{"total":66,"rows":[{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2402.05044","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","created":"2024-02-07","cited_by_count":228,"area":null},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2403.01038","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","created":"2024-03-02","cited_by_count":96,"area":null},{"id":"2403.14472","title":"Detoxifying Large Language Models via Knowledge Editing","created":"2024-03-21","cited_by_count":87,"area":null},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2407.17436","title":"AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies","created":"2024-07-11","cited_by_count":74,"area":null},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2405.19334","title":"LLMs Meet Multimodal Generation and Editing: A Survey","created":"2024-05-29","cited_by_count":35,"area":null},{"id":"2401.03315","title":"Malla: Demystifying Real-world Large Language Model Integrated Malicious Services","created":"2024-01-06","cited_by_count":33,"area":null},{"id":"2312.00029","title":"Bergeron: Combating Adversarial Attacks through a Conscience-Based Alignment Framework","created":"2023-11-16","cited_by_count":30,"area":null},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2403.19103","title":"Automated Black-box Prompt Engineering for Personalized Text-to-Image Generation","created":"2024-03-28","cited_by_count":12,"area":null},{"id":"2409.09041","title":"Acceptable Use Policies for Foundation Models","created":"2024-08-29","cited_by_count":12,"area":null},{"id":"2502.16776","title":"AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvement","created":"2025-02-24","cited_by_count":12,"area":null},{"id":"2512.16856","title":"Distributional AGI Safety","created":"2025-12-18","cited_by_count":12,"area":null},{"id":"2403.06009","title":"Detectors for Safe and Reliable LLMs: Implementations, Uses, and Limitations","created":"2024-03-09","cited_by_count":10,"area":null},{"id":"2505.13348","title":"Investigating the Vulnerability of LLM-as-a-Judge Architectures to Prompt-Injection Attacks","created":"2025-05-19","cited_by_count":10,"area":null},{"id":"2402.09546","title":"How Secure Are Large Language Models (LLMs) for Navigation in Urban Environments?","created":"2024-02-14","cited_by_count":8,"area":null},{"id":"2405.15202","title":"Cross-Task Defense: Instruction-Tuning LLMs for Content Safety","created":"2024-05-24","cited_by_count":8,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2311.13624","title":"A Theoretical Insight into Attack and Defense of Gradient Leakage in Transformer","created":"2023-11-22","cited_by_count":6,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2509.00117","title":"Embodied AI: Emerging Risks and Opportunities for Policy Action","created":"2025-08-28","cited_by_count":5,"area":null},{"id":"2509.19994","title":"Improving Generalizability and Undetectability for Targeted Adversarial Attacks on Multimodal Pre-trained Models","created":"2025-09-24","cited_by_count":5,"area":null},{"id":"2605.31140","title":"EvoDefense: Co-Evolving Black-Box Defense with Large Language Models","created":"2026-05-29","cited_by_count":4,"area":null},{"id":"2412.02626","title":"Time-Reversal Provides Unsupervised Feedback to LLMs","created":"2024-12-03","cited_by_count":3,"area":null},{"id":"2507.06489","title":"On the Robustness of Verbal Confidence of LLMs in Adversarial Attacks","created":"2025-07-09","cited_by_count":3,"area":null},{"id":"2507.15613","title":"Multi-Stage Prompt Inference Attacks on Enterprise LLM Systems","created":"2025-07-21","cited_by_count":3,"area":null},{"id":"2510.13183","title":"DSCD: Large Language Model Detoxification with Self-Constrained Decoding","created":"2025-10-15","cited_by_count":3,"area":null},{"id":"2311.13445","title":"Transfer Attacks and Defenses for Large Language Models on Coding Tasks","created":"2023-11-22","cited_by_count":2,"area":null},{"id":"2409.16491","title":"Proactive Schemes: A Survey of Adversarial Attacks for Social Good","created":"2024-09-24","cited_by_count":2,"area":null},{"id":"2410.13138","title":"Data Defenses Against Large Language Models","created":"2024-10-17","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2312.09020","title":"Exploring Transferability for Randomized Smoothing","created":"2023-12-14","cited_by_count":1,"area":null},{"id":"2410.07962","title":"Towards Assurance of LLM Adversarial Robustness using Ontology-Driven Argumentation","created":"2024-10-10","cited_by_count":1,"area":null},{"id":"2410.18114","title":"Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2505.18680","title":"$PD^3F$: A Pluggable and Dynamic DoS-Defense Framework Against Resource Consumption Attacks Targeting Large Language Models","created":"2025-05-24","cited_by_count":1,"area":null},{"id":"2506.19140","title":"Command-V: Pasting LLM Behaviors via Activation Profiles","created":"2025-06-23","cited_by_count":1,"area":null},{"id":"2508.20333","title":"Poison Once, Refuse Forever: Weaponizing Alignment for Injecting Bias in LLMs","created":"2025-08-28","cited_by_count":1,"area":null},{"id":"2512.11783","title":"Super Suffixes: Bypassing Text Generation Alignment and Guard Models Simultaneously","created":"2025-12-12","cited_by_count":1,"area":null},{"id":"2602.00305","title":"Syntax- and Compilation-Preserving Evasion of LLM Vulnerability Detectors","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2602.10639","title":"VideoSTF: Stress-Testing Output Repetition in Video Large Language Models","created":"2026-02-11","cited_by_count":1,"area":null},{"id":"2402.01725","title":"Fortifying Ethical Boundaries in AI: Advanced Strategies for Enhancing Security in Large Language Models","created":"2024-01-27","cited_by_count":0,"area":null},{"id":"2411.19038","title":"DIESEL -- Dynamic Inference-Guidance via Evasion of Semantic Embeddings in LLMs","created":"2024-11-28","cited_by_count":0,"area":null},{"id":"2507.13629","title":"Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques","created":"2025-07-18","cited_by_count":0,"area":null},{"id":"2510.01288","title":"Microsaccade-Inspired Probing: Positional Encoding Perturbations Reveal LLM Misbehaviours","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2606.30219","title":"EvalSafetyGap: A Hybrid Survey and Conceptual Framework for LLM Evaluation-Safety Failures","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2607.05407","title":"Position: Preventing AI-Generated CSAM Necessitates New Approaches to AI Safety","created":"2026-06-09","cited_by_count":0,"area":null},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.04721","title":"Locating and Steering Refusal Beyond Attention","created":"2026-09-04","cited_by_count":0,"area":null},{"id":"2609.36434","title":"The Safety Operator: Modulating the Expression of Safety Instructions via Spectral Optimization","created":"2026-09-29","cited_by_count":0,"area":null},{"id":"2610.01535","title":"False Floors: LLM Safety Routing Evaluations Break Under Distribution Shift","created":"2026-10-01","cited_by_count":0,"area":null},{"id":"2610.03430","title":"Jumping the Line: Exploiting Length Predictions in LLM Scheduling","created":"2026-10-02","cited_by_count":0,"area":null}],"next_cursor":null}