{"total":118,"rows":[{"id":"2402.17177","title":"Sora: A Review on Background, Technology, Limitations, and Opportunities of Large Vision Models","created":"2024-02-27","cited_by_count":477,"area":null},{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2405.06823","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","created":"2024-05-10","cited_by_count":127,"area":null},{"id":"2405.16833","title":"Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Models","created":"2024-05-27","cited_by_count":125,"area":null},{"id":"2407.12043","title":"The Art of Saying No: Contextual Noncompliance in Language Models","created":"2024-07-02","cited_by_count":105,"area":null},{"id":"2401.10034","title":"Evolutionary Computation in the Era of Large Language Model: Survey and Roadmap","created":"2024-01-18","cited_by_count":90,"area":null},{"id":"2403.06833","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","created":"2024-03-11","cited_by_count":81,"area":null},{"id":"2409.20089","title":"Robust LLM safeguarding via refusal feature adversarial training","created":"2024-09-30","cited_by_count":64,"area":null},{"id":"2407.15847","title":"LLMmap: Fingerprinting For Large Language Models","created":"2024-07-22","cited_by_count":58,"area":null},{"id":"2310.19737","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","created":"2023-10-30","cited_by_count":49,"area":null},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2407.08351","title":"AutoBencher: Towards Declarative Benchmark Construction","created":"2024-07-11","cited_by_count":44,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2406.14595","title":"Adversaries Can Misuse Combinations of Safe Models","created":"2024-06-20","cited_by_count":32,"area":null},{"id":"2404.07981","title":"Manipulating Large Language Models to Increase Product Visibility","created":"2024-04-11","cited_by_count":28,"area":null},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2511.01805","title":"Accumulating Context Changes the Beliefs of Language Models","created":"2025-11-03","cited_by_count":28,"area":null},{"id":"2402.11725","title":"How Susceptible are Large Language Models to Ideological Manipulation?","created":"2024-02-18","cited_by_count":26,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2506.14261","title":"RL-Obfuscation: Can Language Models Learn to Evade Latent-Space Monitors?","created":"2025-06-17","cited_by_count":24,"area":null},{"id":"2410.10343","title":"Locking Down the Finetuned LLMs Safety","created":"2024-10-14","cited_by_count":22,"area":null},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2505.12038","title":"Safe Delta: Consistently Preserving Safety when Fine-Tuning LLMs on Diverse Datasets","created":"2025-05-17","cited_by_count":18,"area":null},{"id":"2405.14488","title":"MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability","created":"2024-05-23","cited_by_count":15,"area":null},{"id":"2504.19373","title":"Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models","created":"2025-04-27","cited_by_count":14,"area":null},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2506.04202","title":"TracLLM: A Generic Framework for Attributing Long Context LLMs","created":"2025-06-04","cited_by_count":13,"area":null},{"id":"2403.19103","title":"Automated Black-box Prompt Engineering for Personalized Text-to-Image Generation","created":"2024-03-28","cited_by_count":12,"area":null},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2510.04398","title":"SECA: Semantically Equivalent and Coherent Attacks for Eliciting LLM Hallucinations","created":"2025-10-05","cited_by_count":9,"area":null},{"id":"2602.12966","title":"ProbeLLM: Automating Principled Diagnosis of LLM Failures","created":"2026-02-13","cited_by_count":9,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2412.13341","title":"Concept-ROT: Poisoning Concepts in Large Language Models with Model Editing","created":"2024-12-17","cited_by_count":8,"area":null},{"id":"2502.11910","title":"Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives","created":"2025-02-17","cited_by_count":8,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2510.19687","title":"Are Large Language Models Sensitive to the Motives Behind Communication?","created":"2025-10-22","cited_by_count":8,"area":null},{"id":"2410.06704","title":"PII-Scope: A Comprehensive Study on Training Data PII Extraction Attacks in LLMs","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2502.00840","title":"Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense","created":"2025-02-02","cited_by_count":7,"area":null},{"id":"2502.19320","title":"Shh, don't say that! Domain Certification in LLMs","created":"2025-02-26","cited_by_count":7,"area":null},{"id":"2507.21141","title":"The Geometry of Harmfulness in LLMs through Subconcept Probing","created":"2025-07-23","cited_by_count":7,"area":null},{"id":"2508.14070","title":"Special-Character Adversarial Attacks on Open-Source Language Model","created":"2025-08-12","cited_by_count":7,"area":null},{"id":"2509.06795","title":"Anchoring Refusal Direction: Mitigating Safety Risks in Tuning via Projection Constraint","created":"2025-09-08","cited_by_count":7,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2501.18712","title":"Invisible Traces: Using Hybrid Fingerprinting to identify underlying LLMs in GenAI Apps","created":"2025-01-30","cited_by_count":5,"area":null},{"id":"2502.04643","title":"Confidence Elicitation: A New Attack Vector for Large Language Models","created":"2025-02-07","cited_by_count":5,"area":null},{"id":"2502.10433","title":"Neural Genetic Search in Discrete Spaces","created":"2025-02-09","cited_by_count":5,"area":null},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2405.04346","title":"Revisiting Character-level Adversarial Attacks for Language Models","created":"2024-05-07","cited_by_count":4,"area":null},{"id":"2502.10760","title":"Why is prompting hard? Understanding prompts on binary sequence predictors","created":"2025-02-15","cited_by_count":4,"area":null},{"id":"2503.04113","title":"Uncovering Gaps in How Humans and LLMs Interpret Subjective Language","created":"2025-03-06","cited_by_count":4,"area":null},{"id":"2506.04650","title":"Neural Network Reprogrammability: A Unified Theme on Model Reprogramming, Prompt Tuning, and Prompt Instruction","created":"2025-06-05","cited_by_count":4,"area":null},{"id":"2512.23701","title":"Eliciting Behaviors in Multi-Turn Conversations","created":"2025-12-29","cited_by_count":4,"area":null},{"id":"2605.31140","title":"EvoDefense: Co-Evolving Black-Box Defense with Large Language Models","created":"2026-05-29","cited_by_count":4,"area":null},{"id":"2406.02721","title":"Self-Control of LLM Behaviors by Compressing Suffix Gradient into Prefix Controller","created":"2024-06-04","cited_by_count":3,"area":null},{"id":"2409.01688","title":"Differentially Private Kernel Density Estimation","created":"2024-09-03","cited_by_count":3,"area":null},{"id":"2504.21700","title":"XBreaking: Understanding how LLMs security alignment can be broken","created":"2025-04-30","cited_by_count":3,"area":null},{"id":"2505.14042","title":"Adversarially Pretrained Transformers May Be Universally Robust In-Context Learners","created":"2025-05-20","cited_by_count":3,"area":null},{"id":"2507.06489","title":"On the Robustness of Verbal Confidence of LLMs in Adversarial Attacks","created":"2025-07-09","cited_by_count":3,"area":null},{"id":"2602.11528","title":"Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs","created":"2026-02-12","cited_by_count":3,"area":null},{"id":"2605.05957","title":"Knowing but Not Correcting: Routine Task Requests Suppress Factual Correction in LLMs","created":"2026-05-07","cited_by_count":3,"area":null},{"id":"2405.17130","title":"Explaining the role of Intrinsic Dimensionality in Adversarial Training","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2501.01741","title":"How Toxic Can You Get? Search-based Toxicity Testing for Large Language Models","created":"2025-01-03","cited_by_count":2,"area":null},{"id":"2508.18306","title":"SALMAN: Stability Analysis of Language Models Through the Maps Between Graph-based Manifolds","created":"2025-08-23","cited_by_count":2,"area":null},{"id":"2510.08569","title":"ArenaBencher: Automatic Benchmark Evolution via Multi-Model Competitive Evaluation","created":"2025-10-09","cited_by_count":2,"area":null},{"id":"2602.21262","title":"Under the Influence: Quantifying Persuasion and Vigilance in Large Language Models","created":"2026-02-24","cited_by_count":2,"area":null},{"id":"2603.27332","title":"Unsafe by Reciprocity: How Generation-Understanding Coupling Undermines Safety in Unified Multimodal Models","created":"2026-03-28","cited_by_count":2,"area":null},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2410.12076","title":"Taking off the Rose-Tinted Glasses: A Critical Look at Adversarial ML Through the Lens of Evasion Attacks","created":"2024-10-15","cited_by_count":1,"area":null},{"id":"2410.18312","title":"Countering Autonomous Cyber Threats","created":"2024-10-23","cited_by_count":1,"area":null},{"id":"2502.16366","title":"A Generative Approach to LLM Harmfulness Mitigation with Red Flag Tokens","created":"2025-02-22","cited_by_count":1,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2509.06807","title":"MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security","created":"2025-09-08","cited_by_count":1,"area":null},{"id":"2510.06270","title":"MCCE: A Framework for Multi-LLM Collaborative Search in Discrete Spaces with Similarity-Filtered Preference Learning","created":"2025-10-06","cited_by_count":1,"area":null},{"id":"2602.02557","title":"The Alignment Curse: Modality Alignment Supercharges Audio Attacks via Text Transfer","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2605.11532","title":"Read, Grep, and Synthesize: Diagnosing Cross-Domain Seed Exposure for LLM Research Ideation","created":"2026-05-12","cited_by_count":1,"area":null},{"id":"2605.15118","title":"Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks","created":"2026-05-14","cited_by_count":1,"area":null},{"id":"2606.19605","title":"FAPO: Fully Automated Prompt Optimization of Multi-Step LLM Pipelines","created":"2026-06-17","cited_by_count":1,"area":null},{"id":"2606.25396","title":"Long-Term Simulation Exposes Cognitive-Developmental Risks in AI Companions","created":"2026-06-24","cited_by_count":1,"area":null},{"id":"2607.13039","title":"Safeguard-Conditioned Uplift: Measuring Utility-Risk Frontiers for Dual-Use Biology Assistants","created":"2026-06-12","cited_by_count":1,"area":null},{"id":"2408.10474","title":"LeCov: Multi-level Testing Criteria for Large Language Models","created":"2024-08-20","cited_by_count":0,"area":null},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2505.19625","title":"Search-Based Software Engineering and AI Foundation Models: Current Landscape and Future Roadmap","created":"2025-05-26","cited_by_count":0,"area":null},{"id":"2506.15735","title":"ContextBench: Modifying Contexts for Targeted Latent Activation","created":"2025-06-15","cited_by_count":0,"area":null},{"id":"2506.23423","title":"TuCo: Measuring the Contribution of Fine-Tuning to Individual Responses of LLMs","created":"2025-06-29","cited_by_count":0,"area":null},{"id":"2508.01198","title":"Adaptive Content Restriction for Large Language Models via Suffix Optimization","created":"2025-08-02","cited_by_count":0,"area":null},{"id":"2509.10790","title":"GoldenTransformer: A Modular Fault Injection Framework for Transformer Robustness Research","created":"2025-09-13","cited_by_count":0,"area":null},{"id":"2509.21192","title":"GEP: A GCG-Based method for extracting personally identifiable information from chatbots built on small language models","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2510.01288","title":"Microsaccade-Inspired Probing: Positional Encoding Perturbations Reveal LLM Misbehaviours","created":"2025-10-01","cited_by_count":0,"area":null},{"id":"2510.01929","title":"Inverse Language Modeling towards Robust and Grounded LLMs","created":"2025-10-02","cited_by_count":0,"area":null},{"id":"2510.13106","title":"TRUSTVIS: A Multi-Dimensional Trustworthiness Evaluation Framework for Large Language Models","created":"2025-10-15","cited_by_count":0,"area":null},{"id":"2511.05018","title":"Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies","created":"2025-11-07","cited_by_count":0,"area":null},{"id":"2512.03720","title":"Context-Aware Hierarchical Learning: A Two-Step Paradigm towards Safer LLMs","created":"2025-12-03","cited_by_count":0,"area":null},{"id":"2602.23117","title":"Devling into Adversarial Transferability on Image Classification: Review, Benchmark, and Evaluation","created":"2026-02-26","cited_by_count":0,"area":null},{"id":"2603.12582","title":"RTD-Guard: A Black-Box Textual Adversarial Detection Framework via Replacement Token Detection","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2603.13318","title":"Residual Stream Analysis of Overfitting And Structural Disruptions","created":"2026-03-04","cited_by_count":0,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2604.18860","title":"Temporal UI State Inconsistency in Desktop GUI Agents: Formalizing and Defending Against TOCTOU Attacks on Computer-Use Agents","created":"2026-04-20","cited_by_count":0,"area":null}],"next_cursor":"100"}