{"total":102,"rows":[{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443,"area":"safety"},{"id":"2202.03286","title":"Red Teaming Language Models with Language Models","created":"2022-02-07","cited_by_count":1026,"area":"safety"},{"id":"2406.18495","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","created":"2024-06-26","cited_by_count":496,"area":"safety"},{"id":"2310.02446","title":"Low-Resource Languages Jailbreak GPT-4","created":"2023-10-03","cited_by_count":309,"area":"safety"},{"id":"2306.17439","title":"Provable Robust Watermarking for AI-Generated Text","created":"2023-06-30","cited_by_count":299,"area":"safety"},{"id":"2402.08983","title":"SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding","created":"2024-02-14","cited_by_count":247,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2311.07689","title":"MART: Improving LLM Safety with Multi-round Automatic Red-Teaming","created":"2023-11-13","cited_by_count":163,"area":"safety"},{"id":"2401.18018","title":"On Prompt-Driven Safeguarding for Large Language Models","created":"2024-01-31","cited_by_count":116,"area":"safety"},{"id":"2404.08676","title":"ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming","created":"2024-04-06","cited_by_count":98,"area":"safety"},{"id":"2301.12867","title":"Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity","created":"2023-01-30","cited_by_count":89,"area":"safety"},{"id":"2403.17336","title":"Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models","created":"2024-03-26","cited_by_count":86,"area":"safety"},{"id":"2402.17262","title":"Speak Out of Turn: Safety Vulnerability of Large Language Models in Multi-turn Dialogue","created":"2024-02-27","cited_by_count":66,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2311.08592","title":"AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applications","created":"2023-11-14","cited_by_count":54,"area":"safety"},{"id":"2405.18540","title":"Learning diverse attacks on large language models for robust red-teaming and safety tuning","created":"2024-05-28","cited_by_count":54,"area":"safety"},{"id":"2310.00905","title":"All Languages Matter: On the Multilingual Safety of Large Language Models","created":"2023-10-02","cited_by_count":53,"area":"safety"},{"id":"2406.05113","title":"LlavaGuard: An Open VLM-based Framework for Safeguarding Vision Datasets and Models","created":"2024-06-07","cited_by_count":52,"area":"safety"},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2401.06824","title":"Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspective","created":"2024-01-12","cited_by_count":48,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2209.03118","title":"The Ethical Need for Watermarks in Machine-Generated Language","created":"2022-09-07","cited_by_count":32,"area":"safety"},{"id":"2406.14517","title":"PostMark: A Robust Blackbox Watermark for Large Language Models","created":"2024-06-20","cited_by_count":29,"area":"safety"},{"id":"2411.12103","title":"Does Unlearning Truly Unlearn? A Black Box Evaluation of LLM Unlearning Methods","created":"2024-11-18","cited_by_count":26,"area":"safety"},{"id":"2309.11830","title":"Goal-Oriented Prompt Attack and Safety Evaluation for LLMs","created":"2023-09-21","cited_by_count":24,"area":"safety"},{"id":"2501.07238","title":"Lessons From Red Teaming 100 Generative AI Products","created":"2025-01-13","cited_by_count":23,"area":"safety"},{"id":"2502.11090","title":"SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attacks","created":"2025-02-16","cited_by_count":23,"area":"safety"},{"id":"2402.05864","title":"Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs","created":"2024-02-08","cited_by_count":22,"area":"safety"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2502.02787","title":"SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models","created":"2025-02-05","cited_by_count":15,"area":"safety"},{"id":"2408.15488","title":"Legilimens: Practical and Unified Content Moderation for Large Language Model Services","created":"2024-08-28","cited_by_count":13,"area":"safety"},{"id":"2410.06809","title":"Root Defence Strategies: Ensuring Safety of LLM at the Decoding Level","created":"2024-10-09","cited_by_count":11,"area":"safety"},{"id":"2403.14988","title":"Risk and Response in Large Language Models: Evaluating Key Threat Categories","created":"2024-03-22","cited_by_count":10,"area":"safety"},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2602.13284","title":"Agents in the Wild: Safety, Society, and the Illusion of Sociality on Moltbook","created":"2026-02-07","cited_by_count":10,"area":"safety"},{"id":"2402.13926","title":"Large Language Models are Vulnerable to Bait-and-Switch Attacks for Generating Harmful Content","created":"2024-02-21","cited_by_count":9,"area":"safety"},{"id":"2407.08441","title":"Are Large Language Models Really Bias-Free? Jailbreak Prompts for Assessing Adversarial Robustness to Bias Elicitation","created":"2024-07-11","cited_by_count":9,"area":"safety"},{"id":"2505.17650","title":"Does Chain-of-Thought Reasoning Really Reduce Harmfulness from Jailbreaking?","created":"2025-05-23","cited_by_count":9,"area":"safety"},{"id":"2509.03728","title":"PersonaTeaming: Exploring How Introducing Personas Can Improve Automated AI Red-Teaming","created":"2025-09-03","cited_by_count":9,"area":"safety"},{"id":"2306.03097","title":"Seeing Seeds Beyond Weeds: Green Teaming Generative AI for Beneficial Uses","created":"2023-05-30","cited_by_count":8,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2504.19674","title":"SAGE: A Generic Framework for LLM Safety Evaluation","created":"2025-04-28","cited_by_count":8,"area":"safety"},{"id":"2308.11521","title":"Self-Deception: Reverse Penetrating the Semantic Firewall of Large Language Models","created":"2023-08-16","cited_by_count":7,"area":"safety"},{"id":"2411.07122","title":"SCAR: Sparse Conditioned Autoencoders for Concept Detection and Steering in LLMs","created":"2024-11-11","cited_by_count":7,"area":"safety"},{"id":"2509.01631","title":"Unraveling LLM Jailbreaks Through Safety Knowledge Neurons","created":"2025-09-01","cited_by_count":7,"area":"safety"},{"id":"2509.21947","title":"Active Attacks: Red-teaming LLMs via Adaptive Environments","created":"2025-09-26","cited_by_count":7,"area":"safety"},{"id":"2603.01285","title":"Attention Smoothing Is All You Need For Unlearning","created":"2026-03-01","cited_by_count":7,"area":"safety"},{"id":"2409.01247","title":"Conversational Complexity for Assessing Risk in Large Language Models","created":"2024-09-02","cited_by_count":6,"area":"safety"},{"id":"2501.03266","title":"LLM Content Moderation and User Satisfaction: Evidence from Response Refusals in Chatbot Arena","created":"2025-01-04","cited_by_count":6,"area":"safety"},{"id":"2505.14469","title":"Attributional Safety Failures in Large Language Models under Code-Mixed Perturbations","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2304.14364","title":"CONSCENDI: A Contrastive and Scenario-Guided Distillation Approach to Guardrail Models for Virtual Assistants","created":"2023-04-27","cited_by_count":5,"area":"safety"},{"id":"2410.23496","title":"Smaller Large Language Models Can Do Moral Self-Correction","created":"2024-10-30","cited_by_count":5,"area":"safety"},{"id":"2507.06043","title":"CAVGAN: Unifying Jailbreak and Defense of LLMs via Generative Adversarial Attacks on their Internal Representations","created":"2025-07-08","cited_by_count":5,"area":"safety"},{"id":"2510.04891","title":"SocialHarmBench: Revealing LLM Vulnerabilities to Socially Harmful Requests","created":"2025-10-06","cited_by_count":5,"area":"safety"},{"id":"2511.06890","title":"EduGuardBench: A Holistic Benchmark for Evaluating the Pedagogical Fidelity and Adversarial Safety of LLMs as Simulated Teachers","created":"2025-11-10","cited_by_count":5,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2510.27087","title":"Characterizing Selective Refusal Bias in Large Language Models","created":"2025-10-31","cited_by_count":4,"area":"safety"},{"id":"2602.14030","title":"MC$^2$Mark: Distortion-Free Multi-Bit Watermarking for Long Messages","created":"2026-02-15","cited_by_count":4,"area":"safety"},{"id":"2310.00892","title":"No Offense Taken: Eliciting Offensiveness from Language Models","created":"2023-10-02","cited_by_count":3,"area":"safety"},{"id":"2406.02044","title":"Towards Universal and Black-Box Query-Response Only Attack on LLMs with QROA","created":"2024-06-04","cited_by_count":3,"area":"safety"},{"id":"2412.02113","title":"Trust & Safety of LLMs and LLMs in Trust & Safety","created":"2024-12-03","cited_by_count":3,"area":"safety"},{"id":"2503.23250","title":"Encrypted Prompt: Securing LLM Applications Against Unauthorized Actions","created":"2025-03-29","cited_by_count":3,"area":"safety"},{"id":"2507.13474","title":"Paper Summary Attack: Jailbreaking LLMs through LLM Safety Papers","created":"2025-07-17","cited_by_count":3,"area":"safety"},{"id":"2508.14128","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","created":"2025-08-19","cited_by_count":3,"area":"safety"},{"id":"2512.24044","title":"Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?","created":"2025-12-30","cited_by_count":3,"area":"safety"},{"id":"2602.20170","title":"CAGE: A Framework for Culturally Adaptive Red-Teaming Benchmark Generation","created":"2026-02-09","cited_by_count":3,"area":"safety"},{"id":"2403.06593","title":"Authorship and the Politics and Ethics of LLM Watermarks","created":"2024-03-11","cited_by_count":2,"area":"safety"},{"id":"2507.01693","title":"GPT, But Backwards: Exactly Inverting Language Model Outputs","created":"2025-07-02","cited_by_count":2,"area":"safety"},{"id":"2508.03970","title":"Data and AI governance: Promoting equity, ethics, and fairness in large language models","created":"2025-08-05","cited_by_count":2,"area":"safety"},{"id":"2509.23362","title":"Dual-Space Smoothness for Robust and Balanced LLM Unlearning","created":"2025-09-27","cited_by_count":2,"area":"safety"},{"id":"2510.01223","title":"Jailbreaking LLMs via Semantically Relevant Nested Scenarios with Targeted Toxic Knowledge","created":"2025-09-22","cited_by_count":2,"area":"safety"},{"id":"2512.20677","title":"Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models","created":"2025-12-21","cited_by_count":2,"area":"safety"},{"id":"2601.03134","title":"The Anatomy of Conversational Scams: A Topic-Based Red Teaming Analysis of Multi-Turn Interactions in LLMs","created":"2026-01-06","cited_by_count":2,"area":"safety"},{"id":"2602.11793","title":"More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles","created":"2026-02-12","cited_by_count":2,"area":"safety"},{"id":"2602.14286","title":"Online LLM watermark detection via e-processes","created":"2026-02-15","cited_by_count":2,"area":"safety"},{"id":"2603.02588","title":"ExpGuard: LLM Content Moderation in Specialized Domains","created":"2026-03-03","cited_by_count":2,"area":"safety"},{"id":"2505.00010","title":"Jailbreak Detection in Clinical Training LLMs Using Feature-Based Predictive Models","created":"2025-04-21","cited_by_count":1,"area":"safety"},{"id":"2508.10010","title":"An Audit and Analysis of LLM-Assisted Health Misinformation Jailbreaks Against LLMs","created":"2025-08-06","cited_by_count":1,"area":"safety"},{"id":"2509.16462","title":"Let's Unlearn Stereotypes Before Decision-Making: Assessing the Impact of Intrinsic Bias Mitigation on Downstream Fairness in LLMs","created":"2025-09-19","cited_by_count":1,"area":"safety"},{"id":"2509.24488","title":"Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Models","created":"2025-09-29","cited_by_count":1,"area":"safety"},{"id":"2512.21110","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2602.02509","title":"CodeGuard: Improving LLM Guardrails in CS Education","created":"2026-01-22","cited_by_count":1,"area":"safety"},{"id":"2602.06440","title":"TrailBlazer: History-Guided Reinforcement Learning for Black-Box LLM Jailbreaking","created":"2026-02-06","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2605.18239","title":"Multilingual jailbreaking of LLMs using low-resource languages","created":"2026-05-18","cited_by_count":1,"area":"safety"},{"id":"2605.26954","title":"AlbanianLLMSafety: A Safety Evaluation Dataset for Large Language Models in Albanian","created":"2026-05-26","cited_by_count":1,"area":"safety"},{"id":"2411.16730","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","created":"2024-11-23","cited_by_count":0,"area":"safety"},{"id":"2504.10603","title":"Demo: ViolentUTF as An Accessible Platform for Generative AI Red Teaming","created":"2025-04-14","cited_by_count":0,"area":"safety"},{"id":"2509.23381","title":"Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT","created":"2025-09-27","cited_by_count":0,"area":"safety"},{"id":"2512.04044","title":"MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking","created":"2025-12-03","cited_by_count":0,"area":"safety"},{"id":"2601.03273","title":"A Multi-Perspective Benchmark and Moderation Model for Evaluating Safety and Adversarial Robustness","created":"2025-12-22","cited_by_count":0,"area":"safety"},{"id":"2601.10566","title":"Representation-Aware Unlearning via Activation Signatures: From Suppression to Entity-Signature Erasure","created":"2026-01-15","cited_by_count":0,"area":"safety"},{"id":"2602.18483","title":"Red Teaming LLMs as Socio-Technical Practice: From Exploration and Data Creation to Evaluation","created":"2026-02-10","cited_by_count":0,"area":"safety"},{"id":"2604.21860","title":"Transient Turn Injection: Exposing Stateless Multi-Turn Vulnerabilities in Large Language Models","created":"2026-04-23","cited_by_count":0,"area":"safety"},{"id":"2605.05682","title":"PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2606.00150","title":"Persona Attack: Incremental Memory Injection Jailbreak Attack against Large Language Models","created":"2026-05-29","cited_by_count":0,"area":"safety"},{"id":"2606.05614","title":"Safety Paradox: How Enhanced Safety Awareness Leaves LLMs Vulnerable to Posterior Attack","created":"2026-06-04","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}