{"total":140,"rows":[{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651,"area":"safety"},{"id":"2301.10226","title":"A Watermark for Large Language Models","created":"2023-01-24","cited_by_count":725,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489,"area":"safety"},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2304.05197","title":"Multi-step Jailbreaking Privacy Attacks on ChatGPT","created":"2023-04-11","cited_by_count":333,"area":"safety"},{"id":"2406.04313","title":"Improving Alignment and Robustness with Circuit Breakers","created":"2024-06-06","cited_by_count":322,"area":"safety"},{"id":"2310.10683","title":"Large Language Model Unlearning","created":"2023-10-14","cited_by_count":302,"area":"safety"},{"id":"2311.08268","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","created":"2023-11-14","cited_by_count":259,"area":"safety"},{"id":"2310.06474","title":"Multilingual Jailbreak Challenges in Large Language Models","created":"2023-10-10","cited_by_count":240,"area":"safety"},{"id":"2306.04528","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","created":"2023-06-07","cited_by_count":226,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2311.03348","title":"Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation","created":"2023-11-06","cited_by_count":214,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2402.02207","title":"Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Models","created":"2024-02-03","cited_by_count":167,"area":"safety"},{"id":"2401.17263","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","created":"2024-01-30","cited_by_count":156,"area":"safety"},{"id":"2408.00761","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","created":"2024-08-01","cited_by_count":138,"area":"safety"},{"id":"2402.15159","title":"Machine Unlearning of Pre-trained Large Language Models","created":"2024-02-23","cited_by_count":119,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2306.09442","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","created":"2023-06-15","cited_by_count":114,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2310.12505","title":"Attack Prompt Generation for Red Teaming and Defending Large Language Models","created":"2023-10-19","cited_by_count":76,"area":"safety"},{"id":"2403.07865","title":"CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completion","created":"2024-03-12","cited_by_count":76,"area":"safety"},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2406.10794","title":"Towards Understanding Jailbreak Attacks in LLMs: A Representation Space Analysis","created":"2024-06-16","cited_by_count":64,"area":"safety"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2502.07557","title":"JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation","created":"2025-02-11","cited_by_count":54,"area":"safety"},{"id":"2310.00905","title":"All Languages Matter: On the Multilingual Safety of Large Language Models","created":"2023-10-02","cited_by_count":53,"area":"safety"},{"id":"2312.12321","title":"Bypassing the Safety Training of Open-Source LLMs with Priming Attacks","created":"2023-12-19","cited_by_count":50,"area":"safety"},{"id":"2601.11516","title":"Building Production-Ready Probes For Gemini","created":"2026-01-16","cited_by_count":47,"area":"safety"},{"id":"2403.01267","title":"Dissecting Language Models: Machine Unlearning via Selective Pruning","created":"2024-03-02","cited_by_count":42,"area":"safety"},{"id":"2405.20413","title":"Jailbreaking Large Language Models Against Moderation Guardrails via Cipher Characters","created":"2024-05-30","cited_by_count":42,"area":"safety"},{"id":"2402.12991","title":"TRAP: Targeted Random Adversarial Prompt Honeypot for Black-Box Identification","created":"2024-02-20","cited_by_count":36,"area":"safety"},{"id":"2401.16656","title":"Gradient-Based Language Model Red Teaming","created":"2024-01-30","cited_by_count":34,"area":"safety"},{"id":"2308.08090","title":"Separate the Wheat from the Chaff: Model Deficiency Unlearning via Parameter-Efficient Module Operation","created":"2023-08-16","cited_by_count":33,"area":"safety"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2404.14461","title":"Competition Report: Finding Universal Jailbreak Backdoors in Aligned LLMs","created":"2024-04-22","cited_by_count":28,"area":"safety"},{"id":"2309.13322","title":"From Text to Source: Results in Detecting Large Language Model-Generated Content","created":"2023-09-23","cited_by_count":26,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2502.03052","title":"Understanding and Enhancing the Transferability of Jailbreaking Attacks","created":"2025-02-05","cited_by_count":22,"area":"safety"},{"id":"2410.14827","title":"Enhancing Prompt Injection Attacks to LLMs via Poisoning Alignment","created":"2024-10-18","cited_by_count":21,"area":"safety"},{"id":"2402.14857","title":"Is the System Message Really Important to Jailbreaks in Large Language Models?","created":"2024-02-20","cited_by_count":20,"area":"safety"},{"id":"2410.01294","title":"Endless Jailbreaks with Bijection Learning","created":"2024-10-02","cited_by_count":19,"area":"safety"},{"id":"2505.18325","title":"Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundary","created":"2025-05-23","cited_by_count":18,"area":"safety"},{"id":"2601.02671","title":"Extracting books from production language models","created":"2026-01-06","cited_by_count":17,"area":"safety"},{"id":"2311.05074","title":"GRASP: A Disagreement Analysis Framework to Assess Group Associations in Perspectives","created":"2023-11-09","cited_by_count":16,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2410.20911","title":"Hacking Back the AI-Hacker: Prompt Injection as a Defense Against LLM-driven Cyberattacks","created":"2024-10-28","cited_by_count":15,"area":"safety"},{"id":"2412.03235","title":"Does Safety Training of LLMs Generalize to Semantically Related Natural Prompts?","created":"2024-12-04","cited_by_count":15,"area":"safety"},{"id":"2603.10521","title":"IH-Challenge: A Training Dataset to Improve Instruction Hierarchy on Frontier LLMs","created":"2026-03-11","cited_by_count":15,"area":"safety"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2506.07891","title":"Video Unlearning via Low-Rank Refusal Vector","created":"2025-06-09","cited_by_count":13,"area":"safety"},{"id":"2405.07667","title":"Simulate and Eliminate: Revoke Backdoors for Generative Large Language Models","created":"2024-05-13","cited_by_count":12,"area":"safety"},{"id":"2507.07341","title":"On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignment","created":"2025-07-09","cited_by_count":12,"area":"safety"},{"id":"2306.08833","title":"Safeguarding Crowdsourcing Surveys from ChatGPT with Prompt Injection","created":"2023-06-15","cited_by_count":11,"area":"safety"},{"id":"2309.14054","title":"Adapt then Unlearn: Exploring Parameter Space Semantics for Unlearning in Generative Adversarial Networks","created":"2023-09-25","cited_by_count":11,"area":"safety"},{"id":"2410.03869","title":"Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step","created":"2024-10-04","cited_by_count":11,"area":"safety"},{"id":"2407.03160","title":"SOS! Soft Prompt Attack Against Open-Source Large Language Models","created":"2024-07-03","cited_by_count":10,"area":"safety"},{"id":"2504.21038","title":"Prefill-level Jailbreak: A Black-Box Risk Analysis of Large Language Models","created":"2025-04-28","cited_by_count":10,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2505.02862","title":"Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMs","created":"2025-05-03","cited_by_count":9,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2505.12060","title":"Why Not Act on What You Know? Unleashing Safety Potential of LLMs via Self-Aware Guard Enhancement","created":"2025-05-17","cited_by_count":8,"area":"safety"},{"id":"2406.18725","title":"Jailbreaking LLMs with Arabic Transliteration and Arabizi","created":"2024-06-26","cited_by_count":7,"area":"safety"},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2501.13115","title":"Dagger Behind Smile: Fool LLMs with a Happy Ending Story","created":"2025-01-19","cited_by_count":6,"area":"safety"},{"id":"2501.13677","title":"HumorReject: Decoupling LLM Safety from Refusal Prefix via A Little Humor","created":"2025-01-23","cited_by_count":6,"area":"safety"},{"id":"2602.12418","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","created":"2026-02-12","cited_by_count":6,"area":"safety"},{"id":"2603.01291","title":"JailNewsBench: Multi-Lingual and Regional Benchmark for Fake News Generation under Jailbreak Attacks","created":"2026-03-01","cited_by_count":6,"area":"safety"},{"id":"2302.10291","title":"Can Large Language Models Change User Preference Adversarially?","created":"2023-01-05","cited_by_count":5,"area":"safety"},{"id":"2311.09473","title":"JAB: Joint Adversarial Prompting and Belief Augmentation","created":"2023-11-16","cited_by_count":5,"area":"safety"},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2502.10450","title":"Trustworthy AI: Safety, Bias, and Privacy -- A Survey","created":"2025-02-11","cited_by_count":5,"area":"safety"},{"id":"2506.06384","title":"Detection Method for Prompt Injection by Integrating Pre-trained Model and Heuristic Feature Engineering","created":"2025-06-05","cited_by_count":5,"area":"safety"},{"id":"2510.07239","title":"Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts","created":"2025-10-08","cited_by_count":5,"area":"safety"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2509.14651","title":"MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2510.01088","title":"Safety Instincts: LLMs Learn to Trust Their Internal Compass for Self-Defense","created":"2025-10-01","cited_by_count":4,"area":"safety"},{"id":"2510.26096","title":"ALMGuard: Safety Shortcuts and Where to Find Them as Guardrails for Audio-Language Models","created":"2025-10-30","cited_by_count":4,"area":"safety"},{"id":"2601.10543","title":"Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing","created":"2026-01-15","cited_by_count":4,"area":"safety"},{"id":"2605.07982","title":"GLiGuard: Schema-Conditioned Classification for LLM Safeguard","created":"2026-05-08","cited_by_count":4,"area":"safety"},{"id":"2405.14490","title":"Impact of Non-Standard Unicode Characters on Security and Comprehension in Large Language Models","created":"2024-05-23","cited_by_count":3,"area":"safety"},{"id":"2411.12946","title":"A Flexible Large Language Models Guardrail Development Methodology Applied to Off-Topic Prompt Detection","created":"2024-11-20","cited_by_count":3,"area":"safety"},{"id":"2501.16534","title":"Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs","created":"2025-01-27","cited_by_count":3,"area":"safety"},{"id":"2502.16737","title":"Keeping up with dynamic attackers: Certifying robustness to adaptive online data poisoning","created":"2025-02-23","cited_by_count":3,"area":"safety"},{"id":"2505.04578","title":"Fight Fire with Fire: Defending Against Malicious RL Fine-Tuning via Reward Neutralization","created":"2025-05-07","cited_by_count":3,"area":"safety"},{"id":"2506.17231","title":"Efficient and Stealthy Jailbreak Attacks via Adversarial Prompt Distillation from LLMs to SLMs","created":"2025-05-26","cited_by_count":3,"area":"safety"},{"id":"2507.13474","title":"Paper Summary Attack: Jailbreaking LLMs through LLM Safety Papers","created":"2025-07-17","cited_by_count":3,"area":"safety"},{"id":"2601.08490","title":"BenchOverflow: Measuring Overflow in Large Language Models via Plain-Text Prompts","created":"2026-01-13","cited_by_count":3,"area":"safety"},{"id":"2602.04581","title":"Trust The Typical","created":"2026-02-04","cited_by_count":3,"area":"safety"},{"id":"2602.13547","title":"AISA: Awakening Intrinsic Safety Awareness in Large Language Models against Jailbreak Attacks","created":"2026-02-14","cited_by_count":3,"area":"safety"},{"id":"2603.03323","title":"Discern Truth from Falsehood: Reducing Over-Refusal via Contrastive Refinement","created":"2026-02-10","cited_by_count":3,"area":"safety"},{"id":"2407.16686","title":"Can Large Language Models Automatically Jailbreak GPT-4V?","created":"2024-07-23","cited_by_count":2,"area":"safety"},{"id":"2411.09125","title":"DROJ: A Prompt-Driven Attack against Large Language Models","created":"2024-11-14","cited_by_count":2,"area":"safety"},{"id":"2507.04673","title":"Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message","created":"2025-07-07","cited_by_count":2,"area":"safety"},{"id":"2510.01342","title":"Fine-Tuning Jailbreaks under Highly Constrained Black-Box Settings: A Three-Pronged Approach","created":"2025-10-01","cited_by_count":2,"area":"safety"},{"id":"2604.12986","title":"Parallax: Why AI Agents That Think Must Never Act","created":"2026-04-14","cited_by_count":2,"area":"safety"},{"id":"2606.01738","title":"THRD: A Training-Free Multi-Turn Defense Framework for Jailbreak Attacks on Large Language Models","created":"2026-06-01","cited_by_count":2,"area":"safety"}],"next_cursor":"100"}