{"list":"other","total":74,"rows":[{"id":"2203.02155","title":"Training language models to follow instructions with human feedback","created":"2022-03-04","cited_by_count":15971},{"id":"2407.21783","title":"The Llama 3 Herd of Models","created":"2024-07-31","cited_by_count":14715},{"id":"2106.09685","title":"LoRA: Low-Rank Adaptation of Large Language Models","created":"2021-06-17","cited_by_count":14380},{"id":"2505.09388","title":"Qwen3 Technical Report","created":"2025-05-14","cited_by_count":8820},{"id":"2305.18290","title":"Direct Preference Optimization: Your Language Model is Secretly a Reward Model","created":"2023-05-29","cited_by_count":8065},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"2212.08073","title":"Constitutional AI: Harmlessness from AI Feedback","created":"2022-12-15","cited_by_count":3050},{"id":"2308.06721","title":"IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Models","created":"2023-08-13","cited_by_count":1464},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443},{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420},{"id":"2310.01405","title":"Representation Engineering: A Top-Down Approach to AI Transparency","created":"2023-10-02","cited_by_count":1336},{"id":"2312.06674","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","created":"2023-12-07","cited_by_count":1207},{"id":"2310.03693","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","created":"2023-10-05","cited_by_count":1154},{"id":"1901.08971","title":"FaceForensics++: Learning to Detect Manipulated Facial Images","created":"2019-01-25","cited_by_count":1101},{"id":"2210.10760","title":"Scaling Laws for Reward Model Overoptimization","created":"2022-10-19","cited_by_count":1095},{"id":"2406.11717","title":"Refusal in Language Models Is Mediated by a Single Direction","created":"2024-06-17","cited_by_count":1032},{"id":"2405.14734","title":"SimPO: Simple Preference Optimization with a Reference-Free Reward","created":"2024-05-23","cited_by_count":963},{"id":"2211.09527","title":"Ignore Previous Prompt: Attack Techniques For Language Models","created":"2022-11-17","cited_by_count":832},{"id":"2310.04451","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","created":"2023-10-03","cited_by_count":785},{"id":"2301.02111","title":"Neural Codec Language Models are Zero-Shot Text to Speech Synthesizers","created":"2023-01-05","cited_by_count":752},{"id":"2301.11305","title":"DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvature","created":"2023-01-26","cited_by_count":726},{"id":"2301.10226","title":"A Watermark for Large Language Models","created":"2023-01-24","cited_by_count":725},{"id":"2404.01318","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","created":"2024-03-28","cited_by_count":536},{"id":"2308.01263","title":"XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Models","created":"2023-08-02","cited_by_count":505},{"id":"2404.13208","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","created":"2024-04-19","cited_by_count":493},{"id":"2302.10174","title":"Towards Universal Fake Image Detectors that Generalize Across Generative Models","created":"2023-02-20","cited_by_count":490},{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489},{"id":"2311.17035","title":"Scalable Extraction of Training Data from (Production) Language Models","created":"2023-11-28","cited_by_count":434},{"id":"2308.06463","title":"GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher","created":"2023-08-12","cited_by_count":423},{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398},{"id":"2404.01833","title":"Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack","created":"2024-04-02","cited_by_count":390},{"id":"2303.11156","title":"Can AI-Generated Text be Reliably Detected?","created":"2023-03-17","cited_by_count":386},{"id":"2402.10260","title":"A StrongREJECT for Empty Jailbreaks","created":"2024-02-15","cited_by_count":385},{"id":"2406.04313","title":"Improving Alignment and Robustness with Circuit Breakers","created":"2024-06-06","cited_by_count":322},{"id":"2306.08571","title":"GenImage: A Million-Scale Benchmark for Detecting AI-Generated Image","created":"2023-06-14","cited_by_count":321},{"id":"2310.02446","title":"Low-Resource Languages Jailbreak GPT-4","created":"2023-10-03","cited_by_count":309},{"id":"2303.15435","title":"The Stable Signature: Rooting Watermarks in Latent Diffusion Models","created":"2023-03-27","cited_by_count":304},{"id":"2310.02949","title":"Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models","created":"2023-10-04","cited_by_count":297},{"id":"2302.10149","title":"Poisoning Web-Scale Training Datasets is Practical","created":"2023-02-20","cited_by_count":290},{"id":"1904.05343","title":"StegaStamp: Invisible Hyperlinks in Physical Photographs","created":"2019-04-10","cited_by_count":265},{"id":"2312.14197","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","created":"2023-12-21","cited_by_count":264},{"id":"2401.12070","title":"Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Text","created":"2024-01-22","cited_by_count":263},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216},{"id":"2307.03838","title":"RADAR: Robust AI-Text Detection via Adversarial Learning","created":"2023-07-07","cited_by_count":190},{"id":"2305.20030","title":"Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust","created":"2023-05-31","cited_by_count":187},{"id":"2405.07940","title":"RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectors","created":"2024-05-13","cited_by_count":163},{"id":"2311.14455","title":"Universal Jailbreak Backdoors from Poisoned Human Feedback","created":"2023-11-24","cited_by_count":128},{"id":"2401.17879","title":"AEROBLADE: Training-Free Detection of Latent Diffusion Images Using Autoencoder Reconstruction Error","created":"2024-01-31","cited_by_count":125},{"id":"2503.00555","title":"Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable","created":"2025-03-01","cited_by_count":122},{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110},{"id":"2405.19707","title":"DeMamba: AI-Generated Video Detection on Million-Scale GenVideo Benchmark","created":"2024-05-30","cited_by_count":92},{"id":"2212.06470","title":"Position: Considerations for Differentially Private Learning with Large-Scale Public Pretraining","created":"2022-12-13","cited_by_count":88},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87},{"id":"2403.06833","title":"Can LLMs Separate Instructions From Data? And What Do We Even Mean By That?","created":"2024-03-11","cited_by_count":81},{"id":"2301.11924","title":"AI model GPT-3 (dis)informs us better than humans","created":"2023-01-23","cited_by_count":78},{"id":"2403.17881","title":"Deepfake Generation and Detection: A Benchmark and Survey","created":"2024-03-26","cited_by_count":67},{"id":"2403.11322","title":"StateFlow: Enhancing LLM Task-Solving through State-Driven Workflows","created":"2024-03-17","cited_by_count":65},{"id":"2305.06972","title":"Spear Phishing With Large Language Models","created":"2023-05-11","cited_by_count":52},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50},{"id":"2503.02857","title":"Deepfake-Eval-2024: A Multi-Modal In-the-Wild Benchmark of Deepfakes Circulated in 2024","created":"2025-03-04","cited_by_count":45},{"id":"2410.23623","title":"On Learning Multi-Modal Forgery Representation for Diffusion Generated Video Detection","created":"2024-10-31","cited_by_count":40},{"id":"2503.05731","title":"AILuminate: Introducing v1.0 of the AI Risk and Reliability Benchmark from MLCommons","created":"2025-02-19","cited_by_count":35},{"id":"2501.14195","title":"VideoShield: Regulating Diffusion-based Video Generation Models via Watermarking","created":"2025-01-24","cited_by_count":34},{"id":"2507.00583","title":"AI-Generated Video Detection via Perceptual Straightening","created":"2025-07-01","cited_by_count":34},{"id":"2509.10540","title":"EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System","created":"2025-09-06","cited_by_count":29},{"id":"2109.00535","title":"ASVspoof 2021: Automatic Speaker Verification Spoofing and Countermeasures Challenge Evaluation Plan","created":"2021-09-01","cited_by_count":20},{"id":"2505.05190","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","created":"2025-05-08","cited_by_count":18},{"id":"2505.14103","title":"AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Models","created":"2025-05-20","cited_by_count":18},{"id":"2602.13042","title":"GPTZero: Robust Detection of LLM-Generated Texts","created":"2026-02-13","cited_by_count":11},{"id":"2507.02956","title":"A Representation Engineering Perspective on the Effectiveness of Multi-Turn Jailbreaks","created":"2025-06-29","cited_by_count":10},{"id":"2507.18640","title":"How good are humans at detecting AI-generated images? Learnings from an experiment","created":"2025-05-12","cited_by_count":7},{"id":"2508.15182","title":"SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks","created":"2025-08-21","cited_by_count":4},{"id":"2602.15364","title":"MarkSweep: A No-box Removal Attack on AI-Generated Image Watermarking via Noise Intensification and Frequency-aware Denoising","created":"2026-02-17","cited_by_count":4},{"id":"2507.03636","title":"SecureT2I: No More Unauthorized Manipulation on AI Generated Images from Prompts","created":"2025-07-04","cited_by_count":1}],"next_cursor":null}