{"total":119,"rows":[{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2402.18540","title":"Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templates","created":"2024-02-28","cited_by_count":96,"area":null},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2403.06833","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","created":"2024-03-11","cited_by_count":81,"area":null},{"id":"2407.17436","title":"AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies","created":"2024-07-11","cited_by_count":74,"area":null},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2412.01708","title":"Are We There Yet? Revealing the Risks of Utilizing Large Language Models in Scholarly Peer Review","created":"2024-12-02","cited_by_count":53,"area":null},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2403.08946","title":"Usable XAI: 10 Strategies Towards Exploiting Explainability in the LLM Era","created":"2024-03-13","cited_by_count":46,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2505.14590","title":"MCIP: Protecting MCP Safety via Model Contextual Integrity Protocol","created":"2025-05-20","cited_by_count":34,"area":null},{"id":"2502.15851","title":"Control Illusion: The Failure of Instruction Hierarchies in Large Language Models","created":"2025-02-21","cited_by_count":33,"area":null},{"id":"2511.01805","title":"Accumulating Context Changes the Beliefs of Language Models","created":"2025-11-03","cited_by_count":28,"area":null},{"id":"2502.12964","title":"Trust Me, I'm Wrong: LLMs Hallucinate with Certainty Despite Knowing the Answer","created":"2025-02-18","cited_by_count":27,"area":null},{"id":"2503.01829","title":"Persuade Me if You Can: A Framework for Evaluating Persuasion Effectiveness and Susceptibility Among Large Language Models","created":"2025-03-03","cited_by_count":27,"area":null},{"id":"2407.21075","title":"Apple Intelligence Foundation Language Models","created":"2024-07-29","cited_by_count":24,"area":null},{"id":"2504.10430","title":"LLM Can be a Dangerous Persuader: Empirical Study of Persuasion Safety in Large Language Models","created":"2025-04-14","cited_by_count":23,"area":null},{"id":"2405.05248","title":"LLMs with Personalities in Multi-issue Negotiation Games","created":"2024-05-08","cited_by_count":22,"area":null},{"id":"2406.17675","title":"Evaluating Large Language Models with Psychometrics","created":"2024-06-25","cited_by_count":22,"area":null},{"id":"2405.06800","title":"LLM-Generated Black-box Explanations Can Be Adversarially Helpful","created":"2024-05-10","cited_by_count":21,"area":null},{"id":"2410.14596","title":"Teaching Models to Balance Resisting and Accepting Persuasion","created":"2024-10-18","cited_by_count":19,"area":null},{"id":"2510.15501","title":"DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarios","created":"2025-10-17","cited_by_count":19,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2502.21017","title":"PersuasiveToM: A Benchmark for Evaluating Machine Theory of Mind in Persuasive Dialogues","created":"2025-02-28","cited_by_count":17,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2410.22071","title":"Distinguishing Ignorance from Error in LLM Hallucinations","created":"2024-10-29","cited_by_count":14,"area":null},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2504.09865","title":"Labeling Messages as AI-Generated Does Not Reduce Their Persuasive Effects","created":"2025-04-14","cited_by_count":13,"area":null},{"id":"2505.07775","title":"Must Read: A Comprehensive Survey of Computational Persuasion","created":"2025-05-12","cited_by_count":13,"area":null},{"id":"2508.17450","title":"Persuasion Dynamics in LLMs: Investigating Robustness and Adaptability in Knowledge and Safety with DuET-PD","created":"2025-08-24","cited_by_count":13,"area":null},{"id":"2404.17120","title":"Talking Nonsense: Probing Large Language Models' Understanding of Adversarial Gibberish Inputs","created":"2024-04-26","cited_by_count":11,"area":null},{"id":"2411.11731","title":"Moral Persuasion in Large Language Models: Evaluating Susceptibility and Ethical Alignment","created":"2024-11-18","cited_by_count":10,"area":null},{"id":"2502.02904","title":"ScholaWrite: A Dataset of End-to-End Scholarly Writing Process","created":"2025-02-05","cited_by_count":9,"area":null},{"id":"2505.12692","title":"Bullying the Machine: How Personas Increase LLM Vulnerability","created":"2025-05-19","cited_by_count":9,"area":null},{"id":"2508.07805","title":"Can You Trick the Grader? Adversarial Persuasion of LLM Judges","created":"2025-08-11","cited_by_count":9,"area":null},{"id":"2402.09546","title":"How Secure Are Large Language Models (LLMs) for Navigation in Urban Environments?","created":"2024-02-14","cited_by_count":8,"area":null},{"id":"2405.15202","title":"Cross-Task Defense: Instruction-Tuning LLMs for Content Safety","created":"2024-05-24","cited_by_count":8,"area":null},{"id":"2407.02518","title":"INDICT: Code Generation with Internal Dialogues of Critiques for Both Security and Helpfulness","created":"2024-06-23","cited_by_count":8,"area":null},{"id":"2510.19687","title":"Are Large Language Models Sensitive to the Motives Behind Communication?","created":"2025-10-22","cited_by_count":8,"area":null},{"id":"2601.23255","title":"Now You Hear Me: Audio Narrative Attacks Against Large Audio-Language Models","created":"2026-01-30","cited_by_count":8,"area":null},{"id":"2409.14399","title":"Beyond Persuasion: Towards Conversational Recommender System with Credible Explanations","created":"2024-09-22","cited_by_count":7,"area":null},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2604.18660","title":"Evaluating Answer Leakage Robustness of LLM Tutors against Adversarial Student Attacks","created":"2026-04-20","cited_by_count":7,"area":null},{"id":"2402.07350","title":"Antagonistic AI","created":"2024-02-12","cited_by_count":6,"area":null},{"id":"2406.14023","title":"Evaluating Implicit Bias in Large Language Models by Attacking From a Psychometric Perspective","created":"2024-06-20","cited_by_count":6,"area":null},{"id":"2410.06415","title":"Biased AI can Influence Political Decision-Making","created":"2024-10-08","cited_by_count":6,"area":null},{"id":"2505.00003","title":"A Review of Incorporating Psychological Theories in LLMs","created":"2025-03-28","cited_by_count":6,"area":null},{"id":"2510.24222","title":"HACK: Hallucinations Along Certainty and Knowledge Axes","created":"2025-10-28","cited_by_count":6,"area":null},{"id":"2601.13384","title":"From Completion to Editing: Unlocking Context-Aware Code Infilling via Search-and-Replace Instruction Tuning","created":"2026-01-19","cited_by_count":6,"area":null},{"id":"2412.10426","title":"CAP: Evaluation of Persuasive and Creative Image Generation","created":"2024-12-10","cited_by_count":5,"area":null},{"id":"2510.11238","title":"Attacks by Content: Automated Fact-checking is an AI Security Issue","created":"2025-10-13","cited_by_count":4,"area":null},{"id":"2512.23701","title":"Eliciting Behaviors in Multi-Turn Conversations","created":"2025-12-29","cited_by_count":4,"area":null},{"id":"2602.21223","title":"Measuring Pragmatic Influence in Large Language Model Instructions","created":"2026-02-02","cited_by_count":4,"area":null},{"id":"2406.02721","title":"Self-Control of LLM Behaviors by Compressing Suffix Gradient into Prefix Controller","created":"2024-06-04","cited_by_count":3,"area":null},{"id":"2502.09532","title":"Mind the Gap! Choice Independence in Using Multilingual LLMs for Persuasive Co-Writing Tasks in Different Languages","created":"2025-02-13","cited_by_count":3,"area":null},{"id":"2505.09341","title":"Access Controls Will Solve the Dual-Use Dilemma","created":"2025-05-14","cited_by_count":3,"area":null},{"id":"2510.02319","title":"Modeling the Attack: Detecting AI-Generated Text by Quantifying Adversarial Perturbations","created":"2025-09-22","cited_by_count":3,"area":null},{"id":"2510.13183","title":"DSCD: Large Language Model Detoxification with Self-Constrained Decoding","created":"2025-10-15","cited_by_count":3,"area":null},{"id":"2601.05478","title":"The Facade of Truth: Uncovering and Mitigating LLM Susceptibility to Deceptive Evidence","created":"2026-01-09","cited_by_count":3,"area":null},{"id":"2602.11528","title":"Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs","created":"2026-02-12","cited_by_count":3,"area":null},{"id":"2409.20385","title":"Wait, but Tylenol is Acetaminophen... Investigating and Improving Language Models' Ability to Resist Requests for Misinformation","created":"2024-09-30","cited_by_count":2,"area":null},{"id":"2410.13138","title":"Data Defenses Against Large Language Models","created":"2024-10-17","cited_by_count":2,"area":null},{"id":"2411.13779","title":"NewsInterview: a Dataset and a Playground to Evaluate LLMs' Ground Gap via Informational Interviews","created":"2024-11-21","cited_by_count":2,"area":null},{"id":"2412.07261","title":"MemHunter: Automated and Verifiable Memorization Detection at Dataset-scale in LLMs","created":"2024-12-10","cited_by_count":2,"area":null},{"id":"2501.01741","title":"How Toxic Can You Get? Search-based Toxicity Testing for Large Language Models","created":"2025-01-03","cited_by_count":2,"area":null},{"id":"2503.15551","title":"Efficient but Vulnerable: Benchmarking and Defending LLM Batch Prompting Attack","created":"2025-03-18","cited_by_count":2,"area":null},{"id":"2506.00061","title":"Unraveling SITT: Social Influence Technique Taxonomy and Detection with LLMs","created":"2025-05-29","cited_by_count":2,"area":null},{"id":"2508.15858","title":"Building and Measuring Trust between Large Language Models","created":"2025-08-20","cited_by_count":2,"area":null},{"id":"2510.02356","title":"Measuring Physical-World Privacy Awareness of Large Language Models: An Evaluation Benchmark","created":"2025-09-27","cited_by_count":2,"area":null},{"id":"2601.16314","title":"Machine-Assisted Grading of Nationwide School-Leaving Essay Exams with LLMs and Statistical NLP","created":"2026-01-22","cited_by_count":2,"area":null},{"id":"2602.04003","title":"When AI Persuades: Adversarial Explanation Attacks on Human Trust in AI-Assisted Decision Making","created":"2026-02-03","cited_by_count":2,"area":null},{"id":"2602.21262","title":"Under the Influence: Quantifying Persuasion and Vigilance in Large Language Models","created":"2026-02-24","cited_by_count":2,"area":null},{"id":"2605.06901","title":"Reflections and New Directions for Human-Centered Large Language Models","created":"2026-05-07","cited_by_count":2,"area":null},{"id":"2605.29427","title":"FinGuard: Detecting Financial Regulatory Non-Compliance in LLM Interactions","created":"2026-05-28","cited_by_count":2,"area":null},{"id":"2404.11782","title":"REQUAL-LM: Reliability and Equity through Aggregation in Large Language Models","created":"2024-04-17","cited_by_count":1,"area":null},{"id":"2408.01449","title":"AI Act for the Working Programmer","created":"2024-07-23","cited_by_count":1,"area":null},{"id":"2410.07962","title":"Towards Assurance of LLM Adversarial Robustness using Ontology-Driven Argumentation","created":"2024-10-10","cited_by_count":1,"area":null},{"id":"2410.21597","title":"Reducing the Scope of Language Models","created":"2024-10-28","cited_by_count":1,"area":null},{"id":"2410.21695","title":"CFSafety: Comprehensive Fine-grained Safety Assessment for LLMs","created":"2024-10-29","cited_by_count":1,"area":null},{"id":"2502.16366","title":"A Generative Approach to LLM Harmfulness Mitigation with Red Flag Tokens","created":"2025-02-22","cited_by_count":1,"area":null},{"id":"2505.11557","title":"AC-LoRA: (Almost) Training-Free Access Control-Aware Multi-Modal LLMs","created":"2025-05-15","cited_by_count":1,"area":null},{"id":"2509.00891","title":"ChatCLIDS: Simulating Persuasive AI Dialogues to Promote Closed-Loop Insulin Adoption in Type 1 Diabetes Care","created":"2025-08-31","cited_by_count":1,"area":null},{"id":"2509.04606","title":"Sample-efficient Integration of New Modalities into Large Language Models","created":"2025-09-04","cited_by_count":1,"area":null},{"id":"2601.13590","title":"Vulnerability of LLMs' Stated Beliefs? LLMs Belief Resistance Check Through Strategic Persuasive Conversation Interventions","created":"2026-01-20","cited_by_count":1,"area":null},{"id":"2601.14269","title":"The Slow Drift of Support: Boundary Failures in Multi-Turn Mental Health LLM Dialogues","created":"2026-01-02","cited_by_count":1,"area":null},{"id":"2601.16890","title":"LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systems","created":"2026-01-23","cited_by_count":1,"area":null},{"id":"2602.00851","title":"Persuasion Propagation: Does Persuasion Change AI Agent Behavior?","created":"2026-01-31","cited_by_count":1,"area":null},{"id":"2602.02557","title":"The Alignment Curse: Modality Alignment Supercharges Audio Attacks via Text Transfer","created":"2026-01-30","cited_by_count":1,"area":null},{"id":"2605.00445","title":"The Power of Order: Fooling LLMs with Adversarial Table Permutations","created":"2026-05-01","cited_by_count":1,"area":null},{"id":"2608.13482","title":"Synthetic Persona Pretraining: Alignment from Token Zero","created":"2026-08-13","cited_by_count":1,"area":null},{"id":"2608.23264","title":"Hidden in the Request: Explaining Unethical LLM Compliance through Token Relevance","created":"2026-08-24","cited_by_count":1,"area":null},{"id":"2404.04821","title":"A Data-to-Product Multimodal Conceptual Framework to Achieve Automated Software Evolution for Context-rich Intelligent Applications","created":"2024-04-07","cited_by_count":0,"area":null},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2506.00964","title":"ACCESS DENIED INC: The First Benchmark Environment for Sensitivity Awareness","created":"2025-06-01","cited_by_count":0,"area":null},{"id":"2507.02057","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2508.06087","title":"Adaptive Backtracking for Privacy Protection in Large Language Models","created":"2025-08-08","cited_by_count":0,"area":null}],"next_cursor":"100"}