{"total":73,"rows":[{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72,"area":"safety"},{"id":"2405.13401","title":"TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Models","created":"2024-05-22","cited_by_count":67,"area":"rag"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2403.15447","title":"Decoding Compressed Trust: Scrutinizing the Trustworthiness of Efficient LLMs Under Compression","created":"2024-03-18","cited_by_count":57,"area":null},{"id":"2408.12798","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","created":"2024-08-23","cited_by_count":50,"area":"safety"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36,"area":"safety"},{"id":"2410.10760","title":"Denial-of-Service Poisoning Attacks against Large Language Models","created":"2024-10-14","cited_by_count":35,"area":null},{"id":"2503.07885","title":"Safety Guardrails for LLM-Enabled Robots","created":"2025-03-10","cited_by_count":35,"area":"safety"},{"id":"2411.12768","title":"CROW: Eliminating Backdoors from Large Language Models via Internal Consistency Regularization","created":"2024-11-18","cited_by_count":33,"area":"safety"},{"id":"2504.05605","title":"ShadowCoT: Cognitive Hijacking for Stealthy Reasoning Backdoors in LLMs","created":"2025-04-08","cited_by_count":30,"area":"lr"},{"id":"2503.16023","title":"BadToken: Token-level Backdoor Attacks to Multi-modal Large Language Models","created":"2025-03-20","cited_by_count":17,"area":"safety"},{"id":"2505.12567","title":"A Survey of Attacks on Large Language Models","created":"2025-05-18","cited_by_count":15,"area":"agents"},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2406.00240","title":"Exploring Vulnerabilities and Protections in Large Language Models: A Survey","created":"2024-06-01","cited_by_count":11,"area":"safety"},{"id":"2407.03160","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","created":"2024-07-03","cited_by_count":10,"area":"safety"},{"id":"2505.17601","title":"Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs","created":"2025-05-23","cited_by_count":10,"area":"safety"},{"id":"2604.05432","title":"Your LLM Agent Can Leak Your Data: Data Exfiltration via Backdoored Tool Use","created":"2026-04-07","cited_by_count":10,"area":"agents"},{"id":"2602.03255","title":"LPS-Bench: Benchmarking Safety Awareness of Computer-Use Agents in Long-Horizon Planning under Benign and Adversarial Scenarios","created":"2026-02-03","cited_by_count":9,"area":"agents"},{"id":"2404.08793","title":"JailbreakLens: Visual Analysis of Jailbreak Attacks Against Large Language Models","created":"2024-04-12","cited_by_count":7,"area":"safety"},{"id":"2508.00161","title":"Watch the Weights: Unsupervised monitoring and control of fine-tuned LLMs","created":"2025-07-31","cited_by_count":7,"area":"safety"},{"id":"2603.13461","title":"Purifying Generative LLMs from Backdoors without Prior Knowledge or Clean Reference","created":"2026-03-13","cited_by_count":7,"area":"safety"},{"id":"2506.14913","title":"Winter Soldier: Backdooring Language Models at Pre-Training with Indirect Data Poisoning","created":"2025-06-17","cited_by_count":6,"area":"safety"},{"id":"2510.18541","title":"Pay Attention to the Triggers: Constructing Backdoors That Survive Distillation","created":"2025-10-21","cited_by_count":6,"area":"distill"},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2406.02619","title":"Unelicitable Backdoors in Language Models via Cryptographic Transformer Circuits","created":"2024-06-03","cited_by_count":4,"area":"safety"},{"id":"2411.06611","title":"vTune: Verifiable Fine-Tuning for LLMs Through Backdooring","created":"2024-11-10","cited_by_count":4,"area":"safety"},{"id":"2505.11611","title":"Signal in the Noise: Polysemantic Interference Transfers and Predicts Cross-Model Influence","created":"2025-05-16","cited_by_count":4,"area":"mechinterp"},{"id":"2509.23041","title":"Virus Infection Attack on LLMs: Your Poisoning Can Spread \"VIA\" Synthetic Data","created":"2025-09-27","cited_by_count":4,"area":"synth"},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2409.01952","title":"Exploiting the Vulnerability of Large Language Models via Defense-Aware Architectural Backdoor","created":"2024-09-03","cited_by_count":3,"area":"safety"},{"id":"2510.00319","title":"DecepChain: Inducing Deceptive Reasoning in Large Language Models","created":"2025-09-30","cited_by_count":3,"area":"lr"},{"id":"2409.04142","title":"Context is the Key: Backdoor Attacks for In-Context Learning with Vision Transformers","created":"2024-09-06","cited_by_count":2,"area":"safety"},{"id":"2505.03501","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","created":"2025-05-06","cited_by_count":2,"area":"safety"},{"id":"2508.08629","title":"Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment","created":"2025-08-12","cited_by_count":2,"area":"safety"},{"id":"2510.05169","title":"From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMs","created":"2025-10-05","cited_by_count":2,"area":"safety"},{"id":"2603.00516","title":"ProtegoFed: Backdoor-Free Federated Instruction Tuning with Interspersed Poisoned Data","created":"2026-02-28","cited_by_count":2,"area":"safety"},{"id":"2604.09235","title":"Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor","created":"2026-04-10","cited_by_count":2,"area":"safety"},{"id":"2606.02995","title":"Patcher: Post-Hoc Patching of Backdoored Large Language Models","created":"2026-06-02","cited_by_count":2,"area":"alignment"},{"id":"2410.04009","title":"ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs","created":"2024-10-05","cited_by_count":1,"area":"safety"},{"id":"2505.11586","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","created":"2025-05-16","cited_by_count":1,"area":null},{"id":"2508.21004","title":"Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution","created":"2025-08-28","cited_by_count":1,"area":"safety"},{"id":"2509.19775","title":"bi-GRPO: Bidirectional Optimization for Jailbreak Backdoor Injection on LLMs","created":"2025-09-24","cited_by_count":1,"area":"lr"},{"id":"2511.14301","title":"SteganoBackdoor: Evading Data-Poisoning Defenses via Steganographic Backdoors","created":"2025-11-18","cited_by_count":1,"area":null},{"id":"2512.17519","title":"Key-Conditioned Orthonormal Transform Gating (K-OTG): Multi-Key Access Control with Hidden-State Scrambling for LoRA-Tuned Models","created":"2025-12-19","cited_by_count":1,"area":null},{"id":"2602.05401","title":"BadTemplate: A Training-Free Backdoor Attack via Chat Template Against Large Language Models","created":"2026-02-05","cited_by_count":1,"area":"safety"},{"id":"2602.13427","title":"Backdooring Bias in Large Language Models","created":"2026-02-13","cited_by_count":1,"area":"safety"},{"id":"2604.18970","title":"Mechanistic Anomaly Detection via Functional Attribution","created":"2026-04-21","cited_by_count":1,"area":"safety"},{"id":"2404.00461","title":"Shortcuts Arising from Contrast: Effective and Covert Clean-Label Attacks in Prompt-Based Learning","created":"2024-03-30","cited_by_count":0,"area":"safety"},{"id":"2506.03614","title":"VLMs Can Aggregate Scattered Training Patches","created":"2025-06-04","cited_by_count":0,"area":"mllm"},{"id":"2508.03221","title":"BadBlocks: Low-Cost and Stealthy Backdoor Attacks Tailored for Text-to-Image Diffusion Models","created":"2025-08-05","cited_by_count":0,"area":"diffusion"},{"id":"2509.05318","title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models","created":"2025-08-30","cited_by_count":0,"area":"safety"},{"id":"2509.25525","title":"Defeating Cerberus: Concept-Guided Privacy-Leakage Mitigation in Multimodal Language Models","created":"2025-09-29","cited_by_count":0,"area":"mllm"},{"id":"2512.04841","title":"SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2602.06887","title":"Plato's Form: Toward Backdoor Defense-as-a-Service for LLMs with Prototype Representations","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2603.15692","title":"BadLLM-TG: A Backdoor Defender powered by LLM Trigger Generator","created":"2026-03-16","cited_by_count":0,"area":"safety"},{"id":"2603.17174","title":"Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2604.04488","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","created":"2026-04-06","cited_by_count":0,"area":"mllm"},{"id":"2605.06423","title":"Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.09397","title":"BadDLM: Backdooring Diffusion Language Models with Diverse Targets","created":"2026-05-10","cited_by_count":0,"area":"diffusion"},{"id":"2605.11612","title":"When Emotion Becomes Trigger: Emotion-style dynamic Backdoor Attack Parasitising Large Language Models","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2605.19147","title":"Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks","created":"2026-05-18","cited_by_count":0,"area":"safety"},{"id":"2605.19262","title":"Backdooring Masked Diffusion Language Models","created":"2026-05-19","cited_by_count":0,"area":"diffusion"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2608.11348","title":"An Empirical Study of Output-to-Input Loops for Black-Box Backdoor Detection in Fine-Tuned Open-Weight LLMs","created":"2026-08-11","cited_by_count":0,"area":"safety"},{"id":"2609.24826","title":"OPBackdoor: Opportunistic Backdoors via Alibi-Aligned Reasoning","created":"2026-09-21","cited_by_count":0,"area":"safety"},{"id":"2609.26184","title":"Silent Sabotage: Internal State Triggered Backdoor Attacks on LLM-Powered Robotic Systems","created":"2026-09-02","cited_by_count":0,"area":"safety"},{"id":"2610.00663","title":"Backdoor Containment via Expert Quarantine and Shutdown in LLMs","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.00685","title":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.12644","title":"Cancerous Backdoor Attack: Gradual Activation via Invisible Tokens and A Stage Controller","created":"2026-10-08","cited_by_count":0,"area":"safety"},{"id":"2610.15244","title":"EvolvAttack: Backdooring self Evolving VLM Agents","created":"2026-10-11","cited_by_count":0,"area":"agents"}],"next_cursor":null}