{"total":76,"rows":[{"id":"2311.17035","title":"Scalable Extraction of Training Data from (Production) Language Models","created":"2023-11-28","cited_by_count":434,"area":null},{"id":"2309.01029","title":"Explainability for Large Language Models: A Survey","created":"2023-09-02","cited_by_count":333,"area":null},{"id":"2309.00236","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","created":"2023-09-01","cited_by_count":172,"area":null},{"id":"2310.11986","title":"Sociotechnical Safety Evaluation of Generative AI Systems","created":"2023-10-18","cited_by_count":157,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2307.13721","title":"Foundational Models Defining a New Era in Vision: A Survey and Outlook","created":"2023-07-25","cited_by_count":110,"area":null},{"id":"2312.09085","title":"The Earth is Flat because...: Investigating LLMs' Belief towards Misinformation via Persuasive Conversation","created":"2023-12-14","cited_by_count":109,"area":null},{"id":"2308.14840","title":"Identifying and Mitigating the Security Risks of Generative AI","created":"2023-08-28","cited_by_count":91,"area":null},{"id":"2407.13692","title":"Prover-Verifier Games improve legibility of LLM outputs","created":"2024-07-18","cited_by_count":85,"area":null},{"id":"2407.15847","title":"LLMmap: Fingerprinting For Large Language Models","created":"2024-07-22","cited_by_count":58,"area":null},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2310.19737","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","created":"2023-10-30","cited_by_count":49,"area":null},{"id":"2410.13722","title":"Persistent Pre-Training Poisoning of LLMs","created":"2024-10-17","cited_by_count":48,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2406.18382","title":"Adversarial Search Engine Optimization for Large Language Models","created":"2024-06-26","cited_by_count":40,"area":null},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2311.09447","title":"How Trustworthy are Open-Source LLMs? An Assessment under Malicious Demonstrations Shows their Vulnerabilities","created":"2023-11-15","cited_by_count":33,"area":null},{"id":"2307.08925","title":"Integration of Large Language Models and Federated Learning","created":"2023-07-18","cited_by_count":31,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2311.05876","title":"Trends in Integration of Knowledge and Large Language Models: A Survey and Taxonomy of Methods, Benchmarks, and Applications","created":"2023-11-10","cited_by_count":28,"area":null},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2406.11852","title":"Risks from Language Models for Automated Mental Healthcare: Ethics and Structure for Implementation","created":"2024-04-02","cited_by_count":27,"area":null},{"id":"2410.10343","title":"Locking Down the Finetuned LLMs Safety","created":"2024-10-14","cited_by_count":22,"area":null},{"id":"2310.04445","title":"LoFT: Local Proxy Fine-tuning For Improving Transferability Of Adversarial Attacks Against Large Language Model","created":"2023-10-02","cited_by_count":21,"area":null},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2502.02180","title":"The Elicitation Game: Evaluating Capability Elicitation Techniques","created":"2025-02-04","cited_by_count":18,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2402.10208","title":"Recovering the Pre-Fine-Tuning Weights of Generative Models","created":"2024-02-15","cited_by_count":16,"area":null},{"id":"2410.13211","title":"Estimating the Probabilities of Rare Outputs in Language Models","created":"2024-10-17","cited_by_count":16,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2505.19840","title":"One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP","created":"2025-05-26","cited_by_count":15,"area":null},{"id":"2404.12744","title":"Beyond Human Norms: Unveiling Unique Values of Large Language Models through Interdisciplinary Approaches","created":"2024-04-19","cited_by_count":14,"area":null},{"id":"2405.16873","title":"ContrastAlign: Toward Robust BEV Feature Alignment via Contrastive Learning for Multi-Modal 3D Object Detection","created":"2024-05-27","cited_by_count":13,"area":null},{"id":"2406.04975","title":"UniTST: Effectively Modeling Inter-Series and Intra-Series Dependencies for Multivariate Time Series Forecasting","created":"2024-06-07","cited_by_count":13,"area":null},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2411.02317","title":"Defining and Evaluating Physical Safety for Large Language Models","created":"2024-11-04","cited_by_count":9,"area":null},{"id":"2401.15568","title":"Intriguing Equivalence Structures of the Embedding Space of Vision Transformers","created":"2024-01-28","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2502.11910","title":"Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives","created":"2025-02-17","cited_by_count":8,"area":null},{"id":"2502.19320","title":"Shh, don't say that! Domain Certification in LLMs","created":"2025-02-26","cited_by_count":7,"area":null},{"id":"2506.01790","title":"IF-GUIDE: Influence Function-Guided Detoxification of LLMs","created":"2025-06-02","cited_by_count":7,"area":null},{"id":"2402.17916","title":"Adversarial Math Word Problem Generation","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2410.22944","title":"Focus On This, Not That! Steering LLMs with Adaptive Feature Specification","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2501.18712","title":"Invisible Traces: Using Hybrid Fingerprinting to identify underlying LLMs in GenAI Apps","created":"2025-01-30","cited_by_count":5,"area":null},{"id":"2502.04643","title":"Confidence Elicitation: A New Attack Vector for Large Language Models","created":"2025-02-07","cited_by_count":5,"area":null},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2602.15344","title":"ER-MIA: Black-Box Adversarial Memory Injection Attacks on Long-Term Memory-Augmented Large Language Models","created":"2026-02-17","cited_by_count":5,"area":null},{"id":"2604.19790","title":"Hidden Reliability Risks in Large Language Models: Systematic Identification of Precision-Induced Output Disagreements","created":"2026-04-02","cited_by_count":5,"area":null},{"id":"2405.04346","title":"Revisiting Character-level Adversarial Attacks for Language Models","created":"2024-05-07","cited_by_count":4,"area":null},{"id":"2412.08053","title":"DynamicPAE: Generating Scene-Aware Physical Adversarial Examples in Real-Time","created":"2024-12-11","cited_by_count":4,"area":null},{"id":"2407.01157","title":"Unaligning Everything: Or Aligning Any Text to Any Image in Multimodal Models","created":"2024-07-01","cited_by_count":3,"area":null},{"id":"2411.01644","title":"Achieving Domain-Independent Certified Robustness via Knowledge Continuity","created":"2024-11-03","cited_by_count":3,"area":null},{"id":"2507.06489","title":"On the Robustness of Verbal Confidence of LLMs in Adversarial Attacks","created":"2025-07-09","cited_by_count":3,"area":null},{"id":"2508.17361","title":"Trust Me, I Know This Function: Hijacking LLM Static Analysis using Bias","created":"2025-08-24","cited_by_count":3,"area":null},{"id":"2605.21948","title":"SCI-Defense: Defending Manipulation Attacks from Generative Engine Optimization","created":"2026-05-21","cited_by_count":3,"area":null},{"id":"2402.08473","title":"Intriguing Differences Between Zero-Shot and Systematic Evaluations of Vision-Language Transformer Models","created":"2024-02-13","cited_by_count":2,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2402.17671","title":"Securing Reliability: A Brief Overview on Enhancing In-Context Learning for Foundation Models","created":"2024-02-27","cited_by_count":1,"area":null},{"id":"2504.20310","title":"A Cryptographic Perspective on Mitigation vs. Detection in Machine Learning","created":"2025-04-28","cited_by_count":1,"area":null},{"id":"2506.19140","title":"Command-V: Pasting LLM Behaviors via Activation Profiles","created":"2025-06-23","cited_by_count":1,"area":null},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2512.04554","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","created":"2025-12-04","cited_by_count":1,"area":null},{"id":"2512.11783","title":"Super Suffixes: Bypassing Text Generation Alignment and Guard Models Simultaneously","created":"2025-12-12","cited_by_count":1,"area":null},{"id":"2602.07259","title":"Incentive-Aware AI Safety via Strategic Resource Allocation: A Stackelberg Security Games Perspective","created":"2026-02-06","cited_by_count":1,"area":null},{"id":"2602.08660","title":"Equalized Generative Treatment: Matching f-divergences for Fairness in Generative Models","created":"2026-02-09","cited_by_count":1,"area":null},{"id":"2308.15092","title":"Can We Rely on AI?","created":"2023-08-29","cited_by_count":0,"area":null},{"id":"2512.17902","title":"Adversarial Robustness of Vision in Open Foundation Models","created":"2025-12-19","cited_by_count":0,"area":null},{"id":"2603.10012","title":"Measuring and Eliminating Refusals in Military Large Language Models","created":"2026-02-18","cited_by_count":0,"area":null},{"id":"2605.12876","title":"Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2606.21488","title":"Robustness Cannot be Reduced to Regularization: Studying Adversarial Training Beyond the Linear Case","created":"2026-06-19","cited_by_count":0,"area":null},{"id":"2608.03740","title":"MissClick: Execution-Aware Adversarial Attacks on Coordinate Generation in GUI Grounding Models","created":"2026-08-04","cited_by_count":0,"area":null}],"next_cursor":null}