{"total":59,"rows":[{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651,"area":"safety"},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443,"area":"safety"},{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489,"area":"safety"},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2311.08268","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","created":"2023-11-14","cited_by_count":259,"area":"safety"},{"id":"2205.13636","title":"Quark: Controllable Text Generation with Reinforced Unlearning","created":"2022-05-26","cited_by_count":237,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2402.15159","title":"Machine Unlearning of Pre-trained Large Language Models","created":"2024-02-23","cited_by_count":119,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2402.19464","title":"Curiosity-driven Red-teaming for Large Language Models","created":"2024-02-29","cited_by_count":88,"area":"safety"},{"id":"2310.12505","title":"Attack Prompt Generation for Red Teaming and Defending Large Language Models","created":"2023-10-19","cited_by_count":76,"area":"safety"},{"id":"2510.07192","title":"Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples","created":"2025-10-08","cited_by_count":72,"area":"safety"},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2402.17262","title":"Speak Out of Turn: Safety Vulnerability of Large Language Models in Multi-turn Dialogue","created":"2024-02-27","cited_by_count":66,"area":"safety"},{"id":"2406.10794","title":"Towards Understanding Jailbreak Attacks in LLMs: A Representation Space Analysis","created":"2024-06-16","cited_by_count":64,"area":"safety"},{"id":"2307.08487","title":"Latent Jailbreak: A Benchmark for Evaluating Text Safety and Output Robustness of Large Language Models","created":"2023-07-17","cited_by_count":60,"area":"safety"},{"id":"2403.01251","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","created":"2024-03-02","cited_by_count":37,"area":"safety"},{"id":"2404.13968","title":"Protecting Your LLMs with Information Bottleneck","created":"2024-04-22","cited_by_count":29,"area":"safety"},{"id":"2310.14303","title":"Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases","created":"2023-10-22","cited_by_count":24,"area":"safety"},{"id":"2506.07891","title":"Video Unlearning via Low-Rank Refusal Vector","created":"2025-06-09","cited_by_count":13,"area":"safety"},{"id":"2403.14988","title":"Risk and Response in Large Language Models: Evaluating Key Threat Categories","created":"2024-03-22","cited_by_count":10,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2402.01053","title":"Plan-Grounded Large Language Models for Dual Goal Conversational Settings","created":"2024-02-01","cited_by_count":8,"area":"safety"},{"id":"2408.14853","title":"Atoxia: Red-teaming Large Language Models with Target Toxic Answers","created":"2024-08-27","cited_by_count":7,"area":"safety"},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2410.02916","title":"LLM Safeguard is a Double-Edged Sword: Exploiting False Positives for Denial-of-Service Attacks","created":"2024-10-03","cited_by_count":6,"area":"safety"},{"id":"2411.08862","title":"LLMStinger: Jailbreaking LLMs using RL fine-tuned LLMs","created":"2024-11-13","cited_by_count":5,"area":"safety"},{"id":"2510.13893","title":"Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection","created":"2025-10-14","cited_by_count":5,"area":"safety"},{"id":"2509.14651","title":"MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2310.00892","title":"No Offense Taken: Eliciting Offensiveness from Language Models","created":"2023-10-02","cited_by_count":3,"area":"safety"},{"id":"2502.05772","title":"Effective Black-Box Multi-Faceted Attacks Breach Vision Large Language Model Guardrails","created":"2025-02-09","cited_by_count":3,"area":"safety"},{"id":"2506.17231","title":"Efficient and Stealthy Jailbreak Attacks via Adversarial Prompt Distillation from LLMs to SLMs","created":"2025-05-26","cited_by_count":3,"area":"safety"},{"id":"2506.18325","title":"NSFW-Classifier Guided Prompt Sanitization for Safe Text-to-Image Generation","created":"2025-06-23","cited_by_count":3,"area":"safety"},{"id":"2603.11914","title":"Understanding LLM Behavior When Encountering User-Supplied Harmful Content in Harmless Tasks","created":"2026-03-12","cited_by_count":3,"area":"safety"},{"id":"2508.09190","title":"Multi-Level Safety Continual Projection for Fine-Tuned Large Language Models without Retraining","created":"2025-08-08","cited_by_count":2,"area":"safety"},{"id":"2509.21360","title":"Multimodal Prompt Decoupling Attack on the Safety Filters in Text-to-Image Models","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2604.15579","title":"Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents","created":"2026-04-16","cited_by_count":2,"area":"safety"},{"id":"2402.03303","title":"Nevermind: Instruction Override and Moderation in Large Language Models","created":"2024-02-05","cited_by_count":1,"area":"safety"},{"id":"2405.07076","title":"Integrating Emotional and Linguistic Models for Ethical Compliance in Large Language Models","created":"2024-05-11","cited_by_count":1,"area":"safety"},{"id":"2505.24252","title":"A Reward-driven Automated Webshell Malicious-code Generator for Red-teaming","created":"2025-05-30","cited_by_count":1,"area":"safety"},{"id":"2605.25073","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","created":"2026-05-24","cited_by_count":1,"area":"safety"},{"id":"2402.12189","title":"Amplifying Training Data Exposure through Fine-Tuning with Pseudo-Labeled Memberships","created":"2024-02-19","cited_by_count":0,"area":"safety"},{"id":"2407.13744","title":"LLMs as Function Approximators: Terminology, Taxonomy, and Questions for Evaluation","created":"2024-07-18","cited_by_count":0,"area":"safety"},{"id":"2412.12145","title":"Na'vi or Knave: Jailbreaking Language Models via Metaphorical Avatars","created":"2024-12-10","cited_by_count":0,"area":"safety"},{"id":"2503.12339","title":"A Closer Look at Adversarial Suffix Learning for Jailbreaking LLMs: Augmented Adversarial Trigger Learning","created":"2025-03-16","cited_by_count":0,"area":"safety"},{"id":"2508.15648","title":"SDGO: Self-Discrimination-Guided Optimization for Consistent Safety in Large Language Models","created":"2025-08-21","cited_by_count":0,"area":"safety"},{"id":"2511.04215","title":"Black-Box Guardrail Reverse-engineering Attack","created":"2025-11-06","cited_by_count":0,"area":"safety"},{"id":"2511.07480","title":"KG-DF: A Black-box Defense Framework against Jailbreak Attacks Based on Knowledge Graphs","created":"2025-11-09","cited_by_count":0,"area":"safety"},{"id":"2511.18396","title":"Exploring Weak-to-Strong Generalization for CLIP-based Classification","created":"2025-11-23","cited_by_count":0,"area":"safety"},{"id":"2601.12652","title":"Ethical Risks in Deploying Large Language Models: An Evaluation of Medical Ethics Jailbreaking","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2601.19487","title":"LLM-VA: Resolving the Jailbreak-Overrefusal Trade-off via Vector Alignment","created":"2026-01-27","cited_by_count":0,"area":"safety"},{"id":"2604.05179","title":"Gradient-Controlled Decoding: A Safety Guardrail for LLMs with Dual-Anchor Steering","created":"2026-04-06","cited_by_count":0,"area":"safety"},{"id":"2605.03095","title":"Revisiting JBShield: Breaking and Rebuilding Representation-Level Jailbreak Defenses","created":"2026-05-04","cited_by_count":0,"area":"safety"},{"id":"2605.29629","title":"Beyond Attack Success Rate: Temporal Logit Observability for LLM Safety Failures","created":"2026-05-28","cited_by_count":0,"area":"safety"},{"id":"2605.30919","title":"De-attribute to Forget for LLM Unlearning","created":"2026-05-29","cited_by_count":0,"area":"safety"},{"id":"2606.00003","title":"Learning from Mistakes: Can LLM Self-Recover after Misalignment?","created":"2026-03-25","cited_by_count":0,"area":"safety"},{"id":"2607.13088","title":"Securing LLMs in the Wild: Privacy and Security Challenges at the Edge","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2609.13534","title":"Harmfulness Propagation Dynamics: Layer-wise Trajectories of Adversarial Intent in Large Language Models","created":"2026-09-11","cited_by_count":0,"area":"safety"}],"next_cursor":null}