{"total":82,"rows":[{"id":"2401.06373","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","created":"2024-01-12","cited_by_count":573,"area":"lr"},{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2402.10260","title":"A StrongREJECT for Empty Jailbreaks","created":"2024-02-15","cited_by_count":385,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2309.17410","title":"Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attacks","created":"2023-09-29","cited_by_count":158,"area":null},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2402.16914","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","created":"2024-02-25","cited_by_count":101,"area":"alignment"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2404.12241","title":"Introducing v0.5 of the AI Safety Benchmark from MLCommons","created":"2024-04-18","cited_by_count":62,"area":null},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2409.14781","title":"Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Method","created":"2024-09-23","cited_by_count":55,"area":null},{"id":"2310.15851","title":"Self-Guard: Empower the LLM to Safeguard Itself","created":"2023-10-24","cited_by_count":54,"area":"safety"},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2502.07049","title":"LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights","created":"2025-02-10","cited_by_count":47,"area":null},{"id":"2310.00737","title":"GenAI Against Humanity: Nefarious Applications of Generative Artificial Intelligence and Large Language Models","created":"2023-10-01","cited_by_count":42,"area":null},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2311.10242","title":"Advancements in Generative AI: A Comprehensive Review of GANs, GPT, Autoencoders, Diffusion Model, and Transformers","created":"2023-11-17","cited_by_count":36,"area":"diffusion"},{"id":"2402.00898","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","created":"2024-01-31","cited_by_count":30,"area":"safety"},{"id":"2410.06606","title":"Dissecting Fine-Tuning Unlearning in Large Language Models","created":"2024-10-09","cited_by_count":26,"area":"safety"},{"id":"2502.11090","title":"SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attacks","created":"2025-02-16","cited_by_count":23,"area":"safety"},{"id":"2409.03363","title":"Con-ReCall: Detecting Pre-training Data in LLMs via Contrastive Decoding","created":"2024-09-05","cited_by_count":20,"area":null},{"id":"2402.08323","title":"Mapping the Ethics of Generative AI: A Comprehensive Scoping Review","created":"2024-02-13","cited_by_count":19,"area":null},{"id":"2312.11518","title":"User Modeling in the Era of Large Language Models: Current Research and Future Directions","created":"2023-12-11","cited_by_count":18,"area":null},{"id":"2409.11844","title":"MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts","created":"2024-09-18","cited_by_count":18,"area":"safety"},{"id":"2406.06737","title":"Raccoon: Prompt Extraction Benchmark of LLM-Integrated Applications","created":"2024-06-10","cited_by_count":16,"area":null},{"id":"2402.01909","title":"On Catastrophic Inheritance of Large Foundation Models","created":"2024-02-02","cited_by_count":15,"area":null},{"id":"2403.05750","title":"Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Text","created":"2024-03-09","cited_by_count":14,"area":null},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2408.07291","title":"Evaluating LLM-based Personal Information Extraction and Countermeasures","created":"2024-08-14","cited_by_count":12,"area":"safety"},{"id":"2502.16903","title":"GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods","created":"2025-02-24","cited_by_count":12,"area":"safety"},{"id":"2506.15606","title":"LoX: Low-Rank Extrapolation Robustifies LLM Safety Against Fine-tuning","created":"2025-06-18","cited_by_count":12,"area":"safety"},{"id":"2406.18346","title":"AI Alignment through Reinforcement Learning from Human Feedback? Contradictions and Limitations","created":"2024-06-26","cited_by_count":11,"area":"alignment"},{"id":"2407.21248","title":"Adaptive Pre-training Data Detection for Large Language Models via Surprising Tokens","created":"2024-07-30","cited_by_count":11,"area":null},{"id":"2505.16252","title":"Does Localization Inform Unlearning? A Rigorous Examination of Local Parameter Attribution for Knowledge Unlearning in Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2411.06835","title":"HarmLevelBench: Evaluating Harm-Level Compliance and the Impact of Quantization on Model Alignment","created":"2024-11-11","cited_by_count":9,"area":"alignment"},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2410.10880","title":"Fine-tuning can Help Detect Pretraining Data from Large Language Models","created":"2024-10-09","cited_by_count":8,"area":null},{"id":"2601.04034","title":"HoneyTrap: Deceiving Large Language Model Attackers to Honeypot Traps with Resilient Multi-Agent Defense","created":"2026-01-07","cited_by_count":8,"area":"agents"},{"id":"2405.19795","title":"SLM as Guardian: Pioneering AI Safety with Small Language Models","created":"2024-05-30","cited_by_count":7,"area":null},{"id":"2410.13901","title":"SoK: Prompt Hacking of Large Language Models","created":"2024-10-16","cited_by_count":7,"area":null},{"id":"2410.15641","title":"SMILES-Prompting: A Novel Approach to LLM Jailbreak Attacks in Chemical Synthesis","created":"2024-10-21","cited_by_count":7,"area":"safety"},{"id":"2402.15943","title":"Rethinking Software Engineering in the Foundation Model Era: A Curated Catalogue of Challenges in the Development of Trustworthy FMware","created":"2024-02-25","cited_by_count":6,"area":null},{"id":"2504.01850","title":"Code Red! On the Harmfulness of Applying Off-the-shelf Large Language Models to Programming Tasks","created":"2025-04-02","cited_by_count":6,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2410.21146","title":"Palisade -- Prompt Injection Detection Framework","created":"2024-10-28","cited_by_count":5,"area":"safety"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2502.04602","title":"Extracting and Understanding the Superficial Knowledge in Alignment","created":"2025-02-07","cited_by_count":5,"area":"alignment"},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2408.05933","title":"Optimizing RAG Techniques for Automotive Industry PDF Chatbots: A Case Study with Locally Deployed Ollama Models","created":"2024-08-12","cited_by_count":4,"area":"rag"},{"id":"2501.16029","title":"FDLLM: A Dedicated Detector for Black-Box LLMs Fingerprinting","created":"2025-01-27","cited_by_count":4,"area":null},{"id":"2510.04850","title":"Detecting Distillation Data from Reasoning Models","created":"2025-10-06","cited_by_count":4,"area":"lr"},{"id":"2402.16889","title":"Generative Models are Self-Watermarked: Declaring Model Authentication through Re-Generation","created":"2024-02-23","cited_by_count":3,"area":"safety"},{"id":"2409.15324","title":"Cognitive phantoms in LLMs through the lens of latent variables","created":"2024-09-06","cited_by_count":3,"area":null},{"id":"2410.03566","title":"A Survey on Offensive AI Within Cybersecurity","created":"2024-09-26","cited_by_count":3,"area":null},{"id":"2604.14865","title":"Segment-Level Coherence for Robust Harmful Intent Probing in LLMs","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2406.02481","title":"Large Language Models as Carriers of Hidden Messages","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2510.01223","title":"Jailbreaking LLMs via Semantically Relevant Nested Scenarios with Targeted Toxic Knowledge","created":"2025-09-22","cited_by_count":2,"area":"safety"},{"id":"2512.00412","title":"Red Teaming Large Reasoning Models","created":"2025-11-29","cited_by_count":2,"area":"lr"},{"id":"2602.18733","title":"A Prior-Aware Metric for Efficiently Distinguishing Memorization from Generalization in Large Language Models","created":"2026-02-21","cited_by_count":2,"area":null},{"id":"2602.19275","title":"KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models","created":"2026-02-22","cited_by_count":2,"area":"safety"},{"id":"2607.19424","title":"JailMeter: An Evidence-Based Evaluation Framework for Jailbreak Attacks on Large Language Models","created":"2026-07-20","cited_by_count":2,"area":"safety"},{"id":"2410.18114","title":"Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2410.19114","title":"LanFL: Differentially Private Federated Learning with Large Language Models using Synthetic Samples","created":"2024-10-24","cited_by_count":1,"area":null},{"id":"2505.11837","title":"On Membership Inference Attacks in Knowledge Distillation","created":"2025-05-17","cited_by_count":1,"area":"safety"},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2606.05799","title":"CaliDist: Calibrating Large Language Models via Behavioral Robustness to Distraction","created":"2026-06-04","cited_by_count":1,"area":null},{"id":"2312.03699","title":"PROMISE: A Framework for Developing Complex Conversational Interactions (Technical Report)","created":"2023-12-06","cited_by_count":0,"area":null},{"id":"2403.00292","title":"Enhancing Jailbreak Attacks with Diversity Guidance","created":"2024-03-01","cited_by_count":0,"area":"safety"},{"id":"2406.11682","title":"Knowledge-to-Jailbreak: Investigating Knowledge-driven Jailbreaking Attacks for Large Language Models","created":"2024-06-17","cited_by_count":0,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2505.07167","title":"Decoding One Safety Trigger Token for Balancing Safety and Usability in Large Language Models","created":"2025-05-12","cited_by_count":0,"area":"safety"},{"id":"2505.10640","title":"The Hitchhikers Guide to Production-ready Trustworthy Foundation Model powered Software (FMware)","created":"2025-05-15","cited_by_count":0,"area":null},{"id":"2506.03870","title":"Evaluating Apple Intelligence's Writing Tools for Privacy Against Large Language Model-Based Inference Attacks: Insights from Early Datasets","created":"2025-06-04","cited_by_count":0,"area":null},{"id":"2512.15081","title":"Quantifying Return on Security Controls in LLM Systems","created":"2025-12-17","cited_by_count":0,"area":"safety"},{"id":"2601.06827","title":"PDR: A Plug-and-Play Positional Decay Framework for LLM Pre-training Data Detection","created":"2026-01-11","cited_by_count":0,"area":null},{"id":"2604.12168","title":"Fully Homomorphic Encryption on Llama 3 model for privacy preserving LLM inference","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2606.07219","title":"Adversarial Creation and Detection of AI-Generated Social Bot Content","created":"2026-06-05","cited_by_count":0,"area":null},{"id":"2609.10611","title":"Black-Box Membership Inference via Word-Level Probability Estimation","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2610.15513","title":"REPRO: Reflective Evolutionary Prompt Optimizer for Automated LLM Red-Teaming","created":"2026-10-11","cited_by_count":0,"area":"alignment"}],"next_cursor":null}