{"total":25,"rows":[{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2310.02446","title":"Low-Resource Languages Jailbreak GPT-4","created":"2023-10-03","cited_by_count":309,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2401.17263","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","created":"2024-01-30","cited_by_count":156,"area":"safety"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2308.10741","title":"On the Adversarial Robustness of Multi-Modal Foundation Models","created":"2023-08-21","cited_by_count":145,"area":"safety"},{"id":"2309.01446","title":"Open Sesame! Universal Black Box Jailbreaking of Large Language Models","created":"2023-09-04","cited_by_count":134,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2308.10819","title":"Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injection","created":"2023-08-17","cited_by_count":59,"area":"safety"},{"id":"2205.12700","title":"BITE: Textual Backdoor Attacks with Iterative Trigger Injection","created":"2022-05-25","cited_by_count":53,"area":"safety"},{"id":"2505.13541","title":"SPIRIT: Patching Speech Language Models against Jailbreak Attacks","created":"2025-05-18","cited_by_count":9,"area":"safety"},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2308.07847","title":"Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models","created":"2023-08-15","cited_by_count":7,"area":"safety"},{"id":"2308.13768","title":"Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content","created":"2023-08-26","cited_by_count":7,"area":"safety"},{"id":"2306.04535","title":"PromptAttack: Probing Dialogue State Trackers with Adversarial Prompts","created":"2023-06-07","cited_by_count":6,"area":"safety"},{"id":"2302.10291","title":"Can Large Language Models Change User Preference Adversarially?","created":"2023-01-05","cited_by_count":5,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2206.08788","title":"Is Multi-Modal Necessarily Better? Robustness Evaluation of Multi-modal Fake News Detection","created":"2022-06-17","cited_by_count":2,"area":"safety"},{"id":"2501.10800","title":"Jailbreaking Large Language Models in Infinitely Many Ways","created":"2025-01-18","cited_by_count":2,"area":"safety"},{"id":"2407.04179","title":"Defense Against Syntactic Textual Backdoor Attacks with Token Substitution","created":"2024-07-04","cited_by_count":1,"area":"safety"},{"id":"2512.21110","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2110.12948","title":"Generating Watermarked Adversarial Texts","created":"2021-10-25","cited_by_count":0,"area":"safety"},{"id":"2512.08123","title":"Universal Adversarial Suffixes Using Calibrated Gumbel-Softmax Relaxation","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2605.19377","title":"The Evaluation Game: Beyond Static LLM Benchmarking","created":"2026-05-19","cited_by_count":0,"area":"safety"}],"next_cursor":null}