025-10-27","cited_by_count":0,"area":"safety"},{"id":"2511.00192","title":"EL-MIA: Quantifying Membership Inference Risks of Sensitive Entities in LLMs","created":"2025-10-31","cited_by_count":0,"area":"safety"},{"id":"2511.04228","title":"REMIND: Input Loss Landscapes Reveal Residual Memorization in Post-Unlearning LLMs","created":"2025-11-06","cited_by_count":0,"area":"safety"},{"id":"2511.14763","title":"Membership Inference Attack against Large Language Model-based Recommendation Systems: A New Distillation-based Paradigm","created":"2025-09-16","cited_by_count":0,"area":"safety"},{"id":"2512.02786","title":"FiMMIA: scaling semantic perturbation-based membership inference across modalities","created":"2025-12-02","cited_by_count":0,"area":"safety"},{"id":"2512.08291","title":"Exposing and Defending Membership Leakage in Vulnerability Prediction Models","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2512.12914","title":"CTIGuardian: A Few-Shot Framework for Mitigating Privacy Leakage in Fine-Tuned LLMs","created":"2025-12-15","cited_by_count":0,"area":"safety"},{"id":"2512.13352","title":"On the Effectiveness of Membership Inference in Targeted Data Extraction from Large Language Models","created":"2025-12-15","cited_by_count":0,"area":"safety"},{"id":"2512.15468","title":"How Do Semantically Equivalent Code Transformations Impact Membership Inference on LLMs for Code?","created":"2025-12-17","cited_by_count":0,"area":"safety"},{"id":"2601.12937","title":"On the Evidentiary Limits of Membership Inference for Copyright Auditing","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2602.18934","title":"LoMime: Query-Efficient Membership Inference using Model Extraction in Label-Only Settings","created":"2026-02-21","cited_by_count":0,"area":"safety"},{"id":"2605.04116","title":"Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering","created":"2026-05-05","cited_by_count":0,"area":"safety"},{"id":"2605.07088","title":"Membership Inference Attacks on Vision-Language-Action Models","created":"2026-05-08","cited_by_count":0,"area":"safety"},{"id":"2606.23030","title":"Have You Ever Seen Them? Entity-level Membership Inference through Interrogating Large Language Models","created":"2026-06-22","cited_by_count":0,"area":"safety"},{"id":"2608.00144","title":"Leak It: Per-Document Extraction Beyond Aggregate Membership Inference","created":"2026-07-31","cited_by_count":0,"area":"safety"},{"id":"2608.12652","title":"Excess Separability: Nuisance-Controlled Residual-Stream Probing for Benchmark Contamination Detection","created":"2026-08-12","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}