{"total":34,"rows":[{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2410.13722","title":"Persistent Pre-Training Poisoning of LLMs","created":"2024-10-17","cited_by_count":48,"area":null},{"id":"2402.16382","title":"Immunization against harmful fine-tuning attacks","created":"2024-02-26","cited_by_count":35,"area":null},{"id":"2402.14968","title":"Mitigating Fine-tuning based Jailbreak Attack with Backdoor Enhanced Safety Alignment","created":"2024-02-22","cited_by_count":31,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2504.13146","title":"Antidistillation Sampling","created":"2025-04-17","cited_by_count":25,"area":null},{"id":"2409.19998","title":"Do Influence Functions Work on Large Language Models?","created":"2024-09-30","cited_by_count":20,"area":null},{"id":"2602.11865","title":"Intelligent AI Delegation","created":"2026-02-12","cited_by_count":18,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2501.17858","title":"Improving Your Model Ranking on Chatbot Arena by Vote Rigging","created":"2025-01-29","cited_by_count":17,"area":null},{"id":"2501.17186","title":"Complete Chess Games Enable LLM Become A Chess Master","created":"2025-01-26","cited_by_count":16,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2505.24842","title":"Cascading Adversarial Bias from Injection to Distillation in Language Models","created":"2025-05-30","cited_by_count":9,"area":null},{"id":"2506.06518","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","created":"2025-06-06","cited_by_count":8,"area":null},{"id":"2508.20697","title":"Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning","created":"2025-08-28","cited_by_count":8,"area":null},{"id":"2510.07985","title":"Fewer Weights, More Problems: A Practical Attack on LLM Pruning","created":"2025-10-09","cited_by_count":7,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2505.14300","title":"Beyond Black-Box Obfuscation: Mechanistic Analysis and Defense of White-Box Monitors","created":"2025-05-20","cited_by_count":6,"area":null},{"id":"2311.17228","title":"Survey on AI Ethics: A Socio-technical Perspective","created":"2023-11-28","cited_by_count":4,"area":null},{"id":"2402.12617","title":"Generative AI Security: Challenges and Countermeasures","created":"2024-02-20","cited_by_count":4,"area":null},{"id":"2508.19445","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","created":"2025-08-26","cited_by_count":4,"area":null},{"id":"2605.23168","title":"PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs","created":"2026-05-22","cited_by_count":3,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2506.11402","title":"LoRA Users Beware: A Few Spurious Tokens Can Manipulate Your Finetuned Model","created":"2025-06-13","cited_by_count":2,"area":null},{"id":"2312.14712","title":"Balancing Privacy, Robustness, and Efficiency in Machine Learning","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2602.09757","title":"Towards Poisoning Robustness Certification for Natural Language Generation","created":"2026-02-10","cited_by_count":1,"area":null},{"id":"2607.23394","title":"Inference-Time Consensus for Mitigating Hidden Behaviors from LLM Fine-Tuning","created":"2026-07-25","cited_by_count":1,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2605.15152","title":"Widening the Gap: Exploiting LLM Quantization via Outlier Injection","created":"2026-05-14","cited_by_count":0,"area":null},{"id":"2608.23476","title":"On the Threat Model of Weird Generalization and Emergent Misalignment","created":"2026-08-24","cited_by_count":0,"area":null},{"id":"2610.02886","title":"Misinformation Without Triggers: From Factual Answers to Downstream Decisions","created":"2026-10-02","cited_by_count":0,"area":null},{"id":"2610.03960","title":"Localize-and-Detect: Auditing Task-Level Poisoning in Instruction-Tuned Models","created":"2026-10-02","cited_by_count":0,"area":null}],"next_cursor":null}