{"total":99,"rows":[{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2402.05044","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","created":"2024-02-07","cited_by_count":228,"area":null},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2405.06823","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","created":"2024-05-10","cited_by_count":127,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2402.18540","title":"Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templates","created":"2024-02-28","cited_by_count":96,"area":null},{"id":"2401.10034","title":"Evolutionary Computation in the Era of Large Language Model: Survey and Roadmap","created":"2024-01-18","cited_by_count":90,"area":null},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2406.20053","title":"Covert Malicious Finetuning: Challenges in Safeguarding LLM Adaptation","created":"2024-06-28","cited_by_count":80,"area":null},{"id":"2312.15710","title":"Alleviating Hallucinations of Large Language Models through Induced Hallucinations","created":"2023-12-25","cited_by_count":79,"area":null},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2401.00287","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","created":"2023-12-30","cited_by_count":67,"area":null},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2310.19737","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","created":"2023-10-30","cited_by_count":49,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2310.03185","title":"Misusing Tools in Large Language Models With Visual Adversarial Examples","created":"2023-10-04","cited_by_count":42,"area":null},{"id":"2404.09349","title":"Adversarial Robustness Limits via Scaling-Law and Human-Alignment Studies","created":"2024-04-14","cited_by_count":38,"area":null},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2412.13879","title":"Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settings","created":"2024-12-18","cited_by_count":35,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2312.04730","title":"DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions","created":"2023-12-07","cited_by_count":33,"area":null},{"id":"2403.02253","title":"KnowPhish: Large Language Models Meet Multimodal Knowledge Graphs for Enhancing Reference-Based Phishing Detection","created":"2024-03-04","cited_by_count":33,"area":null},{"id":"2404.14928","title":"Graph Machine Learning in the Era of Large Language Models (LLMs)","created":"2024-04-23","cited_by_count":33,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2404.16251","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","created":"2024-04-24","cited_by_count":23,"area":null},{"id":"2410.10343","title":"Locking Down the Finetuned LLMs Safety","created":"2024-10-14","cited_by_count":22,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2506.19004","title":"Broken Tokens? Your Language Model can Secretly Handle Non-Canonical Tokenizations","created":"2025-06-23","cited_by_count":17,"area":null},{"id":"2405.14488","title":"MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability","created":"2024-05-23","cited_by_count":15,"area":null},{"id":"2404.18191","title":"Exploring the Robustness of In-Context Learning with Noisy Labels","created":"2024-04-28","cited_by_count":14,"area":null},{"id":"2407.03234","title":"Self-Evaluation as a Defense Against Adversarial Attacks on LLMs","created":"2024-07-03","cited_by_count":14,"area":null},{"id":"2408.02509","title":"Black-Box Adversarial Attacks on LLM-Based Code Completion","created":"2024-08-05","cited_by_count":14,"area":null},{"id":"2412.06748","title":"Refusal Tokens: A Simple Way to Calibrate Refusals in Large Language Models","created":"2024-12-09","cited_by_count":14,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2410.19160","title":"Adversarial Attacks on Large Language Models Using Regularized Relaxation","created":"2024-10-24","cited_by_count":12,"area":null},{"id":"2502.16776","title":"AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvement","created":"2025-02-24","cited_by_count":12,"area":null},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2403.06009","title":"Detectors for Safe and Reliable LLMs: Implementations, Uses, and Limitations","created":"2024-03-09","cited_by_count":10,"area":null},{"id":"2505.13348","title":"Investigating the Vulnerability of LLM-as-a-Judge Architectures to Prompt-Injection Attacks","created":"2025-05-19","cited_by_count":10,"area":null},{"id":"2505.24842","title":"Cascading Adversarial Bias from Injection to Distillation in Language Models","created":"2025-05-30","cited_by_count":9,"area":null},{"id":"2402.09546","title":"How Secure Are Large Language Models (LLMs) for Navigation in Urban Environments?","created":"2024-02-14","cited_by_count":8,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2405.15202","title":"Cross-Task Defense: Instruction-Tuning LLMs for Content Safety","created":"2024-05-24","cited_by_count":8,"area":null},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2509.26598","title":"Are Robust LLM Fingerprints Adversarially Robust?","created":"2025-09-30","cited_by_count":8,"area":null},{"id":"2311.07064","title":"Prompts have evil twins","created":"2023-11-13","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2502.19320","title":"Shh, don't say that! Domain Certification in LLMs","created":"2025-02-26","cited_by_count":7,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2603.04444","title":"vLLM Semantic Router: Signal Driven Decision Routing for Mixture-of-Modality Models","created":"2026-02-23","cited_by_count":6,"area":null},{"id":"2406.03230","title":"Defending Large Language Models Against Attacks With Residual Stream Activation Analysis","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2505.24621","title":"Benchmarking Large Language Models for Cryptanalysis and Side-Channel Vulnerabilities","created":"2025-05-30","cited_by_count":5,"area":null},{"id":"2509.21884","title":"You Can't Steal Nothing: Mitigating Prompt Leakages in LLMs via System Vectors","created":"2025-09-26","cited_by_count":4,"area":null},{"id":"2604.19657","title":"An AI Agent Execution Environment to Safeguard User Data","created":"2026-04-21","cited_by_count":4,"area":null},{"id":"2605.31140","title":"EvoDefense: Co-Evolving Black-Box Defense with Large Language Models","created":"2026-05-29","cited_by_count":4,"area":null},{"id":"2312.14480","title":"MetaAID 2.5: A Secure Framework for Developing Metaverse Applications via Large Language Models","created":"2023-12-22","cited_by_count":3,"area":null},{"id":"2406.02721","title":"Self-Control of LLM Behaviors by Compressing Suffix Gradient into Prefix Controller","created":"2024-06-04","cited_by_count":3,"area":null},{"id":"2412.02626","title":"Time-Reversal Provides Unsupervised Feedback to LLMs","created":"2024-12-03","cited_by_count":3,"area":null},{"id":"2507.06489","title":"On the Robustness of Verbal Confidence of LLMs in Adversarial Attacks","created":"2025-07-09","cited_by_count":3,"area":null},{"id":"2508.02092","title":"FPEdit: Robust LLM Fingerprinting through Localized Parameter Editing","created":"2025-08-04","cited_by_count":3,"area":null},{"id":"2509.20639","title":"A Framework for Rapidly Developing and Deploying Protection Against Large Language Model Attacks","created":"2025-09-25","cited_by_count":3,"area":null},{"id":"2605.21948","title":"SCI-Defense: Defending Manipulation Attacks from Generative Engine Optimization","created":"2026-05-21","cited_by_count":3,"area":null},{"id":"2311.13445","title":"Transfer Attacks and Defenses for Large Language Models on Coding Tasks","created":"2023-11-22","cited_by_count":2,"area":null},{"id":"2504.02865","title":"The Illusionist's Prompt: Exposing the Factual Vulnerabilities of Large Language Models with Linguistic Nuances","created":"2025-04-01","cited_by_count":2,"area":null},{"id":"2509.03122","title":"From Construction to Injection: Edit-Based Fingerprints for Large Language Models","created":"2025-09-03","cited_by_count":2,"area":null},{"id":"2509.22393","title":"Text Adversarial Attacks with Dynamic Outputs","created":"2025-09-26","cited_by_count":2,"area":null},{"id":"2510.19641","title":"Style Attack Disguise: When Fonts Become a Camouflage for Adversarial Intent","created":"2025-10-22","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2402.17671","title":"Securing Reliability: A Brief Overview on Enhancing In-Context Learning for Foundation Models","created":"2024-02-27","cited_by_count":1,"area":null},{"id":"2410.04155","title":"Toxic Subword Pruning for Dialogue Response Generation on Large Language Models","created":"2024-10-05","cited_by_count":1,"area":null},{"id":"2505.18680","title":"$PD^3F$: A Pluggable and Dynamic DoS-Defense Framework Against Resource Consumption Attacks Targeting Large Language Models","created":"2025-05-24","cited_by_count":1,"area":null},{"id":"2506.19140","title":"Command-V: Pasting LLM Behaviors via Activation Profiles","created":"2025-06-23","cited_by_count":1,"area":null},{"id":"2509.06807","title":"MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security","created":"2025-09-08","cited_by_count":1,"area":null},{"id":"2609.15017","title":"PIDS-Bench: Evaluating Prompt-Injection Detectors Under Over-Defense, Obfuscation, and Distribution Shift","created":"2026-09-14","cited_by_count":1,"area":null},{"id":"2404.11538","title":"GenFighter: A Generative and Evolutive Textual Attack Removal","created":"2024-04-17","cited_by_count":0,"area":null},{"id":"2411.19038","title":"DIESEL -- Dynamic Inference-Guidance via Evasion of Semantic Embeddings in LLMs","created":"2024-11-28","cited_by_count":0,"area":null},{"id":"2504.09191","title":"Feature-Aware Malicious Output Detection and Mitigation","created":"2025-04-12","cited_by_count":0,"area":null},{"id":"2505.16888","title":"PARASITE: Conditional System Prompt Poisoning to Hijack LLMs","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2506.23423","title":"TuCo: Measuring the Contribution of Fine-Tuning to Individual Responses of LLMs","created":"2025-06-29","cited_by_count":0,"area":null},{"id":"2507.13629","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2509.21192","title":"GEP: A GCG-Based method for extracting personally identifiable information from chatbots built on small language models","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2511.03128","title":"From Insight to Exploit: Leveraging LLM Collaboration for Adaptive Adversarial Text Generation","created":"2025-11-05","cited_by_count":0,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2606.18530","title":"Evaluating Prompting-Based Defenses Against Domain-Camouflaged Injection Attacks","created":"2026-06-16","cited_by_count":0,"area":null},{"id":"2607.05407","title":"Position: Preventing AI-Generated CSAM Necessitates New Approaches to AI Safety","created":"2026-06-09","cited_by_count":0,"area":null},{"id":"2609.08646","title":"Combating Instruction Conflict via Energy-Driven Latent Conflict Detection","created":"2026-09-08","cited_by_count":0,"area":null},{"id":"2609.10142","title":"Active Adaptation, Not Static Defense: Temporal Dynamics of Preventative Steering in Adversarial Fine-Tuning","created":"2026-09-09","cited_by_count":0,"area":null},{"id":"2610.00797","title":"Sapien: A Stateful Policy Engine for Autonomous AI Agents","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.02373","title":"Hop-Decayed Influence: New Vulnerabilities of Structural Auxiliary Indexing in GraphRAG Pipelines with LLM","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.18612","title":"Nudge the Judge: Uncovering Program Decision Hijacking in Real-World Jev Applications","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}