{"list":"other","total":68,"rows":[{"id":"2203.02155","title":"Training language models to follow instructions with human feedback","created":"2022-03-04","cited_by_count":15971},{"id":"2407.21783","title":"The Llama 3 Herd of Models","created":"2024-07-31","cited_by_count":14715},{"id":"2106.09685","title":"LoRA: Low-Rank Adaptation of Large Language Models","created":"2021-06-17","cited_by_count":14380},{"id":"2307.09288","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","created":"2023-07-18","cited_by_count":13028},{"id":"2505.09388","title":"Qwen3 Technical Report","created":"2025-05-14","cited_by_count":8820},{"id":"2210.03629","title":"ReAct: Synergizing Reasoning and Acting in Language Models","created":"2022-10-06","cited_by_count":8695},{"id":"1703.03400","title":"Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networks","created":"2017-03-09","cited_by_count":4897},{"id":"2307.15043","title":"Universal and Transferable Adversarial Attacks on Aligned Language Models","created":"2023-07-27","cited_by_count":3104},{"id":"2009.01325","title":"Learning to summarize from human feedback","created":"2020-09-02","cited_by_count":2588},{"id":"1509.01626","title":"Character-level Convolutional Networks for Text Classification","created":"2015-09-04","cited_by_count":2330},{"id":"2211.05100","title":"BLOOM: A 176B-Parameter Open-Access Multilingual Language Model","created":"2022-11-09","cited_by_count":1984},{"id":"1708.06733","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","created":"2017-08-22","cited_by_count":1106},{"id":"2403.08295","title":"Gemma: Open Models Based on Gemini Research and Technology","created":"2024-03-13","cited_by_count":916},{"id":"2112.03570","title":"Membership Inference Attacks From First Principles","created":"2021-12-07","cited_by_count":878},{"id":"2104.08773","title":"Cross-Task Generalization via Natural Language Crowdsourcing Instructions","created":"2021-04-18","cited_by_count":699},{"id":"2403.07691","title":"ORPO: Monolithic Preference Optimization without Reference Model","created":"2024-03-12","cited_by_count":562},{"id":"2401.05566","title":"Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training","created":"2024-01-10","cited_by_count":529},{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489},{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486},{"id":"2007.08745","title":"Backdoor Learning: A Survey","created":"2020-07-17","cited_by_count":426},{"id":"2309.07875","title":"Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructions","created":"2023-09-14","cited_by_count":387},{"id":"2004.06660","title":"Weight Poisoning Attacks on Pre-trained Models","created":"2020-04-14","cited_by_count":341},{"id":"2310.02949","title":"Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models","created":"2023-10-04","cited_by_count":297},{"id":"2202.01279","title":"PromptSource: An Integrated Development Environment and Repository for Natural Language Prompts","created":"2022-02-02","cited_by_count":289},{"id":"2305.00944","title":"Poisoning Language Models During Instruction Tuning","created":"2023-05-01","cited_by_count":269},{"id":"2006.01043","title":"BadNL: Backdoor Attacks against NLP Models with Semantic-preserving Improvements","created":"2020-06-01","cited_by_count":211},{"id":"2012.10544","title":"Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses","created":"2020-12-18","cited_by_count":180},{"id":"2311.05553","title":"Removing RLHF Protections in GPT-4 via Fine-Tuning","created":"2023-11-09","cited_by_count":171},{"id":"2402.02207","title":"Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Models","created":"2024-02-03","cited_by_count":167},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157},{"id":"2402.11208","title":"Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents","created":"2024-02-17","cited_by_count":137},{"id":"2311.14455","title":"Universal Jailbreak Backdoors from Poisoned Human Feedback","created":"2023-11-24","cited_by_count":128},{"id":"2405.16833","title":"Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Models","created":"2024-05-27","cited_by_count":125},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116},{"id":"2311.12786","title":"Mechanistically analyzing the effects of fine-tuning on procedurally defined tasks","created":"2023-11-21","cited_by_count":115},{"id":"2402.01109","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","created":"2024-02-02","cited_by_count":115},{"id":"2406.03007","title":"BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents","created":"2024-06-05","cited_by_count":115},{"id":"2108.13888","title":"Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning","created":"2021-08-31","cited_by_count":113},{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110},{"id":"2204.00032","title":"Truth Serum: Poisoning Machine Learning Models to Reveal Their Secrets","created":"2022-03-31","cited_by_count":101},{"id":"2310.14799","title":"Cross-lingual Prompting: Improving Zero-shot Chain-of-Thought Reasoning across Languages","created":"2023-10-23","cited_by_count":97},{"id":"2403.13355","title":"BadEdit: Backdooring large language models by model editing","created":"2024-03-20","cited_by_count":96},{"id":"2409.01586","title":"Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation","created":"2024-09-03","cited_by_count":92},{"id":"2406.20053","title":"Covert Malicious Finetuning: Challenges in Safeguarding LLM Adaptation","created":"2024-06-28","cited_by_count":80},{"id":"2405.18137","title":"Exploiting LLM Quantization","created":"2024-05-28","cited_by_count":65},{"id":"2410.07471","title":"SEAL: Safety-enhanced Aligned LLM Fine-tuning via Bilevel Data Selection","created":"2024-10-09","cited_by_count":64},{"id":"2402.12329","title":"Query-Based Adversarial Prompt Generation","created":"2024-02-19","cited_by_count":62},{"id":"2410.02907","title":"NNetNav: Unsupervised Learning of Browser Agents Through Environment Interaction in the Wild","created":"2024-10-03","cited_by_count":59},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50},{"id":"2408.12798","title":"BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models","created":"2024-08-23","cited_by_count":50},{"id":"2412.12497","title":"NLSR: Neuron-Level Safety Realignment of Large Language Models Against Harmful Fine-Tuning","created":"2024-12-17","cited_by_count":37},{"id":"2402.16382","title":"Immunization against harmful fine-tuning attacks","created":"2024-02-26","cited_by_count":35},{"id":"2411.17453","title":"PEFTGuard: Detecting Backdoor Attacks Against Parameter-Efficient Fine-Tuning","created":"2024-11-26","cited_by_count":26},{"id":"2403.00108","title":"LoRATK: LoRA Once, Backdoor Everywhere in the Share-and-Play Ecosystem","created":"2024-02-29","cited_by_count":24},{"id":"2506.16447","title":"Probe before You Talk: Towards Black-box Defense against Backdoor Unalignment for Large Language Models","created":"2025-06-19","cited_by_count":19},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17},{"id":"2404.19597","title":"TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuning","created":"2024-04-30","cited_by_count":14},{"id":"2405.07667","title":"Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models","created":"2024-05-13","cited_by_count":12},{"id":"2502.18511","title":"ELBA-Bench: An Efficient Learning Backdoor Attacks Benchmark for Large Language Models","created":"2025-02-22","cited_by_count":11},{"id":"2409.14119","title":"Obliviate: Neutralizing Task-agnostic Backdoors within the Parameter-efficient Fine-tuning Paradigm","created":"2024-09-21","cited_by_count":9},{"id":"2412.19037","title":"CL-Attack: Textual Backdoor Attacks via Cross-Lingual Triggers","created":"2024-12-26","cited_by_count":8},{"id":"2509.00820","title":"Unlocking the Effectiveness of LoRA-FP for Seamless Transfer Implantation of Fingerprints in Downstream Models","created":"2025-08-31","cited_by_count":8},{"id":"2409.12914","title":"Evaluating Defences against Unsafe Feedback in RLHF","created":"2024-09-19","cited_by_count":4},{"id":"2512.19297","title":"Causal-Guided Detoxify Backdoor Attack of Open-Weight LoRA Models","created":"2025-12-22","cited_by_count":3},{"id":"2505.03501","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","created":"2025-05-06","cited_by_count":2}],"next_cursor":null}