{"total":58,"rows":[{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2404.13208","title":"The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions","created":"2024-04-19","cited_by_count":493,"area":"safety"},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2312.14197","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","created":"2023-12-21","cited_by_count":264,"area":"safety"},{"id":"2308.09662","title":"Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment","created":"2023-08-18","cited_by_count":223,"area":"safety"},{"id":"2502.17424","title":"Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMs","created":"2025-02-24","cited_by_count":172,"area":"safety"},{"id":"2311.07689","title":"MART: Improving LLM Safety with Multi-round Automatic Red-Teaming","created":"2023-11-13","cited_by_count":163,"area":"safety"},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157,"area":"safety"},{"id":"2402.05668","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","created":"2024-02-08","cited_by_count":95,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2403.00867","title":"Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapes","created":"2024-03-01","cited_by_count":74,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2310.15851","title":"Self-Guard: Empower the LLM to Safeguard Itself","created":"2023-10-24","cited_by_count":54,"area":"safety"},{"id":"2402.15911","title":"PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Rails","created":"2024-02-24","cited_by_count":52,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2405.09055","title":"A safety realignment framework via subspace-oriented model fusion for large language models","created":"2024-05-15","cited_by_count":41,"area":"safety"},{"id":"2405.20099","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","created":"2024-05-30","cited_by_count":37,"area":"safety"},{"id":"2410.02760","title":"Erasing Conceptual Knowledge from Language Models","created":"2024-10-03","cited_by_count":34,"area":"safety"},{"id":"2409.15154","title":"RMCBench: Benchmarking Large Language Models' Resistance to Malicious Code","created":"2024-09-23","cited_by_count":28,"area":"safety"},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2603.10521","title":"IH-Challenge: A Training Dataset to Improve Instruction Hierarchy on Frontier LLMs","created":"2026-03-11","cited_by_count":15,"area":"safety"},{"id":"2508.20848","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","created":"2025-08-28","cited_by_count":14,"area":"safety"},{"id":"2408.15488","title":"Legilimens: Practical and Unified Content Moderation for Large Language Model Services","created":"2024-08-28","cited_by_count":13,"area":"safety"},{"id":"2410.06467","title":"WAPITI: A Watermark for Finetuned Open-Source LLMs","created":"2024-10-09","cited_by_count":12,"area":"safety"},{"id":"2407.01376","title":"Badllama 3: removing safety finetuning from Llama 3 in minutes","created":"2024-07-01","cited_by_count":11,"area":"safety"},{"id":"2410.03466","title":"Is Safer Better? The Impact of Guardrails on the Argumentative Strength of LLMs in Hate Speech Countering","created":"2024-10-04","cited_by_count":11,"area":"safety"},{"id":"2503.01742","title":"Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models","created":"2025-03-03","cited_by_count":11,"area":"safety"},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2408.14853","title":"Atoxia: Red-teaming Large Language Models with Target Toxic Answers","created":"2024-08-27","cited_by_count":7,"area":"safety"},{"id":"2412.18171","title":"Token Highlighter: Inspecting and Mitigating Jailbreak Prompts for Large Language Models","created":"2024-12-24","cited_by_count":7,"area":"safety"},{"id":"2407.01850","title":"Purple-teaming LLMs with Adversarial Defender Training","created":"2024-07-01","cited_by_count":6,"area":"safety"},{"id":"2402.05723","title":"In-Context Learning Can Re-learn Forbidden Tasks","created":"2024-02-08","cited_by_count":5,"area":"safety"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2502.10450","title":"Trustworthy AI: Safety, Bias, and Privacy -- A Survey","created":"2025-02-11","cited_by_count":5,"area":"safety"},{"id":"2505.22298","title":"Adaptive Detoxification: Safeguarding General Capabilities of LLMs through Toxicity-Aware Knowledge Editing","created":"2025-05-28","cited_by_count":5,"area":"safety"},{"id":"2508.12072","title":"Mitigating Jailbreaks with Intent-Aware LLMs","created":"2025-08-16","cited_by_count":4,"area":"safety"},{"id":"2410.02220","title":"Data to Defense: The Role of Curation in Customizing LLMs Against Jailbreaking Attacks","created":"2024-10-03","cited_by_count":3,"area":"safety"},{"id":"2510.08158","title":"Beyond Over-Refusal: Scenario-Based Diagnostics and Post-Hoc Mitigation for Exaggerated Refusals in LLMs","created":"2025-10-09","cited_by_count":3,"area":"safety"},{"id":"2601.21283","title":"DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teacher","created":"2026-01-29","cited_by_count":3,"area":"safety"},{"id":"2603.11914","title":"Understanding LLM Behavior When Encountering User-Supplied Harmful Content in Harmless Tasks","created":"2026-03-12","cited_by_count":3,"area":"safety"},{"id":"2409.17458","title":"RED QUEEN: Safeguarding Large Language Models against Concealed Multi-Turn Jailbreaking","created":"2024-09-26","cited_by_count":2,"area":"safety"},{"id":"2511.13788","title":"Scaling Patterns in Adversarial Alignment: Evidence from Multi-LLM Jailbreak Experiments","created":"2025-11-16","cited_by_count":2,"area":"safety"},{"id":"2603.20206","title":"Enhancing Safety of Large Language Models via Embedding Space Separation","created":"2026-03-01","cited_by_count":2,"area":"safety"},{"id":"2406.16455","title":"Guardrails for avoiding harmful medical product recommendations and off-label promotion in generative AI models","created":"2024-06-24","cited_by_count":1,"area":"safety"},{"id":"2502.16109","title":"Be a Multitude to Itself: A Prompt Evolution Framework for Red Teaming","created":"2025-02-22","cited_by_count":1,"area":"safety"},{"id":"2605.08496","title":"Latent Personality Alignment: Improving Harmlessness Without Mentioning Harms","created":"2026-05-08","cited_by_count":1,"area":"safety"},{"id":"2507.17922","title":"From Seed to Harvest: Augmenting Human Creativity with AI for Red-teaming Text-to-Image Models","created":"2025-07-23","cited_by_count":0,"area":"safety"},{"id":"2512.01892","title":"Exploring Human Perceptions of AI Responses: Insights from a Mixed-Methods Study on Risk Mitigation in Generative Models","created":"2025-12-01","cited_by_count":0,"area":"safety"},{"id":"2512.12914","title":"CTIGuardian: A Few-Shot Framework for Mitigating Privacy Leakage in Fine-Tuned LLMs","created":"2025-12-15","cited_by_count":0,"area":"safety"},{"id":"2605.12128","title":"Metaphor Is Not All Attention Needs","created":"2026-05-12","cited_by_count":0,"area":"safety"},{"id":"2606.05183","title":"The Granularity Gap: A Multi-Dimensional Cross-Generational Audit of Sycophancy in Gemini Models","created":"2026-04-19","cited_by_count":0,"area":"safety"},{"id":"2608.12346","title":"Position: The Alignment Community is Unintentionally Building a Censor's Toolkit","created":"2026-06-05","cited_by_count":0,"area":"safety"},{"id":"2609.00790","title":"RISA: Response Inspection and Selective Actions for Refusal Calibration in Large Language Models","created":"2026-09-01","cited_by_count":0,"area":"safety"},{"id":"2609.10594","title":"An Empirical Measurement of Jailbreaking Evaluators","created":"2026-09-07","cited_by_count":0,"area":"safety"},{"id":"2609.13534","title":"Harmfulness Propagation Dynamics: Layer-wise Trajectories of Adversarial Intent in Large Language Models","created":"2026-09-11","cited_by_count":0,"area":"safety"},{"id":"2609.38909","title":"Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.08540","title":"Toward Alignment Scaling Laws: A Framework and First Preregistered Measurements","created":"2026-10-06","cited_by_count":0,"area":"safety"}],"next_cursor":null}