{"total":157,"rows":[{"id":"2402.11208","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","created":"2024-02-17","cited_by_count":137,"area":"agents"},{"id":"2403.04957","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","created":"2024-03-07","cited_by_count":119,"area":"safety"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2406.00083","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","created":"2024-06-03","cited_by_count":86,"area":"rag"},{"id":"2407.20859","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","created":"2024-07-30","cited_by_count":81,"area":"agents"},{"id":"2405.03644","title":"When LLMs Meet Cybersecurity: A Systematic Literature Review","created":"2024-05-06","cited_by_count":71,"area":null},{"id":"2405.13401","title":"TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Models","created":"2024-05-22","cited_by_count":67,"area":"rag"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2408.12798","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","created":"2024-08-23","cited_by_count":50,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2410.22770","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","created":"2024-10-30","cited_by_count":42,"area":"safety"},{"id":"2309.06055","title":"Backdoor Attacks and Countermeasures in Natural Language Processing Models: A Comprehensive Security Review","created":"2023-09-12","cited_by_count":39,"area":"safety"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2404.05530","title":"Best-of-Venom: Attacking RLHF by Injecting Poisoned Preference Data","created":"2024-04-08","cited_by_count":35,"area":"alignment"},{"id":"2410.10760","title":"Denial-of-Service Poisoning Attacks against Large Language Models","created":"2024-10-14","cited_by_count":35,"area":null},{"id":"2505.14590","title":"MCIP: Protecting MCP Safety via Model Contextual Integrity Protocol","created":"2025-05-20","cited_by_count":34,"area":null},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2411.12768","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","created":"2024-11-18","cited_by_count":33,"area":"safety"},{"id":"2408.02946","title":"Scaling Trends for Data Poisoning in LLMs","created":"2024-08-06","cited_by_count":30,"area":"safety"},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2510.23883","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","created":"2025-10-27","cited_by_count":28,"area":"agents"},{"id":"2402.15302","title":"How (un)ethical are instruction-centric responses of LLMs? Unveiling the vulnerabilities of safety guardrails to harmful queries","created":"2024-02-23","cited_by_count":27,"area":"safety"},{"id":"2410.14425","title":"Unlearning Backdoor Attacks for LLMs with Weak-to-Strong Knowledge Distillation","created":"2024-10-18","cited_by_count":27,"area":"safety"},{"id":"2604.09378","title":"BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning","created":"2026-04-10","cited_by_count":27,"area":"safety"},{"id":"2402.11725","title":"How Susceptible are Large Language Models to Ideological Manipulation?","created":"2024-02-18","cited_by_count":26,"area":null},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2406.12257","title":"CleanGen: Mitigating Backdoor Attacks for Generation Tasks in Large Language Models","created":"2024-06-18","cited_by_count":24,"area":"safety"},{"id":"2502.12575","title":"DemonAgent: Dynamically Encrypted Multi-Backdoor Implantation Attack on LLM-based Agent","created":"2025-02-18","cited_by_count":23,"area":"agents"},{"id":"2402.10196","title":"A Trembling House of Cards? Mapping Adversarial Attacks against Language Agents","created":"2024-02-15","cited_by_count":22,"area":"agents"},{"id":"2407.20224","title":"Can Editing LLMs Inject Harm?","created":"2024-07-29","cited_by_count":22,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2503.00596","title":"BadJudge: Backdoor Vulnerabilities of LLM-as-a-Judge","created":"2025-03-01","cited_by_count":18,"area":"safety"},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2409.14729","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","created":"2024-09-23","cited_by_count":17,"area":"safety"},{"id":"2501.17858","title":"Improving Your Model Ranking on Chatbot Arena by Vote Rigging","created":"2025-01-29","cited_by_count":17,"area":null},{"id":"2402.12168","title":"Defending Against Weight-Poisoning Backdoor Attacks for Parameter-Efficient Fine-Tuning","created":"2024-02-19","cited_by_count":16,"area":null},{"id":"2402.13459","title":"Learning to Poison Large Language Models for Downstream Manipulation","created":"2024-02-21","cited_by_count":16,"area":"lr"},{"id":"2502.13141","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","created":"2025-02-18","cited_by_count":16,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2505.12567","title":"A Survey of Attacks on Large Language Models","created":"2025-05-18","cited_by_count":15,"area":"agents"},{"id":"2312.11513","title":"Maatphor: Automated Variant Analysis for Prompt Injection Attacks","created":"2023-12-12","cited_by_count":14,"area":"safety"},{"id":"2402.01920","title":"Preference Poisoning Attacks on Reward Model Learning","created":"2024-02-02","cited_by_count":14,"area":"alignment"},{"id":"2411.14497","title":"Star-Agents: Automatic Data Optimization with LLM Agents for Instruction Tuning","created":"2024-11-21","cited_by_count":14,"area":"agents"},{"id":"2412.16504","title":"Privacy in Fine-tuning Large Language Models: Attacks, Defenses, and Future Directions","created":"2024-12-21","cited_by_count":14,"area":"safety"},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2405.07667","title":"Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models","created":"2024-05-13","cited_by_count":12,"area":"safety"},{"id":"2411.19530","title":"Quantized Delta Weight Is Safety Keeper","created":"2024-11-29","cited_by_count":12,"area":"safety"},{"id":"2505.19598","title":"Evaluating Robustness of Large Audio Language Models to Audio Injection: An Empirical Study","created":"2025-05-26","cited_by_count":12,"area":null},{"id":"2505.23847","title":"Seven Security Challenges in Cross-domain Multi-agent LLM Systems","created":"2025-05-28","cited_by_count":12,"area":"agents"},{"id":"2502.16184","title":"Robustness and Cybersecurity in the EU Artificial Intelligence Act","created":"2025-02-22","cited_by_count":11,"area":null},{"id":"2502.18511","title":"ELBA-Bench: An Efficient Learning Backdoor Attacks Benchmark for Large Language Models","created":"2025-02-22","cited_by_count":11,"area":"safety"},{"id":"2407.03160","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","created":"2024-07-03","cited_by_count":10,"area":"safety"},{"id":"2502.09755","title":"Jailbreak Attack Initializations as Extractors of Compliance Directions","created":"2025-02-13","cited_by_count":10,"area":"safety"},{"id":"2505.12981","title":"From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents","created":"2025-05-19","cited_by_count":10,"area":"agents"},{"id":"2505.17601","title":"Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs","created":"2025-05-23","cited_by_count":10,"area":"safety"},{"id":"2509.21761","title":"Backdoor Attribution: Elucidating and Controlling Backdoor in Language Models","created":"2025-09-26","cited_by_count":10,"area":"safety"},{"id":"2409.00399","title":"Rethinking Backdoor Detection Evaluation for Language Models","created":"2024-08-31","cited_by_count":9,"area":"lr"},{"id":"2507.01321","title":"ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks","created":"2025-07-02","cited_by_count":9,"area":"safety"},{"id":"2510.27623","title":"BEAT: Visual Backdoor Attacks on VLM-based Embodied Agents via Contrastive Trigger Learning","created":"2025-10-31","cited_by_count":9,"area":"mllm"},{"id":"2408.09093","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","created":"2024-08-17","cited_by_count":8,"area":"safety"},{"id":"2408.10722","title":"MEGen: Generative Backdoor into Large Language Models via Model Editing","created":"2024-08-20","cited_by_count":8,"area":"safety"},{"id":"2506.06518","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2506.10060","title":"Textual Bayes: Quantifying Prompt Uncertainty in LLM-Based Systems","created":"2025-06-11","cited_by_count":8,"area":null},{"id":"2408.01460","title":"LocalValueBench: A Collaboratively Built and Extensible Benchmark for Evaluating Localized Value Alignment and Ethical Safety in Large Language Models","created":"2024-07-27","cited_by_count":7,"area":null},{"id":"2410.08604","title":"MergePrint: Merge-Resistant Fingerprints for Robust Black-box Ownership Verification of Large Language Models","created":"2024-10-11","cited_by_count":7,"area":null},{"id":"2505.23561","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2508.00161","title":"Watch the Weights: Unsupervised monitoring and control of fine-tuned LLMs","created":"2025-07-31","cited_by_count":7,"area":"safety"},{"id":"2511.16709","title":"AutoBackdoor: Automating Backdoor Attacks via LLM Agents","created":"2025-11-20","cited_by_count":7,"area":"agents"},{"id":"2603.13461","title":"Purifying Generative LLMs from Backdoors without Prior Knowledge or Clean Reference","created":"2026-03-13","cited_by_count":7,"area":"safety"},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2409.14200","title":"Data-centric NLP Backdoor Defense from the Lens of Memorization","created":"2024-09-21","cited_by_count":6,"area":"safety"},{"id":"2504.00446","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","created":"2025-04-01","cited_by_count":6,"area":"safety"},{"id":"2504.18333","title":"Adversarial Attacks on LLM-as-a-Judge Systems: Insights from Prompt Injections","created":"2025-04-25","cited_by_count":6,"area":"safety"},{"id":"2505.14368","title":"From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2508.02360","title":"Understanding and Mitigating Political Stance Cross-topic Generalization in Large Language Models","created":"2025-08-04","cited_by_count":6,"area":null},{"id":"2510.18541","title":"Pay Attention to the Triggers: Constructing Backdoors That Survive Distillation","created":"2025-10-21","cited_by_count":6,"area":"distill"},{"id":"2605.22786","title":"LCGuard: Latent Communication Guard for Safe KV Sharing in Multi-Agent Systems","created":"2026-05-21","cited_by_count":6,"area":"agents"},{"id":"2410.11283","title":"AdvBDGen: Adversarially Fortified Prompt-Specific Fuzzy Backdoor Generator Against LLM Alignment","created":"2024-10-15","cited_by_count":5,"area":"alignment"},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2503.03039","title":"LLM Misalignment via Adversarial RLHF Platforms","created":"2025-03-04","cited_by_count":5,"area":"alignment"},{"id":"2505.15656","title":"Be Careful When Fine-tuning On Open-Source LLMs: Your Fine-tuning Data Could Be Secretly Stolen!","created":"2025-05-21","cited_by_count":5,"area":"safety"},{"id":"2506.08336","title":"Your Agent Can Defend Itself against Backdoor Attacks","created":"2025-06-10","cited_by_count":5,"area":"agents"},{"id":"2508.20032","title":"Pruning Strategies for Backdoor Defense in LLMs","created":"2025-08-27","cited_by_count":5,"area":"safety"},{"id":"2510.16558","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","created":"2025-10-18","cited_by_count":5,"area":"agents"},{"id":"2511.18921","title":"BackdoorVLM: A Benchmark for Backdoor Attacks and Defenses on Vision-Language Models","created":"2025-11-24","cited_by_count":5,"area":"mllm"},{"id":"2505.12871","title":"Does Low Rank Adaptation Lead to Lower Robustness against Training-Time Attacks?","created":"2025-05-19","cited_by_count":4,"area":"safety"},{"id":"2507.06850","title":"The Dark Side of LLMs: Agent-based Attack Vectors for System-level Compromise","created":"2025-07-09","cited_by_count":4,"area":"agents"},{"id":"2509.23041","title":"Virus Infection Attack on LLMs: Your Poisoning Can Spread \"VIA\" Synthetic Data","created":"2025-09-27","cited_by_count":4,"area":"synth"},{"id":"2604.06840","title":"MirageBackdoor: A Stealthy Attack that Induces Think-Well-Answer-Wrong Reasoning","created":"2026-04-08","cited_by_count":4,"area":"safety"},{"id":"2604.12359","title":"Compiling Activation Steering into Weights via Null-Space Constraints for Stealthy Backdoors","created":"2026-04-14","cited_by_count":4,"area":"alignment"},{"id":"2409.06725","title":"DefectTwin: When LLM Meets Digital Twin for Railway Defect Inspection","created":"2024-08-26","cited_by_count":3,"area":null},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2504.12344","title":"Propaganda AI: An Analysis of Semantic Divergence in Large Language Models","created":"2025-04-15","cited_by_count":3,"area":null},{"id":"2505.23015","title":"Detecting Stealthy Backdoor Samples based on Intra-class Distance for Large Language Models","created":"2025-05-29","cited_by_count":3,"area":"safety"},{"id":"2506.18756","title":"Semantic-Preserving Prompt Hijacking: A Black-Box Adversarial Attack on Auto-Prompt Optimization","created":"2025-05-26","cited_by_count":3,"area":null},{"id":"2510.03705","title":"Backdoor-Powered Prompt Injection Attacks Nullify Defense Methods","created":"2025-10-04","cited_by_count":3,"area":"safety"},{"id":"2512.19297","title":"Causal-Guided Detoxify Backdoor Attack of Open-Weight LoRA Models","created":"2025-12-22","cited_by_count":3,"area":null}],"next_cursor":"100"}