{"total":33,"rows":[{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420,"area":"safety"},{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2311.07689","title":"MART: Improving LLM Safety with Multi-round Automatic Red-Teaming","created":"2023-11-13","cited_by_count":163,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2404.05399","title":"SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety","created":"2024-04-08","cited_by_count":77,"area":"safety"},{"id":"2403.07865","title":"CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completion","created":"2024-03-12","cited_by_count":76,"area":"safety"},{"id":"2311.08592","title":"AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applications","created":"2023-11-14","cited_by_count":54,"area":"safety"},{"id":"2405.18540","title":"Learning diverse attacks on large language models for robust red-teaming and safety tuning","created":"2024-05-28","cited_by_count":54,"area":"safety"},{"id":"2406.17626","title":"CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreference","created":"2024-06-25","cited_by_count":51,"area":"safety"},{"id":"2305.17444","title":"Query-Efficient Black-Box Red Teaming via Bayesian Optimization","created":"2023-05-27","cited_by_count":32,"area":"safety"},{"id":"2311.00172","title":"Robust Safety Classifier for Large Language Models: Adversarial Prompt Shield","created":"2023-10-31","cited_by_count":25,"area":"safety"},{"id":"2412.18693","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","created":"2024-12-24","cited_by_count":25,"area":"safety"},{"id":"2405.09113","title":"Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization","created":"2024-05-15","cited_by_count":18,"area":"safety"},{"id":"2408.15488","title":"Legilimens: Practical and Unified Content Moderation for Large Language Model Services","created":"2024-08-28","cited_by_count":13,"area":"safety"},{"id":"2310.09624","title":"ASSERT: Automated Safety Scenario Red Teaming for Evaluating the Robustness of Large Language Models","created":"2023-10-14","cited_by_count":12,"area":"safety"},{"id":"2410.08660","title":"RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process","created":"2024-10-11","cited_by_count":11,"area":"safety"},{"id":"2411.04223","title":"Diversity Helps Jailbreak Large Language Models","created":"2024-11-06","cited_by_count":10,"area":"safety"},{"id":"2506.07121","title":"Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models","created":"2025-06-08","cited_by_count":9,"area":"safety"},{"id":"2509.21947","title":"Active Attacks: Red-teaming LLMs via Adaptive Environments","created":"2025-09-26","cited_by_count":7,"area":"safety"},{"id":"2407.01850","title":"Purple-teaming LLMs with Adversarial Defender Training","created":"2024-07-01","cited_by_count":6,"area":"safety"},{"id":"2302.10291","title":"Can Large Language Models Change User Preference Adversarially?","created":"2023-01-05","cited_by_count":5,"area":"safety"},{"id":"2407.15009","title":"RogueGPT: dis-ethical tuning transforms ChatGPT4 into a Rogue AI in 158 Words","created":"2024-06-11","cited_by_count":4,"area":"safety"},{"id":"2310.00892","title":"No Offense Taken: Eliciting Offensiveness from Language Models","created":"2023-10-02","cited_by_count":3,"area":"safety"},{"id":"2507.13474","title":"Paper Summary Attack: Jailbreaking LLMs through LLM Safety Papers","created":"2025-07-17","cited_by_count":3,"area":"safety"},{"id":"2511.21145","title":"TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models","created":"2025-11-26","cited_by_count":3,"area":"safety"},{"id":"2504.19019","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","created":"2025-04-26","cited_by_count":2,"area":"safety"},{"id":"2506.12274","title":"InfoFlood: Jailbreaking Large Language Models with Information Overload","created":"2025-06-13","cited_by_count":2,"area":"safety"},{"id":"2510.10281","title":"ArtPerception: ASCII Art-based Jailbreak on LLMs with Recognition Pre-test","created":"2025-10-11","cited_by_count":2,"area":"safety"},{"id":"2507.17922","title":"From Seed to Harvest: Augmenting Human Creativity with AI for Red-teaming Text-to-Image Models","created":"2025-07-23","cited_by_count":0,"area":"safety"},{"id":"2605.10582","title":"Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2608.10171","title":"Generating Attacks for LLMs with GFlowNets","created":"2026-08-10","cited_by_count":0,"area":"safety"}],"next_cursor":null}