{"total":227,"rows":[{"id":"2402.05044","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","created":"2024-02-07","cited_by_count":228,"area":null},{"id":"2404.05993","title":"AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Experts","created":"2024-04-09","cited_by_count":136,"area":null},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2407.12043","title":"The Art of Saying No: Contextual Noncompliance in Language Models","created":"2024-07-02","cited_by_count":105,"area":null},{"id":"2402.18540","title":"Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templates","created":"2024-02-28","cited_by_count":96,"area":null},{"id":"2403.01038","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","created":"2024-03-02","cited_by_count":96,"area":null},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2403.06833","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","created":"2024-03-11","cited_by_count":81,"area":null},{"id":"2402.18649","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","created":"2024-02-28","cited_by_count":77,"area":null},{"id":"2407.17436","title":"AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies","created":"2024-07-11","cited_by_count":74,"area":null},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2407.05965","title":"T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Models","created":"2024-07-08","cited_by_count":66,"area":null},{"id":"2405.18137","title":"Exploiting LLM Quantization","created":"2024-05-28","cited_by_count":65,"area":null},{"id":"2409.20089","title":"Robust LLM safeguarding via refusal feature adversarial training","created":"2024-09-30","cited_by_count":64,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2310.19737","title":"Adversarial Attacks and Defenses in Large Language Models: Old and New Threats","created":"2023-10-30","cited_by_count":49,"area":null},{"id":"2311.04235","title":"Can LLMs Follow Simple Rules?","created":"2023-11-06","cited_by_count":46,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2504.16980","title":"Safety Pretraining: Toward the Next Generation of Safe AI","created":"2025-04-23","cited_by_count":43,"area":null},{"id":"2408.12787","title":"LLM-PBE: Assessing Data Privacy in Large Language Models","created":"2024-08-23","cited_by_count":41,"area":null},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2412.13879","title":"Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settings","created":"2024-12-18","cited_by_count":35,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2406.18678","title":"Few-shot Personalization of LLMs with Mis-aligned Responses","created":"2024-06-26","cited_by_count":32,"area":null},{"id":"2312.00029","title":"Bergeron: Combating Adversarial Attacks through a Conscience-Based Alignment Framework","created":"2023-11-16","cited_by_count":30,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2511.01805","title":"Accumulating Context Changes the Beliefs of Language Models","created":"2025-11-03","cited_by_count":28,"area":null},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2404.03631","title":"Robust Concept Erasure Using Task Vectors","created":"2024-04-04","cited_by_count":27,"area":null},{"id":"2406.06573","title":"MedFuzz: Exploring the Robustness of Large Language Models in Medical Question Answering","created":"2024-06-03","cited_by_count":26,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2504.13146","title":"Antidistillation Sampling","created":"2025-04-17","cited_by_count":25,"area":null},{"id":"2506.14261","title":"RL-Obfuscation: Can Language Models Learn to Evade Latent-Space Monitors?","created":"2025-06-17","cited_by_count":24,"area":null},{"id":"2410.10343","title":"Locking Down the Finetuned LLMs Safety","created":"2024-10-14","cited_by_count":22,"area":null},{"id":"2311.02105","title":"Making Harmful Behaviors Unlearnable for Large Language Models","created":"2023-11-02","cited_by_count":20,"area":null},{"id":"2406.13843","title":"Generative AI Misuse: A Taxonomy of Tactics and Insights from Real-World Data","created":"2024-06-19","cited_by_count":20,"area":null},{"id":"2505.18893","title":"Reality Check: A New Evaluation Ecosystem Is Necessary to Understand AI's Real World Effects","created":"2025-05-24","cited_by_count":19,"area":null},{"id":"2506.00085","title":"COSMIC: Generalized Refusal Direction Identification in LLM Activations","created":"2025-05-30","cited_by_count":19,"area":null},{"id":"2412.06370","title":"Exploring Memorization and Copyright Violation in Frontier LLMs: A Study of the New York Times v. OpenAI 2023 Lawsuit","created":"2024-12-09","cited_by_count":18,"area":null},{"id":"2505.12038","title":"Safe Delta: Consistently Preserving Safety when Fine-Tuning LLMs on Diverse Datasets","created":"2025-05-17","cited_by_count":18,"area":null},{"id":"2408.03837","title":"WalledEval: A Comprehensive Safety Evaluation Toolkit for Large Language Models","created":"2024-08-07","cited_by_count":17,"area":null},{"id":"2406.02378","title":"On the Intrinsic Self-Correction Capability of LLMs: Uncertainty and Latent Concept","created":"2024-06-04","cited_by_count":16,"area":null},{"id":"2504.01002","title":"Token embeddings violate the manifold hypothesis","created":"2025-04-01","cited_by_count":16,"area":null},{"id":"2402.01909","title":"On Catastrophic Inheritance of Large Foundation Models","created":"2024-02-02","cited_by_count":15,"area":null},{"id":"2405.14488","title":"MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability","created":"2024-05-23","cited_by_count":15,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2311.10117","title":"Automatic Engineering of Long Prompts","created":"2023-11-16","cited_by_count":14,"area":null},{"id":"2407.08422","title":"On the (In)Security of LLM App Stores","created":"2024-07-11","cited_by_count":14,"area":null},{"id":"2504.19373","title":"Doxing via the Lens: Revealing Location-related Privacy Leakage on Multi-modal Large Reasoning Models","created":"2025-04-27","cited_by_count":14,"area":null},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2405.08597","title":"Risks and Opportunities of Open-Source Generative AI","created":"2024-05-14","cited_by_count":13,"area":null},{"id":"2411.01136","title":"Do LLMs Know to Respect Copyright Notice?","created":"2024-11-02","cited_by_count":13,"area":null},{"id":"2505.17646","title":"Unveiling the Basin-Like Loss Landscape in Large Language Models","created":"2025-05-23","cited_by_count":13,"area":null},{"id":"2403.19103","title":"Automated Black-box Prompt Engineering for Personalized Text-to-Image Generation","created":"2024-03-28","cited_by_count":12,"area":null},{"id":"2410.19160","title":"Adversarial Attacks on Large Language Models Using Regularized Relaxation","created":"2024-10-24","cited_by_count":12,"area":null},{"id":"2502.16776","title":"AISafetyLab: A Comprehensive Framework for AI Safety Evaluation and Improvement","created":"2025-02-24","cited_by_count":12,"area":null},{"id":"2509.13281","title":"RepIt: Steering Language Models with Concept-Specific Refusal Vectors","created":"2025-09-16","cited_by_count":12,"area":null},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2510.00181","title":"CHAI: Command Hijacking against embodied AI","created":"2025-09-30","cited_by_count":11,"area":null},{"id":"2510.05092","title":"Learning to Interpret Weight Differences in Language Models","created":"2025-10-06","cited_by_count":11,"area":null},{"id":"2505.13348","title":"Investigating the Vulnerability of LLM-as-a-Judge Architectures to Prompt-Injection Attacks","created":"2025-05-19","cited_by_count":10,"area":null},{"id":"2406.16714","title":"AutoDetect: Towards a Unified Framework for Automated Weakness Detection in Large Language Models","created":"2024-06-24","cited_by_count":9,"area":null},{"id":"2408.02416","title":"Why Are My Prompts Leaked? Unraveling Prompt Extraction Threats in Customized Large Language Models","created":"2024-08-05","cited_by_count":9,"area":null},{"id":"2410.19406","title":"An Auditing Test To Detect Behavioral Shift in Language Models","created":"2024-10-25","cited_by_count":9,"area":null},{"id":"2505.12692","title":"Bullying the Machine: How Personas Increase LLM Vulnerability","created":"2025-05-19","cited_by_count":9,"area":null},{"id":"2507.06256","title":"Attacker's Noise Can Manipulate Your Audio-based LLM in the Real World","created":"2025-07-07","cited_by_count":9,"area":null},{"id":"2510.04398","title":"SECA: Semantically Equivalent and Coherent Attacks for Eliciting LLM Hallucinations","created":"2025-10-05","cited_by_count":9,"area":null},{"id":"2512.11437","title":"CLINIC: Evaluating Multilingual Trustworthiness in Language Models for Healthcare","created":"2025-12-12","cited_by_count":9,"area":null},{"id":"2602.12966","title":"ProbeLLM: Automating Principled Diagnosis of LLM Failures","created":"2026-02-13","cited_by_count":9,"area":null},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2407.02518","title":"INDICT: Code Generation with Internal Dialogues of Critiques for Both Security and Helpfulness","created":"2024-06-23","cited_by_count":8,"area":null},{"id":"2410.04524","title":"Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuning","created":"2024-10-06","cited_by_count":8,"area":null},{"id":"2502.11910","title":"Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives","created":"2025-02-17","cited_by_count":8,"area":null},{"id":"2506.06414","title":"Benchmarking Misuse Mitigation Against Covert Adversaries","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2601.06884","title":"Paraphrasing Adversarial Attack on LLM-as-a-Reviewer","created":"2026-01-11","cited_by_count":8,"area":null},{"id":"2601.23255","title":"Now You Hear Me: Audio Narrative Attacks Against Large Audio-Language Models","created":"2026-01-30","cited_by_count":8,"area":null},{"id":"2602.00333","title":"Efficient and accurate steering of Large Language Models through attention-guided feature learning","created":"2026-01-30","cited_by_count":8,"area":null},{"id":"2603.01919","title":"Real Money, Fake Models: Deceptive Model Claims in Shadow APIs","created":"2026-03-02","cited_by_count":8,"area":null},{"id":"2405.20657","title":"DORY: Deliberative Prompt Recovery for LLM","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2410.06704","title":"PII-Scope: A Comprehensive Study on Training Data PII Extraction Attacks in LLMs","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2410.13901","title":"SoK: Prompt Hacking of Large Language Models","created":"2024-10-16","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2502.19320","title":"Shh, don't say that! Domain Certification in LLMs","created":"2025-02-26","cited_by_count":7,"area":null},{"id":"2509.06795","title":"Anchoring Refusal Direction: Mitigating Safety Risks in Tuning via Projection Constraint","created":"2025-09-08","cited_by_count":7,"area":null},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2510.07985","title":"Fewer Weights, More Problems: A Practical Attack on LLM Pruning","created":"2025-10-09","cited_by_count":7,"area":null},{"id":"2604.18660","title":"Evaluating Answer Leakage Robustness of LLM Tutors against Adversarial Student Attacks","created":"2026-04-20","cited_by_count":7,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2410.20016","title":"Vulnerability of LLMs to Vertically Aligned Text Manipulations","created":"2024-10-26","cited_by_count":6,"area":null},{"id":"2602.17345","title":"What Breaks Embodied AI Security:LLM Vulnerabilities, CPS Flaws,or Something Else?","created":"2026-02-19","cited_by_count":6,"area":null},{"id":"2406.03230","title":"Defending Large Language Models Against Attacks With Residual Stream Activation Analysis","created":"2024-06-05","cited_by_count":5,"area":null},{"id":"2408.06502","title":"Prompt Recovery for Image Generation Models: A Comparative Study of Discrete Optimizers","created":"2024-08-12","cited_by_count":5,"area":null},{"id":"2410.12104","title":"To Err is AI : A Case Study Informing LLM Flaw Reporting Practices","created":"2024-10-15","cited_by_count":5,"area":null}],"next_cursor":"100"}