{"total":94,"rows":[{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2310.10683","title":"Large Language Model Unlearning","created":"2023-10-14","cited_by_count":302,"area":"safety"},{"id":"2205.13636","title":"Quark: Controllable Text Generation with Reinforced Unlearning","created":"2022-05-26","cited_by_count":237,"area":"safety"},{"id":"2404.16873","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","created":"2024-04-21","cited_by_count":156,"area":"safety"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2402.19464","title":"Curiosity-driven Red-teaming for Large Language Models","created":"2024-02-29","cited_by_count":88,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2405.18540","title":"Learning diverse attacks on large language models for robust red-teaming and safety tuning","created":"2024-05-28","cited_by_count":54,"area":"safety"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2312.00027","title":"Stealthy and Persistent Unalignment on Large Language Models via Backdoor Injections","created":"2023-11-15","cited_by_count":39,"area":"safety"},{"id":"2503.01854","title":"A Comprehensive Survey of Machine Unlearning Techniques for Large Language Models","created":"2025-02-22","cited_by_count":34,"area":"safety"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2402.15302","title":"How (un)ethical are instruction-centric responses of LLMs? Unveiling the vulnerabilities of safety guardrails to harmful queries","created":"2024-02-23","cited_by_count":27,"area":"safety"},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2502.03052","title":"Understanding and Enhancing the Transferability of Jailbreaking Attacks","created":"2025-02-05","cited_by_count":22,"area":"safety"},{"id":"2106.07798","title":"Poisoning Deep Reinforcement Learning Agents with In-Distribution Triggers","created":"2021-06-14","cited_by_count":20,"area":"safety"},{"id":"2405.20539","title":"SleeperNets: Universal Backdoor Poisoning Attacks Against Reinforcement Learning Agents","created":"2024-05-30","cited_by_count":19,"area":"safety"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2505.18325","title":"Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundary","created":"2025-05-23","cited_by_count":18,"area":"safety"},{"id":"2312.15910","title":"Reinforcement Unlearning","created":"2023-12-26","cited_by_count":17,"area":"safety"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2506.07171","title":"RULE: Reinforcement UnLEarning Achieves Forget-Retain Pareto Optimality","created":"2025-06-08","cited_by_count":16,"area":"safety"},{"id":"2603.13026","title":"PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses","created":"2026-03-13","cited_by_count":16,"area":"safety"},{"id":"2603.10521","title":"IH-Challenge: A Training Dataset to Improve Instruction Hierarchy on Frontier LLMs","created":"2026-03-11","cited_by_count":15,"area":"safety"},{"id":"2502.10525","title":"Towards Watermarking of Open-Source LLMs","created":"2025-02-14","cited_by_count":13,"area":"safety"},{"id":"2503.02174","title":"Adversarial Tokenization","created":"2025-03-04","cited_by_count":11,"area":"safety"},{"id":"2412.03123","title":"Robust Multi-bit Text Watermark with LLM-based Paraphrasers","created":"2024-12-04","cited_by_count":10,"area":"safety"},{"id":"2507.05578","title":"The Landscape of Memorization in LLMs: Mechanisms, Measurement, and Mitigation","created":"2025-07-08","cited_by_count":10,"area":"safety"},{"id":"2506.07121","title":"Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models","created":"2025-06-08","cited_by_count":9,"area":"safety"},{"id":"2402.01053","title":"Plan-Grounded Large Language Models for Dual Goal Conversational Settings","created":"2024-02-01","cited_by_count":8,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2510.02286","title":"Tree-based Dialogue Reinforced Policy Optimization for Red-Teaming Attacks","created":"2025-10-02","cited_by_count":8,"area":"safety"},{"id":"2201.00762","title":"Execute Order 66: Targeted Data Poisoning for Reinforcement Learning","created":"2022-01-03","cited_by_count":7,"area":"safety"},{"id":"2408.14853","title":"Atoxia: Red-teaming Large Language Models with Target Toxic Answers","created":"2024-08-27","cited_by_count":7,"area":"safety"},{"id":"2501.01593","title":"BLAST: A Stealthy Backdoor Leverage Attack against Cooperative Multi-Agent Deep Reinforcement Learning based Systems","created":"2025-01-03","cited_by_count":7,"area":"safety"},{"id":"2509.21947","title":"Active Attacks: Red-teaming LLMs via Adaptive Environments","created":"2025-09-26","cited_by_count":7,"area":"safety"},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2402.05723","title":"In-Context Learning Can Re-learn Forbidden Tasks","created":"2024-02-08","cited_by_count":5,"area":"safety"},{"id":"2407.01461","title":"Enhancing the Capability and Robustness of Large Language Models through Reinforcement Learning-Driven Query Refinement","created":"2024-07-01","cited_by_count":5,"area":"safety"},{"id":"2501.08246","title":"Text-Diffusion Red-Teaming of Large Language Models: Unveiling Harmful Behaviors with Proximity Constraints","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2508.04451","title":"Automatic LLM Red Teaming","created":"2025-08-06","cited_by_count":5,"area":"safety"},{"id":"2510.07239","title":"Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts","created":"2025-10-08","cited_by_count":5,"area":"safety"},{"id":"2511.00030","title":"Probing Knowledge Holes in Unlearned LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2310.00892","title":"No Offense Taken: Eliciting Offensiveness from Language Models","created":"2023-10-02","cited_by_count":3,"area":"safety"},{"id":"2310.11079","title":"Learning from Red Teaming: Gender Bias Provocation and Mitigation in Large Language Models","created":"2023-10-17","cited_by_count":3,"area":"safety"},{"id":"2505.04578","title":"Fight Fire with Fire: Defending Against Malicious RL Fine-Tuning via Reward Neutralization","created":"2025-05-07","cited_by_count":3,"area":"safety"},{"id":"2510.07721","title":"RePainter: Empowering E-commerce Object Removal via Spatial-matting Reinforcement Learning","created":"2025-10-09","cited_by_count":3,"area":"safety"},{"id":"2501.10800","title":"Jailbreaking Large Language Models in Infinitely Many Ways","created":"2025-01-18","cited_by_count":2,"area":"safety"},{"id":"2505.16643","title":"From Evaluation to Defense: Advancing Safety in Video Large Language Models","created":"2025-05-22","cited_by_count":2,"area":"safety"},{"id":"2507.22564","title":"Exploiting Synergistic Cognitive Biases to Bypass Safety in LLMs","created":"2025-07-30","cited_by_count":2,"area":"safety"},{"id":"2510.05169","title":"From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMs","created":"2025-10-05","cited_by_count":2,"area":"safety"},{"id":"2601.05466","title":"Jailbreaking Large Language Models through Iterative Tool-Disguised Attacks via Reinforcement Learning","created":"2026-01-09","cited_by_count":2,"area":"safety"},{"id":"2602.19275","title":"KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models","created":"2026-02-22","cited_by_count":2,"area":"safety"},{"id":"2405.17746","title":"Rethinking Pruning for Backdoor Mitigation: An Optimization Perspective","created":"2024-05-28","cited_by_count":1,"area":"safety"},{"id":"2406.17576","title":"Leveraging Reinforcement Learning in Red Teaming for Advanced Ransomware Attack Simulations","created":"2024-06-25","cited_by_count":1,"area":"safety"},{"id":"2501.05501","title":"Strategy Masking: A Method for Guardrails in Value-based Reinforcement Learning Agents","created":"2025-01-09","cited_by_count":1,"area":"safety"},{"id":"2505.24252","title":"A Reward-driven Automated Webshell Malicious-code Generator for Red-teaming","created":"2025-05-30","cited_by_count":1,"area":"safety"},{"id":"2506.04302","title":"RedRFT: A Light-Weight Benchmark for Reinforcement Fine-Tuning-Based Red Teaming","created":"2025-06-04","cited_by_count":1,"area":"safety"},{"id":"2602.10217","title":"Temper-Then-Tilt: Principled Unlearning for Generative Models through Tempering and Classifier Guidance","created":"2026-02-10","cited_by_count":1,"area":"safety"},{"id":"2605.00553","title":"Stable-GFlowNet: Toward Diverse and Robust LLM Red-Teaming via Contrastive Trajectory Balance","created":"2026-05-01","cited_by_count":1,"area":"safety"},{"id":"2605.17075","title":"A Red Teaming Framework for Evaluating Robustness of AI-enabled Security Orchestration, Automation, and Response Systems","created":"2026-05-16","cited_by_count":1,"area":"safety"},{"id":"2607.18056","title":"An Early Warning of Emerging Biosecurity Risks in Frontier LLMs","created":"2026-07-20","cited_by_count":1,"area":"safety"},{"id":"2402.12189","title":"Amplifying Training Data Exposure through Fine-Tuning with Pseudo-Labeled Memberships","created":"2024-02-19","cited_by_count":0,"area":"safety"},{"id":"2502.20952","title":"Efficient Jailbreaking of Large Models by Freeze Training: Lower Layers Exhibit Greater Sensitivity to Harmful Content","created":"2025-02-28","cited_by_count":0,"area":"safety"},{"id":"2506.11615","title":"Machine Unlearning for Robust DNNs: Attribution-Guided Partitioning and Neuron Pruning in Noisy Environments","created":"2025-06-13","cited_by_count":0,"area":"safety"},{"id":"2508.11290","title":"SafeConstellations: Mitigating Over-Refusals in LLMs Through Task-Aware Representation Steering","created":"2025-08-15","cited_by_count":0,"area":"safety"},{"id":"2508.15648","title":"SDGO: Self-Discrimination-Guided Optimization for Consistent Safety in Large Language Models","created":"2025-08-21","cited_by_count":0,"area":"safety"},{"id":"2509.12724","title":"Defense-to-Attack: Bypassing Weak Defenses Enables Stronger Jailbreaks in Vision-Language Models","created":"2025-09-16","cited_by_count":0,"area":"safety"},{"id":"2510.07822","title":"SIMU: Selective Influence Machine Unlearning","created":"2025-10-09","cited_by_count":0,"area":"safety"},{"id":"2511.18581","title":"TASO: Jailbreak LLMs via Alternative Template and Suffix Optimization","created":"2025-11-23","cited_by_count":0,"area":"safety"},{"id":"2512.03047","title":"Entropy-Based Measurement of Value Drift and Alignment Work in Large Language Models","created":"2025-11-19","cited_by_count":0,"area":"safety"},{"id":"2512.04044","title":"MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking","created":"2025-12-03","cited_by_count":0,"area":"safety"},{"id":"2512.08131","title":"Universal Adversarial Suffixes for Language Models Using Reinforcement Learning with Calibrated Reward","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2601.10566","title":"Representation-Aware Unlearning via Activation Signatures: From Suppression to Entity-Signature Erasure","created":"2026-01-15","cited_by_count":0,"area":"safety"},{"id":"2601.22169","title":"In Vino Veritas and Vulnerabilities: Examining LLM Safety via Drunk Language Inducement","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2604.05716","title":"Can Large Language Models Reinvent Foundational Algorithms?","created":"2026-04-07","cited_by_count":0,"area":"safety"},{"id":"2605.01350","title":"LLM Output Detectability and Task Performance Can be Jointly Optimized","created":"2026-05-02","cited_by_count":0,"area":"safety"},{"id":"2605.07032","title":"A Systematic Investigation of RL-Jailbreaking in LLMs","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.13411","title":"Model-Agnostic Lifelong LLM Safety via Externalized Attack-Defense Co-Evolution","created":"2026-05-13","cited_by_count":0,"area":"safety"},{"id":"2605.19940","title":"Robotics-Inspired Guardrails for Foundation Models in Socially Sensitive Domains","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2605.30919","title":"De-attribute to Forget for LLM Unlearning","created":"2026-05-29","cited_by_count":0,"area":"safety"},{"id":"2606.09388","title":"Distilling Safe LLM Systems via Soft Prompts for On Device Settings","created":"2026-06-08","cited_by_count":0,"area":"safety"},{"id":"2606.13461","title":"Reinforcement Learning for Neural Model Editing","created":"2026-06-11","cited_by_count":0,"area":"safety"},{"id":"2606.14351","title":"ForceForget: Reinforcement Concept Removal for Enhancing Safety in Text-to-Image Models","created":"2026-06-12","cited_by_count":0,"area":"safety"},{"id":"2606.15333","title":"Replay What Matters: Off-Policy Replay for Efficient LLM Reinforcement Unlearning","created":"2026-06-13","cited_by_count":0,"area":"safety"},{"id":"2606.24267","title":"Pigeonholing: how bad prompts hurt models, causing collapse and mistakes","created":"2026-06-23","cited_by_count":0,"area":"safety"},{"id":"2607.00361","title":"ReShift: Aha-Moment-Driven Reasoning-Level Backdoor Attacks on Vision-Language Models","created":"2026-07-01","cited_by_count":0,"area":"safety"},{"id":"2607.11070","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2608.12346","title":"Position: The Alignment Community is Unintentionally Building a Censor's Toolkit","created":"2026-06-05","cited_by_count":0,"area":"safety"},{"id":"2608.28361","title":"GRACE:Gradient-guided Coreset Selection for LLM Unlearning","created":"2026-08-28","cited_by_count":0,"area":"safety"},{"id":"2609.00605","title":"Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning","created":"2026-09-01","cited_by_count":0,"area":"safety"},{"id":"2609.28378","title":"ForgetMimic: Motion Unlearning for Reinforcement Learning Humanoid Control","created":"2026-09-23","cited_by_count":0,"area":"safety"}],"next_cursor":null}