{"total":164,"rows":[{"id":"2308.10620","title":"Large Language Models for Software Engineering: A Systematic Literature Review","created":"2023-08-21","cited_by_count":399,"area":null},{"id":"2403.08319","title":"Knowledge Conflicts for LLMs: A Survey","created":"2024-03-13","cited_by_count":283,"area":null},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2505.23643","title":"Securing AI Agents with Information-Flow Control","created":"2025-05-29","cited_by_count":121,"area":null},{"id":"2307.06865","title":"Effective Prompt Extraction from Language Models","created":"2023-07-13","cited_by_count":85,"area":null},{"id":"2402.18649","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","created":"2024-02-28","cited_by_count":77,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2405.04760","title":"Large Language Models for Cyber Security: A Systematic Literature Review","created":"2024-05-08","cited_by_count":68,"area":null},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2501.09674","title":"Authenticated Delegation and Authorized AI Agents","created":"2025-01-16","cited_by_count":65,"area":null},{"id":"2307.03875","title":"Large Language Models for Supply Chain Optimization","created":"2023-07-08","cited_by_count":64,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2308.03656","title":"Emotionally Numb or Empathetic? Evaluating How LLMs Feel Using EmotionBench","created":"2023-08-07","cited_by_count":54,"area":null},{"id":"2311.16153","title":"Identifying and Mitigating Vulnerabilities in LLM-Integrated Applications","created":"2023-11-07","cited_by_count":54,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2403.09539","title":"Logits of API-Protected LLMs Leak Proprietary Information","created":"2024-03-14","cited_by_count":40,"area":null},{"id":"2406.18382","title":"Adversarial Search Engine Optimization for Large Language Models","created":"2024-06-26","cited_by_count":40,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2405.19334","title":"LLMs Meet Multimodal Generation and Editing: A Survey","created":"2024-05-29","cited_by_count":35,"area":null},{"id":"2308.02575","title":"Is GPT-4 a reliable rater? Evaluating Consistency in GPT-4 Text Ratings","created":"2023-08-03","cited_by_count":34,"area":null},{"id":"2402.11755","title":"SPML: A DSL for Defending Language Models Against Prompt Attacks","created":"2024-02-19","cited_by_count":34,"area":null},{"id":"2407.18369","title":"AI Safety in Generative AI Large Language Models: A Survey","created":"2024-07-06","cited_by_count":33,"area":null},{"id":"2502.15851","title":"Control Illusion: The Failure of Instruction Hierarchies in Large Language Models","created":"2025-02-21","cited_by_count":33,"area":null},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2410.20011","title":"A Survey of Small Language Models","created":"2024-10-25","cited_by_count":31,"area":null},{"id":"2404.09894","title":"Glitch Tokens in Large Language Models: Categorization Taxonomy and Effective Detection","created":"2024-04-15","cited_by_count":29,"area":null},{"id":"2406.01394","title":"PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration","created":"2024-06-03","cited_by_count":28,"area":null},{"id":"2310.11409","title":"LLMs as Hackers: Autonomous Linux Privilege Escalation Attacks","created":"2023-10-17","cited_by_count":27,"area":null},{"id":"2502.19145","title":"Multi-Agent Security Tax: Trading Off Security and Collaboration Capabilities in Multi-Agent Systems","created":"2025-02-26","cited_by_count":27,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2404.06921","title":"GoEX: Perspectives and Designs Towards a Runtime for Autonomous LLM Applications","created":"2024-04-10","cited_by_count":23,"area":null},{"id":"2404.16251","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","created":"2024-04-24","cited_by_count":23,"area":null},{"id":"2410.03055","title":"Permissive Information-Flow Analysis for Large Language Models","created":"2024-10-04","cited_by_count":22,"area":null},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2406.07954","title":"Dataset and Lessons Learned from the 2024 SaTML LLM Capture-the-Flag Competition","created":"2024-06-12","cited_by_count":20,"area":null},{"id":"2402.18216","title":"LLM Task Interference: An Initial Study on the Impact of Task-Switch in Conversational History","created":"2024-02-28","cited_by_count":19,"area":null},{"id":"2407.05216","title":"Large Language Model as an Assignment Evaluator: Insights, Feedback, and Challenges in a 1000+ Student Course","created":"2024-07-07","cited_by_count":19,"area":null},{"id":"2509.03888","title":"False Sense of Security: Why Probing-based Malicious Input Detection Fails to Generalize","created":"2025-09-04","cited_by_count":19,"area":null},{"id":"2408.10053","title":"Privacy Checklist: Privacy Violation Detection Grounding on Contextual Integrity Theory","created":"2024-08-19","cited_by_count":18,"area":null},{"id":"2602.11865","title":"Intelligent AI Delegation","created":"2026-02-12","cited_by_count":18,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2406.10300","title":"Large Language Models as Software Components: A Taxonomy for LLM-Integrated Applications","created":"2024-06-13","cited_by_count":17,"area":null},{"id":"2402.15105","title":"A First Look at GPT Apps: Landscape and Vulnerability","created":"2024-02-23","cited_by_count":16,"area":null},{"id":"2406.06737","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","created":"2024-06-10","cited_by_count":16,"area":null},{"id":"2404.16891","title":"Attacks on Third-Party APIs of Large Language Models","created":"2024-04-24","cited_by_count":15,"area":null},{"id":"2406.18400","title":"Do LLMs dream of elephants (when told not to)? Latent concept association and associative memory in transformers","created":"2024-06-26","cited_by_count":15,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2405.02765","title":"Has this Fact been Edited? Detecting Knowledge Edits in Language Models","created":"2024-05-04","cited_by_count":14,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2604.11806","title":"Detecting Safety Violations Across Many Agent Traces","created":"2026-04-13","cited_by_count":14,"area":null},{"id":"2310.19181","title":"From Chatbots to PhishBots? -- Preventing Phishing scams created using ChatGPT, Google Bard and Claude","created":"2023-10-29","cited_by_count":13,"area":null},{"id":"2408.11727","title":"Efficient Detection of Toxic Prompts in Large Language Models","created":"2024-08-21","cited_by_count":13,"area":null},{"id":"2402.12193","title":"A Chinese Dataset for Evaluating the Safeguards in Large Language Models","created":"2024-02-19","cited_by_count":12,"area":null},{"id":"2504.05804","title":"StealthRank: LLM Ranking Manipulation via Stealthy Prompt Optimization","created":"2025-04-08","cited_by_count":12,"area":null},{"id":"2407.09221","title":"Evaluating AI Evaluation: Perils and Prospects","created":"2024-07-12","cited_by_count":11,"area":null},{"id":"2405.08989","title":"What is it for a Machine Learning Model to Have a Capability?","created":"2024-05-14","cited_by_count":10,"area":null},{"id":"2406.12259","title":"Adversarial Attacks on Large Language Models in Medicine","created":"2024-06-18","cited_by_count":10,"area":null},{"id":"2407.00125","title":"A Survey on Failure Analysis and Fault Injection in AI Systems","created":"2024-06-28","cited_by_count":10,"area":null},{"id":"2409.11026","title":"Prompt Obfuscation for Large Language Models","created":"2024-09-17","cited_by_count":10,"area":null},{"id":"2404.01041","title":"Can LLMs get help from other LLMs without revealing private information?","created":"2024-04-01","cited_by_count":9,"area":null},{"id":"2406.04643","title":"More Victories, Less Cooperation: Assessing Cicero's Diplomacy Play","created":"2024-06-07","cited_by_count":9,"area":null},{"id":"2410.09652","title":"Survival of the Safest: Towards Secure Prompt Optimization through Interleaved Multi-Objective Evolution","created":"2024-10-12","cited_by_count":9,"area":null},{"id":"2510.06732","title":"Are LLMs Reliable Rankers? Rank Manipulation via Two-Stage Token Optimization","created":"2025-10-08","cited_by_count":9,"area":null},{"id":"2402.12234","title":"Task-Oriented Dialogue with In-Context Learning","created":"2024-02-19","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2509.14404","title":"A Taxonomy of Prompt Defects in LLM Systems","created":"2025-09-17","cited_by_count":8,"area":null},{"id":"2602.05085","title":"Locas: Your Models are Principled Initializers of Locally-Supported Parametric Memories","created":"2026-02-04","cited_by_count":8,"area":null},{"id":"2604.03976","title":"Quantifying Trust: Financial Risk Management for Trustworthy AI Agents","created":"2026-04-05","cited_by_count":8,"area":null},{"id":"2406.00199","title":"Exfiltration of personal information from ChatGPT via prompt injection","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2405.11612","title":"Sociotechnical Implications of Generative Artificial Intelligence for Information Access","created":"2024-05-19","cited_by_count":6,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2408.04905","title":"GlitchProber: Advancing Effective Detection and Mitigation of Glitch Tokens in Large Language Models","created":"2024-08-09","cited_by_count":5,"area":null},{"id":"2410.23182","title":"ProTransformer: Robustify Transformers via Plug-and-Play Paradigm","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2507.21914","title":"Rote Learning Considered Useful: Generalizing over Memorized Data in LLMs","created":"2025-07-29","cited_by_count":5,"area":null},{"id":"2603.17170","title":"Beyond OAuth: Task-Scoped Authorization for AI Agents via Natural Language Slices","created":"2026-03-17","cited_by_count":5,"area":null},{"id":"2402.12617","title":"Generative AI Security: Challenges and Countermeasures","created":"2024-02-20","cited_by_count":4,"area":null},{"id":"2409.15441","title":"Steward: Natural Language Web Automation","created":"2024-09-23","cited_by_count":4,"area":null},{"id":"2410.23678","title":"Goal Hijacking Attack on Large Language Models via Pseudo-Conversation Injection","created":"2024-10-31","cited_by_count":4,"area":null},{"id":"2502.15609","title":"On the Robustness of Transformers against Context Hijacking for Linear Classification","created":"2025-02-21","cited_by_count":4,"area":null},{"id":"2508.19445","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","created":"2025-08-26","cited_by_count":4,"area":null},{"id":"2509.07131","title":"SoK: Security and Privacy of AI Agents for Blockchain","created":"2025-09-08","cited_by_count":4,"area":null},{"id":"2509.21884","title":"You Can't Steal Nothing: Mitigating Prompt Leakages in LLMs via System Vectors","created":"2025-09-26","cited_by_count":4,"area":null},{"id":"2605.28214","title":"Out of Sight, Not Out of Mind: Unveiling Latent Attack in Latent-based Multi-Agent Systems","created":"2026-05-27","cited_by_count":4,"area":null},{"id":"2406.18812","title":"A Survey on Privacy Attacks Against Digital Twin Systems in AI-Robotics","created":"2024-06-27","cited_by_count":3,"area":null},{"id":"2407.06851","title":"Safe-Embed: Unveiling the Safety-Critical Knowledge of Sentence Encoders","created":"2024-07-09","cited_by_count":3,"area":null},{"id":"2409.16559","title":"Demystifying Issues, Causes and Solutions in LLM Open-Source Projects","created":"2024-09-25","cited_by_count":3,"area":null},{"id":"2410.15396","title":"The Best Defense is a Good Offense: Countering LLM-Powered Cyberattacks","created":"2024-10-20","cited_by_count":3,"area":null},{"id":"2505.12655","title":"Web Intellectual Property at Risk: Preventing Unauthorized Real-Time Retrieval by Large Language Models","created":"2025-05-19","cited_by_count":3,"area":null},{"id":"2508.21622","title":"Integrating Large Language Models with Network Optimization for Interactive and Explainable Supply Chain Planning: A Real-World Case Study","created":"2025-08-29","cited_by_count":3,"area":null},{"id":"2510.00452","title":"Cloud Investigation Automation Framework (CIAF): An AI-Driven Approach to Cloud Forensics","created":"2025-10-01","cited_by_count":3,"area":null},{"id":"2510.17098","title":"Can Transformer Memory Be Corrupted? Investigating Cache-Side Vulnerabilities in Large Language Models","created":"2025-10-20","cited_by_count":3,"area":null},{"id":"2406.01363","title":"Privacy in LLM-based Recommendation: Recent Advances and Future Directions","created":"2024-06-03","cited_by_count":2,"area":null},{"id":"2409.02375","title":"How Privacy-Savvy Are Large Language Models? A Case Study on Compliance and Privacy Technical Review","created":"2024-09-04","cited_by_count":2,"area":null},{"id":"2409.17642","title":"AI Delegates with a Dual Focus: Ensuring Privacy and Strategic Self-Disclosure","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2410.05553","title":"On Instruction-Finetuning Neural Machine Translation Models","created":"2024-10-07","cited_by_count":2,"area":null}],"next_cursor":"100"}