{"list":"other","total":65,"rows":[{"id":"1706.03762","title":"Attention Is All You Need","created":"2017-06-12","cited_by_count":60361},{"id":"1810.04805","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","created":"2018-10-11","cited_by_count":40399},{"id":"2407.21783","title":"The Llama 3 Herd of Models","created":"2024-07-31","cited_by_count":14715},{"id":"1910.10683","title":"Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformer","created":"2019-10-23","cited_by_count":14599},{"id":"2501.12948","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","created":"2025-01-22","cited_by_count":6330},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"2308.11432","title":"A Survey on Large Language Model based Autonomous Agents","created":"2023-08-22","cited_by_count":2242},{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651},{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420},{"id":"2211.09527","title":"Ignore Previous Prompt: Attack Techniques For Language Models","created":"2022-11-17","cited_by_count":832},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651},{"id":"2307.06435","title":"A Comprehensive Overview of Large Language Models","created":"2023-07-12","cited_by_count":648},{"id":"2401.06373","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","created":"2024-01-12","cited_by_count":573},{"id":"2306.11644","title":"Textbooks Are All You Need","created":"2023-06-20","cited_by_count":569},{"id":"2309.10253","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","created":"2023-09-19","cited_by_count":560},{"id":"2404.01318","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","created":"2024-03-28","cited_by_count":536},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469},{"id":"2308.14132","title":"Detecting Language Model Attacks with Perplexity","created":"2023-08-27","cited_by_count":431},{"id":"2303.13408","title":"Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense","created":"2023-03-23","cited_by_count":429},{"id":"2304.13712","title":"Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyond","created":"2023-04-26","cited_by_count":411},{"id":"2303.11156","title":"Can AI-Generated Text be Reliably Detected?","created":"2023-03-17","cited_by_count":386},{"id":"2310.12815","title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses","created":"2023-10-19","cited_by_count":364},{"id":"2310.02446","title":"Low-Resource Languages Jailbreak GPT-4","created":"2023-10-03","cited_by_count":309},{"id":"1804.06059","title":"Adversarial Example Generation with Syntactically Controlled Paraphrase Networks","created":"2018-04-17","cited_by_count":286},{"id":"2305.15005","title":"Sentiment Analysis in the Era of Large Language Models: A Reality Check","created":"2023-05-24","cited_by_count":268},{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267},{"id":"2403.14720","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","created":"2024-03-20","cited_by_count":267},{"id":"2011.10369","title":"ONION: A Simple and Effective Defense Against Textual Backdoor Attacks","created":"2020-11-20","cited_by_count":263},{"id":"2310.06474","title":"Multilingual Jailbreak Challenges in Large Language Models","created":"2023-10-10","cited_by_count":240},{"id":"2306.09194","title":"Undetectable Watermarks for Language Models","created":"2023-05-25","cited_by_count":226},{"id":"2105.12400","title":"Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger","created":"2021-05-26","cited_by_count":222},{"id":"2311.03348","title":"Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation","created":"2023-11-06","cited_by_count":214},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157},{"id":"2403.17710","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","created":"2024-03-26","cited_by_count":143},{"id":"2407.11511","title":"Multi-Step Reasoning with Large Language Models, a Survey","created":"2024-07-16","cited_by_count":143},{"id":"2201.05273","title":"Pretrained Language Models for Text Generation: A Survey","created":"2022-01-14","cited_by_count":122},{"id":"2403.04957","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","created":"2024-03-07","cited_by_count":119},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107},{"id":"2403.13355","title":"BadEdit: Backdooring large language models by model editing","created":"2024-03-20","cited_by_count":96},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90},{"id":"1809.09310","title":"Scenic: A Language for Scenario Specification and Scene Generation","created":"2018-09-25","cited_by_count":83},{"id":"2401.12242","title":"BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models","created":"2024-01-20","cited_by_count":80},{"id":"2304.12298","title":"BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPT","created":"2023-02-21","cited_by_count":76},{"id":"2310.07676","title":"Composite Backdoor Attacks Against Large Language Models","created":"2023-10-11","cited_by_count":73},{"id":"2402.09091","title":"Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues","created":"2024-02-14","cited_by_count":68},{"id":"2502.11054","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-02-16","cited_by_count":64},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62},{"id":"2305.19713","title":"Red Teaming Language Model Detectors with Language Models","created":"2023-05-31","cited_by_count":55},{"id":"2401.05949","title":"Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning","created":"2024-01-11","cited_by_count":53},{"id":"2305.10847","title":"Large Language Models can be Guided to Evade AI-Generated Text Detection","created":"2023-05-18","cited_by_count":44},{"id":"2310.12439","title":"PoisonPrompt: Backdoor Attack on Prompt-based Large Language Models","created":"2023-10-19","cited_by_count":42},{"id":"2312.00374","title":"The Philosopher's Stone: Trojaning Plugins of Large Language Models","created":"2023-12-01","cited_by_count":37},{"id":"2406.06852","title":"A Survey of Recent Backdoor Attacks and Defenses in Large Language Models","created":"2024-06-10","cited_by_count":36},{"id":"2410.10760","title":"Denial-of-Service Poisoning Attacks against Large Language Models","created":"2024-10-14","cited_by_count":35},{"id":"2311.09641","title":"RLHFPoison: Reward Poisoning Attack for Reinforcement Learning with Human Feedback in Large Language Models","created":"2023-11-16","cited_by_count":32},{"id":"2306.06815","title":"TrojLLM: A Black-box Trojan Prompt Attack on Large Language Models","created":"2023-06-12","cited_by_count":31},{"id":"2403.14719","title":"Bypassing LLM Watermarks with Color-Aware Substitutions","created":"2024-03-19","cited_by_count":28},{"id":"2404.07234","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","created":"2024-04-06","cited_by_count":24},{"id":"2408.03515","title":"A Study on Prompt Injection Attack Against LLM-Integrated Mobile Robotic Systems","created":"2024-08-07","cited_by_count":15},{"id":"2404.02637","title":"Vocabulary Attack to Hijack Large Language Model Applications","created":"2024-04-03","cited_by_count":12},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9},{"id":"2411.01222","title":"$B^4$: A Black-Box Scrubbing Attack on LLM Watermarks","created":"2024-11-02","cited_by_count":7},{"id":"2410.02916","title":"LLM Safeguard is a Double-Edged Sword: Exploiting False Positives for Denial-of-Service Attacks","created":"2024-10-03","cited_by_count":6}],"next_cursor":null}