{"total":156,"rows":[{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651,"area":"safety"},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443,"area":"safety"},{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2306.05499","title":"Prompt Injection attack against LLM-integrated Applications","created":"2023-06-08","cited_by_count":605,"area":"safety"},{"id":"2309.10253","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","created":"2023-09-19","cited_by_count":560,"area":"safety"},{"id":"2403.03218","title":"The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearning","created":"2024-03-05","cited_by_count":509,"area":"safety"},{"id":"2406.18495","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","created":"2024-06-26","cited_by_count":496,"area":"safety"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2310.02446","title":"Low-Resource Languages Jailbreak GPT-4","created":"2023-10-03","cited_by_count":309,"area":"safety"},{"id":"2205.13636","title":"Quark: Controllable Text Generation with Reinforced Unlearning","created":"2022-05-26","cited_by_count":237,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2307.08715","title":"MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots","created":"2023-07-16","cited_by_count":183,"area":"safety"},{"id":"2402.02309","title":"Jailbreaking Attack against Multimodal Large Language Model","created":"2024-02-04","cited_by_count":135,"area":"safety"},{"id":"2402.18104","title":"Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction","created":"2024-02-28","cited_by_count":107,"area":"safety"},{"id":"2404.18239","title":"SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning","created":"2024-04-28","cited_by_count":104,"area":"safety"},{"id":"2404.08676","title":"ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming","created":"2024-04-06","cited_by_count":98,"area":"safety"},{"id":"2405.14577","title":"Representation Noising: A Defence Mechanism Against Harmful Finetuning","created":"2024-05-23","cited_by_count":96,"area":"safety"},{"id":"2301.12867","title":"Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity","created":"2023-01-30","cited_by_count":89,"area":"safety"},{"id":"2403.17336","title":"Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models","created":"2024-03-26","cited_by_count":86,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2404.05399","title":"SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety","created":"2024-04-08","cited_by_count":77,"area":"safety"},{"id":"2310.12505","title":"Attack Prompt Generation for Red Teaming and Defending Large Language Models","created":"2023-10-19","cited_by_count":76,"area":"safety"},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2311.16119","title":"Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition","created":"2023-10-24","cited_by_count":68,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2310.15851","title":"Self-Guard: Empower the LLM to Safeguard Itself","created":"2023-10-24","cited_by_count":54,"area":"safety"},{"id":"2311.08592","title":"AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applications","created":"2023-11-14","cited_by_count":54,"area":"safety"},{"id":"2407.10223","title":"On Large Language Model Continual Unlearning","created":"2024-07-14","cited_by_count":52,"area":"safety"},{"id":"2305.14965","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","created":"2023-05-24","cited_by_count":49,"area":"safety"},{"id":"2406.11036","title":"garak: A Framework for Security Probing Large Language Models","created":"2024-06-16","cited_by_count":49,"area":"safety"},{"id":"2401.06824","title":"Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspective","created":"2024-01-12","cited_by_count":48,"area":"safety"},{"id":"2402.03299","title":"GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Models","created":"2024-02-05","cited_by_count":48,"area":"safety"},{"id":"2310.09573","title":"Self-Detoxifying Language Models via Toxification Reversal","created":"2023-10-14","cited_by_count":46,"area":"safety"},{"id":"2404.02062","title":"Digital Forgetting in Large Language Models: A Survey of Unlearning Methods","created":"2024-04-02","cited_by_count":40,"area":"safety"},{"id":"2412.06878","title":"SafeWatch: An Efficient Safety-Policy Following Video Guardrail Model with Transparent Explanations","created":"2024-12-09","cited_by_count":38,"area":"safety"},{"id":"2310.10077","title":"Prompt Packer: Deceiving LLMs through Compositional Instruction with Hidden Attacks","created":"2023-10-16","cited_by_count":35,"area":"safety"},{"id":"2406.15481","title":"Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual Understanding","created":"2024-06-17","cited_by_count":34,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2305.17444","title":"Query-Efficient Black-Box Red Teaming via Bayesian Optimization","created":"2023-05-27","cited_by_count":32,"area":"safety"},{"id":"2411.17693","title":"Adaptive Deployment of Untrusted LLMs Reduces Distributed Threats","created":"2024-11-26","cited_by_count":31,"area":"safety"},{"id":"2410.17509","title":"WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models","created":"2024-10-23","cited_by_count":26,"area":"safety"},{"id":"2505.11413","title":"CARES: Comprehensive Evaluation of Safety and Adversarial Robustness in Medical LLMs","created":"2025-05-16","cited_by_count":26,"area":"safety"},{"id":"2412.18693","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","created":"2024-12-24","cited_by_count":25,"area":"safety"},{"id":"2408.04811","title":"h4rm3l: A language for Composable Jailbreak Attack Synthesis","created":"2024-08-09","cited_by_count":24,"area":"safety"},{"id":"2603.06594","title":"A Coin Flip for Safety: LLM Judges Fail to Reliably Measure Adversarial Robustness","created":"2026-02-04","cited_by_count":20,"area":"safety"},{"id":"2405.09113","title":"Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization","created":"2024-05-15","cited_by_count":18,"area":"safety"},{"id":"2406.11780","title":"Split, Unlearn, Merge: Leveraging Data Attributes for More Effective Unlearning in LLMs","created":"2024-06-17","cited_by_count":18,"area":"safety"},{"id":"2409.11445","title":"Jailbreaking Large Language Models with Symbolic Mathematics","created":"2024-09-17","cited_by_count":16,"area":"safety"},{"id":"2508.12733","title":"LinguaSafe: A Comprehensive Multilingual Safety Benchmark for Large Language Models","created":"2025-08-18","cited_by_count":16,"area":"safety"},{"id":"2404.19597","title":"TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuning","created":"2024-04-30","cited_by_count":14,"area":"safety"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2505.24445","title":"Learning Safety Constraints for Large Language Models","created":"2025-05-30","cited_by_count":13,"area":"safety"},{"id":"2403.14988","title":"Risk and Response in Large Language Models: Evaluating Key Threat Categories","created":"2024-03-22","cited_by_count":10,"area":"safety"},{"id":"2402.13926","title":"Large Language Models are Vulnerable to Bait-and-Switch Attacks for Generating Harmful Content","created":"2024-02-21","cited_by_count":9,"area":"safety"},{"id":"2403.08701","title":"Review of Generative AI Methods in Cybersecurity","created":"2024-03-13","cited_by_count":9,"area":"safety"},{"id":"2407.08441","title":"Are Large Language Models Really Bias-Free? Jailbreak Prompts for Assessing Adversarial Robustness to Bias Elicitation","created":"2024-07-11","cited_by_count":9,"area":"safety"},{"id":"2412.12621","title":"Jailbreaking? One Step Is Enough!","created":"2024-12-17","cited_by_count":9,"area":"safety"},{"id":"2505.02009","title":"Towards Safer Pretraining: Analyzing and Filtering Harmful Content in Webscale datasets for Responsible LLMs","created":"2025-05-04","cited_by_count":9,"area":"safety"},{"id":"2305.11351","title":"Data Redaction from Conditional Generative Models","created":"2023-05-18","cited_by_count":8,"area":"safety"},{"id":"2407.20181","title":"Blockchain for Large Language Model Security and Safety: A Holistic Survey","created":"2024-07-26","cited_by_count":8,"area":"safety"},{"id":"2409.15361","title":"Multitask Mayhem: Unveiling and Mitigating Safety Gaps in LLMs Fine-tuning","created":"2024-09-18","cited_by_count":8,"area":"safety"},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2504.19674","title":"SAGE: A Generic Framework for LLM Safety Evaluation","created":"2025-04-28","cited_by_count":8,"area":"safety"},{"id":"2507.21134","title":"TRIDENT: Benchmarking LLM Safety in Finance, Medicine, and Law","created":"2025-07-22","cited_by_count":8,"area":"safety"},{"id":"2308.13768","title":"Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Content","created":"2023-08-26","cited_by_count":7,"area":"safety"},{"id":"2410.15641","title":"SMILES-Prompting: A Novel Approach to LLM Jailbreak Attacks in Chemical Synthesis","created":"2024-10-21","cited_by_count":7,"area":"safety"},{"id":"2411.07122","title":"SCAR: Sparse Conditioned Autoencoders for Concept Detection and Steering in LLMs","created":"2024-11-11","cited_by_count":7,"area":"safety"},{"id":"2509.21947","title":"Active Attacks: Red-teaming LLMs via Adaptive Environments","created":"2025-09-26","cited_by_count":7,"area":"safety"},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2501.03266","title":"LLM Content Moderation and User Satisfaction: Evidence from Response Refusals in Chatbot Arena","created":"2025-01-04","cited_by_count":6,"area":"safety"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2505.14469","title":"Attributional Safety Failures in Large Language Models under Code-Mixed Perturbations","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2508.19292","title":"Stand on The Shoulders of Giants: Building JailExpert from Previous Attack Experience","created":"2025-08-25","cited_by_count":6,"area":"safety"},{"id":"2601.20903","title":"ICON: Intent-Context Coupling for Efficient Multi-Turn Jailbreak Attack","created":"2026-01-28","cited_by_count":6,"area":"safety"},{"id":"2311.09473","title":"JAB: Joint Adversarial Prompting and Belief Augmentation","created":"2023-11-16","cited_by_count":5,"area":"safety"},{"id":"2407.10106","title":"DistillSeq: A Framework for Safety Alignment Testing in Large Language Models using Knowledge Distillation","created":"2024-07-14","cited_by_count":5,"area":"safety"},{"id":"2501.13302","title":"Watching the AI Watchdogs: A Fairness and Robustness Analysis of AI Safety Moderation Classifiers","created":"2025-01-23","cited_by_count":5,"area":"safety"},{"id":"2507.06043","title":"CAVGAN: Unifying Jailbreak and Defense of LLMs via Generative Adversarial Attacks on their Internal Representations","created":"2025-07-08","cited_by_count":5,"area":"safety"},{"id":"2405.20015","title":"Efficient LLM-Jailbreaking via Multimodal-LLM Jailbreak","created":"2024-05-30","cited_by_count":4,"area":"safety"},{"id":"2407.06483","title":"Composable Interventions for Language Models","created":"2024-07-09","cited_by_count":4,"area":"safety"},{"id":"2407.15009","title":"RogueGPT: dis-ethical tuning transforms ChatGPT4 into a Rogue AI in 158 Words","created":"2024-06-11","cited_by_count":4,"area":"safety"},{"id":"2407.16951","title":"Towards Transfer Unlearning: Empirical Evidence of Cross-Domain Bias Mitigation","created":"2024-07-24","cited_by_count":4,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2601.10543","title":"Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing","created":"2026-01-15","cited_by_count":4,"area":"safety"},{"id":"2310.00892","title":"No Offense Taken: Eliciting Offensiveness from Language Models","created":"2023-10-02","cited_by_count":3,"area":"safety"},{"id":"2409.17699","title":"MoJE: Mixture of Jailbreak Experts, Naive Tabular Classifiers as Guard for Prompt Attacks","created":"2024-09-26","cited_by_count":3,"area":"safety"},{"id":"2503.07697","title":"PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models","created":"2025-03-10","cited_by_count":3,"area":"safety"},{"id":"2510.08158","title":"Beyond Over-Refusal: Scenario-Based Diagnostics and Post-Hoc Mitigation for Exaggerated Refusals in LLMs","created":"2025-10-09","cited_by_count":3,"area":"safety"},{"id":"2512.24044","title":"Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?","created":"2025-12-30","cited_by_count":3,"area":"safety"},{"id":"2602.04581","title":"Trust The Typical","created":"2026-02-04","cited_by_count":3,"area":"safety"},{"id":"2602.20170","title":"CAGE: A Framework for Culturally Adaptive Red-Teaming Benchmark Generation","created":"2026-02-09","cited_by_count":3,"area":"safety"},{"id":"2603.17915","title":"IndicSafe: A Benchmark for Evaluating Multilingual LLM Safety in South Asia","created":"2026-03-18","cited_by_count":3,"area":"safety"},{"id":"2604.18487","title":"Adversarial Humanities Benchmark: Results on Stylistic Robustness in Frontier Model Safety","created":"2026-04-20","cited_by_count":3,"area":"safety"},{"id":"2605.23196","title":"Prompt Overflow: What the Guardrail Inspects Is Not What the Model Infers","created":"2026-05-22","cited_by_count":3,"area":"safety"},{"id":"2403.00829","title":"TroubleLLM: Align to Red Team Expert","created":"2024-02-28","cited_by_count":2,"area":"safety"},{"id":"2410.13236","title":"SPIN: Self-Supervised Prompt INjection","created":"2024-10-17","cited_by_count":2,"area":"safety"}],"next_cursor":"100"}