{"list":"other","total":63,"rows":[{"id":"2005.14165","title":"Language Models are Few-Shot Learners","created":"2020-05-28","cited_by_count":32419},{"id":"2303.08774","title":"GPT-4 Technical Report","created":"2023-03-15","cited_by_count":18396},{"id":"2307.09288","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","created":"2023-07-18","cited_by_count":13028},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651},{"id":"1606.06565","title":"Concrete Problems in AI Safety","created":"2016-06-21","cited_by_count":1642},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443},{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420},{"id":"2312.06674","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","created":"2023-12-07","cited_by_count":1207},{"id":"2211.09527","title":"Ignore Previous Prompt: Attack Techniques For Language Models","created":"2022-11-17","cited_by_count":832},{"id":"2301.10226","title":"A Watermark for Large Language Models","created":"2023-01-24","cited_by_count":725},{"id":"1908.07125","title":"Universal Adversarial Triggers for Attacking and Analyzing NLP","created":"2019-08-20","cited_by_count":722},{"id":"2307.13702","title":"Measuring Faithfulness in Chain-of-Thought Reasoning","created":"2023-07-17","cited_by_count":703},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672},{"id":"2310.12773","title":"Safe RLHF: Safe Reinforcement Learning from Human Feedback","created":"2023-10-19","cited_by_count":656},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651},{"id":"2401.05566","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","created":"2024-01-10","cited_by_count":529},{"id":"2404.13208","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","created":"2024-04-19","cited_by_count":493},{"id":"2312.02003","title":"A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly","created":"2023-12-04","cited_by_count":387},{"id":"2503.11926","title":"Monitoring Reasoning Models for Misbehavior and the Risks of Promoting Obfuscation","created":"2025-03-14","cited_by_count":384},{"id":"2310.12815","title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses","created":"2023-10-19","cited_by_count":364},{"id":"2412.16339","title":"Deliberative Alignment: Reasoning Enables Safer Language Models","created":"2024-12-20","cited_by_count":308},{"id":"2412.04984","title":"Frontier Models are Capable of In-context Scheming","created":"2024-12-06","cited_by_count":287},{"id":"2305.00944","title":"Poisoning Language Models During Instruction Tuning","created":"2023-05-01","cited_by_count":269},{"id":"2402.08787","title":"Rethinking Machine Unlearning for Large Language Models","created":"2024-02-13","cited_by_count":257},{"id":"2308.09662","title":"Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment","created":"2023-08-18","cited_by_count":223},{"id":"2503.18666","title":"AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agents","created":"2025-03-24","cited_by_count":223},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157},{"id":"2411.10414","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","created":"2024-11-15","cited_by_count":129},{"id":"2405.06823","title":"PLeak: Prompt Leaking Attacks against Large Language Model Applications","created":"2024-05-10","cited_by_count":127},{"id":"2502.14847","title":"Red-Teaming LLM Multi-Agent Systems via Communication Attacks","created":"2025-02-20","cited_by_count":122},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107},{"id":"2403.03792","title":"Neural Exec: Learning (and Learning from) Execution Triggers for Prompt Injection Attacks","created":"2024-03-06","cited_by_count":85},{"id":"2304.12298","title":"BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPT","created":"2023-02-21","cited_by_count":76},{"id":"2502.15657","title":"Superintelligent Agents Pose Catastrophic Risks: Can Scientist AI Offer a Safer Path?","created":"2025-02-21","cited_by_count":75},{"id":"2403.18349","title":"Rejection Improves Reliability: Training LLMs to Refuse Unknown Questions Using RL from Knowledge Feedback","created":"2024-03-27","cited_by_count":66},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65},{"id":"2403.02817","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","created":"2024-03-05","cited_by_count":59},{"id":"2410.08109","title":"A Closer Look at Machine Unlearning for Large Language Models","created":"2024-10-10","cited_by_count":56},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45},{"id":"2502.02649","title":"Fully Autonomous AI Agents Should Not be Developed","created":"2025-02-04","cited_by_count":45},{"id":"2407.16667","title":"RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agent","created":"2024-07-23","cited_by_count":44},{"id":"2503.15754","title":"AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integration","created":"2025-03-20","cited_by_count":43},{"id":"2312.00374","title":"The Philosopher's Stone: Trojaning Plugins of Large Language Models","created":"2023-12-01","cited_by_count":37},{"id":"2505.06311","title":"Defending against Indirect Prompt Injection by Instruction Detection","created":"2025-05-08","cited_by_count":32},{"id":"2410.22284","title":"Embedding-based classifiers can detect prompt injection attacks","created":"2024-10-29","cited_by_count":27},{"id":"2502.11355","title":"Nuclear Deployed: Analyzing Catastrophic Risks in Decision-making of Autonomous LLM Agents","created":"2025-02-17","cited_by_count":27},{"id":"2412.10321","title":"AdvPrefix: An Objective for Nuanced LLM Jailbreaks","created":"2024-12-13","cited_by_count":25},{"id":"2404.07234","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","created":"2024-04-06","cited_by_count":24},{"id":"2406.01964","title":"Measure-Observe-Remeasure: An Interactive Paradigm for Differentially-Private Exploratory Analysis","created":"2024-06-04","cited_by_count":24},{"id":"2412.13666","title":"Evaluation of LLM Vulnerabilities to Being Misused for Personalized Disinformation Generation","created":"2024-12-18","cited_by_count":20},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17},{"id":"2501.16513","title":"Deception in LLMs: Self-Preservation and Autonomous Goals in Large Language Models","created":"2025-01-27","cited_by_count":16},{"id":"2310.08535","title":"Formally Specifying the High-Level Behavior of LLM-Based Agents","created":"2023-10-12","cited_by_count":15},{"id":"2505.06493","title":"System Prompt Poisoning: Persistent Attacks on Large Language Models Beyond User Injection","created":"2025-05-10","cited_by_count":14},{"id":"2503.02174","title":"Adversarial Tokenization","created":"2025-03-04","cited_by_count":11},{"id":"2501.00055","title":"LLM-Virus: Evolutionary Jailbreak Attack on Large Language Models","created":"2024-12-28","cited_by_count":7},{"id":"2504.09841","title":"StruPhantom: Evolutionary Injection Attacks on Black-Box Tabular Agents Powered by Large Language Models","created":"2025-04-14","cited_by_count":6},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4},{"id":"2412.17614","title":"Emerging Security Challenges of Large Language Models","created":"2024-12-23","cited_by_count":2}],"next_cursor":null}