{"total":35,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486,"area":"safety"},{"id":"2309.02705","title":"Certifying LLM Safety against Adversarial Prompting","created":"2023-09-06","cited_by_count":266,"area":"safety"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2202.03335","title":"Membership Inference Attacks and Defenses in Neural Network Pruning","created":"2022-02-07","cited_by_count":45,"area":"safety"},{"id":"2110.06904","title":"Poison Forensics: Traceback of Data Poisoning Attacks in Neural Networks","created":"2021-10-13","cited_by_count":40,"area":"safety"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2112.07668","title":"Dual-Key Multimodal Backdoors for Visual Question Answering","created":"2021-12-14","cited_by_count":37,"area":"safety"},{"id":"2505.18333","title":"A Critical Evaluation of Defenses against Prompt Injection Attacks","created":"2025-05-23","cited_by_count":36,"area":"safety"},{"id":"2410.21492","title":"FATH: Authentication-based Test-time Defense against Indirect Prompt Injection Attacks","created":"2024-10-28","cited_by_count":22,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2512.12594","title":"ceLLMate: Sandboxing Browser AI Agents","created":"2025-12-14","cited_by_count":16,"area":"safety"},{"id":"2507.07417","title":"May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks","created":"2025-07-10","cited_by_count":15,"area":"safety"},{"id":"2410.03489","title":"Gradient-based Jailbreak Images for Multimodal Fusion Models","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2108.01644","title":"The Devil is in the GAN: Backdoor Attacks and Defenses in Deep Generative Models","created":"2021-08-03","cited_by_count":12,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2410.01906","title":"Social Media Authentication and Combating Deepfakes using Semi-fragile Invisible Image Watermarking","created":"2024-10-02","cited_by_count":6,"area":"safety"},{"id":"2601.13578","title":"FG-OrIU: Towards Better Forgetting via Feature-Gradient Orthogonality for Incremental Unlearning","created":"2026-01-20","cited_by_count":6,"area":"safety"},{"id":"2212.03334","title":"Pre-trained Encoders in Self-Supervised Learning Improve Secure and Privacy-preserving Supervised Learning","created":"2022-12-06","cited_by_count":4,"area":"safety"},{"id":"2206.05565","title":"NeuGuard: Lightweight Neuron-Guided Defense against Membership Inference Attacks","created":"2022-06-11","cited_by_count":3,"area":"safety"},{"id":"2511.11020","title":"Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysis","created":"2025-11-14","cited_by_count":3,"area":"safety"},{"id":"2504.05838","title":"Mind the Trojan Horse: Image Prompt Adapter Enabling Scalable and Deceptive Jailbreaking","created":"2025-04-08","cited_by_count":2,"area":"safety"},{"id":"2205.08821","title":"Lessons Learned: Defending Against Property Inference Attacks","created":"2022-05-18","cited_by_count":1,"area":"safety"},{"id":"2409.13004","title":"Data Poisoning and Leakage Analysis in Federated Learning","created":"2024-09-19","cited_by_count":1,"area":"safety"},{"id":"2503.11195","title":"Provenance Detection for AI-Generated Images: Combining Perceptual Hashing, Homomorphic Encryption, and AI Detection Models","created":"2025-03-14","cited_by_count":1,"area":"safety"},{"id":"2606.11409","title":"Risk Under Pressure: Compute-Aware Evaluation of Adversarial Robustness in Language Models","created":"2026-06-09","cited_by_count":1,"area":"safety"},{"id":"2606.12716","title":"Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Review","created":"2026-06-10","cited_by_count":1,"area":"safety"},{"id":"2601.01737","title":"Local Layer-wise Differential Privacy in Federated Learning","created":"2026-01-05","cited_by_count":0,"area":"safety"},{"id":"2604.10403","title":"Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs","created":"2026-04-12","cited_by_count":0,"area":"safety"},{"id":"2605.20286","title":"Adaptive Probe-based Steering for Robust LLM Jailbreaking","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2606.03647","title":"All you need to break LLMs are Black-Box, Adapting, Efficient, Transferable, Harmful, Applicable ... Attacks","created":"2026-06-02","cited_by_count":0,"area":"safety"},{"id":"2606.20746","title":"Amplify, Don't Create: Temporal Accumulation for Slow-Burn Prompt Injection","created":"2026-06-17","cited_by_count":0,"area":"safety"},{"id":"2609.27378","title":"Psychoacoustically Aligned Latent Smoothing for Adversarial Robustness of Full-Duplex Speech-to-Speech Dialogue Models","created":"2026-09-23","cited_by_count":0,"area":"safety"}],"next_cursor":null}