{"total":28,"rows":[{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651,"area":"safety"},{"id":"2302.12173","title":"Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection","created":"2023-02-23","cited_by_count":1443,"area":"safety"},{"id":"2311.08268","title":"A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily","created":"2023-11-14","cited_by_count":259,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2301.12867","title":"Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity","created":"2023-01-30","cited_by_count":89,"area":"safety"},{"id":"2305.01904","title":"Robust Multi-bit Natural Language Watermarking through Invariant Features","created":"2023-05-03","cited_by_count":82,"area":"safety"},{"id":"2312.00273","title":"Mark My Words: Analyzing and Evaluating Language Model Watermarks","created":"2023-12-01","cited_by_count":71,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2401.06824","title":"Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspective","created":"2024-01-12","cited_by_count":48,"area":"safety"},{"id":"2402.03299","title":"GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Models","created":"2024-02-05","cited_by_count":48,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2412.06878","title":"SafeWatch: An Efficient Safety-Policy Following Video Guardrail Model with Transparent Explanations","created":"2024-12-09","cited_by_count":38,"area":"safety"},{"id":"2310.10077","title":"Prompt Packer: Deceiving LLMs through Compositional Instruction with Hidden Attacks","created":"2023-10-16","cited_by_count":35,"area":"safety"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2312.04127","title":"Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreak","created":"2023-12-07","cited_by_count":23,"area":"safety"},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2402.16578","title":"Multi-Bit Distortion-Free Watermarking for Large Language Models","created":"2024-02-26","cited_by_count":11,"area":"safety"},{"id":"2406.18725","title":"Jailbreaking LLMs with Arabic Transliteration and Arabizi","created":"2024-06-26","cited_by_count":7,"area":"safety"},{"id":"2401.06829","title":"Cross-Attention Watermarking of Large Language Models","created":"2024-01-12","cited_by_count":6,"area":"safety"},{"id":"2508.19292","title":"Stand on The Shoulders of Giants: Building JailExpert from Previous Attack Experience","created":"2025-08-25","cited_by_count":6,"area":"safety"},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2602.14030","title":"MC$^2$Mark: Distortion-Free Multi-Bit Watermarking for Long Messages","created":"2026-02-15","cited_by_count":4,"area":"safety"},{"id":"2409.17699","title":"MoJE: Mixture of Jailbreak Experts, Naive Tabular Classifiers as Guard for Prompt Attacks","created":"2024-09-26","cited_by_count":3,"area":"safety"},{"id":"2601.05050","title":"Large language models can effectively convince people to believe conspiracies","created":"2026-01-08","cited_by_count":2,"area":"safety"},{"id":"2602.11793","title":"More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles","created":"2026-02-12","cited_by_count":2,"area":"safety"},{"id":"2605.01350","title":"LLM Output Detectability and Task Performance Can be Jointly Optimized","created":"2026-05-02","cited_by_count":0,"area":"safety"},{"id":"2608.27512","title":"Quantization-Triggered Backdoors in Language Models: Cross-Quantizer Transferability and the Validation--Deployment Gap","created":"2026-08-27","cited_by_count":0,"area":"safety"}],"next_cursor":null}