{"total":33,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2306.04528","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","created":"2023-06-07","cited_by_count":226,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2110.07139","title":"Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer","created":"2021-10-14","cited_by_count":158,"area":"safety"},{"id":"2306.09442","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","created":"2023-06-15","cited_by_count":114,"area":"safety"},{"id":"2105.00164","title":"Hidden Backdoors in Human-Centric Language Models","created":"2021-05-01","cited_by_count":90,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2103.04264","title":"T-Miner: A Generative Approach to Defend Against Trojan Attacks on DNN-based Text Classification","created":"2021-03-07","cited_by_count":60,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2504.11168","title":"Bypassing LLM Guardrails: An Empirical Analysis of Evasion Attacks against Prompt Injection and Jailbreak Detection Systems","created":"2025-04-15","cited_by_count":26,"area":"safety"},{"id":"2206.01832","title":"Kallima: A Clean-label Framework for Textual Backdoor Attacks","created":"2022-06-03","cited_by_count":24,"area":"safety"},{"id":"2404.07234","title":"Goal-guided Generative Prompt Injection Attack on Large Language Models","created":"2024-04-06","cited_by_count":24,"area":"safety"},{"id":"2302.10894","title":"Red Teaming Deep Neural Networks with Feature Synthesis Tools","created":"2023-02-08","cited_by_count":21,"area":"safety"},{"id":"2402.02160","title":"Data Poisoning for In-context Learning","created":"2024-02-03","cited_by_count":21,"area":"safety"},{"id":"2404.12274","title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing","created":"2024-04-18","cited_by_count":16,"area":"safety"},{"id":"2312.07130","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","created":"2023-12-12","cited_by_count":12,"area":"safety"},{"id":"2411.13425","title":"Watermark under Fire: A Robustness Evaluation of LLM Watermarking","created":"2024-11-20","cited_by_count":9,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2509.09112","title":"Character-Level Perturbations Disrupt LLM Watermarks","created":"2025-09-11","cited_by_count":9,"area":"safety"},{"id":"2308.07847","title":"Robustness Over Time: Understanding Adversarial Examples' Effectiveness on Longitudinal Versions of Large Language Models","created":"2023-08-15","cited_by_count":7,"area":"safety"},{"id":"2407.14644","title":"Human-Interpretable Adversarial Prompt Attack on Large Language Models with Situational Context","created":"2024-07-19","cited_by_count":6,"area":"safety"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2412.16359","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","created":"2024-12-20","cited_by_count":3,"area":"safety"},{"id":"2510.03263","title":"Memory Self-Regeneration: Uncovering Hidden Knowledge in Unlearned Models","created":"2025-09-26","cited_by_count":2,"area":"safety"},{"id":"2502.00652","title":"Reformulation is All You Need: Addressing Malicious Text Features in DNNs","created":"2025-02-02","cited_by_count":1,"area":"safety"},{"id":"2601.09321","title":"SpatialJB: How Text Distribution Art Becomes the \"Jailbreak Key\" for LLM Guardrails","created":"2026-01-14","cited_by_count":1,"area":"safety"},{"id":"2406.19642","title":"IDT: Dual-Task Adversarial Attacks for Privacy Protection","created":"2024-06-28","cited_by_count":0,"area":"safety"},{"id":"2509.05318","title":"Backdoor Samples Detection Based on Perturbation Discrepancy Consistency in Pre-trained Language Models","created":"2025-08-30","cited_by_count":0,"area":"safety"},{"id":"2606.04612","title":"Hybrid Adversarial Defence for Natural Language Understanding Tasks","created":"2026-06-03","cited_by_count":0,"area":"safety"}],"next_cursor":null}