{"total":65,"rows":[{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2308.14132","title":"Detecting Language Model Attacks with Perplexity","created":"2023-08-27","cited_by_count":431,"area":"safety"},{"id":"2402.08983","title":"SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding","created":"2024-02-14","cited_by_count":247,"area":"safety"},{"id":"2310.06474","title":"Multilingual Jailbreak Challenges in Large Language Models","created":"2023-10-10","cited_by_count":240,"area":"safety"},{"id":"2310.20150","title":"Unlearn What You Want to Forget: Efficient Unlearning for LLMs","created":"2023-10-31","cited_by_count":215,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157,"area":"safety"},{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2306.17194","title":"On the Exploitability of Instruction Tuning","created":"2023-06-28","cited_by_count":116,"area":"safety"},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2310.12505","title":"Attack Prompt Generation for Red Teaming and Defending Large Language Models","created":"2023-10-19","cited_by_count":76,"area":"safety"},{"id":"2410.11143","title":"LLM Unlearning via Loss Adjustment with Only Forget Data","created":"2024-10-14","cited_by_count":75,"area":"safety"},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2406.10794","title":"Towards Understanding Jailbreak Attacks in LLMs: A Representation Space Analysis","created":"2024-06-16","cited_by_count":64,"area":"safety"},{"id":"2402.09179","title":"Instruction Backdoor Attacks Against Customized LLMs","created":"2024-02-14","cited_by_count":62,"area":"safety"},{"id":"2307.08487","title":"Latent Jailbreak: A Benchmark for Evaluating Text Safety and Output Robustness of Large Language Models","created":"2023-07-17","cited_by_count":60,"area":"safety"},{"id":"2308.10819","title":"Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injection","created":"2023-08-17","cited_by_count":59,"area":"safety"},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58,"area":"safety"},{"id":"2310.15851","title":"Self-Guard: Empower the LLM to Safeguard Itself","created":"2023-10-24","cited_by_count":54,"area":"safety"},{"id":"2311.08592","title":"AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applications","created":"2023-11-14","cited_by_count":54,"area":"safety"},{"id":"2309.05274","title":"FuzzLLM: A Novel and Universal Fuzzing Framework for Proactively Discovering Jailbreak Vulnerabilities in Large Language Models","created":"2023-09-11","cited_by_count":51,"area":"safety"},{"id":"2501.01765","title":"SaLoRA: Safety-Alignment Preserved Low-Rank Adaptation","created":"2025-01-03","cited_by_count":42,"area":"safety"},{"id":"2505.11953","title":"Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning","created":"2025-05-17","cited_by_count":39,"area":"safety"},{"id":"2310.14303","title":"Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases","created":"2023-10-22","cited_by_count":24,"area":"safety"},{"id":"2405.09113","title":"Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization","created":"2024-05-15","cited_by_count":18,"area":"safety"},{"id":"2404.19597","title":"TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuning","created":"2024-04-30","cited_by_count":14,"area":"safety"},{"id":"2404.02406","title":"Exploring Backdoor Vulnerabilities of Chat Models","created":"2024-04-03","cited_by_count":13,"area":"safety"},{"id":"2411.06899","title":"LongSafety: Enhance Safety for Long-Context LLMs","created":"2024-11-11","cited_by_count":11,"area":"safety"},{"id":"2406.12329","title":"Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transport","created":"2024-06-18","cited_by_count":10,"area":"safety"},{"id":"2411.04223","title":"Diversity Helps Jailbreak Large Language Models","created":"2024-11-06","cited_by_count":10,"area":"safety"},{"id":"2502.11647","title":"DELMAN: Dynamic Defense Against Large Language Model Jailbreaking with Model Editing","created":"2025-02-17","cited_by_count":10,"area":"safety"},{"id":"2402.01053","title":"Plan-Grounded Large Language Models for Dual Goal Conversational Settings","created":"2024-02-01","cited_by_count":8,"area":"safety"},{"id":"2605.06161","title":"Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges","created":"2026-05-07","cited_by_count":8,"area":"safety"},{"id":"2508.08211","title":"SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders","created":"2025-08-11","cited_by_count":7,"area":"safety"},{"id":"2504.14738","title":"PROMPTEVALS: A Dataset of Assertions and Guardrails for Custom Production Large Language Model Pipelines","created":"2025-04-20","cited_by_count":6,"area":"safety"},{"id":"2407.01461","title":"Enhancing the Capability and Robustness of Large Language Models through Reinforcement Learning-Driven Query Refinement","created":"2024-07-01","cited_by_count":5,"area":"safety"},{"id":"2408.03603","title":"EnJa: Ensemble Jailbreak on Large Language Models","created":"2024-08-07","cited_by_count":5,"area":"safety"},{"id":"2507.18203","title":"Exploring the Impact of Instruction-Tuning on LLM's Susceptibility to Misinformation","created":"2025-07-24","cited_by_count":4,"area":"safety"},{"id":"2510.08859","title":"Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models","created":"2025-10-09","cited_by_count":4,"area":"safety"},{"id":"2310.11079","title":"Learning from Red Teaming: Gender Bias Provocation and Mitigation in Large Language Models","created":"2023-10-17","cited_by_count":3,"area":"safety"},{"id":"2403.06131","title":"PPFedIT: Towards Privacy-Preserving Federated Instruction Tuning with Few-shot Local Examples","created":"2024-03-10","cited_by_count":3,"area":"safety"},{"id":"2403.15740","title":"Protecting Copyrighted Material with Unique Identifiers in Large Language Model Training","created":"2024-03-23","cited_by_count":3,"area":"safety"},{"id":"2411.12946","title":"A Flexible Large Language Models Guardrail Development Methodology Applied to Off-Topic Prompt Detection","created":"2024-11-20","cited_by_count":3,"area":"safety"},{"id":"2404.18567","title":"Double Backdoored: Converting Code Large Language Model Backdoors to Traditional Malware via Adversarial Instruction Tuning Attacks","created":"2024-04-29","cited_by_count":2,"area":"safety"},{"id":"2504.19019","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","created":"2025-04-26","cited_by_count":2,"area":"safety"},{"id":"2508.16484","title":"HAMSA: Hijacking Aligned Compact Models via Stealthy Automation","created":"2025-08-22","cited_by_count":2,"area":"safety"},{"id":"2510.10271","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","created":"2025-10-11","cited_by_count":2,"area":"safety"},{"id":"2504.01533","title":"LightDefense: A Lightweight Uncertainty-Driven Defense against Jailbreaks via Shifted Token Distribution","created":"2025-04-02","cited_by_count":1,"area":"safety"},{"id":"2512.14751","title":"One Leak Away: How Pretrained Model Exposure Amplifies Jailbreak Risks in Finetuned LLMs","created":"2025-12-14","cited_by_count":1,"area":"safety"},{"id":"2501.15280","title":"If It's Nice, Do It Twice: We Should Try Iterative Corpus Curation","created":"2025-01-25","cited_by_count":0,"area":"safety"},{"id":"2505.17066","title":"Improving LLM Outputs Against Jailbreak Attacks with Expert Model Integration","created":"2025-05-18","cited_by_count":0,"area":"safety"},{"id":"2508.18384","title":"Backprompting: Leveraging Synthetic Production Data for Health Advice Guardrails","created":"2025-08-25","cited_by_count":0,"area":"safety"},{"id":"2512.01892","title":"Exploring Human Perceptions of AI Responses: Insights from a Mixed-Methods Study on Risk Mitigation in Generative Models","created":"2025-12-01","cited_by_count":0,"area":"safety"},{"id":"2512.16307","title":"Beyond the Benchmark: Innovative Defenses Against Prompt Injection Attacks","created":"2025-12-18","cited_by_count":0,"area":"safety"},{"id":"2602.02280","title":"RACC: Representation-Aware Coverage Criteria for LLM Safety Testing","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2604.25203","title":"BARRED: Synthetic Training of Custom Policy Guardrails via Asymmetric Debate","created":"2026-04-28","cited_by_count":0,"area":"safety"},{"id":"2606.05614","title":"Safety Paradox: How Enhanced Safety Awareness Leaves LLMs Vulnerable to Posterior Attack","created":"2026-06-04","cited_by_count":0,"area":"safety"},{"id":"2607.18268","title":"Fence: Specialized SLM Guardrails for LLM Applications","created":"2026-05-22","cited_by_count":0,"area":"safety"},{"id":"2608.29030","title":"Learning to Follow In-Context Watermark Instructions via Self-Distillation","created":"2026-08-29","cited_by_count":0,"area":"safety"},{"id":"2609.31062","title":"CG-Probes: Recovering Guardrail Directions from Patient Query Embeddings","created":"2026-09-25","cited_by_count":0,"area":"safety"},{"id":"2609.36474","title":"FinRT: Distilling Adaptive Red-Teaming Strategies into Reusable Adversarial Generators in Consumer Finance","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}