Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-15T20:34:34.832662Z
Paper Citation Record · LEDGER
A Survey of Attacks on Large Language Models
As of 19 August 2026, this Paper Citation Record lists 90 of 90 outbound references and 8 inbound Pith citation observations for arXiv:2505.12567.
A citation records a reference. It does not transfer a finding from one paper to another.
Coverage vector
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-18T06:34:40.430872+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links, observed 2026-08-06T22:23:14.155540Z
A source-named dated measurement, never combined with another source.
Source: arxiv_reference, observed 2026-07-01T11:05:42.376291Z
Reference resolution
90 of 90 outbound references displayed
- verified exact0
- verified fuzzy24
- unresolved66
- parse uncertain0
- malformed identifier0
- metadata mismatch0
External citation measurements
No source-named external measurement is stored.
Outbound references
Observation 6e927fab-1f0d-4e14-991a-54396924dd3b · outbound
This paper cites Pre-Trained Language Models for Text Generation: A Survey,.
A Survey of Attacks on Large Language Models Pre-Trained Language Models for Text Generation: A Survey,
Reference 1
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.191420Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 606bc696-3ee8-40fa-97f6-9ebff78bb358 · outbound
This paper cites Reasoning with Large Language Models, A Survey,.
A Survey of Attacks on Large Language Models Reasoning with Large Language Models, A Survey,
Reference 2
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.196723Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5b1b2fbc-4bed-4327-9204-f37ec6583798 · outbound
This paper cites Sentiment Analysis in the Era of Large Language Models: A Reality Check.
A Survey of Attacks on Large Language Models Sentiment Analysis in the Era of Large Language Models: A Reality Check
Reference 3
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.201549Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2737c039-9f37-48cc-b26f-2502ad76cdcf · outbound
This paper cites ChatGPT (Feb 20 Version),.
A Survey of Attacks on Large Language Models ChatGPT (Feb 20 Version),
Reference 4
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.206866Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8856b0ae-c7b1-406a-977e-b0cacd9b5667 · outbound
This paper cites The Llama 3 Herd of Models.
A Survey of Attacks on Large Language Models The Llama 3 Herd of Models
Reference 5
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.212910Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6189d6aa-8674-4f31-92e7-a1986c2cf79b · outbound
This paper cites DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning.
A Survey of Attacks on Large Language Models DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning
Reference 6
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.219706Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bd1f6d34-04f0-4c4c-a2c9-b55e0f901363 · outbound
This paper cites [Online].
Reference 7
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.226630Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0b92c603-c773-4090-ad48-2e8743ba095b · outbound
This paper cites Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyond,.
A Survey of Attacks on Large Language Models Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyond,
Reference 8
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.233775Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation aca0cad4-b407-49d9-ab58-495b7aff1ab0 · outbound
This paper cites A survey on Large Language Model Based Autonomous Agents,.
A Survey of Attacks on Large Language Models A survey on Large Language Model Based Autonomous Agents,
Reference 9
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.238698Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ee1f4f2b-125b-481c-8355-6fea5c496f3d · outbound
This paper cites A Comprehensive Overview of Large Language Models.
A Survey of Attacks on Large Language Models A Comprehensive Overview of Large Language Models
Reference 10
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.244175Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 02300cd2-38ae-4ed8-bf0e-3ed8fd4890ea · outbound
This paper cites Attention Is All You Need.
A Survey of Attacks on Large Language Models Attention Is All You Need
Reference 11
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.250543Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 64ef5e71-d0bc-481e-9960-e7eb247dbcb0 · outbound
This paper cites A Survey of Recent Backdoor Attacks and Defenses in Large Language Models,.
A Survey of Attacks on Large Language Models A Survey of Recent Backdoor Attacks and Defenses in Large Language Models,
Reference 12
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.256952Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4d95a2ce-d15a-4b46-98aa-edfc1d063585 · outbound
This paper cites BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models.
A Survey of Attacks on Large Language Models BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models
Reference 13
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.263721Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2cae0c49-65ca-4767-baba-9eac0d44d635 · outbound
This paper cites Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger.
A Survey of Attacks on Large Language Models Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger
Reference 14
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.269857Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4690a156-df51-41b0-a499-0f0acb8fd993 · outbound
This paper cites Hid- den Backdoors in Human-Centric Language Models,.
A Survey of Attacks on Large Language Models Hid- den Backdoors in Human-Centric Language Models,
Reference 15
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.275807Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 43f8b2f3-f942-487e-8bc7-81fe8eb454f6 · outbound
This paper cites Composite Backdoor Attacks Against Large Language Models.
A Survey of Attacks on Large Language Models Composite Backdoor Attacks Against Large Language Models
Reference 16
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.282095Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 6eae61db-a30a-4373-8ec5-4e8cff431d01 · outbound
This paper cites PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models.
A Survey of Attacks on Large Language Models PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models
Reference 17
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.286851Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a8022600-dfa7-433d-a4d4-544321b4bb49 · outbound
This paper cites Instruction Backdoor Attacks Against Customized LLMs,.
A Survey of Attacks on Large Language Models Instruction Backdoor Attacks Against Customized LLMs,
Reference 18
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.291195Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5d399286-3721-42ae-aee2-3ccc8b4b0206 · outbound
This paper cites Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection.
A Survey of Attacks on Large Language Models Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection
Reference 19
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.295275Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f903d963-56cb-499e-824d-c4a8c81368f3 · outbound
This paper cites BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPT.
A Survey of Attacks on Large Language Models BadGPT: Exploring Security Vulnerabilities of ChatGPT via Backdoor Attacks to InstructGPT
Reference 20
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.299537Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 639a51af-7e2b-4423-bad2-7478cf0fbf35 · outbound
This paper cites RLHFPoison: Reward Poisoning Attack for Reinforcement Learning with Human Feedback in Large Language Models.
A Survey of Attacks on Large Language Models RLHFPoison: Reward Poisoning Attack for Reinforcement Learning with Human Feedback in Large Language Models
Reference 21
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.306384Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 8c72e250-7cf8-46cd-a26b-2bf3fd0446e9 · outbound
This paper cites TrojLLM: A Black-box Trojan Prompt Attack on Large Language Models,.
A Survey of Attacks on Large Language Models TrojLLM: A Black-box Trojan Prompt Attack on Large Language Models,
Reference 22
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.323183Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation bef1fbbc-71d5-4c76-80bf-fa7d3d9d5c86 · outbound
This paper cites PoisonPrompt: Backdoor Attack on Prompt-Based Large Language Models,.
A Survey of Attacks on Large Language Models PoisonPrompt: Backdoor Attack on Prompt-Based Large Language Models,
Reference 23
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.329119Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fc92ec7a-302d-4d4a-b93c-805ff9a70614 · outbound
This paper cites BadEdit: Backdooring large language models by model editing.
A Survey of Attacks on Large Language Models BadEdit: Backdooring large language models by model editing
Reference 24
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.334790Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ddba28a2-7eae-4a4a-85d4-f527620c45d3 · outbound
This paper cites LoRATK: LoRA Once, Backdoor Everywhere in the Share-and-Play Ecosystem.
A Survey of Attacks on Large Language Models LoRATK: LoRA Once, Backdoor Everywhere in the Share-and-Play Ecosystem
Reference 25
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.340871Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 32f05ac9-714b-43df-acd8-c9cbbb16a103 · outbound
This paper cites The Philosopher's Stone: Trojaning Plugins of Large Language Models.
A Survey of Attacks on Large Language Models The Philosopher's Stone: Trojaning Plugins of Large Language Models
Reference 26
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.347283Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ea36b0c2-fd72-4dda-86a6-d9dff21b81b2 · outbound
This paper cites A Gradient Control Method for Backdoor Attacks on Parameter-Efficient Tuning,.
A Survey of Attacks on Large Language Models A Gradient Control Method for Backdoor Attacks on Parameter-Efficient Tuning,
Reference 27
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.353573Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ea5fdb87-2e78-4dfb-9370-991952db1837 · outbound
This paper cites Weak-to-Strong Jailbreaking on Large Language Models.
A Survey of Attacks on Large Language Models Weak-to-Strong Jailbreaking on Large Language Models
Reference 28
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.361272Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fbefdb4a-f310-4c2a-98cd-b930afcfbb91 · outbound
This paper cites Trojan Activation Attack: Red-Teaming Large Language Models using Activation Steering for Safety-Alignment.
A Survey of Attacks on Large Language Models Trojan Activation Attack: Red-Teaming Large Language Models using Activation Steering for Safety-Alignment
Reference 29
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.367090Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 12f7b979-4c0c-46f5-bf07-f70f35a9d194 · outbound
This paper cites BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models.
A Survey of Attacks on Large Language Models BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models
Reference 30
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.374059Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a9634968-3e05-4280-ad90-0c51b60ff403 · outbound
This paper cites To Think or Not to Think: Exploring the Unthinking Vulnerability in Large Reasoning Models.
A Survey of Attacks on Large Language Models To Think or Not to Think: Exploring the Unthinking Vulnerability in Large Reasoning Models
Reference 31
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.380935Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation b704f2c9-92ac-4151-a4e1-976192723395 · outbound
This paper cites Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning.
A Survey of Attacks on Large Language Models Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learning
Reference 32
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.391187Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a8e20b5b-f1df-4789-9a25-e5f05cc3bb03 · outbound
This paper cites Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systems.
A Survey of Attacks on Large Language Models Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systems
Reference 33
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.404165Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d8ae9b86-b57f-4c6a-a605-6eba4af0a623 · outbound
This paper cites BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents,.
A Survey of Attacks on Large Language Models BadAgent: Inserting and Activating Backdoor Attacks in LLM Agents,
Reference 34
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.243777Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation a0ed7131-dc75-4490-b38f-a08282b9ae99 · outbound
This paper cites DemonAgent: Dynamically Encrypted Multi-Backdoor Implantation Attack on LLM- based Agent,.
A Survey of Attacks on Large Language Models DemonAgent: Dynamically Encrypted Multi-Backdoor Implantation Attack on LLM- based Agent,
Reference 35
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.417986Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 53d81efb-f0f7-494a-a832-a51aae414212 · outbound
This paper cites Adversarial Example Generation with Syntactically Controlled Paraphrase Networks.
A Survey of Attacks on Large Language Models Adversarial Example Generation with Syntactically Controlled Paraphrase Networks
Reference 36
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.424174Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation affe0cd0-06b0-47b5-b24a-f50efed574d7 · outbound
This paper cites TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation.
A Survey of Attacks on Large Language Models TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation
Reference 37
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.429484Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 42526f95-ea73-4530-b4b5-4a99589122fc · outbound
This paper cites BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding,.
A Survey of Attacks on Large Language Models BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding,
Reference 38
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.439375Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 276ceb59-8064-4b29-b27f-6dd046e9126b · outbound
This paper cites ONION: A Simple and Effective Defense Against Textual Backdoor Attacks.
A Survey of Attacks on Large Language Models ONION: A Simple and Effective Defense Against Textual Backdoor Attacks
Reference 39
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.445221Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d4f24197-de3a-4195-867d-d1a417450a2a · outbound
This paper cites BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target,.
A Survey of Attacks on Large Language Models BAIT: Large Language Model Backdoor Scanning by Inverting Attack Target,
Reference 40
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.220538Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 2d6e0e34-e12f-4f6f-bd85-bb5bf8d5786c · outbound
This paper cites Scenic: A language for scenario specifi- cation and scene generation,.
A Survey of Attacks on Large Language Models Scenic: A language for scenario specifi- cation and scene generation,
Reference 41
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.208524Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation f07aff55-1948-4b7a-bedb-7b55be3b0eb6 · outbound
This paper cites Principles and methods of testing finite state machines-a survey,.
A Survey of Attacks on Large Language Models Principles and methods of testing finite state machines-a survey,
Reference 42
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.194698Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 217bfb8b-21a4-42ae-9a40-d2c3e293a387 · outbound
This paper cites Security and Privacy Challenges of Large Language Models: A Survey,.
A Survey of Attacks on Large Language Models Security and Privacy Challenges of Large Language Models: A Survey,
Reference 43
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.472575Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 2e0a6d24-7e25-4dc2-b84c-1e743d403264 · outbound
This paper cites Jailbroken: How Does LLM Safety Training Fail?.
A Survey of Attacks on Large Language Models Jailbroken: How Does LLM Safety Training Fail?
Reference 44
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.181998Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation a695a783-7505-48ca-ae1e-ae545c92439d · outbound
This paper cites Prompt Hacking: Jailbreaking,.
A Survey of Attacks on Large Language Models Prompt Hacking: Jailbreaking,
Reference 45
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.170491Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 9dd7d00e-bead-45e6-a5a3-c2c30d9af675 · outbound
This paper cites JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models.
A Survey of Attacks on Large Language Models JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models
Reference 46
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.496974Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 5a5eae45-45b3-4d28-b68b-3494f803f34b · outbound
This paper cites GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts.
A Survey of Attacks on Large Language Models GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts
Reference 47
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.503271Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation aeb67266-583a-42ab-8ccf-f02a82c16008 · outbound
This paper cites Jailbreaking Black Box Large Language Models in Twenty Queries.
A Survey of Attacks on Large Language Models Jailbreaking Black Box Large Language Models in Twenty Queries
Reference 48
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.511007Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9df709e0-0791-45f8-80b3-991a04e39171 · outbound
This paper cites Tree of Attacks: Jailbreaking Black-Box LLMs Automatically,.
A Survey of Attacks on Large Language Models Tree of Attacks: Jailbreaking Black-Box LLMs Automatically,
Reference 49
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.158921Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation cc920407-b97d-4470-b445-96c8b683fbf3 · outbound
This paper cites Low-Resource Languages Jailbreak GPT-4.
A Survey of Attacks on Large Language Models Low-Resource Languages Jailbreak GPT-4
Reference 50
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.526897Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0606193a-82ce-43cf-ac47-b4eff148cb26 · outbound
This paper cites Multilingual Jailbreak Challenges in Large Language Models.
A Survey of Attacks on Large Language Models Multilingual Jailbreak Challenges in Large Language Models
Reference 51
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.534869Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fc5d4f19-a2d9-41da-b808-0f28704f2c55 · outbound
This paper cites Jailbreaking to Jailbreak.
A Survey of Attacks on Large Language Models Jailbreaking to Jailbreak
Reference 52
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.543776Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 59170d5e-b832-4506-a55f-64a2e8fafbb6 · outbound
This paper cites SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks.
A Survey of Attacks on Large Language Models SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks
Reference 53
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.552997Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 85853ff3-d6d3-44e8-a458-1046af9e05b3 · outbound
This paper cites Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues.
A Survey of Attacks on Large Language Models Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues
Reference 54
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.563208Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4439373d-710d-4491-a7ab-f4106ab175ed · outbound
This paper cites Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation.
A Survey of Attacks on Large Language Models Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation
Reference 55
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.572871Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 162cf38f-adde-4d6c-937f-d25412ecea26 · outbound
This paper cites How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs,.
A Survey of Attacks on Large Language Models How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs,
Reference 56
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.144761Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 2d6f1973-7f78-4fff-a99c-912963ba9242 · outbound
This paper cites Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models.
A Survey of Attacks on Large Language Models Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models
Reference 57
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.587307Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fc2d06d4-734e-4496-af43-211713c0ecd1 · outbound
This paper cites Dual Intention Escape: Jailbreak Attack against Large Language Models,.
A Survey of Attacks on Large Language Models Dual Intention Escape: Jailbreak Attack against Large Language Models,
Reference 58
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.131879Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 92ed050d-b41d-45ab-b3f2-b2e10b21c5b7 · outbound
This paper cites Formalizing and Benchmarking Prompt Injection Attacks and Defenses,.
A Survey of Attacks on Large Language Models Formalizing and Benchmarking Prompt Injection Attacks and Defenses,
Reference 59
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.119363Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 249b716a-fe87-4156-8f64-2bd39e507473 · outbound
This paper cites A Study on Prompt Injection Attack Against LLM-Integrated Mobile Robotic Systems,.
A Survey of Attacks on Large Language Models A Study on Prompt Injection Attack Against LLM-Integrated Mobile Robotic Systems,
Reference 60
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.105453Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 3f980cf6-97ef-419e-80ae-dfda0790b972 · outbound
This paper cites Vocabulary Attack to Hijack Large Language Model Applications.
A Survey of Attacks on Large Language Models Vocabulary Attack to Hijack Large Language Model Applications
Reference 61
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.614961Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 93281239-2d0b-4c04-aae3-08e983b8e62c · outbound
This paper cites Automatic and Universal Prompt Injection Attacks against Large Language Models.
A Survey of Attacks on Large Language Models Automatic and Universal Prompt Injection Attacks against Large Language Models
Reference 62
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.621066Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f3a1dbf6-95b3-4e59-b920-2813ab1c9fd1 · outbound
This paper cites Optimization-based Prompt Injection Attack to LLM-as-a-Judge,.
A Survey of Attacks on Large Language Models Optimization-based Prompt Injection Attack to LLM-as-a-Judge,
Reference 63
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.091949Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 18412a91-f0f0-4f09-9565-1aa63a9c4f9f · outbound
This paper cites Goal-guided Generative Prompt Injection Attack on Large Language Models.
A Survey of Attacks on Large Language Models Goal-guided Generative Prompt Injection Attack on Large Language Models
Reference 64
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.636320Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ae9e1c3c-9d15-4d0b-beba-d19e9ba8b1ff · outbound
This paper cites Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems.
A Survey of Attacks on Large Language Models Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems
Reference 65
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.644015Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 610d95b6-3684-4db4-838e-f7bbb2817568 · outbound
This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.
A Survey of Attacks on Large Language Models Ignore Previous Prompt: Attack Techniques For Language Models
Reference 66
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.651555Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 465923f2-c46e-4d1b-8f08-ea573cc01eaf · outbound
This paper cites Delimiters Won’t Save You,.
A Survey of Attacks on Large Language Models Delimiters Won’t Save You,
Reference 67
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.080650Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation f8b0b41c-e1a3-41c8-91c9-a097382c40e6 · outbound
This paper cites Baseline Defenses for Adversarial Attacks Against Aligned Language Models.
A Survey of Attacks on Large Language Models Baseline Defenses for Adversarial Attacks Against Aligned Language Models
Reference 68
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.663920Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 70de337b-b896-451a-9a49-f76303e650de · outbound
This paper cites Ultimate ChatGPT Prompt Engineering Guide for General Users and Developers,.
A Survey of Attacks on Large Language Models Ultimate ChatGPT Prompt Engineering Guide for General Users and Developers,
Reference 69
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.068567Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation bf908670-5bf9-45ea-a9bf-23a94aabe916 · outbound
This paper cites Sandwich defense,.
A Survey of Attacks on Large Language Models Sandwich defense,
Reference 70
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.056403Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation ec786244-f26f-4698-8d76-aebe33e0d5c5 · outbound
This paper cites Instruction defense,.
A Survey of Attacks on Large Language Models Instruction defense,
Reference 71
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.043375Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation e7b6e999-9bb9-4ef7-8a31-9e5e5aeea3ca · outbound
This paper cites Detecting Language Model Attacks with Perplexity.
A Survey of Attacks on Large Language Models Detecting Language Model Attacks with Perplexity
Reference 72
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.686308Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 270e9c0a-1d06-40b2-a565-2bdb9726e325 · outbound
This paper cites Using gpt: Eliezer against chatgpt jailbreaking,.
A Survey of Attacks on Large Language Models Using gpt: Eliezer against chatgpt jailbreaking,
Reference 73
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.031110Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation aae60384-94b0-4303-8daf-64f65cab986a · outbound
This paper cites Exploring prompt injection attacks.
A Survey of Attacks on Large Language Models Exploring prompt injection attacks
Reference 74
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.006044Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 9c4f16f7-2c30-4d8d-9910-370037abe360 · outbound
This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.
A Survey of Attacks on Large Language Models Universal and Transferable Adversarial Attacks on Aligned Language Models
Reference 75
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.726147Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 566ceb58-c2e3-48f1-86b3-3257ed672434 · outbound
This paper cites Defending Against Indirect Prompt Injection Attacks With Spotlighting.
A Survey of Attacks on Large Language Models Defending Against Indirect Prompt Injection Attacks With Spotlighting
Reference 76
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.741425Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation fc94e52a-b113-403a-8675-d156df9e5ad6 · outbound
This paper cites Denial-of-Service Poisoning Attacks against Large Language Models.
A Survey of Attacks on Large Language Models Denial-of-Service Poisoning Attacks against Large Language Models
Reference 77
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.747573Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 9ddfb50f-3ba8-4b1d-bc3e-e8e028f121ef · outbound
This paper cites LLM Denial of Service,.
A Survey of Attacks on Large Language Models LLM Denial of Service,
Reference 78
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:35.991479Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 471f4d1e-a7c8-4116-ab27-0e95774b5cf9 · outbound
This paper cites Understanding Regular Expression Denial of Service (ReDoS): Insights from LLM-Generated Regexes and Developer Forums,.
A Survey of Attacks on Large Language Models Understanding Regular Expression Denial of Service (ReDoS): Insights from LLM-Generated Regexes and Developer Forums,
Reference 79
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:35.979218Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation c5a11f2c-14cd-46db-93b6-da81bad6b178 · outbound
This paper cites LLM Safeguard is a Double-Edged Sword: Exploiting False Positives for Denial-of-Service Attacks.
A Survey of Attacks on Large Language Models LLM Safeguard is a Double-Edged Sword: Exploiting False Positives for Denial-of-Service Attacks
Reference 80
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.773621Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c50b9911-646d-4cab-9416-6f4143ac5136 · outbound
This paper cites Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformer.
A Survey of Attacks on Large Language Models Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformer
Reference 81
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.779860Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation d3a855c5-1474-4c67-b20a-247567e9cb81 · outbound
This paper cites Textbooks Are All You Need.
A Survey of Attacks on Large Language Models Textbooks Are All You Need
Reference 82
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.788766Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 0f291e9b-af98-4d91-a5b0-705836057257 · outbound
This paper cites Para- phrasing evades detectors of AI-generated text, but retrieval is an effective defense,.
A Survey of Attacks on Large Language Models Para- phrasing evades detectors of AI-generated text, but retrieval is an effective defense,
Reference 83
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:35.964554Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 71615c22-b4a6-4866-8cb1-67e8b22b3a50 · outbound
This paper cites Can AI-Generated Text be Reliably Detected?.
A Survey of Attacks on Large Language Models Can AI-Generated Text be Reliably Detected?
Reference 84
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.802192Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation ed8688dc-ccba-44fd-a7ad-38214f83122f · outbound
This paper cites Red Teaming Language Model Detectors with Language Models,.
A Survey of Attacks on Large Language Models Red Teaming Language Model Detectors with Language Models,
Reference 85
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:35.951395Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 6d3a0909-7f28-4dbe-8c09-ff6efb00fb31 · outbound
This paper cites Undetectable Watermarks for Lan- guage Models,.
A Survey of Attacks on Large Language Models Undetectable Watermarks for Lan- guage Models,
Reference 86
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:35.937984Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation 106bf49e-c9a7-43e2-b85c-48e4db129973 · outbound
This paper cites Large Language Models can be Guided to Evade AI-Generated Text Detection.
A Survey of Attacks on Large Language Models Large Language Models can be Guided to Evade AI-Generated Text Detection
Reference 87
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.818911Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation a592ce91-f788-45d4-b2cc-10a22fb78030 · outbound
This paper cites Bypassing LLM Watermarks with Color-Aware Substitutions.
A Survey of Attacks on Large Language Models Bypassing LLM Watermarks with Color-Aware Substitutions
Reference 88
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.825208Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation cc376204-3355-4dc5-95be-1d7e458d6a93 · outbound
This paper cites $B^4$: A Black-Box Scrubbing Attack on LLM Watermarks.
A Survey of Attacks on Large Language Models $B^4$: A Black-Box Scrubbing Attack on LLM Watermarks
Reference 89
- Resolution
- unresolved
- no resolver link, observed 2026-08-15T20:34:34.832662Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 29f64c01-c193-4fb6-a04d-39308f2718fb · outbound
This paper cites Available:\url{https://www.alignmentforum.org/posts/ pNcFYZnPdXyL2RfgA/using-gpt-eliezer-against-chatgpt-jailbreaking}.
A Survey of Attacks on Large Language Models Available:\url{https://www.alignmentforum.org/posts/ pNcFYZnPdXyL2RfgA/using-gpt-eliezer-against-chatgpt-jailbreaking}
Reference 2023
- Resolution
- verified fuzzy
- raw_fallback, observed 2026-08-15T20:34:36.018050Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Pith citing papers
Observation 0ce7fa8f-8630-4980-9495-8b48523e056b · inbound
A Survey on Model Extraction Attacks and Defenses for Large Language Models cites this paper.
A Survey on Model Extraction Attacks and Defenses for Large Language Models A Survey of Attacks on Large Language Models
Reference 86
- Resolution
- unresolved
- no resolver link, observed 2026-08-06T22:23:14.155540Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4437ed19-2bef-44be-8e2b-3b2765d5a548 · inbound
Exploiting Web Search Tools of AI Agents for Data Exfiltration cites this paper.
Exploiting Web Search Tools of AI Agents for Data Exfiltration A Survey of Attacks on Large Language Models
Reference 10
- Resolution
- metadata mismatch
- arxiv_id, observed 2026-05-18T08:36:07.186914Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation b3b4624a-5506-431b-8382-3254edd8199a · inbound
Step-Wise Refusal Dynamics in Autoregressive and Diffusion Language Models cites this paper.
Step-Wise Refusal Dynamics in Autoregressive and Diffusion Language Models A Survey of Attacks on Large Language Models
Reference 23
- Resolution
- unresolved
- no resolver link, observed 2026-08-03T05:45:43.424556Z
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation c0b1cc9f-0519-459c-bdd1-fcfc6bc94ae5 · inbound
Why Do Large Language Models Generate Harmful Content? cites this paper.
Why Do Large Language Models Generate Harmful Content? A Survey of Attacks on Large Language Models
Reference 20
- Resolution
- verified exact
- arxiv_id, observed 2026-05-11T10:21:04.698068Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation f0ea97eb-3299-4eee-bcf9-d6849840aa43 · inbound
SRTJ: Self-Evolving Rule-Driven Training-Free LLM Jailbreaking cites this paper.
SRTJ: Self-Evolving Rule-Driven Training-Free LLM Jailbreaking A Survey of Attacks on Large Language Models
Reference 41
- Resolution
- verified exact
- arxiv_id, observed 2026-05-11T16:01:12.426820Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation c2da5128-f804-4b81-bdbd-f4f90322c51e · inbound
Efficient Multi-objective Prompt Optimization via Pure-exploration Bandits cites this paper.
Efficient Multi-objective Prompt Optimization via Pure-exploration Bandits A Survey of Attacks on Large Language Models
Reference 23
- Resolution
- verified exact
- arxiv_id, observed 2026-05-15T01:53:29.081821Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation d74a1925-d0ef-4aed-b636-5f55d00c4d90 · inbound
MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection cites this paper.
MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection A Survey of Attacks on Large Language Models
Reference 19
- Resolution
- verified exact
- arxiv_id, observed 2026-05-25T04:05:20.417334Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.
Observation b8ccbc72-829b-40be-a8cf-72766e565523 · inbound
A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems cites this paper.
A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems A Survey of Attacks on Large Language Models
Reference 29
- Resolution
- verified exact
- arxiv_id, observed 2026-07-01T11:05:42.377798Z
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.