{"total":387,"rows":[{"id":"2404.13501","title":"A Survey on the Memory Mechanism of Large Language Model based Agents","created":"2024-04-21","cited_by_count":634,"area":"wm"},{"id":"2503.13657","title":"Why Do Multi-Agent LLM Systems Fail?","created":"2025-03-17","cited_by_count":604,"area":"agents"},{"id":"2406.15513","title":"PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preference","created":"2024-06-20","cited_by_count":261,"area":"alignment"},{"id":"2402.13228","title":"Smaug: Fixing Failure Modes of Preference Optimisation with DPO-Positive","created":"2024-02-20","cited_by_count":241,"area":"alignment"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2405.17935","title":"Tool Learning with Large Language Models: A Survey","created":"2024-05-28","cited_by_count":223,"area":"agents"},{"id":"2404.14294","title":"A Survey on Efficient Inference for Large Language Models","created":"2024-04-22","cited_by_count":205,"area":"inference"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2411.14499","title":"Understanding World or Predicting Future? A Comprehensive Survey of World Models","created":"2024-11-21","cited_by_count":166,"area":"wm"},{"id":"2407.19354","title":"The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies","created":"2024-07-28","cited_by_count":131,"area":"agents"},{"id":"2406.02630","title":"AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathways","created":"2024-06-04","cited_by_count":127,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2402.12348","title":"GTBench: Uncovering the Strategic Reasoning Limitations of LLMs via Game-Theoretic Evaluations","created":"2024-02-19","cited_by_count":120,"area":"lr"},{"id":"2407.02646","title":"A Practical Review of Mechanistic Interpretability for Transformer-Based Language Models","created":"2024-07-02","cited_by_count":118,"area":"mechinterp"},{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2501.15368","title":"Baichuan-Omni-1.5 Technical Report","created":"2025-01-26","cited_by_count":111,"area":null},{"id":"2402.18104","title":"Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction","created":"2024-02-28","cited_by_count":107,"area":"safety"},{"id":"2409.00088","title":"On-Device Language Models: A Comprehensive Review","created":"2024-08-26","cited_by_count":104,"area":null},{"id":"2403.01038","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","created":"2024-03-02","cited_by_count":96,"area":null},{"id":"2402.09063","title":"Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Space","created":"2024-02-14","cited_by_count":91,"area":"alignment"},{"id":"2406.11903","title":"A Survey of Large Language Models for Financial Applications: Progress, Prospects and Challenges","created":"2024-06-15","cited_by_count":90,"area":null},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2503.09780","title":"AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents","created":"2025-03-12","cited_by_count":82,"area":"agents"},{"id":"2406.11069","title":"WildVision: Evaluating Vision-Language Models in the Wild with Human Preferences","created":"2024-06-16","cited_by_count":76,"area":"mllm"},{"id":"2402.16192","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","created":"2024-02-25","cited_by_count":74,"area":"alignment"},{"id":"2412.13678","title":"Clio: Privacy-Preserving Insights into Real-World AI Use","created":"2024-12-18","cited_by_count":72,"area":null},{"id":"2405.03644","title":"When LLMs Meet Cybersecurity: A Systematic Literature Review","created":"2024-05-06","cited_by_count":71,"area":null},{"id":"2405.04760","title":"Large Language Models for Cyber Security: A Systematic Literature Review","created":"2024-05-08","cited_by_count":68,"area":null},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2404.12038","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","created":"2024-04-18","cited_by_count":67,"area":"alignment"},{"id":"2501.09674","title":"Authenticated Delegation and Authorized AI Agents","created":"2025-01-16","cited_by_count":65,"area":null},{"id":"2410.07471","title":"SEAL: Safety-enhanced Aligned LLM Fine-tuning via Bilevel Data Selection","created":"2024-10-09","cited_by_count":64,"area":null},{"id":"2402.01864","title":"(A)I Am Not a Lawyer, But...: Engaging Legal Experts towards Responsible LLM Policies for Legal Advice","created":"2024-02-02","cited_by_count":63,"area":null},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2502.19301","title":"Rethinking LLM Unlearning Objectives: A Gradient Perspective and Go Beyond","created":"2025-02-26","cited_by_count":61,"area":"lr"},{"id":"2406.02888","title":"HYDRA: Model Factorization Framework for Black-Box LLM Personalization","created":"2024-06-05","cited_by_count":60,"area":null},{"id":"2407.00128","title":"When Search Engine Services meet Large Language Models: Visions and Challenges","created":"2024-06-28","cited_by_count":59,"area":null},{"id":"2402.10350","title":"Large Language Models for Forecasting and Anomaly Detection: A Systematic Literature Review","created":"2024-02-15","cited_by_count":53,"area":null},{"id":"2405.19363","title":"Medformer: A Multi-Granularity Patching Transformer for Medical Time-Series Classification","created":"2024-05-24","cited_by_count":53,"area":null},{"id":"2404.01744","title":"Octopus v2: On-device language model for super agent","created":"2024-04-02","cited_by_count":47,"area":"agents"},{"id":"2410.19878","title":"Parameter-Efficient Fine-Tuning in Large Models: A Survey of Methodologies","created":"2024-10-24","cited_by_count":47,"area":null},{"id":"2502.07049","title":"LLMs in Software Security: A Survey of Vulnerability Detection Techniques and Insights","created":"2025-02-10","cited_by_count":47,"area":null},{"id":"2405.20413","title":"Jailbreaking Large Language Models Against Moderation Guardrails via Cipher Characters","created":"2024-05-30","cited_by_count":42,"area":"safety"},{"id":"2406.01375","title":"D-CPT Law: Domain-specific Continual Pre-Training Scaling Law for Large Language Models","created":"2024-06-03","cited_by_count":41,"area":null},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2402.01763","title":"When Large Language Models Meet Vector Databases: A Survey","created":"2024-01-30","cited_by_count":39,"area":null},{"id":"2412.01778","title":"HackSynth: LLM Agent and Evaluation Framework for Autonomous Penetration Testing","created":"2024-12-02","cited_by_count":37,"area":"agents"},{"id":"2508.04482","title":"OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use","created":"2025-08-06","cited_by_count":35,"area":"agents"},{"id":"2405.01745","title":"Large Language Models for UAVs: Current State and Pathways to the Future","created":"2024-05-02","cited_by_count":33,"area":null},{"id":"2601.17548","title":"Prompt Injection Attacks on Agentic Coding Assistants: A Systematic Analysis of Vulnerabilities in Skills, Tools, and Protocol Ecosystems","created":"2026-01-24","cited_by_count":31,"area":"agents"},{"id":"2402.06853","title":"History, Development, and Principles of Large Language Models-An Introductory Survey","created":"2024-02-10","cited_by_count":30,"area":null},{"id":"2410.02650","title":"Undesirable Memorization in Large Language Models: A Survey","created":"2024-10-03","cited_by_count":29,"area":null},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2401.09002","title":"AttackEval: How to Evaluate the Effectiveness of Jailbreak Attacking on Large Language Models","created":"2024-01-17","cited_by_count":28,"area":"safety"},{"id":"2406.09179","title":"Towards Effective Evaluations and Comparisons for LLM Unlearning Methods","created":"2024-06-13","cited_by_count":27,"area":"safety"},{"id":"2403.09751","title":"What Was Your Prompt? A Remote Keylogging Attack on AI Assistants","created":"2024-03-14","cited_by_count":26,"area":null},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2503.21411","title":"Exploring the Roles of Large Language Models in Reshaping Transportation Systems: A Survey, Framework, and Roadmap","created":"2025-03-27","cited_by_count":26,"area":null},{"id":"2404.06001","title":"Privacy Preserving Prompt Engineering: A Survey","created":"2024-04-09","cited_by_count":25,"area":null},{"id":"2503.17239","title":"SafeMERGE: Preserving Safety Alignment in Fine-Tuned Large Language Models via Selective Layer-Wise Model Merging","created":"2025-03-21","cited_by_count":25,"area":"alignment"},{"id":"2502.15844","title":"Hallucination Detection in Large Language Models with Metamorphic Relations","created":"2025-02-20","cited_by_count":24,"area":null},{"id":"2503.10566","title":"ASIDE: Architectural Separation of Instructions and Data in Language Models","created":"2025-03-13","cited_by_count":24,"area":"safety"},{"id":"2402.01749","title":"Towards Urban General Intelligence: A Review and Outlook of Urban Foundation Models","created":"2024-01-30","cited_by_count":23,"area":null},{"id":"2409.00089","title":"Watermarking Techniques for Large Language Models: A Survey","created":"2024-08-26","cited_by_count":23,"area":"safety"},{"id":"2407.13934","title":"Towards Trustworthy AI: A Review of Ethical and Robust Large Language Models","created":"2024-06-01","cited_by_count":22,"area":null},{"id":"2407.20224","title":"Can Editing LLMs Inject Harm?","created":"2024-07-29","cited_by_count":22,"area":"safety"},{"id":"2410.10343","title":"Locking Down the Finetuned LLMs Safety","created":"2024-10-14","cited_by_count":22,"area":null},{"id":"2410.14479","title":"Backdoored Retrievers for Prompt Injection Attacks on Retrieval Augmented Generation of Large Language Models","created":"2024-10-18","cited_by_count":22,"area":"rag"},{"id":"2408.07583","title":"Transformers and Large Language Models for Efficient Intrusion Detection Systems: A Comprehensive Survey","created":"2024-08-14","cited_by_count":21,"area":null},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2505.01976","title":"A Survey on Privacy Risks and Protection in Large Language Models","created":"2025-05-04","cited_by_count":21,"area":"safety"},{"id":"2509.10147","title":"Virtual Agent Economies","created":"2025-09-12","cited_by_count":21,"area":null},{"id":"2511.17959","title":"Towards Automating Data Access Permissions in AI Agents","created":"2025-11-22","cited_by_count":21,"area":null},{"id":"2403.17674","title":"Depending on yourself when you should: Mentoring LLM with RL agents to become the master in cybersecurity games","created":"2024-03-26","cited_by_count":20,"area":"agents"},{"id":"2506.06299","title":"How malicious AI swarms can threaten democracy: The fusion of agentic AI and LLMs marks a new frontier in information warfare","created":"2025-05-18","cited_by_count":20,"area":"agents"},{"id":"2409.04267","title":"An overview of domain-specific foundation model: key technologies, applications and challenges","created":"2024-09-06","cited_by_count":19,"area":null},{"id":"2411.10478","title":"Large Language Models for Constructing and Optimizing Machine Learning Workflows: A Survey","created":"2024-11-11","cited_by_count":19,"area":null},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2506.22521","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","created":"2025-06-26","cited_by_count":19,"area":null},{"id":"2402.14259","title":"Word-Sequence Entropy: Towards Uncertainty Estimation in Free-Form Medical Question Answering Applications and Beyond","created":"2024-02-22","cited_by_count":18,"area":null},{"id":"2405.15604","title":"Text Generation: A Systematic Literature Review of Tasks, Evaluation, and Challenges","created":"2024-05-24","cited_by_count":18,"area":null},{"id":"2505.14103","title":"AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Models","created":"2025-05-20","cited_by_count":18,"area":"safety"},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2504.16420","title":"A Survey of Foundation Model-Powered Recommender Systems: From Feature-Based, Generative to Agentic Paradigms","created":"2025-04-23","cited_by_count":17,"area":"agents"},{"id":"2510.19422","title":"LLM Unlearning with LLM Beliefs","created":"2025-10-22","cited_by_count":17,"area":"safety"},{"id":"2505.17568","title":"JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models","created":"2025-05-23","cited_by_count":16,"area":"safety"},{"id":"2506.07171","title":"RULE: Reinforcement UnLEarning Achieves Forget-Retain Pareto Optimality","created":"2025-06-08","cited_by_count":16,"area":"safety"},{"id":"2402.01909","title":"On Catastrophic Inheritance of Large Foundation Models","created":"2024-02-02","cited_by_count":15,"area":null},{"id":"2404.16891","title":"Attacks on Third-Party APIs of Large Language Models","created":"2024-04-24","cited_by_count":15,"area":null},{"id":"2407.05138","title":"Are LLMs Correctly Integrated into Software Systems?","created":"2024-07-06","cited_by_count":15,"area":"rag"},{"id":"2407.21523","title":"Tabular Data Augmentation for Machine Learning: Progress and Prospects of Embracing Generative AI","created":"2024-07-31","cited_by_count":15,"area":null},{"id":"2502.19980","title":"Can Textual Gradient Work in Federated Learning?","created":"2025-02-27","cited_by_count":15,"area":null},{"id":"2504.07137","title":"Large Language Model (LLM) for Software Security: Code Analysis, Malware Analysis, Reverse Engineering","created":"2025-04-07","cited_by_count":15,"area":null},{"id":"2507.06250","title":"We Urgently Need Privilege Management in MCP: A Measurement of API Usage in MCP Ecosystems","created":"2025-07-05","cited_by_count":15,"area":null},{"id":"2602.11327","title":"Security Threat Modeling for Emerging AI-Agent Protocols: A Comparative Analysis of MCP, A2A, Agora, and ANP","created":"2026-02-11","cited_by_count":15,"area":"agents"},{"id":"2312.17522","title":"Overview of the PromptCBLUE Shared Task in CHIP2023","created":"2023-12-29","cited_by_count":14,"area":null},{"id":"2403.15401","title":"Large Language Model for Mental Health: A Systematic Review","created":"2024-02-19","cited_by_count":14,"area":null},{"id":"2407.10886","title":"SLIP: Securing LLMs IP Using Weights Decomposition","created":"2024-07-15","cited_by_count":14,"area":null}],"next_cursor":"100"}