{"total":20,"rows":[{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2410.04332","title":"Gradient Routing: Masking Gradients to Localize Computation in Neural Networks","created":"2024-10-06","cited_by_count":34,"area":null},{"id":"2412.06370","title":"Exploring Memorization and Copyright Violation in Frontier LLMs: A Study of the New York Times v. OpenAI 2023 Lawsuit","created":"2024-12-09","cited_by_count":18,"area":null},{"id":"2502.02260","title":"Position: Adversarial ML for LLMs Is Not Making Any Progress","created":"2025-02-04","cited_by_count":15,"area":null},{"id":"2601.21571","title":"Shaping capabilities with token-level data filtering","created":"2026-01-29","cited_by_count":13,"area":null},{"id":"2501.11739","title":"Episodic memory in AI agents poses risks that should be studied and mitigated","created":"2025-01-20","cited_by_count":11,"area":null},{"id":"2505.22586","title":"Precise In-Parameter Concept Erasure in Large Language Models","created":"2025-05-28","cited_by_count":11,"area":null},{"id":"2508.09853","title":"STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reports","created":"2025-08-13","cited_by_count":10,"area":null},{"id":"2410.06704","title":"PII-Scope: A Comprehensive Study on Training Data PII Extraction Attacks in LLMs","created":"2024-10-09","cited_by_count":7,"area":null},{"id":"2412.06619","title":"Copyright-Protected Language Generation via Adaptive Model Fusion","created":"2024-12-09","cited_by_count":7,"area":null},{"id":"2607.08077","title":"Modular Pretraining Enables Access Control","created":"2026-07-09","cited_by_count":3,"area":null},{"id":"2605.06901","title":"Reflections and New Directions for Human-Centered Large Language Models","created":"2026-05-07","cited_by_count":2,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2606.30788","title":"Revocable Learned State via Process Sidecars","created":"2026-06-29","cited_by_count":0,"area":null},{"id":"2608.27782","title":"Memorization Is Not Extraction: Tight Differential-Privacy Bounds and Audit Blind Spots","created":"2026-08-27","cited_by_count":0,"area":null},{"id":"2609.22153","title":"SafeTune: A Unified Faithful Library for Auditing and Repairing Safety Drift in Fine-Tuned LLMs","created":"2026-08-26","cited_by_count":0,"area":null},{"id":"2610.04316","title":"From Latent Space to Jacobian Space: Measuring, Evading, and Training Against Safety-Content Accessibility","created":"2026-10-03","cited_by_count":0,"area":null},{"id":"2610.09004","title":"Removing Information Content Does Not Certify Tamper Resistance in Open-Weight Models","created":"2026-10-06","cited_by_count":0,"area":null},{"id":"2610.18098","title":"From Spectral Saliency to Finite Deletion: Evaluating Selective Language Model Edits","created":"2026-10-13","cited_by_count":0,"area":null}],"next_cursor":null}