Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigations
Not on the map. Why?
Cited by 36 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Generative language models have improved drastically, and can now produce realistic text outputs that are difficult to distinguish from human-written content. For malicious actors, these language models bring the promise of automating the creation of convincing and misleading text for use in influence operations. This report assesses how language models might change influence operations in the future, and what steps can be taken to mitigate this threat. We lay out possible changes to the actors, behaviors, and content of online influence operations, and provide a framework for stages of the language model-to-influence operations pipeline that mitigations could target (model construction, model access, content dissemination, and belief formation). While no reasonable mitigation can be expected to fully prevent the threat of AI-enabled influence operations, a combination of multiple mitigations may make an important difference.
Key facts. Cited by 157 papers in the map (data through 7 Oct 2026). First posted on arXiv 10 Jan 2023.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2023: 49; 2024: 56; 2025: 27; 2026: 25.
157 papers.
Sort:
By area:
- 2024GPT-4o System Cardcited by 4,467
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
- 2024Knowledge Conflicts for LLMs: A Surveycited by 274
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 242
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023GPTs are GPTs: An Early Look at the Labor Market Impact Potential of Large Language Modelscited by 174
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 162
- 2023On the Risk of Misinformation Pollution with Large Language Modelscited by 124
38 more
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2023Regulating ChatGPT and other Large Generative AI Modelscited by 102
- 2024Weak-to-Strong Jailbreaking on Large Language Modelscited by 100
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2023Art and the science of generative AI: A deeper divecited by 93
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
- 2023Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicitycited by 86
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Featurescited by 76
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
- 2025Authenticated Delegation and Authorized AI Agentscited by 63
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarkscited by 62
- 2024Building Guardrails for Large Language Modelscited by 61
- 2023Unveiling Security, Privacy, and Ethical Concerns of ChatGPTcited by 53
- 2024Language Models Resist Alignment: Evidence From Data Compressioncited by 50
- 2023Supporting Human-AI Collaboration in Auditing LLMs with LLMscited by 46
- 2024Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspectivecited by 44
- 2024GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Modelscited by 44
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)cited by 44
- 2024DELL: Generating Reactions and Explanations for LLM-Based Misinformation Detectioncited by 41
- 2023Honesty Is the Best Policy: Defining and Mitigating AI Deceptioncited by 40
- 2025Improving LLM Safety Alignment with Dual-Objective Optimizationcited by 40
- 2023Fake Alignment: Are LLMs Really Aligned Well?cited by 39
- 2024SafeWatch: An Efficient Safety-Policy Following Video Guardrail Model with Transparent Explanationscited by 37
- 2023Anatomy of an AI-powered malicious social botnetcited by 35
- 2023Flames: Benchmarking Value Alignment of LLMs in Chinesecited by 35
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Modelscited by 33
- 2024Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settingscited by 33
- 2023Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectivescited by 31
- 2023Prompt Packer: Deceiving LLMs through Compositional Instruction with Hidden Attackscited by 30
- 2025Emergence of polarization in networks of large language model agentscited by 25
- 2023Disinformation Capabilities of Large Language Modelscited by 23
- 2024CLAVE: An Adaptive Framework for Evaluating Values of LLM Generated Responsescited by 23
- 2023Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreakcited by 22
- 2023Optimizing watermarks for large language modelscited by 22
- 2024The Rise of AI-Generated Content in Wikipediacited by 22
- 2024Generative AI in EU Law: Liability, Privacy, Intellectual Property, and Cybersecuritycited by 21
- 2024Can Language Models Recognize Convincing Arguments?cited by 21
50 most cited of 157 All 157 (JSON)
- 2026DeBERTa-ConPara: Attack-Aware and Deployment-Realistic Detection of AI-Generated Text1 Oct 2026
- 2026VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Models1 Sep 2026
- 2026Quantization-Triggered Backdoors in Language Models: Cross-Quantizer Transferability and the Validation--Deployment Gap27 Aug 2026
- 2026Linear Probing Provides Robust and Efficient Detection of Machine-Generated Text25 Aug 2026
- 2026Propaganda Forensics: Recovering the Generation Pipeline of an AI-Driven Influence Campaign16 Aug 2026
- 2026Capability Is Not Propensity: Measuring Pressure-Robust Cooperative Behavior in Civic LLM Agents10 Aug 2026
- 2026InfoOps Bench: A live information operations safety benchmark30 Jul 2026
- 2026A Multimodal Reasoning Typology for Grounding Chart-Image Coherence in Science Communication6 Jul 2026
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Models9 Jun 2026
- 2026Unsupervised Style Representation Learning for AI-Text Detection via Paraphrase Inversion8 Jun 2026
- 2026Large Language Models Hack Rewards, and Society2 Jun 2026
- 2026IDO: Incongruity-aware Distribution Optimization for Multimodal Fake News Detection2 Jun 2026
38 more
- 2026The Future of Facts: Tracing the Factual Generation-Verification Gap26 May 2026
- 2026Who Owns This Agent? Tracing AI Agents Back to Their Owners15 May 2026
- 2026The End of Trust: How Agentic AI Breaks Security Assumptions14 May 2026
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimized2 May 2026
- 2026BLM-Guard: Explainable Multimodal Ad Moderation with Chain-of-Thought and Policy-Aligned Rewards20 Feb 2026
- 2026The Bots of Persuasion: Examining How Conversational Agents' Linguistic Expressions of Personality Affect User Perceptions and Decisions19 Feb 2026
- 2026MC2Mark: Distortion-Free Multi-Bit Watermarking for Long Messages15 Feb 2026
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles12 Feb 2026
- 2026Gradually Compacting Large Language Models for Reasoning Like a Boiling Frog4 Feb 2026
- 2026The Language You Ask In: Language-Conditioned Ideological Divergence in LLM Analysis of Contested Political Documents17 Jan 2026
- 2026The AI Cognitive Trojan Horse: How Large Language Models May Bypass Human Epistemic Vigilance11 Jan 2026
- 2026Large language models can effectively convince people to believe conspiracies8 Jan 2026
- 2026JPU: Bridging Jailbreak Defense and Unlearning via On-Policy Path Rectification6 Jan 2026
- 2025Proactive Defense: Compound AI for Detecting Persuasion Attacks and Measuring Inoculation Effectiveness23 Nov 2025
- 2025Towards a Humanized Social-Media Ecosystem: AI-Augmented HCI Design Patterns for Safety, Agency & Well-Being8 Nov 2025
- 2025Too Open for Opinion? Embracing Open-Endedness in Large Language Models for Social Simulation14 Oct 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025EPT Benchmark: Evaluation of Persian Trustworthiness in Large Language Models8 Sep 2025
- 2025Journalists' Perceptions of Artificial Intelligence and Disinformation Risks1 Sep 2025
- 2025AI Propaganda factories with language models27 Aug 2025
- 2025Stand on The Shoulders of Giants: Building JailExpert from Previous Attack Experience25 Aug 2025
- 2025Designing Effective Digital Literacy Interventions for Boosting Deepfake Discernment31 Jul 2025
- 2025When Autonomy Goes Rogue: Preparing for Risks of Multi-Agent Collusion in Social Systems19 Jul 2025
- 2025The Levers of Political Persuasion with Conversational AI18 Jul 2025
- 2025Sword and Shield: Uses and Strategies of LLMs in Navigating Disinformation8 Jun 2025
- 2025Pruning General Large Language Models into Customized Expert Models3 Jun 2025
- 2025How does Misinformation Affect Large Language Model Behaviors and Preferences?27 May 2025
- 2025AdAEM: An Adaptively and Automated Extensible Measurement of LLMs' Value Difference18 May 2025
- 2025A Framework to Assess the Persuasion Risks Large Language Model Chatbots Pose to Democratic Societies29 Apr 2025
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
- 2025Probing the Subtle Ideological Manipulation of Large Language Models19 Apr 2025
- 2025Labeling Messages as AI-Generated Does Not Reduce Their Persuasive Effects14 Apr 2025
- 2025NLP Security and Ethics, in the Wild9 Apr 2025
- 2025Research Superalignment Should Advance Now with Alternating Competence and Conformity Optimization8 Mar 2025
- 2025Improving LLM Safety Alignment with Dual-Objective Optimization5 Mar 2025
- 2025ChatGPT for President! Presupposed content in politicians versus GPT-generated texts3 Mar 2025
- 2025Ethics of generative AI and manipulation: a design-oriented research agenda1 Feb 2025
- 2025Tailored Truths: Optimizing LLM Persuasion with Personalization and Fabricated Statistics28 Jan 2025
50 newest of 157 All 157 (JSON)
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 242
- 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 162
- 2024Weak-to-Strong Jailbreaking on Large Language Modelscited by 100
- 2023Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicitycited by 86
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Featurescited by 76
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarkscited by 62
- 2024Building Guardrails for Large Language Modelscited by 61
- 2024Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspectivecited by 44
- 2024GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Modelscited by 44
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)cited by 44
12 most cited of 28 All 28 (JSON)
- 2026Quantization-Triggered Backdoors in Language Models: Cross-Quantizer Transferability and the Validation--Deployment Gap27 Aug 2026
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimized2 May 2026
- 2026MC2Mark: Distortion-Free Multi-Bit Watermarking for Long Messages15 Feb 2026
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles12 Feb 2026
- 2026Large language models can effectively convince people to believe conspiracies8 Jan 2026
- 2025Stand on The Shoulders of Giants: Building JailExpert from Previous Attack Experience25 Aug 2025
- 2024SafeWatch: An Efficient Safety-Policy Following Video Guardrail Model with Transparent Explanations9 Dec 2024
- 2024GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs21 Nov 2024
- 2024MoJE: Mixture of Jailbreak Experts, Naive Tabular Classifiers as Guard for Prompt Attacks26 Sep 2024
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)20 Jul 2024
- 2024On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks5 Jul 2024
- 2024Jailbreaking LLMs with Arabic Transliteration and Arabizi26 Jun 2024
12 newest of 28 All 28 (JSON)
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
- 2025Improving LLM Safety Alignment with Dual-Objective Optimizationcited by 40
- 2023Flames: Benchmarking Value Alignment of LLMs in Chinesecited by 35
- 2025Research Superalignment Should Advance Now with Alternating Competence and Conformity Optimizationcited by 1
- 2024BiasJailbreak:Analyzing Ethical Biases and Jailbreak Vulnerabilities in Large Language Modelscited by 0
- 2026JPU: Bridging Jailbreak Defense and Unlearning via On-Policy Path Rectificationcited by 0
- 2026JPU: Bridging Jailbreak Defense and Unlearning via On-Policy Path Rectification6 Jan 2026
- 2025Research Superalignment Should Advance Now with Alternating Competence and Conformity Optimization8 Mar 2025
- 2025Improving LLM Safety Alignment with Dual-Objective Optimization5 Mar 2025
- 2024BiasJailbreak:Analyzing Ethical Biases and Jailbreak Vulnerabilities in Large Language Models17 Oct 2024
- 2023Flames: Benchmarking Value Alignment of LLMs in Chinese12 Nov 2023
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models3 Oct 2023
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2026BLM-Guard: Explainable Multimodal Ad Moderation with Chain-of-Thought and Policy-Aligned Rewardscited by 2
- 2026Gradually Compacting Large Language Models for Reasoning Like a Boiling Frogcited by 0
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Modelscited by 0
- 2026A Multimodal Reasoning Typology for Grounding Chart-Image Coherence in Science Communicationcited by 0
- 2026A Multimodal Reasoning Typology for Grounding Chart-Image Coherence in Science Communication6 Jul 2026
- 2026The Shibboleth Effect: Auditing the Cross-Lingual Distributional Skew of Large Language Models9 Jun 2026
- 2026BLM-Guard: Explainable Multimodal Ad Moderation with Chain-of-Thought and Policy-Aligned Rewards20 Feb 2026
- 2026Gradually Compacting Large Language Models for Reasoning Like a Boiling Frog4 Feb 2026
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
- 2025Emergence of polarization in networks of large language model agentscited by 25
- 2026The End of Trust: How Agentic AI Breaks Security Assumptionscited by 0
- 2026Capability Is Not Propensity: Measuring Pressure-Robust Cooperative Behavior in Civic LLM Agentscited by 0
- 2026Capability Is Not Propensity: Measuring Pressure-Robust Cooperative Behavior in Civic LLM Agents10 Aug 2026
- 2026The End of Trust: How Agentic AI Breaks Security Assumptions14 May 2026
- 2025Emergence of polarization in networks of large language model agents9 Jan 2025
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Society31 Mar 2023
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Modelscited by 33
- 2024Fake Artificial Intelligence Generated Contents (FAIGC): A Survey of Theories, Detection Methods, and Opportunitiescited by 7
- 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Modelscited by 4
- 2024Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Modelscited by 1
- 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Models30 Nov 2024
- 2024Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Models28 Oct 2024
- 2024Fake Artificial Intelligence Generated Contents (FAIGC): A Survey of Theories, Detection Methods, and Opportunities25 Apr 2024
- 2023All but One: Surgical Concept Erasing with Model Preservation in Text-to-Image Diffusion Models20 Dec 2023
- 2024Evaluating Robustness of Generative Search Engine on Adversarial Factual Questionscited by 9
- 2024Spiral of Silence: How is Large Language Model Killing Information Retrieval? -- A Case Study on Open Domain Question Answeringcited by 5
- 2026VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Modelscited by 0
- 2026VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Models1 Sep 2026
- 2024Spiral of Silence: How is Large Language Model Killing Information Retrieval? -- A Case Study on Open Domain Question Answering16 Apr 2024
- 2024Evaluating Robustness of Generative Search Engine on Adversarial Factual Questions25 Feb 2024
- 2024GPT-4o System Cardcited by 4,467
- 2024Knowledge Conflicts for LLMs: A Surveycited by 274
- 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 185
- 2023GPTs are GPTs: An Early Look at the Labor Market Impact Potential of Large Language Modelscited by 174
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2023On the Risk of Misinformation Pollution with Large Language Modelscited by 124
- 2023Regulating ChatGPT and other Large Generative AI Modelscited by 102
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2023Art and the science of generative AI: A deeper divecited by 93
- 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
12 most cited of 106 All 106 (JSON)
- 2026DeBERTa-ConPara: Attack-Aware and Deployment-Realistic Detection of AI-Generated Text1 Oct 2026
- 2026Linear Probing Provides Robust and Efficient Detection of Machine-Generated Text25 Aug 2026
- 2026Propaganda Forensics: Recovering the Generation Pipeline of an AI-Driven Influence Campaign16 Aug 2026
- 2026InfoOps Bench: A live information operations safety benchmark30 Jul 2026
- 2026Unsupervised Style Representation Learning for AI-Text Detection via Paraphrase Inversion8 Jun 2026
- 2026Large Language Models Hack Rewards, and Society2 Jun 2026
- 2026IDO: Incongruity-aware Distribution Optimization for Multimodal Fake News Detection2 Jun 2026
- 2026The Future of Facts: Tracing the Factual Generation-Verification Gap26 May 2026
- 2026Who Owns This Agent? Tracing AI Agents Back to Their Owners15 May 2026
- 2026The Bots of Persuasion: Examining How Conversational Agents' Linguistic Expressions of Personality Affect User Perceptions and Decisions19 Feb 2026
- 2026The Language You Ask In: Language-Conditioned Ideological Divergence in LLM Analysis of Contested Political Documents17 Jan 2026
- 2026The AI Cognitive Trojan Horse: How Large Language Models May Bypass Human Epistemic Vigilance11 Jan 2026
12 newest of 106 All 106 (JSON)