{"total":69,"rows":[{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2402.05044","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","created":"2024-02-07","cited_by_count":228,"area":null},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2403.01038","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","created":"2024-03-02","cited_by_count":96,"area":null},{"id":"2403.14472","title":"Detoxifying Large Language Models via Knowledge Editing","created":"2024-03-21","cited_by_count":87,"area":null},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2401.05654","title":"Towards Conversational Diagnostic AI","created":"2024-01-11","cited_by_count":79,"area":null},{"id":"2407.17436","title":"AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies","created":"2024-07-11","cited_by_count":74,"area":null},{"id":"2405.03644","title":"When LLMs Meet Cybersecurity: A Systematic Literature Review","created":"2024-05-06","cited_by_count":71,"area":null},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2409.20089","title":"Robust LLM safeguarding via refusal feature adversarial training","created":"2024-09-30","cited_by_count":64,"area":null},{"id":"2501.17070","title":"Contextual Agent Security: A Policy for Every Purpose","created":"2025-01-28","cited_by_count":59,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2405.14191","title":"S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Models","created":"2024-05-23","cited_by_count":33,"area":null},{"id":"2310.03400","title":"Adapting Large Language Models for Content Moderation: Pitfalls in Data Engineering and Supervised Fine-tuning","created":"2023-10-05","cited_by_count":29,"area":null},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2405.09373","title":"PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Models","created":"2024-05-15","cited_by_count":20,"area":null},{"id":"2406.14230","title":"Raising the Bar: Investigating the Values of Large Language Models via Generative Evolving Testing","created":"2024-06-20","cited_by_count":17,"area":null},{"id":"2405.14488","title":"MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability","created":"2024-05-23","cited_by_count":15,"area":null},{"id":"2410.04772","title":"From Transparency to Accountability and Back: A Discussion of Access and Evidence in AI Auditing","created":"2024-10-07","cited_by_count":15,"area":null},{"id":"2402.12100","title":"Groot: Adversarial Testing for Generative Text-to-Image Models with Tree-based Semantic Transformation","created":"2024-02-19","cited_by_count":14,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2410.19160","title":"Adversarial Attacks on Large Language Models Using Regularized Relaxation","created":"2024-10-24","cited_by_count":12,"area":null},{"id":"2502.16776","title":"AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvement","created":"2025-02-24","cited_by_count":12,"area":null},{"id":"2502.16971","title":"LongSafety: Evaluating Long-Context Safety of Large Language Models","created":"2025-02-24","cited_by_count":12,"area":null},{"id":"2501.12619","title":"Quantification of Large Language Model Distillation","created":"2025-01-22","cited_by_count":9,"area":null},{"id":"2503.05070","title":"PromptPex: Automatic Test Generation for Language Model Prompts","created":"2025-03-07","cited_by_count":9,"area":null},{"id":"2510.04398","title":"SECA: Semantically Equivalent and Coherent Attacks for Eliciting LLM Hallucinations","created":"2025-10-05","cited_by_count":9,"area":null},{"id":"2311.08364","title":"Plum: Prompt Learning using Metaheuristic","created":"2023-11-14","cited_by_count":8,"area":null},{"id":"2411.08243","title":"Beyond the Safety Bundle: Auditing the Helpful and Harmless Dataset","created":"2024-11-12","cited_by_count":8,"area":null},{"id":"2601.23255","title":"Now You Hear Me: Audio Narrative Attacks Against Large Audio-Language Models","created":"2026-01-30","cited_by_count":8,"area":null},{"id":"2405.20657","title":"DORY: Deliberative Prompt Recovery for LLM","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2502.00840","title":"Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense","created":"2025-02-02","cited_by_count":7,"area":null},{"id":"2507.19598","title":"MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts?","created":"2025-07-25","cited_by_count":7,"area":null},{"id":"2410.12104","title":"To Err is AI : A Case Study Informing LLM Flaw Reporting Practices","created":"2024-10-15","cited_by_count":5,"area":null},{"id":"2502.15609","title":"On the Robustness of Transformers against Context Hijacking for Linear Classification","created":"2025-02-21","cited_by_count":4,"area":null},{"id":"2503.16586","title":"Big Help or Big Brother? Auditing Tracking, Profiling, and Personalization in Generative AI Assistants","created":"2025-03-20","cited_by_count":4,"area":null},{"id":"2312.14480","title":"MetaAID 2.5: A Secure Framework for Developing Metaverse Applications via Large Language Models","created":"2023-12-22","cited_by_count":3,"area":null},{"id":"2407.17075","title":"SAFETY-J: Evaluating Safety with Critique","created":"2024-07-24","cited_by_count":3,"area":null},{"id":"2409.01688","title":"Differentially Private Kernel Density Estimation","created":"2024-09-03","cited_by_count":3,"area":null},{"id":"2409.04831","title":"MILE: A Mutation Testing Framework of In-Context Learning Systems","created":"2024-09-07","cited_by_count":2,"area":null},{"id":"2503.15551","title":"Efficient but Vulnerable: Benchmarking and Defending LLM Batch Prompting Attack","created":"2025-03-18","cited_by_count":2,"area":null},{"id":"2504.02865","title":"The Illusionist's Prompt: Exposing the Factual Vulnerabilities of Large Language Models with Linguistic Nuances","created":"2025-04-01","cited_by_count":2,"area":null},{"id":"2510.03969","title":"How Catastrophic is Your LLM? Certifying Risk in Conversation","created":"2025-10-04","cited_by_count":2,"area":null},{"id":"2410.14894","title":"Soft-Label Integration for Robust Toxicity Classification","created":"2024-10-18","cited_by_count":1,"area":null},{"id":"2502.01436","title":"Towards Safer Chatbots: Automated Policy Compliance Evaluation of Custom GPTs","created":"2025-02-03","cited_by_count":1,"area":null},{"id":"2503.13081","title":"A Framework to Assess Multilingual Vulnerabilities of LLMs","created":"2025-03-17","cited_by_count":1,"area":null},{"id":"2505.14015","title":"AUTOLAW: Enhancing Legal Compliance in Large Language Models via Case Law Generation and Jury-Inspired Deliberation","created":"2025-05-20","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2509.23835","title":"HFuzzer: Testing Large Language Models for Package Hallucinations via Phrase-based Fuzzing","created":"2025-09-28","cited_by_count":1,"area":null},{"id":"2602.21267","title":"A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications","created":"2026-02-24","cited_by_count":1,"area":null},{"id":"2605.00445","title":"The Power of Order: Fooling LLMs with Adversarial Table Permutations","created":"2026-05-01","cited_by_count":1,"area":null},{"id":"2605.15118","title":"Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2507.02057","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2510.02996","title":"Onto-Epistemological Analysis of AI Explanations","created":"2025-10-03","cited_by_count":0,"area":null},{"id":"2511.02366","title":"LiveSecBench: A Dynamic and Event-Driven Safety Benchmark for Chinese Language Model Applications","created":"2025-11-04","cited_by_count":0,"area":null},{"id":"2511.05018","title":"Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies","created":"2025-11-07","cited_by_count":0,"area":null},{"id":"2511.15165","title":"Can MLLMs Detect Phishing? A Comprehensive Security Benchmark Suite Focusing on Dynamic Threats and Multimodal Evaluation in Academic Environments","created":"2025-11-19","cited_by_count":0,"area":null},{"id":"2601.05545","title":"Can Large Language Models Differentiate Harmful from Argumentative Essays? Steps Toward Ethical Essay Scoring","created":"2026-01-09","cited_by_count":0,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2607.28959","title":"Efficient LLM Adversarial Training via Low-Rank Defense and Circuit-Guided Surrogates","created":"2026-07-31","cited_by_count":0,"area":null},{"id":"2609.01210","title":"Who Judges the Judges? A Chinese Safety QA Benchmark for Evaluating LLM Responses and Safety Judges","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.35028","title":"VEX-Bench: Benchmarking Verification Complexity of LLM-Generated Misinformation","created":"2026-09-28","cited_by_count":0,"area":null}],"next_cursor":null}