{"total":32,"rows":[{"id":"2412.03556","title":"Best-of-N Jailbreaking","created":"2024-12-04","cited_by_count":76,"area":"safety"},{"id":"2502.12197","title":"A Closer Look at System Prompt Robustness","created":"2025-02-15","cited_by_count":32,"area":"safety"},{"id":"2410.22284","title":"Embedding-based classifiers can detect prompt injection attacks","created":"2024-10-29","cited_by_count":27,"area":"safety"},{"id":"2501.13772","title":"Jailbreak-AudioBench: In-Depth Evaluation and Analysis of Jailbreak Threats for Large Audio Language Models","created":"2025-01-23","cited_by_count":23,"area":"safety"},{"id":"2404.13588","title":"Machine Unlearning via Null Space Calibration","created":"2024-04-21","cited_by_count":21,"area":"safety"},{"id":"2210.07907","title":"Expose Backdoors on the Way: A Feature-Based Efficient Defense against Textual Backdoor Attacks","created":"2022-10-14","cited_by_count":19,"area":"safety"},{"id":"2509.09912","title":"When Your Reviewer is an LLM: Biases, Divergence, and Prompt Injection Risks in Peer Review","created":"2025-09-12","cited_by_count":19,"area":"safety"},{"id":"2406.11757","title":"STAR: SocioTechnical Approach to Red Teaming Language Models","created":"2024-06-17","cited_by_count":13,"area":"safety"},{"id":"2506.14003","title":"Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputs","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2407.17710","title":"Revisiting Machine Unlearning with Dimensional Alignment","created":"2024-07-25","cited_by_count":10,"area":"safety"},{"id":"2305.09574","title":"UOR: Universal Backdoor Attacks on Pre-trained Language Models","created":"2023-05-16","cited_by_count":8,"area":"safety"},{"id":"2601.22028","title":"Contrastive Representation Shaping for LLM Unlearning","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2410.01088","title":"Exploring Empty Spaces: Human-in-the-Loop Data Augmentation","created":"2024-10-01","cited_by_count":6,"area":"safety"},{"id":"2402.18945","title":"SynGhost: Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer","created":"2024-02-29","cited_by_count":5,"area":"safety"},{"id":"2410.09804","title":"BlackDAN: A Black-Box Multi-Objective Approach for Effective and Contextual Jailbreaking of Large Language Models","created":"2024-10-13","cited_by_count":5,"area":"safety"},{"id":"2507.20834","title":"Rethinking Few Shot CLIP Benchmarks: A Critical Analysis in the Inductive Setting","created":"2025-07-28","cited_by_count":4,"area":"safety"},{"id":"2508.12730","title":"Unlearning Comparator: A Visual Analytics System for Comparative Evaluation of Machine Unlearning Methods","created":"2025-08-18","cited_by_count":4,"area":"safety"},{"id":"2510.17277","title":"PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2603.15033","title":"Models Designed to Forget: Machine Unlearning via Key Deletion","created":"2026-03-16","cited_by_count":3,"area":"safety"},{"id":"2604.21159","title":"Adaptive Instruction Composition for Automated LLM Red-Teaming","created":"2026-04-22","cited_by_count":3,"area":"safety"},{"id":"2407.03045","title":"JailbreakHunter: A Visual Analytics Approach for Jailbreak Prompts Discovery from Large-Scale Human-LLM Conversational Datasets","created":"2024-07-03","cited_by_count":2,"area":"safety"},{"id":"2407.16686","title":"Can Large Language Models Automatically Jailbreak GPT-4V?","created":"2024-07-23","cited_by_count":2,"area":"safety"},{"id":"2409.01185","title":"Backdoor Defense through Self-Supervised and Generative Learning","created":"2024-09-02","cited_by_count":2,"area":"safety"},{"id":"2601.03134","title":"The Anatomy of Conversational Scams: A Topic-Based Red Teaming Analysis of Multi-Turn Interactions in LLMs","created":"2026-01-06","cited_by_count":2,"area":"safety"},{"id":"2512.09687","title":"Unconsciously Forget: Mitigating Memorization; Without Knowing What is being Memorized","created":"2025-12-10","cited_by_count":1,"area":"safety"},{"id":"2605.19190","title":"Going PLACES: Participatory Localized Red Teaming for Text-to-Image Safety in the Global South","created":"2026-05-18","cited_by_count":1,"area":"safety"},{"id":"2311.10236","title":"Latent Feature-based Data Splits to Improve Generalisation Evaluation: A Hate Speech Detection Case Study","created":"2023-11-16","cited_by_count":0,"area":"safety"},{"id":"2407.20729","title":"Adapting Safe-for-Work Classifier for Malaysian Language Text: Enhancing Alignment in LLM-Ops Framework","created":"2024-07-30","cited_by_count":0,"area":"safety"},{"id":"2508.00602","title":"LeakSealer: A Semisupervised Defense for LLMs Against Prompt Injection and Leakage Attacks","created":"2025-08-01","cited_by_count":0,"area":"safety"},{"id":"2607.21735","title":"What AI Red-Team Evaluations Can and Cannot Prove","created":"2026-07-23","cited_by_count":0,"area":"safety"},{"id":"2609.31056","title":"Neuralyzing the Trace: Selective Representation-Level Unlearning with Contrastive Sparse Autoencoders","created":"2026-09-25","cited_by_count":0,"area":"safety"},{"id":"2609.31062","title":"CG-Probes: Recovering Guardrail Directions from Patient Query Embeddings","created":"2026-09-25","cited_by_count":0,"area":"safety"}],"next_cursor":null}