{"total":42,"rows":[{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2310.06474","title":"Multilingual Jailbreak Challenges in Large Language Models","created":"2023-10-10","cited_by_count":240,"area":"safety"},{"id":"2402.19464","title":"Curiosity-driven Red-teaming for Large Language Models","created":"2024-02-29","cited_by_count":88,"area":"safety"},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2404.05399","title":"SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety","created":"2024-04-08","cited_by_count":77,"area":"safety"},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2310.00905","title":"All Languages Matter: On the Multilingual Safety of Large Language Models","created":"2023-10-02","cited_by_count":53,"area":"safety"},{"id":"2403.01251","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","created":"2024-03-02","cited_by_count":37,"area":"safety"},{"id":"2401.16656","title":"Gradient-Based Language Model Red Teaming","created":"2024-01-30","cited_by_count":34,"area":"safety"},{"id":"2505.11413","title":"CARES: Comprehensive Evaluation of Safety and Adversarial Robustness in Medical LLMs","created":"2025-05-16","cited_by_count":26,"area":"safety"},{"id":"2409.07314","title":"MEDIC: Comprehensive Evaluation of Leading Indicators for LLM Safety and Utility in Clinical Applications","created":"2024-09-11","cited_by_count":25,"area":"safety"},{"id":"2501.07238","title":"Lessons From Red Teaming 100 Generative AI Products","created":"2025-01-13","cited_by_count":23,"area":"safety"},{"id":"2405.01886","title":"Aloe: A Family of Fine-tuned Open Healthcare LLMs","created":"2024-05-03","cited_by_count":20,"area":"safety"},{"id":"2401.15241","title":"Unlearning Traces the Influential Training Data of Language Models","created":"2024-01-26","cited_by_count":18,"area":"safety"},{"id":"2405.04160","title":"A Causal Explainable Guardrails for Large Language Models","created":"2024-05-07","cited_by_count":18,"area":"safety"},{"id":"2406.11780","title":"Split, Unlearn, Merge: Leveraging Data Attributes for More Effective Unlearning in LLMs","created":"2024-06-17","cited_by_count":18,"area":"safety"},{"id":"2310.18603","title":"Large Language Models Are Better Adversaries: Exploring Generative Clean-Label Backdoor Attacks Against Text Classifiers","created":"2023-10-28","cited_by_count":14,"area":"safety"},{"id":"2603.26569","title":"Machine Unlearning under Retain-Forget Entanglement","created":"2026-03-27","cited_by_count":11,"area":"safety"},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2407.08441","title":"Are Large Language Models Really Bias-Free? Jailbreak Prompts for Assessing Adversarial Robustness to Bias Elicitation","created":"2024-07-11","cited_by_count":9,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2507.21134","title":"TRIDENT: Benchmarking LLM Safety in Finance, Medicine, and Law","created":"2025-07-22","cited_by_count":8,"area":"safety"},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2502.18935","title":"JailBench: A Comprehensive Chinese Security Assessment Benchmark for Large Language Models","created":"2025-02-26","cited_by_count":5,"area":"safety"},{"id":"2510.07239","title":"Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts","created":"2025-10-08","cited_by_count":5,"area":"safety"},{"id":"2407.06483","title":"Composable Interventions for Language Models","created":"2024-07-09","cited_by_count":4,"area":"safety"},{"id":"2510.01088","title":"Safety Instincts: LLMs Learn to Trust Their Internal Compass for Self-Defense","created":"2025-10-01","cited_by_count":4,"area":"safety"},{"id":"2404.07879","title":"Analyzing Toxicity in Deep Conversations: A Reddit Case Study","created":"2024-04-11","cited_by_count":3,"area":"safety"},{"id":"2510.08158","title":"Beyond Over-Refusal: Scenario-Based Diagnostics and Post-Hoc Mitigation for Exaggerated Refusals in LLMs","created":"2025-10-09","cited_by_count":3,"area":"safety"},{"id":"2407.03045","title":"JailbreakHunter: A Visual Analytics Approach for Jailbreak Prompts Discovery from Large-Scale Human-LLM Conversational Datasets","created":"2024-07-03","cited_by_count":2,"area":"safety"},{"id":"2507.05980","title":"Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gaps","created":"2025-07-08","cited_by_count":2,"area":"safety"},{"id":"2407.06323","title":"When in Doubt, Cascade: Towards Building Efficient and Capable Guardrails","created":"2024-07-08","cited_by_count":1,"area":"safety"},{"id":"2511.00554","title":"Red-teaming Activation Probes using Prompted LLMs","created":"2025-11-01","cited_by_count":1,"area":"safety"},{"id":"2605.26954","title":"AlbanianLLMSafety: A Safety Evaluation Dataset for Large Language Models in Albanian","created":"2026-05-26","cited_by_count":1,"area":"safety"},{"id":"2603.04992","title":"ThaiSafetyBench: Assessing Language Model Safety in Thai Cultural Contexts","created":"2026-03-05","cited_by_count":0,"area":"safety"},{"id":"2604.17020","title":"Beyond Static Benchmarks: Synthesizing Harmful Content via Persona-based Simulation for Robust Evaluation","created":"2026-04-18","cited_by_count":0,"area":"safety"},{"id":"2605.10901","title":"Beyond Red-Teaming: Formal Guarantees of LLM Guardrail Classifiers","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.22258","title":"Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting","created":"2026-05-21","cited_by_count":0,"area":"safety"},{"id":"2606.09388","title":"Distilling Safe LLM Systems via Soft Prompts for On Device Settings","created":"2026-06-08","cited_by_count":0,"area":"safety"},{"id":"2606.25380","title":"A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models","created":"2026-06-24","cited_by_count":0,"area":"safety"},{"id":"2608.21775","title":"No One Model Catches Every Harm: Benchmarking Content Moderation Across Safety Scenarios","created":"2026-08-22","cited_by_count":0,"area":"safety"},{"id":"2609.20129","title":"Local Sparsity Enables Unsupervised LLM Safety Detection","created":"2026-09-17","cited_by_count":0,"area":"safety"}],"next_cursor":null}