{"total":30,"rows":[{"id":"2509.03888","title":"False Sense of Security: Why Probing-based Malicious Input Detection Fails to Generalize","created":"2025-09-04","cited_by_count":19,"area":null},{"id":"2410.16090","title":"Analysing the Residual Stream of Language Models Under Knowledge Conflicts","created":"2024-10-21","cited_by_count":17,"area":null},{"id":"2407.06992","title":"Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2311.09069","title":"How Well Do Large Language Models Truly Ground?","created":"2023-11-15","cited_by_count":14,"area":null},{"id":"2402.13532","title":"Backdoor Attacks on Dense Retrieval via Public and Unintentional Triggers","created":"2024-02-21","cited_by_count":14,"area":null},{"id":"2506.04202","title":"TracLLM: A Generic Framework for Attributing Long Context LLMs","created":"2025-06-04","cited_by_count":13,"area":null},{"id":"2402.12784","title":"Understanding and Mitigating the Threat of Vec2Text to Dense Retrieval Systems","created":"2024-02-20","cited_by_count":9,"area":null},{"id":"2501.04802","title":"Reproducing HotFlip for Corpus Poisoning Attacks in Dense Retrieval","created":"2025-01-08","cited_by_count":7,"area":null},{"id":"2602.15344","title":"ER-MIA: Black-Box Adversarial Memory Injection Attacks on Long-Term Memory-Augmented Large Language Models","created":"2026-02-17","cited_by_count":5,"area":null},{"id":"2503.08644","title":"Exploiting Instruction-Following Retrievers for Malicious Information Retrieval","created":"2025-03-11","cited_by_count":4,"area":null},{"id":"2408.14830","title":"PolicyLR: A Logic Representation For Privacy Policies","created":"2024-08-27","cited_by_count":3,"area":null},{"id":"2505.12655","title":"Web Intellectual Property at Risk: Preventing Unauthorized Real-Time Retrieval by Large Language Models","created":"2025-05-19","cited_by_count":3,"area":null},{"id":"2605.21948","title":"SCI-Defense: Defending Manipulation Attacks from Generative Engine Optimization","created":"2026-05-21","cited_by_count":3,"area":null},{"id":"2405.17130","title":"Explaining the role of Intrinsic Dimensionality in Adversarial Training","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2406.10746","title":"SparseCL: Sparse Contrastive Learning for Contradiction Retrieval","created":"2024-06-15","cited_by_count":2,"area":null},{"id":"2602.19844","title":"LLM-enabled Applications Require System-Level Threat Monitoring","created":"2026-02-23","cited_by_count":2,"area":null},{"id":"2601.23094","title":"Safer Policy Compliance with Dynamic Epistemic Fallback","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2607.03739","title":"A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG","created":"2026-07-04","cited_by_count":1,"area":null},{"id":"2410.20315","title":"Deep Learning Based Dense Retrieval: A Comparative Study","created":"2024-10-27","cited_by_count":0,"area":null},{"id":"2508.05600","title":"Provable one-poison backdoor attacks on linear models and ReLU neural networks","created":"2025-08-07","cited_by_count":0,"area":null},{"id":"2604.16576","title":"On the Robustness of LLM-Based Dense Retrievers: A Systematic Analysis of Generalizability and Stability","created":"2026-04-17","cited_by_count":0,"area":null},{"id":"2605.01591","title":"Led to Mislead: Adversarial Content Injection for Attacks on Neural Ranking Models","created":"2026-05-02","cited_by_count":0,"area":null},{"id":"2606.13610","title":"One Polluted Page Is Enough: Evaluating Web Content Pollution in LLM Recommenders","created":"2026-06-11","cited_by_count":0,"area":null},{"id":"2607.01276","title":"Embedding Inference Attack","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2607.10402","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","created":"2026-07-11","cited_by_count":0,"area":null},{"id":"2607.14157","title":"Certified Domain Consistency for Multi-Domain Retrieval: Label-Free Per-Domain Contamination Control with Conformal Risk Guarantees","created":"2026-07-14","cited_by_count":0,"area":null},{"id":"2608.10920","title":"IO Factory: Simulating AI-Enabled Influence Campaigns at Scale","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2608.11390","title":"Mechanism Design for Generative Engines: From Exploitation toward Win-Win Outcomes","created":"2026-08-11","cited_by_count":0,"area":null},{"id":"2608.25922","title":"Query-Side Attacks on GNN-Based KGQA: Tracing Failures from Entity Linking to Answer Generation","created":"2026-08-26","cited_by_count":0,"area":null},{"id":"2609.22246","title":"The Corroboration Illusion: When More News Makes LLM Forecasts Less True","created":"2026-09-05","cited_by_count":0,"area":null}],"next_cursor":null}