{"total":158,"rows":[{"id":"2401.06121","title":"TOFU: A Task of Fictitious Unlearning for LLMs","created":"2024-01-11","cited_by_count":533,"area":"safety"},{"id":"2404.05868","title":"Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning","created":"2024-04-08","cited_by_count":504,"area":"alignment"},{"id":"2310.12508","title":"SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation","created":"2023-10-19","cited_by_count":386,"area":"diffusion"},{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2402.08787","title":"Rethinking Machine Unlearning for Large Language Models","created":"2024-02-13","cited_by_count":257,"area":"lr"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2402.16835","title":"Eight Methods to Evaluate Robust Unlearning in LLMs","created":"2024-02-26","cited_by_count":163,"area":"safety"},{"id":"2410.12761","title":"SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation","created":"2024-10-16","cited_by_count":133,"area":"diffusion"},{"id":"2409.18025","title":"An Adversarial Perspective on Machine Unlearning for AI Safety","created":"2024-09-26","cited_by_count":123,"area":"safety"},{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2402.09063","title":"Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Space","created":"2024-02-14","cited_by_count":91,"area":"alignment"},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2406.13356","title":"Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning","created":"2024-06-19","cited_by_count":84,"area":"safety"},{"id":"2410.16454","title":"Catastrophic Failure of LLM Unlearning via Quantization","created":"2024-10-21","cited_by_count":81,"area":"safety"},{"id":"2502.05374","title":"Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyond","created":"2025-02-07","cited_by_count":79,"area":"safety"},{"id":"2406.10890","title":"RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models","created":"2024-06-16","cited_by_count":78,"area":"safety"},{"id":"2410.11143","title":"LLM Unlearning via Loss Adjustment with Only Forget Data","created":"2024-10-14","cited_by_count":75,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2403.07918","title":"On the Societal Impact of Open Foundation Models","created":"2024-02-27","cited_by_count":65,"area":null},{"id":"2410.02879","title":"Position: LLM Unlearning Benchmarks are Weak Measures of Progress","created":"2024-10-03","cited_by_count":63,"area":"safety"},{"id":"2502.19301","title":"Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond","created":"2025-02-26","cited_by_count":61,"area":"lr"},{"id":"2403.11901","title":"Larimar: Large Language Models with Episodic Memory Control","created":"2024-03-18","cited_by_count":53,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2403.07175","title":"Rebuilding ROME : Resolving Model Collapse during Sequential Model Editing","created":"2024-03-11","cited_by_count":50,"area":"synth"},{"id":"2406.18664","title":"Evaluating Copyright Takedown Methods for Language Models","created":"2024-06-26","cited_by_count":43,"area":null},{"id":"2505.16831","title":"Unlearning Isn't Deletion: Investigating Reversibility of Machine Unlearning in LLMs","created":"2025-05-22","cited_by_count":42,"area":"safety"},{"id":"2404.02062","title":"Digital Forgetting in Large Language Models: A Survey of Unlearning Methods","created":"2024-04-02","cited_by_count":40,"area":"safety"},{"id":"2406.12673","title":"Estimating Knowledge in Large Language Models Without Generating a Single Token","created":"2024-06-18","cited_by_count":40,"area":null},{"id":"2410.12777","title":"Meta-Unlearning on Diffusion Models: Preventing Relearning Unlearned Concepts","created":"2024-10-16","cited_by_count":40,"area":"diffusion"},{"id":"2402.05813","title":"Selective Forgetting: Advancing Machine Unlearning Techniques and Evaluation in Language Models","created":"2024-02-08","cited_by_count":39,"area":"safety"},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2505.11953","title":"Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning","created":"2025-05-17","cited_by_count":39,"area":"safety"},{"id":"2310.18362","title":"SoK: Memorization in General-Purpose Large Language Models","created":"2023-10-24","cited_by_count":37,"area":null},{"id":"2404.11045","title":"Offset Unlearning for Large Language Models","created":"2024-04-17","cited_by_count":36,"area":"safety"},{"id":"2407.16997","title":"Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspective","created":"2024-07-24","cited_by_count":36,"area":"safety"},{"id":"2410.12949","title":"Mechanistic Unlearning: Robust Knowledge Unlearning and Editing via Mechanistic Localization","created":"2024-10-16","cited_by_count":35,"area":"safety"},{"id":"2410.04332","title":"Gradient Routing: Masking Gradients to Localize Computation in Neural Networks","created":"2024-10-06","cited_by_count":34,"area":null},{"id":"2408.06223","title":"On Effects of Steering Latent Representation for Large Language Model Unlearning","created":"2024-08-12","cited_by_count":32,"area":"safety"},{"id":"2406.11614","title":"Intrinsic Test of Unlearning Using Parametric Knowledge Traces","created":"2024-06-17","cited_by_count":29,"area":"safety"},{"id":"2311.05876","title":"Trends in Integration of Knowledge and Large Language Models: A Survey and Taxonomy of Methods, Benchmarks, and Applications","created":"2023-11-10","cited_by_count":28,"area":null},{"id":"2406.09179","title":"Towards Effective Evaluations and Comparisons for LLM Unlearning Methods","created":"2024-06-13","cited_by_count":27,"area":"safety"},{"id":"2406.16257","title":"Towards Scalable Exact Machine Unlearning Using Parameter-Efficient Fine-Tuning","created":"2024-06-24","cited_by_count":27,"area":"safety"},{"id":"2408.10682","title":"Towards Robust Knowledge Unlearning: An Adversarial Framework for Assessing and Improving Unlearning Robustness in Large Language Models","created":"2024-08-20","cited_by_count":27,"area":"safety"},{"id":"2410.06606","title":"Dissecting Fine-Tuning Unlearning in Large Language Models","created":"2024-10-09","cited_by_count":26,"area":"safety"},{"id":"2410.17509","title":"WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models","created":"2024-10-23","cited_by_count":26,"area":"safety"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2406.19354","title":"Fundamental Problems With Model Editing: How Should Rational Belief Revision Work in LLMs?","created":"2024-06-27","cited_by_count":24,"area":null},{"id":"2508.02110","title":"Attractive Metadata Attack: Inducing LLM Agents to Invoke Malicious Tools","created":"2025-08-04","cited_by_count":24,"area":"agents"},{"id":"2407.10058","title":"Learning to Refuse: Towards Mitigating Privacy Risks in LLMs","created":"2024-07-14","cited_by_count":23,"area":"safety"},{"id":"2410.03523","title":"A Probabilistic Perspective on Unlearning and Alignment for Large Language Models","created":"2024-10-04","cited_by_count":21,"area":"alignment"},{"id":"2411.02631","title":"Extracting Unlearned Information from LLMs with Activation Steering","created":"2024-11-04","cited_by_count":21,"area":"safety"},{"id":"2509.14284","title":"The Sum Leaks More Than Its Parts: Compositional Privacy Risks and Mitigations in Multi-Agent Collaboration","created":"2025-09-16","cited_by_count":20,"area":"agents"},{"id":"2506.22521","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","created":"2025-06-26","cited_by_count":19,"area":null},{"id":"2406.05085","title":"Multi-Head RAG: Solving Multi-Aspect Problems with LLMs","created":"2024-06-07","cited_by_count":18,"area":"rag"},{"id":"2503.08588","title":"BiasEdit: Debiasing Stereotyped Language Models via Model Editing","created":"2025-03-11","cited_by_count":18,"area":null},{"id":"2410.17050","title":"UnStar: Unlearning with Self-Taught Anti-Sample Reasoning for LLMs","created":"2024-10-22","cited_by_count":15,"area":"lr"},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2503.07389","title":"TRCE: Towards Reliable Malicious Concept Erasure in Text-to-Image Diffusion Models","created":"2025-03-10","cited_by_count":15,"area":"diffusion"},{"id":"2405.02765","title":"Has this Fact been Edited? Detecting Knowledge Edits in Language Models","created":"2024-05-04","cited_by_count":14,"area":null},{"id":"2406.15796","title":"Unveiling Entity-Level Unlearning for Large Language Models: A Comprehensive Analysis","created":"2024-06-22","cited_by_count":14,"area":"safety"},{"id":"2410.15153","title":"Evaluating Deep Unlearning in Large Language Models","created":"2024-10-19","cited_by_count":14,"area":"safety"},{"id":"2406.09325","title":"REVS: Unlearning Sensitive Information in Language Models via Rank Editing in the Vocabulary Space","created":"2024-06-13","cited_by_count":13,"area":"safety"},{"id":"2406.12397","title":"Unveiling the Flaws: Exploring Imperfections in Synthetic Data and Mitigation Strategies for Large Language Models","created":"2024-06-18","cited_by_count":13,"area":"synth"},{"id":"2410.02159","title":"Mitigating Memorization In Language Models","created":"2024-10-03","cited_by_count":12,"area":"safety"},{"id":"2502.18848","title":"A Causal Lens for Evaluating Faithfulness Metrics","created":"2025-02-26","cited_by_count":12,"area":null},{"id":"2504.10185","title":"LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks","created":"2025-04-14","cited_by_count":12,"area":"safety"},{"id":"2501.11739","title":"Episodic memory in AI agents poses risks that should be studied and mitigated","created":"2025-01-20","cited_by_count":11,"area":null},{"id":"2505.01456","title":"Unlearning Sensitive Information in Multimodal LLMs: Benchmark and Attack-Defense Evaluation","created":"2025-05-01","cited_by_count":11,"area":"mllm"},{"id":"2506.06278","title":"Distillation Robustifies Unlearning","created":"2025-06-06","cited_by_count":11,"area":"safety"},{"id":"2509.02820","title":"Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs","created":"2025-09-02","cited_by_count":11,"area":"safety"},{"id":"2408.04140","title":"UNLEARN Efficient Removal of Knowledge in Large Language Models","created":"2024-08-08","cited_by_count":10,"area":null},{"id":"2502.12658","title":"R.R.: Unveiling LLM Training Privacy through Recollection and Ranking","created":"2025-02-18","cited_by_count":10,"area":"safety"},{"id":"2502.17591","title":"Proactive Privacy Amnesia for Large Language Models: Safeguarding PII with Negligible Impact on Model Utility","created":"2025-02-24","cited_by_count":10,"area":null},{"id":"2504.05871","title":"Agent Guide: A Simple Agent Behavioral Watermarking Framework","created":"2025-04-08","cited_by_count":10,"area":"agents"},{"id":"2505.16252","title":"Does Localization Inform Unlearning? A Rigorous Examination of Local Parameter Attribution for Knowledge Unlearning in Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2506.05314","title":"Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Models","created":"2025-06-05","cited_by_count":10,"area":"safety"},{"id":"2511.07970","title":"Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective","created":"2025-11-11","cited_by_count":10,"area":"diffusion"},{"id":"2402.05827","title":"On the Robustness of Editing Large Language Models","created":"2024-02-08","cited_by_count":9,"area":null},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2402.14979","title":"Optimizing Language Models for Human Preferences is a Causal Inference Problem","created":"2024-02-22","cited_by_count":8,"area":"alignment"},{"id":"2502.12598","title":"Bring Your Own Knowledge: A Survey of Methods for LLM Knowledge Expansion","created":"2025-02-18","cited_by_count":8,"area":null},{"id":"2510.22535","title":"OFFSIDE: Benchmarking Unlearning Misinformation in Multimodal Large Language Models","created":"2025-10-26","cited_by_count":8,"area":"mllm"},{"id":"2601.03294","title":"AgentMark: Utility-Preserving Behavioral Watermarking for Agents","created":"2026-01-05","cited_by_count":8,"area":"agents"},{"id":"2410.06704","title":"PII-Scope: A Comprehensive Study on Training Data PII Extraction Attacks in LLMs","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2502.15082","title":"UPCORE: Utility-Preserving Coreset Selection for Balanced Unlearning","created":"2025-02-20","cited_by_count":7,"area":"safety"},{"id":"2509.20977","title":"CLUE: Conflict-guided Localization for LLM Unlearning Framework","created":"2025-09-25","cited_by_count":7,"area":"safety"},{"id":"2605.09530","title":"MemPrivacy: Privacy-Preserving Personalized Memory Management for Edge-Cloud Agents","created":"2026-05-10","cited_by_count":7,"area":"agents"},{"id":"2605.18891","title":"Auditing Reasoning-Trace Memorization Claims after Unlearning with Head-Conditioned Canaries","created":"2026-05-17","cited_by_count":7,"area":"lr"},{"id":"2406.18221","title":"Enhancing Data Privacy in Large Language Models through Private Association Editing","created":"2024-06-26","cited_by_count":6,"area":null},{"id":"2503.12545","title":"PEBench: A Fictitious Dataset to Benchmark Machine Unlearning for Multimodal Large Language Models","created":"2025-03-16","cited_by_count":6,"area":"mllm"},{"id":"2506.17279","title":"Step-by-Step Reasoning Attack: Revealing 'Erased' Knowledge in Large Language Models","created":"2025-06-14","cited_by_count":6,"area":"lr"},{"id":"2409.13054","title":"LLM Surgery: Efficient Knowledge Unlearning and Editing in Large Language Models","created":"2024-09-19","cited_by_count":5,"area":"safety"},{"id":"2502.19982","title":"Erasing Without Remembering: Implicit Knowledge Forgetting in Large Language Models","created":"2025-02-27","cited_by_count":5,"area":"safety"},{"id":"2505.14832","title":"SEPS: A Separability Measure for Robust Unlearning in LLMs","created":"2025-05-20","cited_by_count":5,"area":"safety"},{"id":"2506.10236","title":"Prompt Attacks Reveal Superficial Knowledge Removal in Unlearning Methods","created":"2025-06-11","cited_by_count":5,"area":"safety"},{"id":"2509.18886","title":"Confidential LLM Inference: Performance and Cost Across CPU and GPU TEEs","created":"2025-09-23","cited_by_count":5,"area":null},{"id":"2512.19025","title":"The Erasure Illusion: Stress-Testing the Generalization of LLM Forgetting Evaluation","created":"2025-12-22","cited_by_count":5,"area":"safety"},{"id":"2512.23546","title":"PurifyGen: A Risk-Discrimination and Semantic-Purification Model for Safe Text-to-Image Generation","created":"2025-12-29","cited_by_count":5,"area":"diffusion"},{"id":"2408.10608","title":"BTBR: A Bayesian-Theory-Driven Probabilistic-Fuzzy Framework for Implicit Bias Removal in Large Language Models","created":"2024-08-20","cited_by_count":4,"area":null},{"id":"2410.05930","title":"Fortify Your Foundations: Practical Privacy and Security for Foundation Model Deployments In The Cloud","created":"2024-10-08","cited_by_count":4,"area":null}],"next_cursor":"100"}