{"total":95,"rows":[{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651,"area":"safety"},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443,"area":"safety"},{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2311.03191","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","created":"2023-11-06","cited_by_count":367,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2404.08676","title":"ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming","created":"2024-04-06","cited_by_count":98,"area":"safety"},{"id":"2301.12867","title":"Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity","created":"2023-01-30","cited_by_count":89,"area":"safety"},{"id":"2403.17336","title":"Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models","created":"2024-03-26","cited_by_count":86,"area":"safety"},{"id":"2110.02467","title":"BadPre: Task-agnostic Backdoor Attacks to Pre-trained NLP Foundation Models","created":"2021-10-06","cited_by_count":85,"area":"safety"},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2310.12362","title":"REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models","created":"2023-10-18","cited_by_count":78,"area":"safety"},{"id":"2206.08514","title":"A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarks","created":"2022-06-17","cited_by_count":74,"area":"safety"},{"id":"2406.16201","title":"Blind Baselines Beat Membership Inference Attacks for Foundation Models","created":"2024-06-23","cited_by_count":69,"area":"safety"},{"id":"2311.16119","title":"Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition","created":"2023-10-24","cited_by_count":68,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2406.05113","title":"LlavaGuard: An Open VLM-based Framework for Safeguarding Vision Datasets and Models","created":"2024-06-07","cited_by_count":52,"area":"safety"},{"id":"2402.00351","title":"Machine Unlearning for Image-to-Image Generative Models","created":"2024-02-01","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2502.17578","title":"How Do Large Language Monkeys Get Their Power (Laws)?","created":"2025-02-24","cited_by_count":43,"area":"safety"},{"id":"2312.15172","title":"Pre-trained Trojan Attacks for Visual Recognition","created":"2023-12-23","cited_by_count":39,"area":"safety"},{"id":"2310.00108","title":"Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Study","created":"2023-09-29","cited_by_count":38,"area":"safety"},{"id":"2402.00898","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","created":"2024-01-31","cited_by_count":30,"area":"safety"},{"id":"2405.20777","title":"Black-Box Detection of Language Model Watermarks","created":"2024-05-28","cited_by_count":23,"area":"safety"},{"id":"2505.01976","title":"A Survey on Privacy Risks and Protection in Large Language Models","created":"2025-05-04","cited_by_count":21,"area":"safety"},{"id":"2408.07440","title":"BAPLe: Backdoor Attacks on Medical Foundational Models using Prompt Learning","created":"2024-08-14","cited_by_count":16,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2402.05467","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","created":"2024-02-08","cited_by_count":14,"area":"safety"},{"id":"2506.05735","title":"Do LLMs Really Forget? Evaluating Unlearning with Knowledge Correlation and Confidence Awareness","created":"2025-06-06","cited_by_count":14,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2406.08288","title":"Decoupling the Class Label and the Target Concept in Machine Unlearning","created":"2024-06-12","cited_by_count":12,"area":"safety"},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2402.16578","title":"Multi-Bit Distortion-Free Watermarking for Large Language Models","created":"2024-02-26","cited_by_count":11,"area":"safety"},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2506.05451","title":"Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety","created":"2025-06-05","cited_by_count":10,"area":"safety"},{"id":"2505.17650","title":"Does Chain-of-Thought Reasoning Really Reduce Harmfulness from Jailbreaking?","created":"2025-05-23","cited_by_count":9,"area":"safety"},{"id":"2406.03508","title":"Mutual Information Guided Backdoor Mitigation for Pre-trained Encoders","created":"2024-06-05","cited_by_count":8,"area":"safety"},{"id":"2409.15361","title":"Multitask Mayhem: Unveiling and Mitigating Safety Gaps in LLMs Fine-tuning","created":"2024-09-18","cited_by_count":8,"area":"safety"},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2302.09360","title":"Backdoor Attacks to Pre-trained Unified Foundation Models","created":"2023-02-18","cited_by_count":7,"area":"safety"},{"id":"2406.18725","title":"Jailbreaking LLMs with Arabic Transliteration and Arabizi","created":"2024-06-26","cited_by_count":7,"area":"safety"},{"id":"2411.07122","title":"SCAR: Sparse Conditioned Autoencoders for Concept Detection and Steering in LLMs","created":"2024-11-11","cited_by_count":7,"area":"safety"},{"id":"2505.23856","title":"OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2512.01353","title":"The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search","created":"2025-12-01","cited_by_count":7,"area":"safety"},{"id":"2501.03266","title":"LLM Content Moderation and User Satisfaction: Evidence from Response Refusals in Chatbot Arena","created":"2025-01-04","cited_by_count":6,"area":"safety"},{"id":"2505.14469","title":"Attributional Safety Failures in Large Language Models under Code-Mixed Perturbations","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2312.14923","title":"Fast-NTK: Parameter-Efficient Unlearning for Large-Scale Models","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2510.09871","title":"CoBia: Constructed Conversations Can Trigger Otherwise Concealed Societal Biases in LLMs","created":"2025-10-10","cited_by_count":5,"area":"safety"},{"id":"2404.02067","title":"Red-Teaming Segment Anything Model","created":"2024-04-02","cited_by_count":4,"area":"safety"},{"id":"2407.15009","title":"RogueGPT: dis-ethical tuning transforms ChatGPT4 into a Rogue AI in 158 Words","created":"2024-06-11","cited_by_count":4,"area":"safety"},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2510.23891","title":"PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2401.10375","title":"Foundation Models in Federated Learning: Assessing Backdoor Vulnerabilities","created":"2024-01-18","cited_by_count":3,"area":"safety"},{"id":"2404.08631","title":"FCert: Certifiably Robust Few-Shot Classification in the Era of Foundation Models","created":"2024-04-12","cited_by_count":3,"area":"safety"},{"id":"2503.23250","title":"Encrypted Prompt: Securing LLM Applications Against Unauthorized Actions","created":"2025-03-29","cited_by_count":3,"area":"safety"},{"id":"2510.15106","title":"PoTS: Proof-of-Training-Steps for Backdoor Detection in Large Language Models","created":"2025-10-16","cited_by_count":3,"area":"safety"},{"id":"2511.11020","title":"Data Poisoning Vulnerabilities Across Healthcare AI Architectures: A Security Threat Analysis","created":"2025-11-14","cited_by_count":3,"area":"safety"},{"id":"2512.24044","title":"Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?","created":"2025-12-30","cited_by_count":3,"area":"safety"},{"id":"2305.09684","title":"Decision-based iterative fragile watermarking for model integrity verification","created":"2023-05-13","cited_by_count":2,"area":"safety"},{"id":"2404.11056","title":"LMEraser: Large Model Unlearning through Adaptive Prompt Tuning","created":"2024-04-17","cited_by_count":2,"area":"safety"},{"id":"2406.12702","title":"[WIP] Jailbreak Paradox: The Achilles' Heel of LLMs","created":"2024-06-18","cited_by_count":2,"area":"safety"},{"id":"2502.14486","title":"How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2509.16861","title":"AdaptiveGuard: Towards Adaptive Runtime Safety for LLM-Powered Software","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2509.19143","title":"Anecdoctoring: Automated Red-Teaming Across Language and Place","created":"2025-09-23","cited_by_count":2,"area":"safety"},{"id":"2510.10281","title":"ArtPerception: ASCII Art-based Jailbreak on LLMs with Recognition Pre-test","created":"2025-10-11","cited_by_count":2,"area":"safety"},{"id":"2512.20677","title":"Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models","created":"2025-12-21","cited_by_count":2,"area":"safety"},{"id":"2603.02588","title":"ExpGuard: LLM Content Moderation in Specialized Domains","created":"2026-03-03","cited_by_count":2,"area":"safety"},{"id":"2604.03598","title":"AttackEval: A Systematic Empirical Study of Prompt Injection Attack Effectiveness Against Large Language Models","created":"2026-04-04","cited_by_count":2,"area":"safety"},{"id":"2501.11183","title":"Can Safety Fine-Tuning Be More Principled? Lessons Learned from Cybersecurity","created":"2025-01-19","cited_by_count":1,"area":"safety"},{"id":"2510.18674","title":"Exploring Membership Inference Vulnerabilities in Clinical Large Language Models","created":"2025-10-21","cited_by_count":1,"area":"safety"},{"id":"2512.21110","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2602.22242","title":"Analysis of LLMs Against Prompt Injection and Jailbreak Attacks","created":"2026-02-24","cited_by_count":1,"area":"safety"},{"id":"2604.16542","title":"TWGuard: A Case Study of LLM Safety Guardrails for Localized Linguistic Contexts","created":"2026-04-17","cited_by_count":1,"area":"safety"},{"id":"2503.05684","title":"Fairness-Aware Low-Rank Representation Fine-Tuning","created":"2025-03-07","cited_by_count":0,"area":"safety"},{"id":"2503.12339","title":"A Closer Look at Adversarial Suffix Learning for Jailbreaking LLMs: Augmented Adversarial Trigger Learning","created":"2025-03-16","cited_by_count":0,"area":"safety"},{"id":"2506.11253","title":"Lifting Data-Tracing Machine Unlearning to Knowledge-Tracing for Foundation Models","created":"2025-06-12","cited_by_count":0,"area":"safety"},{"id":"2508.02312","title":"Data Security in Large Language Models: Risks, Defense, and Directions","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2511.15732","title":"Just Asking Questions: Doing Our Own Research on Conspiratorial Ideation by Generative AI Chatbots","created":"2025-11-18","cited_by_count":0,"area":"safety"},{"id":"2601.03273","title":"A Multi-Perspective Benchmark and Moderation Model for Evaluating Safety and Adversarial Robustness","created":"2025-12-22","cited_by_count":0,"area":"safety"},{"id":"2602.22258","title":"Poisoned Acoustics","created":"2026-02-25","cited_by_count":0,"area":"safety"},{"id":"2604.21860","title":"Transient Turn Injection: Exposing Stateless Multi-Turn Vulnerabilities in Large Language Models","created":"2026-04-23","cited_by_count":0,"area":"safety"},{"id":"2605.00123","title":"Minimal, Local, Causal Explanations for Jailbreak Success in Large Language Models","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2605.05427","title":"The Refusal--Compliance Tradeoff: A Large-Scale Safety Behavior Audit of Large Language Models","created":"2026-05-06","cited_by_count":0,"area":"safety"},{"id":"2605.16336","title":"On Seeding Watermarks to Detect Verbatim LLM Copy-Paste Responses","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2606.17815","title":"Beyond Native Success: Auditing Deployment-Interface Exposure of CLIP Backdoors","created":"2026-06-16","cited_by_count":0,"area":"safety"},{"id":"2606.26377","title":"Verifying Intent and Harm: A Unified Defense Against LLM-Generated Threats","created":"2026-06-24","cited_by_count":0,"area":"safety"},{"id":"2607.05353","title":"Selective Disclosure Watermarking for Large Language Models","created":"2026-07-06","cited_by_count":0,"area":"safety"},{"id":"2607.07527","title":"A Unified Detection Framework for AI-Related Content and Artifacts","created":"2026-07-08","cited_by_count":0,"area":"safety"},{"id":"2607.21735","title":"What AI Red-Team Evaluations Can and Cannot Prove","created":"2026-07-23","cited_by_count":0,"area":"safety"},{"id":"2607.23934","title":"DECAF: De-Clustering for Adaptive Representational Unlearning","created":"2026-07-27","cited_by_count":0,"area":"safety"},{"id":"2608.03210","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","created":"2026-08-04","cited_by_count":0,"area":"safety"},{"id":"2609.32602","title":"AnchorRep: Defending LLMs Against Cross-Model Adversarial Transfer via Representation Repulsion","created":"2026-09-26","cited_by_count":0,"area":"safety"},{"id":"2609.39866","title":"Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.06503","title":"Harmful Content Generation in Text-to-Image Models: Capabilities and Moderation Limitations","created":"2026-10-05","cited_by_count":0,"area":"safety"},{"id":"2610.16305","title":"ATTCK-R: Knowledge-Aware Long-Horizon Jailbreaking for Protected LLMs","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}