{"total":116,"rows":[{"id":"2412.05579","title":"LLMs-as-Judges: A Comprehensive Survey on LLM-based Evaluation Methods","created":"2024-12-07","cited_by_count":465,"area":null},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2402.16459","title":"Defending LLMs against Jailbreaking Attacks via Backtranslation","created":"2024-02-26","cited_by_count":70,"area":"safety"},{"id":"2502.14127","title":"Which of These Best Describes Multiple Choice Evaluation with LLMs? A) Forced B) Flawed C) Fixable D) All of the Above","created":"2025-02-19","cited_by_count":52,"area":null},{"id":"2510.05156","title":"VeriGuard: Enhancing LLM Agent Safety via Verified Code Generation","created":"2025-10-03","cited_by_count":49,"area":"agents"},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2404.00492","title":"Multi-hop Question Answering under Temporal Knowledge Editing","created":"2024-03-30","cited_by_count":36,"area":null},{"id":"2502.12904","title":"Fraud-R1 : A Multi-Round Benchmark for Assessing the Robustness of LLM Against Augmented Fraud and Phishing Inducements","created":"2025-02-18","cited_by_count":32,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2504.13192","title":"CheatAgent: Attacking LLM-Empowered Recommender Systems via LLM Agent","created":"2025-04-13","cited_by_count":25,"area":"agents"},{"id":"2405.15476","title":"Editable Concept Bottleneck Models","created":"2024-05-24","cited_by_count":23,"area":null},{"id":"2410.20197","title":"Transferable Adversarial Attacks on SAM and Its Downstream Models","created":"2024-10-26","cited_by_count":21,"area":null},{"id":"2402.18216","title":"LLM Task Interference: An Initial Study on the Impact of Task-Switch in Conversational History","created":"2024-02-28","cited_by_count":19,"area":null},{"id":"2404.00489","title":"Prompt-SAW: Leveraging Relation-Aware Graphs for Textual Prompt Compression","created":"2024-03-30","cited_by_count":18,"area":"inference"},{"id":"2505.19864","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","created":"2025-05-26","cited_by_count":17,"area":"rag"},{"id":"2502.13141","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","created":"2025-02-18","cited_by_count":16,"area":"safety"},{"id":"2404.16891","title":"Attacks on Third-Party APIs of Large Language Models","created":"2024-04-24","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2406.18400","title":"Do LLMs dream of elephants (when told not to)? Latent concept association and associative memory in transformers","created":"2024-06-26","cited_by_count":15,"area":null},{"id":"2408.12942","title":"Causal-Guided Active Learning for Debiasing Large Language Models","created":"2024-08-23","cited_by_count":15,"area":null},{"id":"2409.07353","title":"Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks","created":"2024-09-11","cited_by_count":15,"area":"mllm"},{"id":"2505.16557","title":"Is Your LLM-Based Multi-Agent a Reliable Real-World Planner? Exploring Fraud Detection in Travel Planning","created":"2025-05-22","cited_by_count":15,"area":"agents"},{"id":"2406.15444","title":"Cutting Through the Noise: Boosting LLM Performance on Math Word Problems","created":"2024-05-30","cited_by_count":14,"area":null},{"id":"2405.19740","title":"PertEval: Unveiling Real Knowledge Capacity of LLMs with Knowledge-Invariant Perturbations","created":"2024-05-30","cited_by_count":13,"area":null},{"id":"2502.15865","title":"Standard Benchmarks Fail -- Auditing LLM Agents in Finance Must Prioritize Risk","created":"2025-02-21","cited_by_count":13,"area":"agents"},{"id":"2405.15452","title":"Leveraging Logical Rules in Knowledge Editing: A Cherry on the Top","created":"2024-05-24","cited_by_count":12,"area":null},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2404.00486","title":"Dialectical Alignment: Resolving the Tension of 3H and Security Threats of LLMs","created":"2024-03-30","cited_by_count":11,"area":"alignment"},{"id":"2405.20770","title":"Large Language Model Sentinel: LLM Agent for Adversarial Purification","created":"2024-05-24","cited_by_count":10,"area":"agents"},{"id":"2406.02524","title":"CheckEmbed: Effective Verification of LLM Solutions to Open-Ended Tasks","created":"2024-06-04","cited_by_count":10,"area":null},{"id":"2410.20940","title":"Attacking Misinformation Detection Using Adversarial Examples Generated by Language Models","created":"2024-10-28","cited_by_count":10,"area":null},{"id":"2412.00765","title":"SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Prompts","created":"2024-12-01","cited_by_count":10,"area":"safety"},{"id":"2502.15435","title":"Single-pass Detection of Jailbreaking Input in Large Language Models","created":"2025-02-21","cited_by_count":10,"area":"alignment"},{"id":"2507.05248","title":"Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2409.12257","title":"MQA-KEAL: Multi-hop Question Answering under Knowledge Editing for Arabic Language","created":"2024-09-18","cited_by_count":9,"area":null},{"id":"2506.07524","title":"TAI3: Testing Agent Integrity in Interpreting User Intent","created":"2025-06-09","cited_by_count":9,"area":"agents"},{"id":"2511.07049","title":"From Pretrain to Pain: Adversarial Vulnerability of Video Foundation Models Without Task Knowledge","created":"2025-11-10","cited_by_count":9,"area":"mllm"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2409.15361","title":"Multitask Mayhem: Unveiling and Mitigating Safety Gaps in LLMs Fine-tuning","created":"2024-09-18","cited_by_count":8,"area":"safety"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2412.11934","title":"Stepwise Reasoning Error Disruption Attack of LLMs","created":"2024-12-16","cited_by_count":8,"area":"lr"},{"id":"2503.08708","title":"TH-Bench: Evaluating Evading Attacks via Humanizing AI Text on Machine-Generated Text Detectors","created":"2025-03-10","cited_by_count":8,"area":null},{"id":"2503.19540","title":"FLEX: A Benchmark for Evaluating Robustness of Fairness in Large Language Models","created":"2025-03-25","cited_by_count":8,"area":null},{"id":"2605.27823","title":"Disentangling Adversarial Prompts: A Semantic-Graph Defense for Robust LLM Security","created":"2026-05-27","cited_by_count":8,"area":"safety"},{"id":"2402.11271","title":"MONAL: Model Autophagy Analysis for Modeling Human-AI Interactions","created":"2024-02-17","cited_by_count":7,"area":null},{"id":"2402.14837","title":"An Empirical Categorization of Prompting Techniques for Large Language Models: A Practitioner's Guide","created":"2024-02-18","cited_by_count":7,"area":null},{"id":"2501.18626","title":"The TIP of the Iceberg: Revealing a Hidden Class of Task-in-Prompt Adversarial Attacks on LLMs","created":"2025-01-27","cited_by_count":7,"area":"safety"},{"id":"2503.18360","title":"J&H: Evaluating the Robustness of Large Language Models Under Knowledge-Injection Attacks in Legal Domain","created":"2025-03-24","cited_by_count":7,"area":null},{"id":"2504.02458","title":"Retrieval-Augmented Purifier for Robust LLM-Empowered Recommendation","created":"2025-04-03","cited_by_count":7,"area":"rag"},{"id":"2510.03417","title":"NEXUS: Network Exploration for eXploiting Unsafe Sequences in Multi-Turn LLM Jailbreaks","created":"2025-10-03","cited_by_count":7,"area":"safety"},{"id":"2603.11388","title":"Deactivating Refusal Triggers: Understanding and Mitigating Overrefusal in Safety Alignment","created":"2026-03-12","cited_by_count":7,"area":"alignment"},{"id":"2412.18770","title":"Attack-in-the-Chain: Bootstrapping Large Language Models for Attacks Against Black-box Neural Ranking Models","created":"2024-12-25","cited_by_count":6,"area":"lr"},{"id":"2506.00089","title":"TRAPDOC: Deceiving LLM Users by Injecting Imperceptible Phantom Tokens into Documents","created":"2025-05-30","cited_by_count":6,"area":null},{"id":"2506.06366","title":"AI Agent Behavioral Science","created":"2025-06-04","cited_by_count":6,"area":"agents"},{"id":"2502.04643","title":"Confidence Elicitation: A New Attack Vector for Large Language Models","created":"2025-02-07","cited_by_count":5,"area":null},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2506.04575","title":"Are LLMs Stable Formal Logic Translators in Logical Reasoning Across Linguistically Diversified Texts?","created":"2025-06-05","cited_by_count":5,"area":"lr"},{"id":"2512.23430","title":"C2PO: Diagnosing and Disentangling Bias Shortcuts in LLMs","created":"2025-12-29","cited_by_count":5,"area":null},{"id":"2311.08107","title":"SAIE Framework: Support Alone Isn't Enough -- Advancing LLM Training with Adversarial Remarks","created":"2023-11-14","cited_by_count":4,"area":null},{"id":"2407.02716","title":"Light-weight Fine-tuning Method for Defending Adversarial Noise in Pre-trained Medical Vision-Language Models","created":"2024-07-02","cited_by_count":4,"area":"mllm"},{"id":"2409.02649","title":"OpenFact at CheckThat! 2024: Combining Multiple Attack Methods for Effective Adversarial Text Generation","created":"2024-09-04","cited_by_count":4,"area":null},{"id":"2412.00621","title":"Exposing LLM Vulnerabilities: Adversarial Scam Detection and Performance","created":"2024-12-01","cited_by_count":4,"area":null},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2502.15609","title":"On the Robustness of Transformers against Context Hijacking for Linear Classification","created":"2025-02-21","cited_by_count":4,"area":null},{"id":"2505.15386","title":"RePPL: Recalibrating Perplexity by Uncertainty in Semantic Propagation and Language Generation for Explainable QA Hallucination Detection","created":"2025-05-21","cited_by_count":4,"area":null},{"id":"2508.13214","title":"Too Easily Fooled? Prompt Injection Breaks LLMs on Frustratingly Simple Multiple-Choice Questions","created":"2025-08-16","cited_by_count":4,"area":"safety"},{"id":"2510.18728","title":"HarmNet: A Framework for Adaptive Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-10-21","cited_by_count":4,"area":"safety"},{"id":"2406.10802","title":"KGPA: Robustness Evaluation for Large Language Models via Cross-Domain Knowledge Graphs","created":"2024-06-16","cited_by_count":3,"area":null},{"id":"2406.14986","title":"Implicit Probabilistic Reasoning Does Not Reflect Explicit Answers in Large Language Models","created":"2024-06-21","cited_by_count":3,"area":"lr"},{"id":"2506.03627","title":"Robustness of Prompting: Enhancing Robustness of Large Language Models Against Prompting Attacks","created":"2025-06-04","cited_by_count":3,"area":null},{"id":"2506.05286","title":"Stable Vision Concept Transformers for Medical Diagnosis","created":"2025-06-05","cited_by_count":3,"area":null},{"id":"2401.07441","title":"Stability Analysis of ChatGPT-based Sentiment Analysis in AI Quality Assurance","created":"2024-01-15","cited_by_count":2,"area":null},{"id":"2408.13985","title":"TF-Attack: Transferable and Fast Adversarial Attacks on Large Language Models","created":"2024-08-26","cited_by_count":2,"area":null},{"id":"2412.12192","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","created":"2024-12-13","cited_by_count":2,"area":"safety"},{"id":"2506.02479","title":"BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage","created":"2025-06-03","cited_by_count":2,"area":"alignment"},{"id":"2508.16267","title":"From Confidence to Collapse in LLM Factual Robustness","created":"2025-08-22","cited_by_count":2,"area":null},{"id":"2508.16325","title":"ConceptGuard: Neuro-Symbolic Safety Guardrails via Sparse Interpretable Jailbreak Concepts","created":"2025-08-22","cited_by_count":2,"area":"safety"},{"id":"2509.20321","title":"Conversational Speech Reveals Structural Robustness Failures in SpeechLLM Backbones","created":"2025-09-24","cited_by_count":2,"area":null},{"id":"2512.23173","title":"EquaCode: A Multi-Strategy Jailbreak Approach for Large Language Models via Equation Solving and Code Completion","created":"2025-12-29","cited_by_count":2,"area":"safety"},{"id":"2601.00451","title":"Controllable Concept Bottleneck Models","created":"2026-01-01","cited_by_count":2,"area":null},{"id":"2606.01441","title":"Dive into Ambiguity: A*-Inspired Multi-Agents Commonsense Obfuscation Attack on LLM Prompts","created":"2026-05-31","cited_by_count":2,"area":"lr"},{"id":"2608.26701","title":"Accelerating Scientific Research with Gemini in the Real-World","created":"2026-08-27","cited_by_count":2,"area":null},{"id":"2402.15929","title":"Certifying Knowledge Comprehension in LLMs","created":"2024-02-24","cited_by_count":1,"area":null},{"id":"2405.04756","title":"Red-Teaming for Inducing Societal Bias in Large Language Models","created":"2024-05-08","cited_by_count":1,"area":"safety"},{"id":"2412.13705","title":"Mitigating Adversarial Attacks in LLMs through Defensive Suffix Generation","created":"2024-12-18","cited_by_count":1,"area":null},{"id":"2506.07184","title":"Mitigating Behavioral Hallucination in Multimodal Large Language Models for Sequential Images","created":"2025-06-08","cited_by_count":1,"area":"mllm"},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2510.14470","title":"Stealthy Dual-Trigger Backdoors: Attacking Prompt Tuning in LM-Empowered Graph Foundation Models","created":"2025-10-16","cited_by_count":1,"area":"safety"},{"id":"2510.24446","title":"SPARTA: Evaluating Reasoning Segmentation Robustness through Black-Box Adversarial Paraphrasing in Text Autoencoder Latent Space","created":"2025-10-28","cited_by_count":1,"area":"lr"},{"id":"2511.05919","title":"Injecting Falsehoods: Adversarial Man-in-the-Middle Attacks Undermining Factual Recall in LLMs","created":"2025-11-08","cited_by_count":1,"area":null},{"id":"2601.16890","title":"LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systems","created":"2026-01-23","cited_by_count":1,"area":null},{"id":"2604.12817","title":"Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory","created":"2026-04-14","cited_by_count":1,"area":"safety"},{"id":"2604.19724","title":"Benign Overfitting in Adversarial Training for Vision Transformers","created":"2026-04-21","cited_by_count":1,"area":null},{"id":"2609.34457","title":"ZonoGPT: Towards An Abstract Domain for Verifying Large GPT Models","created":"2026-09-28","cited_by_count":1,"area":null},{"id":"2408.02814","title":"Pre-trained Encoder Inference: Revealing Upstream Encoders In Downstream Machine Learning Services","created":"2024-08-05","cited_by_count":0,"area":null},{"id":"2502.07101","title":"SMAB: MAB based word Sensitivity Estimation Framework and its Applications in Adversarial Text Generation","created":"2025-02-10","cited_by_count":0,"area":null},{"id":"2505.16888","title":"PARASITE: Conditional System Prompt Poisoning to Hijack LLMs","created":"2025-05-22","cited_by_count":0,"area":null},{"id":"2507.05565","title":"Search-based Selection of Metamorphic Relations for Optimized Robustness Testing of Large Language Models","created":"2025-07-08","cited_by_count":0,"area":null},{"id":"2511.03128","title":"From Insight to Exploit: Leveraging LLM Collaboration for Adaptive Adversarial Text Generation","created":"2025-11-05","cited_by_count":0,"area":null}],"next_cursor":"100"}