Demystifying Prompts in Language Models via Perplexity Estimation
Not on the map. Why?
Abstract (arXiv)
Language models can be prompted to perform a wide variety of zero- and few-shot learning problems. However, performance varies significantly with the choice of prompt, and we do not yet understand why this happens or how to pick the best prompts. In this work, we analyze the factors that contribute to this variance and establish a new empirical hypothesis: the performance of a prompt is coupled with the extent to which the model is familiar with the language it contains. Over a wide range of tasks, we show that the lower the perplexity of the prompt is, the better the prompt is able to perform the task. As a result, we devise a method for creating prompts: (1) automatically extend a small seed set of manually written prompts by paraphrasing using GPT3 and backtranslation and (2) choose the lowest perplexity prompts to get significant gains in performance.
Key facts. Cited by 215 papers in the map (data through 7 Oct 2026). Builds on 24 of its 47 references that are in the map. First posted on arXiv 8 Dec 2022.
Builds on
24 of 47 references.
References · 24
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2022No Language Left Behind: Scaling Human-Centered Machine Translationcited by 1,290
- 2020Making Pre-trained Language Models Better Few-shot Learnerscited by 1,255
- 2018Neural Network Acceptability Judgmentscited by 952
- 2020It's Not Just Size That Matters: Small Language Models Are Also Few-Shot Learnerscited by 668
- 2022Large Language Models Struggle to Learn Long-Tail Knowledgecited by 452
- 2020TweetEval: Unified Benchmark and Comparative Evaluation for Tweet Classificationcited by 414
- 2021Learning How to Ask: Querying LMs with Mixtures of Soft Promptscited by 376
12 more
- 2022RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learningcited by 361
- 2022PromptSource: An Integrated Development Environment and Repository for Natural Language Promptscited by 288
- 2022Estimating the Carbon Footprint of BLOOM, a 176B Parameter Language Modelcited by 264
- 2021Surface Form Competition: Why the Highest Probability Answer Isn't Always Rightcited by 256
- 2021How Many Data Points is a Prompt Worth?cited by 197
- 2021Reframing Instructional Prompts to GPTk's Languagecited by 176
- 2022Impact of Pretraining Term Frequencies on Few-Shot Reasoningcited by 142
- 2022On the Relation between Sensitivity and Accuracy in In-context Learningcited by 71
- 2021Prompt Waywardness: The Curious Case of Discretized Interpretation of Continuous Promptscited by 64
- 2022ORCA: Interpreting Prompted Language Models via Locating Supporting Data Evidence in the Ocean of Pretraining Datacited by 34
- 2017Learning Paraphrastic Sentence Embeddings from Back-Translated Bitextcited by 27
- 2018Multi-Source Social Feedback of Online News Feedscited by 14
Built on by
Citing papers per year: 2022: 3; 2023: 49; 2024: 75; 2025: 69; 2026: 19.
215 papers.
Sort:
By area:
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2022A Survey on In-context Learningcited by 717
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 299
- 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 251
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2024Cost-Efficient Large Language Model Serving for Multi-turn Conversations with CachedAttentioncited by 159
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4cited by 123
- 2024Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Modelscited by 102
- 2023SatLM: Satisfiability-Aided Language Models Using Declarative Promptingcited by 100
- 2023Navigating the Grey Area: How Expressions of Uncertainty and Overconfidence Affect Language Modelscited by 91
- 2023Pearl: Personalizing Large Language Model Writing Assistants with Generation-Calibrated Retrieverscited by 91
- 2023A Theory of Emergent In-Context Learning as Implicit Structure Inductioncited by 86
38 more
- 2023Language models are not naysayers: An analysis of language models on negation benchmarkscited by 73
- 2023Dr.ICL: Demonstration-Retrieved In-context Learningcited by 71
- 2024In-context Learning with Retrieved Demonstrations for Language Models: A Surveycited by 69
- 2023In-context Example Selection with Influencescited by 60
- 2022Data Curation Alone Can Stabilize In-context Learningcited by 58
- 2024Revisiting Demonstration Selection Strategies in In-Context Learningcited by 57
- 2024Compression Represents Intelligence Linearlycited by 56
- 2024Pack of LLMs: Model Fusion at Test-Time via Perplexity Optimizationcited by 56
- 2023Active Learning Principles for In-Context Learning with Large Language Modelscited by 53
- 2022Toward Human Readable Prompt Tuning: Kubrick's The Shining is a good movie, and a good prompt too?cited by 49
- 2023In-Context Learning Learns Label Relationships but Is Not Conventional Learningcited by 48
- 2023MM-Narrator: Narrating Long-form Videos with Multimodal In-Context Learningcited by 46
- 2023Enhancing Few-shot Text-to-SQL Capabilities of Large Language Models: A Study on Prompt Design Strategiescited by 44
- 2023Large Language Models can be Guided to Evade AI-Generated Text Detectioncited by 43
- 2023The language of prompting: What linguistic properties make a prompt successful?cited by 43
- 2023Self-ICL: Zero-Shot In-Context Learning with Self-Generated Demonstrationscited by 42
- 2024IsoBench: Benchmarking Multimodal Foundation Models on Isomorphic Representationscited by 37
- 2023Evaluation of African American Language Bias in Natural Language Generationcited by 36
- 2024On the Worst Prompt Performance of Large Language Modelscited by 36
- 2025Practical Poisoning Attacks against Retrieval-Augmented Generationcited by 35
- 2023How are Prompts Different in Terms of Sensitivity?cited by 34
- 2025Emergent Abilities in Large Language Models: A Surveycited by 34
- 2023Prompt Optimization via Adversarial In-Context Learningcited by 33
- 2025Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Modelscited by 32
- 2023Large Language Model Instruction Following: A Survey of Progresses and Challengescited by 31
- 2023How to Configure Good In-Context Sequence for Visual Question Answeringcited by 31
- 2024Smoothie: Label Free Language Model Routingcited by 31
- 2023Instruct Me More! Random Prompting for Visual In-Context Learningcited by 30
- 2023Leveraging Medical Knowledge Graphs Into Large Language Models for Diagnosis Prediction: Design and Application Studycited by 29
- 2024Causal Prompting: Debiasing Large Language Model Prompting based on Front-Door Adjustmentcited by 29
- 2024ChatBug: A Common Vulnerability of Aligned LLMs Induced by Chat Templatescited by 29
- 2024Inductive or Deductive? Rethinking the Fundamental Reasoning Abilities of LLMscited by 29
- 2023Pushing the Limits of ChatGPT on NLP Taskscited by 27
- 2023Bridging Information-Theoretic and Geometric Compression in Language Modelscited by 26
- 2023Beyond Confidence: Reliable Models Should Also Consider Atypicalitycited by 25
- 2024Do LLMs "know" internally when they follow instructions?cited by 25
- 2025SimPER: A Minimalist Approach to Preference Alignment without Hyperparameterscited by 25
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25
50 most cited of 215 All 215 (JSON)
- 2026Prioritizing Repeated LLM Evaluation for Hidden Failure Discovery26 Sep 2026
- 2026NE-R1: Enhancing Named Entity Recognition Model via Reinforcement Learning2 Sep 2026
- 2026Predicting Task Difficulty Without Rollouts6 Aug 2026
- 2026RPAM: A Principled Metric for Evaluating Associations in Language Models with High Predictive Validity in Downstream Outputs6 Jul 2026
- 2026SrDetection: A Self-Referential Framework for Data Leakage Detection in Code Large Language Models29 Jun 2026
- 2026Agentic Abstention: Do Agents Know When to Stop Instead of Act?27 Jun 2026
- 2026Towards Spec Learning: Inference-Time Alignment from Preference Pairs22 Jun 2026
- 2026LaRA: Layer-wise Representation Analysis for Detecting Data Contamination in RL Post-Training28 May 2026
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scaling14 May 2026
- 2026GSM-SEM: Benchmark and Framework for Generating Semantically Variant Augmentations8 May 2026
- 2026Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering5 May 2026
- 2026Testing the Limits of Truth Directions in LLMs4 Apr 2026
38 more
- 2026From Content to Audience: A Multimodal Annotation Framework for Broadcast Television Analytics24 Mar 2026
- 2026Automatic In-Domain Exemplar Construction and LLM-Based Refinement of Multi-LLM Expansions for Query Expansion9 Feb 2026
- 2026Evaluating Prompt Engineering Strategies for Sentiment Control in AI-Generated Texts6 Feb 2026
- 2026From Competition to Collaboration: Designing Sustainable Mechanisms Between LLMs and Online Forums4 Feb 2026
- 2026Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems11 Jan 2026
- 2026Geometry-Aware Hallucination Detection in Large Language Models8 Jan 2026
- 2026Refinement Provenance Inference: Detecting LLM-Refined Training Prompts from Model Behavior5 Jan 2026
- 2025MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks9 Dec 2025
- 2025EmoRAG: Evaluating RAG Robustness to Symbolic Perturbations1 Dec 2025
- 2025AMaPO: Adaptive Margin-attached Preference Optimization for Language Model Alignment12 Nov 2025
- 2025When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents27 Oct 2025
- 2025Foundation of Intelligence: Review of Math Word Problems from Human Cognition Perspective24 Oct 2025
- 2025Do Prompts Reshape Representations? An Empirical Study of Prompting Effects on Embeddings22 Oct 2025
- 2025Beyond Single Models: Mitigating Multimodal Hallucinations via Adaptive Token Ensemble Decoding21 Oct 2025
- 2025LLM Knowledge is Brittle: Truthfulness Representations Rely on Superficial Resemblance13 Oct 2025
- 2025ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking11 Oct 2025
- 2025Detecting Data Contamination from Reinforcement Learning Post-training for Large Language Models10 Oct 2025
- 2025Prompts Generalize with Low Data: Non-vacuous Generalization Bounds for Optimizing Prompts with More Informative Priors9 Oct 2025
- 2025Learning to Rewrite Prompts for Bootstrapping LLMs on Downstream Tasks8 Oct 2025
- 2025Fine-Grained Emotion Recognition via In-Context Learning8 Oct 2025
- 2025Mind Your Tone: Investigating How Prompt Politeness Affects LLM Accuracy (short paper)6 Oct 2025
- 2025Protocode: Prototype-Driven Interpretability for Code Generation in LLMs27 Sep 2025
- 2025The Impact of Role Design in In-Context Learning for Large Language Models27 Sep 2025
- 2025PANICL: Mitigating Over-Reliance on Single Prompt in Visual In-Context Learning26 Sep 2025
- 2025LLMZ+: Contextual Prompt Whitelist Principles for Agentic LLMs23 Sep 2025
- 2025M-DaQ: Retrieving Samples with Multilingual Diversity and Quality for Instruction Fine-Tuning Datasets19 Sep 2025
- 2025When Content is Goliath and Algorithm is David: The Style and Semantic Effects of Generative Search Engine17 Sep 2025
- 2025ALLabel: Three-stage Active Learning for LLM-based Entity Recognition using Demonstration Retrieval9 Sep 2025
- 2025DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)27 Aug 2025
- 2025Online Anti-sexist Speech: Identifying Resistance to Gender Bias in Political Discourse15 Aug 2025
- 2025Fact2Fiction: Targeted Poisoning Attack to Agentic Fact-checking System8 Aug 2025
- 2025Language Model Guided Reinforcement Learning in Quantitative Trading4 Aug 2025
- 2025Practical, Generalizable and Robust Backdoor Attacks on Text-to-Image Diffusion Models3 Aug 2025
- 2025DICE: Dynamic In-Context Example Selection in LLM Agents via Efficient Knowledge Transfer31 Jul 2025
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques18 Jul 2025
- 2025How Important is `Perfect' English for Machine Translation Prompts?13 Jul 2025
- 2025Unveiling Effective In-Context Configurations for Image Captioning: An External & Internal Analysis8 Jul 2025
- 2025Optimus: A Robust Defense Framework for Mitigating Toxicity while Fine-Tuning Conversational AI8 Jul 2025
50 newest of 215 All 215 (JSON)
- 2023SatLM: Satisfiability-Aided Language Models Using Declarative Promptingcited by 100
- 2024Causal Prompting: Debiasing Large Language Model Prompting based on Front-Door Adjustmentcited by 29
- 2024Inductive or Deductive? Rethinking the Fundamental Reasoning Abilities of LLMscited by 29
- 2024ConMe: Rethinking Evaluation of Compositional Reasoning for Modern VLMscited by 21
- 2025Mitigating Content Effects on Reasoning in Language Models through Fine-Grained Activation Steeringcited by 18
- 2025CER: Confidence Enhanced Reasoning in LLMscited by 16
- 2024Paraphrase and Solve: Exploring and Exploiting the Impact of Surface Form on Mathematical Reasoning in Large Language Modelscited by 14
- 2023Explanation Selection Using Unlabeled Data for Chain-of-Thought Promptingcited by 12
- 2024Stance Reasoner: Zero-Shot Stance Detection on Social Media with Explicit Reasoningcited by 11
- 2025CoTSRF: Utilize Chain of Thought as Stealthy and Robust Fingerprint of Large Language Modelscited by 7
- 2025When Language Shapes Thought: Cross-Lingual Transfer of Factual Knowledge in Question Answeringcited by 2
- 2026GSM-SEM: Benchmark and Framework for Generating Semantically Variant Augmentationscited by 2
12 most cited of 13 All 13 (JSON)
- 2026LaRA: Layer-wise Representation Analysis for Detecting Data Contamination in RL Post-Training28 May 2026
- 2026GSM-SEM: Benchmark and Framework for Generating Semantically Variant Augmentations8 May 2026
- 2025When Language Shapes Thought: Cross-Lingual Transfer of Factual Knowledge in Question Answering30 May 2025
- 2025CoTSRF: Utilize Chain of Thought as Stealthy and Robust Fingerprint of Large Language Models22 May 2025
- 2025Mitigating Content Effects on Reasoning in Language Models through Fine-Grained Activation Steering18 May 2025
- 2025CER: Confidence Enhanced Reasoning in LLMs20 Feb 2025
- 2024Inductive or Deductive? Rethinking the Fundamental Reasoning Abilities of LLMs31 Jul 2024
- 2024ConMe: Rethinking Evaluation of Compositional Reasoning for Modern VLMs12 Jun 2024
- 2024Paraphrase and Solve: Exploring and Exploiting the Impact of Surface Form on Mathematical Reasoning in Large Language Models17 Apr 2024
- 2024Stance Reasoner: Zero-Shot Stance Detection on Social Media with Explicit Reasoning22 Mar 2024
- 2024Causal Prompting: Debiasing Large Language Model Prompting based on Front-Door Adjustment5 Mar 2024
- 2023SatLM: Satisfiability-Aided Language Models Using Declarative Prompting16 May 2023
12 newest of 13 All 13 (JSON)
- 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 251
- 2025Practical Poisoning Attacks against Retrieval-Augmented Generationcited by 35
- 2025Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Modelscited by 32
- 2024A Reality Check on Context Utilisation for Retrieval-Augmented Generationcited by 9
- 2025ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checkingcited by 9
- 2024Pointwise Mutual Information as a Performance Gauge for Retrieval-Augmented Generationcited by 6
- 2024RAGSys: Item-Cold-Start Recommender as RAG Systemcited by 4
- 2024Familiarity-Aware Evidence Compression for Retrieval-Augmented Generationcited by 4
- 2025MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attackscited by 4
- 2025Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAGcited by 3
- 2025EmoRAG: Evaluating RAG Robustness to Symbolic Perturbationscited by 3
- 2025DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)cited by 2
12 most cited of 13 All 13 (JSON)
- 2026NE-R1: Enhancing Named Entity Recognition Model via Reinforcement Learning2 Sep 2026
- 2025MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks9 Dec 2025
- 2025EmoRAG: Evaluating RAG Robustness to Symbolic Perturbations1 Dec 2025
- 2025ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking11 Oct 2025
- 2025DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version)27 Aug 2025
- 2025Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG4 Jun 2025
- 2025Practical Poisoning Attacks against Retrieval-Augmented Generation4 Apr 2025
- 2025Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models3 Feb 2025
- 2024A Reality Check on Context Utilisation for Retrieval-Augmented Generation22 Dec 2024
- 2024Pointwise Mutual Information as a Performance Gauge for Retrieval-Augmented Generation12 Nov 2024
- 2024Familiarity-Aware Evidence Compression for Retrieval-Augmented Generation19 Sep 2024
- 2024RAGSys: Item-Cold-Start Recommender as RAG System27 May 2024
12 newest of 13 All 13 (JSON)
- 2024ChatBug: A Common Vulnerability of Aligned LLMs Induced by Chat Templatescited by 29
- 2025SimPER: A Minimalist Approach to Preference Alignment without Hyperparameterscited by 25
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25
- 2025AMaPO: Adaptive Margin-attached Preference Optimization for Language Model Alignmentcited by 2
- 2024On the Transformations across Reward Model, Parameter Update, and In-Context Promptcited by 1
- 2025TACOS: Open Tagging and Comparative Scoring for Instruction Fine-Tuning Data Selectioncited by 0
- 2025Optimus: A Robust Defense Framework for Mitigating Toxicity while Fine-Tuning Conversational AIcited by 0
- 2026Towards Spec Learning: Inference-Time Alignment from Preference Pairscited by 0
- 2026Towards Spec Learning: Inference-Time Alignment from Preference Pairs22 Jun 2026
- 2025AMaPO: Adaptive Margin-attached Preference Optimization for Language Model Alignment12 Nov 2025
- 2025Optimus: A Robust Defense Framework for Mitigating Toxicity while Fine-Tuning Conversational AI8 Jul 2025
- 2025TACOS: Open Tagging and Comparative Scoring for Instruction Fine-Tuning Data Selection4 Jul 2025
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs14 Mar 2025
- 2025SimPER: A Minimalist Approach to Preference Alignment without Hyperparameters2 Feb 2025
- 2024On the Transformations across Reward Model, Parameter Update, and In-Context Prompt24 Jun 2024
- 2024ChatBug: A Common Vulnerability of Aligned LLMs Induced by Chat Templates17 Jun 2024
- 2023How to Configure Good In-Context Sequence for Visual Question Answeringcited by 31
- 2025MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attackscited by 24
- 2023Lever LM: Configuring In-Context Sequence to Lever Large Vision Language Modelscited by 6
- 2024SADL: An Effective In-Context Learning Method for Compositional Visual QAcited by 5
- 2025PARC: A Quantitative Framework Uncovering the Symmetries within Vision Language Modelscited by 3
- 2025Incomplete In-context Learningcited by 2
- 2024Investigating the Scaling Effect of Instruction Templates for Training Multimodal Language Modelcited by 1
- 2025Beyond Single Models: Mitigating Multimodal Hallucinations via Adaptive Token Ensemble Decodingcited by 1
- 2025Beyond Single Models: Mitigating Multimodal Hallucinations via Adaptive Token Ensemble Decoding21 Oct 2025
- 2025PARC: A Quantitative Framework Uncovering the Symmetries within Vision Language Models3 Jun 2025
- 2025Incomplete In-context Learning12 May 2025
- 2025MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks25 Feb 2025
- 2024Investigating the Scaling Effect of Instruction Templates for Training Multimodal Language Model11 Dec 2024
- 2024SADL: An Effective In-Context Learning Method for Compositional Visual QA2 Jul 2024
- 2023Lever LM: Configuring In-Context Sequence to Lever Large Vision Language Models15 Dec 2023
- 2023How to Configure Good In-Context Sequence for Visual Question Answering4 Dec 2023
- 2026Agentic Abstention: Do Agents Know When to Stop Instead of Act?cited by 9
- 2025DICE: Dynamic In-Context Example Selection in LLM Agents via Efficient Knowledge Transfercited by 5
- 2025LLMZ+: Contextual Prompt Whitelist Principles for Agentic LLMscited by 5
- 2025Fact2Fiction: Targeted Poisoning Attack to Agentic Fact-checking Systemcited by 4
- 2024Whispers in the Machine: Confidentiality in Agentic Systemscited by 2
- 2025YaleNLP @ PerAnsSumm 2025: Multi-Perspective Integration via Mixture-of-Agents for Enhanced Healthcare QA Summarizationcited by 2
- 2025When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agentscited by 0
- 2026Agentic Abstention: Do Agents Know When to Stop Instead of Act?27 Jun 2026
- 2025When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents27 Oct 2025
- 2025LLMZ+: Contextual Prompt Whitelist Principles for Agentic LLMs23 Sep 2025
- 2025Fact2Fiction: Targeted Poisoning Attack to Agentic Fact-checking System8 Aug 2025
- 2025DICE: Dynamic In-Context Example Selection in LLM Agents via Efficient Knowledge Transfer31 Jul 2025
- 2025YaleNLP @ PerAnsSumm 2025: Multi-Perspective Integration via Mixture-of-Agents for Enhanced Healthcare QA Summarization4 Apr 2025
- 2024Whispers in the Machine: Confidentiality in Agentic Systems10 Feb 2024
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4cited by 123
- 2026Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systemscited by 16
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Surveycited by 10
- 2026Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answeringcited by 0
- 2026Membership Inference Attacks for Retrieval Based In-Context Learning for Document Question Answering5 May 2026
- 2026Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems11 Jan 2026
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Survey1 Jun 2024
- 2024Security and Privacy Challenges of Large Language Models: A Survey30 Jan 2024
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-428 Apr 2023
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 778
- 2022A Survey on In-context Learningcited by 717
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 299
- 2024Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Modelscited by 102
- 2023Navigating the Grey Area: How Expressions of Uncertainty and Overconfidence Affect Language Modelscited by 91
- 2023Pearl: Personalizing Large Language Model Writing Assistants with Generation-Calibrated Retrieverscited by 91
- 2023A Theory of Emergent In-Context Learning as Implicit Structure Inductioncited by 86
- 2023Language models are not naysayers: An analysis of language models on negation benchmarkscited by 73
- 2023Dr.ICL: Demonstration-Retrieved In-context Learningcited by 71
- 2024In-context Learning with Retrieved Demonstrations for Language Models: A Surveycited by 69
- 2023In-context Example Selection with Influencescited by 60
- 2022Data Curation Alone Can Stabilize In-context Learningcited by 58
12 most cited of 156 All 156 (JSON)
- 2026Prioritizing Repeated LLM Evaluation for Hidden Failure Discovery26 Sep 2026
- 2026Predicting Task Difficulty Without Rollouts6 Aug 2026
- 2026RPAM: A Principled Metric for Evaluating Associations in Language Models with High Predictive Validity in Downstream Outputs6 Jul 2026
- 2026SrDetection: A Self-Referential Framework for Data Leakage Detection in Code Large Language Models29 Jun 2026
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scaling14 May 2026
- 2026Testing the Limits of Truth Directions in LLMs4 Apr 2026
- 2026From Content to Audience: A Multimodal Annotation Framework for Broadcast Television Analytics24 Mar 2026
- 2026Automatic In-Domain Exemplar Construction and LLM-Based Refinement of Multi-LLM Expansions for Query Expansion9 Feb 2026
- 2026Evaluating Prompt Engineering Strategies for Sentiment Control in AI-Generated Texts6 Feb 2026
- 2026From Competition to Collaboration: Designing Sustainable Mechanisms Between LLMs and Online Forums4 Feb 2026
- 2026Geometry-Aware Hallucination Detection in Large Language Models8 Jan 2026
- 2026Refinement Provenance Inference: Detecting LLM-Refined Training Prompts from Model Behavior5 Jan 2026
12 newest of 156 All 156 (JSON)