{"total":35,"rows":[{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2402.16822","title":"Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts","created":"2024-02-26","cited_by_count":205,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2402.19464","title":"Curiosity-driven Red-teaming for Large Language Models","created":"2024-02-29","cited_by_count":88,"area":"safety"},{"id":"2405.18540","title":"Learning diverse attacks on large language models for robust red-teaming and safety tuning","created":"2024-05-28","cited_by_count":54,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2401.16656","title":"Gradient-Based Language Model Red Teaming","created":"2024-01-30","cited_by_count":34,"area":"safety"},{"id":"2402.16006","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","created":"2024-02-25","cited_by_count":32,"area":"safety"},{"id":"2504.15047","title":"RainbowPlus: Enhancing Adversarial Prompt Generation via Evolutionary Quality-Diversity Search","created":"2025-04-21","cited_by_count":11,"area":"safety"},{"id":"2506.07121","title":"Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models","created":"2025-06-08","cited_by_count":9,"area":"safety"},{"id":"2509.03728","title":"PersonaTeaming: Exploring How Introducing Personas Can Improve Automated AI Red-Teaming","created":"2025-09-03","cited_by_count":9,"area":"safety"},{"id":"2510.02286","title":"Tree-based Dialogue Reinforced Policy Optimization for Red-Teaming Attacks","created":"2025-10-02","cited_by_count":8,"area":"safety"},{"id":"2410.01088","title":"Exploring Empty Spaces: Human-in-the-Loop Data Augmentation","created":"2024-10-01","cited_by_count":6,"area":"safety"},{"id":"2508.06595","title":"LLM Unlearning Without an Expert Curated Dataset","created":"2025-08-08","cited_by_count":5,"area":"safety"},{"id":"2510.07239","title":"Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts","created":"2025-10-08","cited_by_count":5,"area":"safety"},{"id":"2502.16699","title":"Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations","created":"2025-02-23","cited_by_count":4,"area":"safety"},{"id":"2511.00030","title":"Probing Knowledge Holes in Unlearned LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2601.04740","title":"StealthGraph: Exposing Domain-Specific Risks in LLMs through Knowledge-Graph-Guided Harmful Prompt Generation","created":"2026-01-08","cited_by_count":4,"area":"safety"},{"id":"2310.00892","title":"No Offense Taken: Eliciting Offensiveness from Language Models","created":"2023-10-02","cited_by_count":3,"area":"safety"},{"id":"2310.11079","title":"Learning from Red Teaming: Gender Bias Provocation and Mitigation in Large Language Models","created":"2023-10-17","cited_by_count":3,"area":"safety"},{"id":"2510.02999","title":"NonTextual Target Attack","created":"2025-10-03","cited_by_count":3,"area":"safety"},{"id":"2403.00829","title":"TroubleLLM: Align to Red Team Expert","created":"2024-02-28","cited_by_count":2,"area":"safety"},{"id":"2605.05443","title":"SLAM: Structural Linguistic Activation Marking for Language Models","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2308.15673","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","created":"2023-08-30","cited_by_count":1,"area":"safety"},{"id":"2502.16109","title":"Be a Multitude to Itself: A Prompt Evolution Framework for Red Teaming","created":"2025-02-22","cited_by_count":1,"area":"safety"},{"id":"2506.04302","title":"RedRFT: A Light-Weight Benchmark for Reinforcement Fine-Tuning-Based Red Teaming","created":"2025-06-04","cited_by_count":1,"area":"safety"},{"id":"2507.00026","title":"RedTopic: Toward Topic-Diverse Red Teaming of Large Language Models","created":"2025-06-17","cited_by_count":1,"area":"safety"},{"id":"2509.23019","title":"LLM Watermark Evasion via Bias Inversion","created":"2025-09-27","cited_by_count":1,"area":"safety"},{"id":"2510.09689","title":"When Search Goes Wrong: Red-Teaming Web-Augmented Large Language Models","created":"2025-10-09","cited_by_count":1,"area":"safety"},{"id":"2608.14577","title":"HarmProfile: Characterizing Harmful Distributions in Frontier LLMs","created":"2026-06-11","cited_by_count":1,"area":"safety"},{"id":"2402.12189","title":"Amplifying Training Data Exposure through Fine-Tuning with Pseudo-Labeled Memberships","created":"2024-02-19","cited_by_count":0,"area":"safety"},{"id":"2604.17020","title":"Beyond Static Benchmarks: Synthesizing Harmful Content via Persona-based Simulation for Robust Evaluation","created":"2026-04-18","cited_by_count":0,"area":"safety"},{"id":"2605.05682","title":"PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.11730","title":"Persona-Conditioned Adversarial Prompting: Multi-Identity Red-Teaming for Adversarial Discovery and Mitigation","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2605.12565","title":"Persona-Conditioned Adversarial Prompting (PCAP): Multi-Identity Red-Teaming for Enhanced Adversarial Prompt Discovery","created":"2026-05-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}