{"total":15,"rows":[{"id":"2305.14710","title":"Instructions as Backdoors: Backdoor Vulnerabilities of Instruction Tuning for Large Language Models","created":"2023-05-24","cited_by_count":110,"area":"safety"},{"id":"2308.10819","title":"Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injection","created":"2023-08-17","cited_by_count":59,"area":"safety"},{"id":"2403.08424","title":"Distract Large Language Models for Automatic Jailbreak Attack","created":"2024-03-13","cited_by_count":45,"area":"safety"},{"id":"2312.04127","title":"Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreak","created":"2023-12-07","cited_by_count":23,"area":"safety"},{"id":"2311.09763","title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations","created":"2023-11-16","cited_by_count":21,"area":"safety"},{"id":"2406.05344","title":"MemeGuard: An LLM and VLM-based Framework for Advancing Content Moderation via Meme Intervention","created":"2024-06-08","cited_by_count":20,"area":"safety"},{"id":"2405.14189","title":"Efficient Universal Goal Hijacking with Semantics-guided Prompt Organization","created":"2024-05-23","cited_by_count":16,"area":"safety"},{"id":"2408.03515","title":"A Study on Prompt Injection Attack Against LLM-Integrated Mobile Robotic Systems","created":"2024-08-07","cited_by_count":15,"area":"safety"},{"id":"2507.05248","title":"Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2605.06161","title":"Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges","created":"2026-05-07","cited_by_count":8,"area":"safety"},{"id":"2407.01902","title":"SeqAR: Jailbreak LLMs with Sequential Auto-Generated Characters","created":"2024-07-02","cited_by_count":6,"area":"safety"},{"id":"2508.16889","title":"ObjexMT: Objective Extraction and Metacognitive Calibration for LLM-as-a-Judge under Multi-Turn Jailbreaks","created":"2025-08-23","cited_by_count":3,"area":"safety"},{"id":"2507.20503","title":"Customize Multi-modal RAI Guardrails with Precedent-based predictions","created":"2025-07-28","cited_by_count":2,"area":"safety"},{"id":"2411.11424","title":"Membership Inference Attack against Long-Context Large Language Models","created":"2024-11-18","cited_by_count":1,"area":"safety"},{"id":"2610.02302","title":"Intent-Hiding Jailbreaks: An Information-Theoretic Framework for Compositional Attacks","created":"2026-10-01","cited_by_count":0,"area":"safety"}],"next_cursor":null}