[66] A. Wei, N. Haghtalab, and J. Steinhardt, “Jailbroken: How does LLM safety training fail?” in Advances in Neural
Information Processing Systems (NeurIPS), 2023.
[67] I. Yona, I. Shumailov, J. Hayes, and N. Carlini, “Stealing user prompts from mixture of experts,” arXiv preprint
arXiv:2410.22884, 2024.
[68] M. Yue, J. Zhao, M. Zhang, L. Du, and Z. Yao, “Large language model cascades with mixture of thought represen-
tations for cost-efficient reasoning,” in International Conference on Learning Representations (ICLR), 2024.
[69] C. Zhang, T. Zhang, and V . Shmatikov, “Controlled generation of natural adversarial documents for stealthy retrieval
poisoning,” arXiv preprint arXiv:2410.02163, 2024.
[70] Y . Zhang, N. Carlini, and D. Ippolito, “Effective prompt extraction from language models,” in First Conference on
Language Modeling, 2024.
21