The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigation
Not on the map. Why?
Cited by 27 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
This report surveys the landscape of potential security threats from malicious uses of AI, and proposes ways to better forecast, prevent, and mitigate these threats. After analyzing the ways in which AI may influence the threat landscape in the digital, physical, and political domains, we make four high-level recommendations for AI researchers and other stakeholders. We also suggest several promising areas for further research that could expand the portfolio of defenses, or make attacks less effective or harder to execute. Finally, we discuss, but do not conclusively resolve, the long-term equilibrium of attackers and defenders.
Key facts. Cited by 159 papers in the map (data through 7 Oct 2026). First posted on arXiv 20 Feb 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 19; 2022: 14; 2023: 34; 2024: 34; 2025: 29; 2026: 29.
159 papers.
Sort:
By area:
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 700
- 2023Are aligned neural networks adversarially aligned?cited by 305
- 2021Unsolved Problems in ML Safetycited by 291
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 289
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2021Alignment of Language Agentscited by 167
- 2023Model evaluation for extreme riskscited by 167
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studiescited by 127
- 2023Regulating ChatGPT and other Large Generative AI Modelscited by 102
- 2024Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systemscited by 94
38 more
- 2022The Fallacy of AI Functionalitycited by 88
- 2024A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trendscited by 82
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2022Frido: Feature Pyramid Diffusion for Complex Scene Image Synthesiscited by 75
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
- 2024On the Societal Impact of Open Foundation Modelscited by 64
- 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
- 2022X-Risk Analysis for AI Researchcited by 60
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 60
- 2021Improved Transformer for High-Resolution GANscited by 59
- 2022Self-Destructing Models: Increasing the Costs of Harmful Dual Uses of Foundation Modelscited by 56
- 2022SparCL: Sparse Continual Learning on the Edgecited by 55
- 2022Synthetic Disinformation Attacks on Automated Fact Verification Systemscited by 44
- 2025Agentic Web: Weaving the Next Web with AI Agentscited by 43
- 2021The Dangers of Underclaiming: Reasons for Caution When Reporting How NLP Systems Failcited by 38
- 2021The Threat of Offensive AI to Organizationscited by 37
- 2023Anatomy of an AI-powered malicious social botnetcited by 35
- 2024A survey of synthetic data augmentation methods in computer visioncited by 34
- 2025AI-Generated Video Detection via Perceptual Straighteningcited by 34
- 2023Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectivescited by 31
- 2021Tractable Density Estimation on Learned Manifolds with Conformal Embedding Flowscited by 30
- 2024Recent Advances in Generative AI and Large Language Models: Current Status, Challenges, and Perspectivescited by 30
- 2023Parents and Children: Distinguishing Multimodal DeepFakes from Natural Imagescited by 29
- 2022Diagnosing and Fixing Manifold Overfitting in Deep Generative Modelscited by 28
- 2022CaloMan: Fast generation of calorimeter showers with density estimation on learned manifoldscited by 28
- 2024LaWa: Using Latent Space for In-Generation Image Watermarkingcited by 27
- 2021Information Directed Reward Learning for Reinforcement Learningcited by 24
- 2024Two Types of AI Existential Risk: Decisive and Accumulativecited by 21
- 2024On the Essence and Prospect: An Investigation of Alignment Approaches for Big Modelscited by 21
- 2023What does it take to catch a Chinchilla? Verifying Rules on Large-Scale Neural Network Training via Compute Monitoringcited by 20
- 2024Generative AI Misuse: A Taxonomy of Tactics and Insights from Real-World Datacited by 20
- 2023The Ethical Implications of Generative Audio Models: A Systematic Literature Reviewcited by 18
- 2023Protecting Society from AI Misuse: When are Restrictions on Capabilities Warranted?cited by 15
- 2022Current and Near-Term AI as a Potential Existential Risk Factorcited by 14
- 2023Challenges and Remedies to Privacy and Security in AIGC: Exploring the Potential of Privacy Computing, Blockchain, and Beyondcited by 14
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 14
- 2021Why and How Governments Should Monitor AI Developmentcited by 13
- 2021EvilModel 2.0: Bringing Neural Network Models into Malware Attackscited by 13
50 most cited of 159 All 159 (JSON)
- 2026PASTABench: Proactive Assessment of Sequential Trajectories for Agent Safety23 Sep 2026
- 2026ConceptGuard: Benchmarking Context-Sensitive Unlearning in Large Language Models20 Aug 2026
- 2026IO Factory: Simulating AI-Enabled Influence Campaigns at Scale11 Aug 2026
- 2026RoguePrompt: Dual-Layer Encoding for Self-Reconstruction to Circumvent LLM Moderation29 Jul 2026
- 2026The Ethics of Autonomous AI Agents for Offensive Security22 Jul 2026
- 2026Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation13 Jul 2026
- 2026FedOT: Ownership Verification and Leakage Tracing via Watermarks for Federated LDMs22 Jun 2026
- 2026Distilling Safe LLM Systems via Soft Prompts for On Device Settings8 Jun 2026
- 2026Solipsistic Superintelligence is Unlikely to be Cooperative2 Jun 2026
- 2026On the Origin of Synthetic Information by Means of Steganographic Inheritance26 May 2026
- 2026The Biosecurity Blind Spot: Systematic Dual-use Detection in Open Science Infrastructure10 May 2026
- 2026AI Safety as Control of Irreversibility: A Systems Framework for Decision-Energy and Sovereignty Boundaries2 May 2026
38 more
- 2026Role-Aware Artificial Intelligence Across Augmentation and Automation in Human-Machine Symbiosis1 May 2026
- 2026V.O.I.C.E (Voice, Ownership, Identity, Control, Expression): Risk Taxonomy of Synthetic Voice Generation From Empirical Data25 Apr 2026
- 2026FSFM: A Biologically-Inspired Framework for Selective Forgetting of Agent Memory22 Apr 2026
- 2026Do Agents Dream of Root Shells? Partial-Credit Evaluation of LLM Agents in Capture the Flag Challenges21 Apr 2026
- 2026Toward Accountable AI-Generated Content on Social Platforms: Steganographic Attribution and Multimodal Harm Detection12 Apr 2026
- 2026Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Types10 Apr 2026
- 2026Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication27 Mar 2026
- 2026Preserving Decision Sovereignty in Military AI: A Trade-Secret-Safe Architectural Framework for Model Replaceability, Human Authority, and State Control26 Mar 2026
- 2026Designing to Forget: Deep Semi-parametric Models for Unlearning24 Mar 2026
- 2026ADVERSA: Measuring Multi-Turn Guardrail Degradation and Judge Reliability in Large Language Models10 Mar 2026
- 2026Incentive Aware AI Regulations: A Credal Characterisation5 Mar 2026
- 2026From Shallow to Deep: Pinning Semantic Intent via Causal GRPO3 Mar 2026
- 2026David vs. Goliath: Verifiable Agent-to-Agent Jailbreaking via Reinforcement Learning2 Feb 2026
- 2026AgenticRed: Evolving Agentic Systems for Red-Teaming20 Jan 2026
- 2026Unbounded Harms, Bounded Law: Liability in the Age of Borderless AI19 Jan 2026
- 2026Forget-It-All: Multi-Concept Machine Unlearning via Concept-Aware Neuron Masking7 Jan 2026
- 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models6 Jan 2026
- 2025Super Suffixes: Bypassing Text Generation Alignment and Guard Models Simultaneously12 Dec 2025
- 2025An Adaptive Multi-Layered Honeynet Architecture for Threat Behavior Analysis via Deep Learning8 Dec 2025
- 2025Big Tech-Funded AI Papers Have Higher Citation Impact, Greater Insularity, and Larger Recency Bias5 Dec 2025
- 2025AI & Human Co-Improvement for Safer Co-Superintelligence5 Dec 2025
- 2025Monte Carlo Expected Threat (MOCET) Scoring20 Nov 2025
- 2025Hiding in the AI Traffic: Abusing MCP for LLM-Powered Agentic Red Teaming20 Nov 2025
- 2025Three Lenses on the AI Revolution: Risk, Transformation, Continuity14 Oct 2025
- 2025Unified Threat Detection and Mitigation Framework (UTDMF): Combating Prompt Injection, Deception, and Bias in Enterprise-Scale Transformers6 Oct 2025
- 2025NeurIPS should lead scientific consensus on AI policy30 Sep 2025
- 2025Journalists' Perceptions of Artificial Intelligence and Disinformation Risks1 Sep 2025
- 2025STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reports13 Aug 2025
- 2025Securing Agentic AI: Threat Modeling and Risk Analysis for Network Monitoring Agentic AI System12 Aug 2025
- 2025Dimensional Characterization and Pathway Modeling for Catastrophic AI Risks8 Aug 2025
- 2025Agentic Web: Weaving the Next Web with AI Agents28 Jul 2025
- 2025Giving AI Agents Access to Cryptocurrency and Smart Contracts Creates New Vectors of AI Harm11 Jul 2025
- 2025AI-Generated Video Detection via Perceptual Straightening1 Jul 2025
- 2025CEGA: A Cost-Effective Approach for Graph-Based Model Extraction and Acquisition21 Jun 2025
- 2025Model Immunization from a Condition Number Perspective29 May 2025
- 2025A Linear Approach to Data Poisoning21 May 2025
- 2025The Steganographic Potentials of Language Models6 May 2025
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents4 May 2025
50 newest of 159 All 159 (JSON)
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agentscited by 66
- 2024LaWa: Using Latent Space for In-Generation Image Watermarkingcited by 27
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 14
- 2024Are Large Language Models Really Bias-Free? Jailbreak Prompts for Assessing Adversarial Robustness to Bias Elicitationcited by 9
- 2024Generative Models are Self-Watermarked: Declaring Model Authentication through Re-Generationcited by 3
- 2026Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Typescited by 3
- 2025Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMscited by 2
- 2025A Linear Approach to Data Poisoningcited by 2
- 2025Unified Threat Detection and Mitigation Framework (UTDMF): Combating Prompt Injection, Deception, and Bias in Enterprise-Scale Transformerscited by 1
- 2026ADVERSA: Measuring Multi-Turn Guardrail Degradation and Judge Reliability in Large Language Modelscited by 1
- 2026Designing to Forget: Deep Semi-parametric Models for Unlearningcited by 1
12 most cited of 17 All 17 (JSON)
- 2026ConceptGuard: Benchmarking Context-Sensitive Unlearning in Large Language Models20 Aug 2026
- 2026RoguePrompt: Dual-Layer Encoding for Self-Reconstruction to Circumvent LLM Moderation29 Jul 2026
- 2026Distilling Safe LLM Systems via Soft Prompts for On Device Settings8 Jun 2026
- 2026Toward Accountable AI-Generated Content on Social Platforms: Steganographic Attribution and Multimodal Harm Detection12 Apr 2026
- 2026Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Types10 Apr 2026
- 2026Designing to Forget: Deep Semi-parametric Models for Unlearning24 Mar 2026
- 2026ADVERSA: Measuring Multi-Turn Guardrail Degradation and Judge Reliability in Large Language Models10 Mar 2026
- 2025Unified Threat Detection and Mitigation Framework (UTDMF): Combating Prompt Injection, Deception, and Bias in Enterprise-Scale Transformers6 Oct 2025
- 2025A Linear Approach to Data Poisoning21 May 2025
- 2025Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents4 May 2025
- 2025Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs26 Apr 2025
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research9 Dec 2024
12 newest of 17 All 17 (JSON)
- 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,422
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studiescited by 127
- 2025Agentic Web: Weaving the Next Web with AI Agentscited by 43
- 2025Securing Agentic AI: Threat Modeling and Risk Analysis for Network Monitoring Agentic AI Systemcited by 6
- 2025Hiding in the AI Traffic: Abusing MCP for LLM-Powered Agentic Red Teamingcited by 4
- 2026AgenticRed: Evolving Agentic Systems for Red-Teamingcited by 4
- 2024Safeguarding AI Agents: Developing and Analyzing Safety Architecturescited by 3
- 2026Do Agents Dream of Root Shells? Partial-Credit Evaluation of LLM Agents in Capture the Flag Challengescited by 3
- 2026FSFM: A Biologically-Inspired Framework for Selective Forgetting of Agent Memorycited by 3
- 2024Input Conditioned Graph Generation for Language Agentscited by 1
- 2026David vs. Goliath: Verifiable Agent-to-Agent Jailbreaking via Reinforcement Learningcited by 1
- 2026The Ethics of Autonomous AI Agents for Offensive Securitycited by 1
12 most cited of 14 All 14 (JSON)
- 2026PASTABench: Proactive Assessment of Sequential Trajectories for Agent Safety23 Sep 2026
- 2026The Ethics of Autonomous AI Agents for Offensive Security22 Jul 2026
- 2026Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation13 Jul 2026
- 2026FSFM: A Biologically-Inspired Framework for Selective Forgetting of Agent Memory22 Apr 2026
- 2026Do Agents Dream of Root Shells? Partial-Credit Evaluation of LLM Agents in Capture the Flag Challenges21 Apr 2026
- 2026David vs. Goliath: Verifiable Agent-to-Agent Jailbreaking via Reinforcement Learning2 Feb 2026
- 2026AgenticRed: Evolving Agentic Systems for Red-Teaming20 Jan 2026
- 2025Hiding in the AI Traffic: Abusing MCP for LLM-Powered Agentic Red Teaming20 Nov 2025
- 2025Securing Agentic AI: Threat Modeling and Risk Analysis for Network Monitoring Agentic AI System12 Aug 2025
- 2025Agentic Web: Weaving the Next Web with AI Agents28 Jul 2025
- 2024Safeguarding AI Agents: Developing and Analyzing Safety Architectures3 Sep 2024
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studies28 Jul 2024
12 newest of 14 All 14 (JSON)
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 289
- 2022Frido: Feature Pyramid Diffusion for Complex Scene Image Synthesiscited by 75
- 2023Parents and Children: Distinguishing Multimodal DeepFakes from Natural Imagescited by 29
- 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Modelscited by 4
- 2024Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Modelscited by 1
- 2026Forget-It-All: Multi-Concept Machine Unlearning via Concept-Aware Neuron Maskingcited by 1
- 2026Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communicationcited by 0
- 2026FedOT: Ownership Verification and Leakage Tracing via Watermarks for Federated LDMscited by 0
- 2026FedOT: Ownership Verification and Leakage Tracing via Watermarks for Federated LDMs22 Jun 2026
- 2026Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication27 Mar 2026
- 2026Forget-It-All: Multi-Concept Machine Unlearning via Concept-Aware Neuron Masking7 Jan 2026
- 2026Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models6 Jan 2026
- 2024Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Models28 Oct 2024
- 2023Parents and Children: Distinguishing Multimodal DeepFakes from Natural Images2 Apr 2023
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Models27 Mar 2023
- 2022Frido: Feature Pyramid Diffusion for Complex Scene Image Synthesis29 Aug 2022
- 2023Are aligned neural networks adversarially aligned?cited by 305
- 2021Information Directed Reward Learning for Reinforcement Learningcited by 24
- 2024On the Essence and Prospect: An Investigation of Alignment Approaches for Big Modelscited by 21
- 2024Combining Theory of Mind and Kindness for Self-Supervised Human-AI Alignmentcited by 1
- 2024Combining Theory of Mind and Kindness for Self-Supervised Human-AI Alignment21 Oct 2024
- 2024On the Essence and Prospect: An Investigation of Alignment Approaches for Big Models7 Mar 2024
- 2023Are aligned neural networks adversarially aligned?26 Jun 2023
- 2021Information Directed Reward Learning for Reinforcement Learning24 Feb 2021
- 2025The Steganographic Potentials of Language Modelscited by 10
- 2026From Shallow to Deep: Pinning Semantic Intent via Causal GRPOcited by 0
- 2026From Shallow to Deep: Pinning Semantic Intent via Causal GRPO3 Mar 2026
- 2025The Steganographic Potentials of Language Models6 May 2025
- 2023Towards Automated Circuit Discovery for Mechanistic Interpretabilitycited by 700
- 2021Unsolved Problems in ML Safetycited by 291
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2021Alignment of Language Agentscited by 167
- 2023Model evaluation for extreme riskscited by 167
- 2023Regulating ChatGPT and other Large Generative AI Modelscited by 102
- 2022The Fallacy of AI Functionalitycited by 88
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2024On the Societal Impact of Open Foundation Modelscited by 64
- 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
- 2022X-Risk Analysis for AI Researchcited by 60
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 60
12 most cited of 111 All 111 (JSON)
- 2026IO Factory: Simulating AI-Enabled Influence Campaigns at Scale11 Aug 2026
- 2026Solipsistic Superintelligence is Unlikely to be Cooperative2 Jun 2026
- 2026On the Origin of Synthetic Information by Means of Steganographic Inheritance26 May 2026
- 2026The Biosecurity Blind Spot: Systematic Dual-use Detection in Open Science Infrastructure10 May 2026
- 2026AI Safety as Control of Irreversibility: A Systems Framework for Decision-Energy and Sovereignty Boundaries2 May 2026
- 2026Role-Aware Artificial Intelligence Across Augmentation and Automation in Human-Machine Symbiosis1 May 2026
- 2026V.O.I.C.E (Voice, Ownership, Identity, Control, Expression): Risk Taxonomy of Synthetic Voice Generation From Empirical Data25 Apr 2026
- 2026Preserving Decision Sovereignty in Military AI: A Trade-Secret-Safe Architectural Framework for Model Replaceability, Human Authority, and State Control26 Mar 2026
- 2026Incentive Aware AI Regulations: A Credal Characterisation5 Mar 2026
- 2026Unbounded Harms, Bounded Law: Liability in the Age of Borderless AI19 Jan 2026
- 2025Super Suffixes: Bypassing Text Generation Alignment and Guard Models Simultaneously12 Dec 2025
- 2025An Adaptive Multi-Layered Honeynet Architecture for Threat Behavior Analysis via Deep Learning8 Dec 2025
12 newest of 111 All 111 (JSON)