{"total":26,"rows":[{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651,"area":"safety"},{"id":"2311.03191","title":"DeepInception: Hypnotize Large Language Model to Be Jailbreaker","created":"2023-11-06","cited_by_count":367,"area":"safety"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2502.17424","title":"Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMs","created":"2025-02-24","cited_by_count":172,"area":"safety"},{"id":"2301.12867","title":"Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity","created":"2023-01-30","cited_by_count":89,"area":"safety"},{"id":"2410.08827","title":"Do Unlearning Methods Remove Information from Language Model Weights?","created":"2024-10-11","cited_by_count":73,"area":"safety"},{"id":"2307.03941","title":"Right to be Forgotten in the Era of Large Language Models: Implications, Challenges, and Solutions","created":"2023-07-08","cited_by_count":60,"area":"safety"},{"id":"2407.10264","title":"What Makes and Breaks Safety Fine-tuning? A Mechanistic Study","created":"2024-07-14","cited_by_count":55,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2502.17578","title":"How Do Large Language Monkeys Get Their Power (Laws)?","created":"2025-02-24","cited_by_count":43,"area":"safety"},{"id":"2402.00751","title":"Fast Exact Unlearning for In-Context Learning Data for LLMs","created":"2024-02-01","cited_by_count":34,"area":"safety"},{"id":"2310.14303","title":"Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases","created":"2023-10-22","cited_by_count":24,"area":"safety"},{"id":"2302.12461","title":"Analyzing And Editing Inner Mechanisms Of Backdoored Language Models","created":"2023-02-24","cited_by_count":23,"area":"safety"},{"id":"2410.01294","title":"Endless Jailbreaks with Bijection Learning","created":"2024-10-02","cited_by_count":19,"area":"safety"},{"id":"2412.06966","title":"Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research","created":"2024-12-09","cited_by_count":15,"area":"safety"},{"id":"2410.11272","title":"Cognitive Overload Attack:Prompt Injection for Long Context","created":"2024-10-15","cited_by_count":13,"area":"safety"},{"id":"2504.10185","title":"LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks","created":"2025-04-14","cited_by_count":12,"area":"safety"},{"id":"2306.08833","title":"Safeguarding Crowdsourcing Surveys from ChatGPT with Prompt Injection","created":"2023-06-15","cited_by_count":11,"area":"safety"},{"id":"2508.20890","title":"PromptSleuth: Detecting Prompt Injection via Semantic Intent Invariance","created":"2025-08-28","cited_by_count":8,"area":"safety"},{"id":"2308.11521","title":"Self-Deception: Reverse Penetrating the Semantic Firewall of Large Language Models","created":"2023-08-16","cited_by_count":7,"area":"safety"},{"id":"2411.07122","title":"SCAR: Sparse Conditioned Autoencoders for Concept Detection and Steering in LLMs","created":"2024-11-11","cited_by_count":7,"area":"safety"},{"id":"2302.10291","title":"Can Large Language Models Change User Preference Adversarially?","created":"2023-01-05","cited_by_count":5,"area":"safety"},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2507.01752","title":"Tuning without Peeking: Provable Generalization Bounds and Robust LLM Post-Training","created":"2025-07-02","cited_by_count":1,"area":"safety"},{"id":"2606.25476","title":"A Red Teaming Framework for Large Language Models: A Case Study on Faithfulness Evaluation","created":"2026-06-24","cited_by_count":1,"area":"safety"},{"id":"2511.05532","title":"Beyond One-Size-Fits-All: Personalized Harmful Content Detection with In-Context Learning","created":"2025-10-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}