activity
20242026
most citedPersistent Pre-Training Poisoning of LLMs

1 citations · 2 across the 8 of their papers we have counts for

collaborators

8 papers

cs.CR2026

Beyond Predictable Paths: Redefining AI Security Incident Reporting for Agents

Anastasia Pustozerova, Eugene Bagdasarian, Luca Beurer-Kellner +22

AI agents are being deployed rapidly, accompanied by a growing number of AI-specific attacks and corresponding incidents. As incident reporting becomes increasingly important for l…

cs.LG2025

Command-V: Pasting LLM Behaviors via Activation Profiles

Barry Wang, Avi Schwarzschild, Alexander Robey +4

Retrofitting large language models (LLMs) with new behaviors typically requires full finetuning or distillation-costly steps that must be repeated for every architecture. In this w…

cs.CL2025

FictionalQA: A Dataset for Studying Memorization and Knowledge Acquisition

John Kirchenbauer, Janny Mongkolsupawan, Yuxin Wen +2

When language models are trained on textual data, they acquire both knowledge about the structure of language as well as knowledge of facts about the world. At inference time, thei…

cs.CR2025

LLMs unlock new paths to monetizing exploits

Nicholas Carlini, Milad Nasr, Edoardo Debenedetti +5

We argue that Large language models (LLMs) will soon alter the economics of cyberattacks. Instead of attacking the most commonly used software and monetizing exploits by targeting…

cs.LG2025

Exploring and Mitigating Adversarial Manipulation of Voting-Based Leaderboards

Yangsibo Huang, Milad Nasr, Anastasios Angelopoulos +10

It is now common to evaluate Large Language Models (LLMs) by having humans manually vote to evaluate model outputs, in contrast to typical benchmarks that evaluate knowledge or ski…

cs.CL2024

Measuring Non-Adversarial Reproduction of Training Data in Large Language Models

Michael Aerni, Javier Rando, Edoardo Debenedetti +3

Large language models memorize parts of their training data. Memorizing short snippets and facts is required to answer questions about the world and to be fluent in any language. B…

cs.CR2024★ 1 cited

Persistent Pre-Training Poisoning of LLMs

Yiming Zhang, Javier Rando, Ivan Evtimov +5

Large language models are pre-trained on uncurated text datasets consisting of trillions of tokens scraped from the Web. Prior work has shown that: (1) web-scraped pre-training dat…

cs.LG2024★ 1 cited

Human-aligned Chess with a Bit of Search

Yiming Zhang, Athul Paul Jacob, Vivian Lai +2

Chess has long been a testbed for AI's quest to match human intelligence, and in recent years, chess AI systems have surpassed the strongest humans at the game. However, these syst…