{"total":42,"rows":[{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72,"area":"safety"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2408.12798","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","created":"2024-08-23","cited_by_count":50,"area":"safety"},{"id":"2403.01251","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","created":"2024-03-02","cited_by_count":37,"area":"safety"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2404.14461","title":"Competition Report: Finding Universal Jailbreak Backdoors in Aligned LLMs","created":"2024-04-22","cited_by_count":28,"area":"safety"},{"id":"2402.15302","title":"How (un)ethical are instruction-centric responses of LLMs? Unveiling the vulnerabilities of safety guardrails to harmful queries","created":"2024-02-23","cited_by_count":27,"area":"safety"},{"id":"2410.14827","title":"Enhancing Prompt Injection Attacks to LLMs via Poisoning Alignment","created":"2024-10-18","cited_by_count":21,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2407.04108","title":"Future Events as Backdoor Triggers: Investigating Temporal Vulnerabilities in LLMs","created":"2024-07-04","cited_by_count":15,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2505.17601","title":"Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs","created":"2025-05-23","cited_by_count":10,"area":"safety"},{"id":"2509.21761","title":"Backdoor Attribution: Elucidating and Controlling Backdoor in Language Models","created":"2025-09-26","cited_by_count":10,"area":"safety"},{"id":"2507.01321","title":"ICLShield: Exploring and Mitigating In-Context Learning Backdoor Attacks","created":"2025-07-02","cited_by_count":9,"area":"safety"},{"id":"2508.00161","title":"Watch the Weights: Unsupervised monitoring and control of fine-tuned LLMs","created":"2025-07-31","cited_by_count":7,"area":"safety"},{"id":"2603.13461","title":"Purifying Generative LLMs from Backdoors without Prior Knowledge or Clean Reference","created":"2026-03-13","cited_by_count":7,"area":"safety"},{"id":"2510.10265","title":"Backdoor Collapse: Eliminating Unknown Threats via Known Backdoor Aggregation in Language Models","created":"2025-10-11","cited_by_count":6,"area":"safety"},{"id":"2510.17021","title":"Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearning","created":"2025-10-19","cited_by_count":6,"area":"safety"},{"id":"2505.16567","title":"Watch your steps: Dormant Adversarial Behaviors that Activate upon LLM Finetuning","created":"2025-05-22","cited_by_count":5,"area":"safety"},{"id":"2510.02334","title":"Where Did It Go Wrong? Attributing Undesirable LLM Behaviors via Representation Gradient Tracing","created":"2025-09-26","cited_by_count":4,"area":"safety"},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2511.11020","title":"Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysis","created":"2025-11-14","cited_by_count":3,"area":"safety"},{"id":"2510.05169","title":"From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMs","created":"2025-10-05","cited_by_count":2,"area":"safety"},{"id":"2507.01752","title":"Tuning without Peeking: Provable Generalization Bounds and Robust LLM Post-Training","created":"2025-07-02","cited_by_count":1,"area":"safety"},{"id":"2602.05401","title":"BadTemplate: A Training-Free Backdoor Attack via Chat Template Against Large Language Models","created":"2026-02-05","cited_by_count":1,"area":"safety"},{"id":"2605.25073","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","created":"2026-05-24","cited_by_count":1,"area":"safety"},{"id":"2610.04985","title":"Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use","created":"2026-10-04","cited_by_count":1,"area":"safety"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.00654","title":"The Invitation Trap: Proactive Availability Backdoor in LLMs via Conversational Induction","created":"2026-05-30","cited_by_count":0,"area":"safety"},{"id":"2606.29646","title":"Fuzzing Large Language Models to Elicit Hidden Behaviours","created":"2026-06-28","cited_by_count":0,"area":"safety"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2609.24826","title":"OPBackdoor: Opportunistic Backdoors via Alibi-Aligned Reasoning","created":"2026-09-21","cited_by_count":0,"area":"safety"},{"id":"2609.26184","title":"Silent Sabotage: Internal State Triggered Backdoor Attacks on LLM-Powered Robotic Systems","created":"2026-09-02","cited_by_count":0,"area":"safety"},{"id":"2610.00348","title":"Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs via Weight Orthogonalisation","created":"2026-09-29","cited_by_count":0,"area":"safety"},{"id":"2610.00663","title":"Backdoor Containment via Expert Quarantine and Shutdown in LLMs","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.00685","title":"Backdoor Purification for LoRA-Tuned LLMs via Null-Space Projection","created":"2026-09-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}