{"list":"other","total":142,"rows":[{"id":"2005.14165","title":"Language Models are Few-Shot Learners","created":"2020-05-28","cited_by_count":32419},{"id":"2303.08774","title":"GPT-4 Technical Report","created":"2023-03-15","cited_by_count":18396},{"id":"2203.02155","title":"Training language models to follow instructions with human feedback","created":"2022-03-04","cited_by_count":15971},{"id":"2307.09288","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","created":"2023-07-18","cited_by_count":13028},{"id":"2107.03374","title":"Evaluating Large Language Models Trained on Code","created":"2021-07-07","cited_by_count":8320},{"id":"2305.18290","title":"Direct Preference Optimization: Your Language Model is Secretly a Reward Model","created":"2023-05-29","cited_by_count":8065},{"id":"1312.6199","title":"Intriguing properties of neural networks","created":"2013-12-21","cited_by_count":5155},{"id":"2304.03442","title":"Generative Agents: Interactive Simulacra of Human Behavior","created":"2023-04-07","cited_by_count":3568},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"2307.15818","title":"RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Control","created":"2023-07-28","cited_by_count":3080},{"id":"2406.09246","title":"OpenVLA: An Open-Source Vision-Language-Action Model","created":"2024-06-13","cited_by_count":2887},{"id":"2305.16291","title":"Voyager: An Open-Ended Embodied Agent with Large Language Models","created":"2023-05-25","cited_by_count":2191},{"id":"2307.13854","title":"WebArena: A Realistic Web Environment for Building Autonomous Agents","created":"2023-07-25","cited_by_count":2006},{"id":"2308.08155","title":"AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversation","created":"2023-08-16","cited_by_count":1988},{"id":"1703.04730","title":"Understanding Black-box Predictions via Influence Functions","created":"2017-03-14","cited_by_count":1741},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443},{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429},{"id":"2411.15594","title":"A Survey on LLM-as-a-Judge","created":"2024-11-23","cited_by_count":1423},{"id":"2406.12045","title":"$\\tau$-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domains","created":"2024-06-17","cited_by_count":1402},{"id":"2501.19393","title":"s1: Simple test-time scaling","created":"2025-01-31","cited_by_count":1341},{"id":"1802.00420","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","created":"2018-02-01","cited_by_count":1268},{"id":"2308.03688","title":"AgentBench: Evaluating LLMs as Agents","created":"2023-08-07","cited_by_count":1267},{"id":"2207.01206","title":"WebShop: Towards Scalable Real-World Web Interaction with Grounded Language Agents","created":"2022-07-04","cited_by_count":1251},{"id":"2306.06070","title":"Mind2Web: Towards a Generalist Agent for the Web","created":"2023-06-09","cited_by_count":1242},{"id":"2312.06674","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","created":"2023-12-07","cited_by_count":1207},{"id":"2404.07972","title":"OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments","created":"2024-04-11","cited_by_count":1195},{"id":"2211.09527","title":"Ignore Previous Prompt: Attack Techniques For Language Models","created":"2022-11-17","cited_by_count":832},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651},{"id":"2307.06435","title":"A Comprehensive Overview of Large Language Models","created":"2023-07-12","cited_by_count":648},{"id":"2302.11382","title":"A Prompt Pattern Catalog to Enhance Prompt Engineering with ChatGPT","created":"2023-02-21","cited_by_count":619},{"id":"2503.13657","title":"Why Do Multi-Agent LLM Systems Fail?","created":"2025-03-17","cited_by_count":604},{"id":"2305.03726","title":"Otter: A Multi-Modal Model with In-Context Instruction Tuning","created":"2023-05-05","cited_by_count":550},{"id":"1705.07263","title":"Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods","created":"2017-05-20","cited_by_count":546},{"id":"2404.01318","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","created":"2024-03-28","cited_by_count":536},{"id":"2404.13208","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","created":"2024-04-19","cited_by_count":493},{"id":"2405.14573","title":"AndroidWorld: A Dynamic Benchmarking Environment for Autonomous Agents","created":"2024-05-23","cited_by_count":468},{"id":"2308.14132","title":"Detecting Language Model Attacks with Perplexity","created":"2023-08-27","cited_by_count":431},{"id":"2402.06363","title":"StruQ: Defending Against Prompt Injection with Structured Queries","created":"2024-02-09","cited_by_count":375},{"id":"2310.12815","title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses","created":"2023-10-19","cited_by_count":364},{"id":"2406.04313","title":"Improving Alignment and Robustness with Circuit Breakers","created":"2024-06-06","cited_by_count":322},{"id":"2310.02170","title":"A Dynamic LLM-Powered Agent Network for Task-Oriented Agent Collaboration","created":"2023-10-03","cited_by_count":290},{"id":"2404.02060","title":"Long-context LLMs Struggle with Long In-context Learning","created":"2024-04-02","cited_by_count":286},{"id":"1802.08802","title":"Reinforcement Learning on Web Interfaces Using Workflow-Guided Exploration","created":"2018-02-24","cited_by_count":284},{"id":"2007.08432","title":"Data Poisoning Attacks Against Federated Learning Systems","created":"2020-07-16","cited_by_count":275},{"id":"1904.08653","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","created":"2019-04-18","cited_by_count":268},{"id":"2403.14720","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","created":"2024-03-20","cited_by_count":267},{"id":"2312.14197","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","created":"2023-12-21","cited_by_count":264},{"id":"2410.10934","title":"Agent-as-a-Judge: Evaluate Agents with Agents","created":"2024-10-14","cited_by_count":238},{"id":"2407.01502","title":"AI Agents That Matter","created":"2024-07-01","cited_by_count":219},{"id":"2309.17288","title":"AutoAgents: A Framework for Automatic Agent Generation","created":"2023-09-29","cited_by_count":216},{"id":"2410.05451","title":"SecAlign: Defending Against Prompt Injection with Preference Optimization","created":"2024-10-07","cited_by_count":210},{"id":"2205.12628","title":"Are Large Pre-Trained Language Models Leaking Your Personal Information?","created":"2022-05-25","cited_by_count":200},{"id":"2409.00138","title":"PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Action","created":"2024-08-29","cited_by_count":171},{"id":"2412.05467","title":"The BrowserGym Ecosystem for Web Agent Research","created":"2024-12-06","cited_by_count":161},{"id":"2305.11854","title":"Multimodal Web Navigation with Instruction-Finetuned Foundation Models","created":"2023-05-19","cited_by_count":160},{"id":"2310.19156","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","created":"2023-10-29","cited_by_count":159},{"id":"2407.15711","title":"AssistantBench: Can Web Agents Solve Realistic and Time-Consuming Tasks?","created":"2024-07-22","cited_by_count":158},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157},{"id":"2507.21504","title":"Evaluation and Benchmarking of LLM Agents: A Survey","created":"2025-07-29","cited_by_count":152},{"id":"2504.11358","title":"DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks","created":"2025-04-15","cited_by_count":143},{"id":"2302.10329","title":"Harms from Increasingly Agentic Algorithmic Systems","created":"2023-02-20","cited_by_count":135},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126},{"id":"2307.10490","title":"Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs","created":"2023-07-19","cited_by_count":124},{"id":"2108.00352","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning","created":"2021-08-01","cited_by_count":123},{"id":"2403.04957","title":"Automatic and Universal Prompt Injection Attacks against Large Language Models","created":"2024-03-07","cited_by_count":119},{"id":"2404.02831","title":"Empowering Biomedical Discovery with AI Agents","created":"2024-04-03","cited_by_count":118},{"id":"2410.13825","title":"AgentOccam: A Simple Yet Strong Baseline for LLM-Based Web Agents","created":"2024-10-17","cited_by_count":114},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111},{"id":"1811.12641","title":"Transferable Adversarial Attacks for Image and Video Object Detection","created":"2018-11-30","cited_by_count":109},{"id":"2504.08942","title":"AgentRewardBench: Evaluating Automatic Evaluations of Web Agent Trajectories","created":"2025-04-11","cited_by_count":108},{"id":"2312.17673","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","created":"2023-12-29","cited_by_count":106},{"id":"2408.09559","title":"HiAgent: Hierarchical Working Memory Management for Solving Long-Horizon Agent Tasks with Large Language Model","created":"2024-08-18","cited_by_count":106},{"id":"2408.00989","title":"On the Resilience of LLM-Based Multi-Agent Collaboration with Faulty Agents","created":"2024-08-02","cited_by_count":99},{"id":"2411.00348","title":"Attention Tracker: Detecting Prompt Injection Attacks in LLMs","created":"2024-11-01","cited_by_count":95},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90},{"id":"2003.12613","title":"Adaptive Reward-Poisoning Attacks against Reinforcement Learning","created":"2020-03-27","cited_by_count":86},{"id":"2402.18649","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","created":"2024-02-28","cited_by_count":77},{"id":"2407.08713","title":"GTA: A Benchmark for General Tool Agents","created":"2024-07-11","cited_by_count":77},{"id":"2503.08979","title":"Agentic AI for Scientific Discovery: A Survey of Progress, Challenges, and Future Directions","created":"2025-03-12","cited_by_count":77},{"id":"2405.16640","title":"A Survey of Multimodal Large Language Model from A Data-centric Perspective","created":"2024-05-26","cited_by_count":75},{"id":"2410.03439","title":"ToolGen: Unified Tool Retrieval and Calling via Generation","created":"2024-10-04","cited_by_count":74},{"id":"2406.00799","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","created":"2024-06-02","cited_by_count":72},{"id":"2505.02077","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","created":"2025-05-04","cited_by_count":71},{"id":"2306.00245","title":"From Pixels to UI Actions: Learning to Follow Instructions via Graphical User Interfaces","created":"2023-05-31","cited_by_count":68},{"id":"2311.16119","title":"Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition","created":"2023-10-24","cited_by_count":68},{"id":"1907.05418","title":"Adversarial Objects Against LiDAR-Based Autonomous Driving Systems","created":"2019-07-11","cited_by_count":63},{"id":"2403.02817","title":"Here Comes The AI Worm: Unleashing Zero-click Worms that Target GenAI-Powered Applications","created":"2024-03-05","cited_by_count":59},{"id":"1904.05181","title":"Black-box Adversarial Attacks on Video Recognition Models","created":"2019-04-10","cited_by_count":58},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58},{"id":"2308.01990","title":"From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?","created":"2023-08-03","cited_by_count":55},{"id":"2401.07612","title":"Signed-Prompt: A New Approach to Prevent Prompt Injection Attacks Against LLM-Integrated Applications","created":"2024-01-15","cited_by_count":54},{"id":"2403.03031","title":"Learning to Use Tools via Cooperative and Interactive Agents","created":"2024-03-05","cited_by_count":54},{"id":"2502.16580","title":"Can Indirect Prompt Injection Attacks Be Detected and Removed?","created":"2025-02-23","cited_by_count":52},{"id":"2309.10254","title":"LLM Platform Security: Applying a Systematic Evaluation Framework to OpenAI's ChatGPT Plugins","created":"2023-09-19","cited_by_count":51},{"id":"2406.12934","title":"Current state of LLM Risks and AI Guardrails","created":"2024-06-16","cited_by_count":46},{"id":"2502.02649","title":"Fully Autonomous AI Agents Should Not be Developed","created":"2025-02-04","cited_by_count":45},{"id":"2407.05557","title":"$R^2$-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning","created":"2024-07-08","cited_by_count":43},{"id":"2502.15806","title":"A Mousetrap: Fooling Large Reasoning Models for Jailbreak with Chain of Iterative Chaos","created":"2025-02-19","cited_by_count":43},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40},{"id":"2311.00889","title":"SALLM: Security Assessment of Generated Code","created":"2023-11-01","cited_by_count":39}],"next_cursor":"100"}