{"total":64,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2404.01318","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","created":"2024-03-28","cited_by_count":536,"area":"safety"},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2402.02309","title":"Jailbreaking Attack against Multimodal Large Language Model","created":"2024-02-04","cited_by_count":135,"area":"safety"},{"id":"2306.09442","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","created":"2023-06-15","cited_by_count":114,"area":"safety"},{"id":"2405.21018","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","created":"2024-05-31","cited_by_count":110,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2312.00027","title":"Stealthy and Persistent Unalignment on Large Language Models via Backdoor Injections","created":"2023-11-15","cited_by_count":39,"area":"safety"},{"id":"2403.01251","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","created":"2024-03-02","cited_by_count":37,"area":"safety"},{"id":"2406.03589","title":"Ranking Manipulation for Conversational Search Engines","created":"2024-06-05","cited_by_count":26,"area":"safety"},{"id":"2406.11668","title":"\"Not Aligned\" is Not \"Malicious\": Being Careful about Hallucinations of Large Language Models' Jailbreak","created":"2024-06-17","cited_by_count":25,"area":"safety"},{"id":"2310.14303","title":"Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases","created":"2023-10-22","cited_by_count":24,"area":"safety"},{"id":"2312.04127","title":"Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreak","created":"2023-12-07","cited_by_count":23,"area":"safety"},{"id":"2405.09113","title":"Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization","created":"2024-05-15","cited_by_count":18,"area":"safety"},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18,"area":"safety"},{"id":"2404.12274","title":"Advancing the Robustness of Large Language Models through Self-Denoised Smoothing","created":"2024-04-18","cited_by_count":16,"area":"safety"},{"id":"2405.14189","title":"Efficient Universal Goal Hijacking with Semantics-guided Prompt Organization","created":"2024-05-23","cited_by_count":16,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2412.08615","title":"Exploiting the Index Gradients for Optimization-Based Jailbreaking on Large Language Models","created":"2024-12-11","cited_by_count":15,"area":"safety"},{"id":"2402.05467","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","created":"2024-02-08","cited_by_count":14,"area":"safety"},{"id":"2404.13660","title":"Trojan Detection in Large Language Models: Insights from The Trojan Detection Challenge","created":"2024-04-21","cited_by_count":14,"area":"safety"},{"id":"2505.24445","title":"Learning Safety Constraints for Large Language Models","created":"2025-05-30","cited_by_count":13,"area":"safety"},{"id":"2509.14558","title":"LLM Jailbreak Detection for (Almost) Free!","created":"2025-09-18","cited_by_count":13,"area":"safety"},{"id":"2408.11313","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","created":"2024-08-21","cited_by_count":11,"area":"safety"},{"id":"2505.16947","title":"MixAT: Combining Continuous and Discrete Adversarial Training for LLMs","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2512.21008","title":"GateBreaker: Gate-Guided Attacks on Mixture-of-Expert LLMs","created":"2025-12-24","cited_by_count":11,"area":"safety"},{"id":"2604.08499","title":"PIArena: A Platform for Prompt Injection Evaluation","created":"2026-04-09","cited_by_count":11,"area":"safety"},{"id":"2501.00055","title":"LLM-Virus: Evolutionary Jailbreak Attack on Large Language Models","created":"2024-12-28","cited_by_count":7,"area":"safety"},{"id":"2502.15334","title":"Attention Eclipse: Manipulating Attention to Bypass LLM Safety-Alignment","created":"2025-02-21","cited_by_count":7,"area":"safety"},{"id":"2410.11317","title":"Deciphering the Chaos: Enhancing Jailbreak Attacks via Adversarial Prompt Translation","created":"2024-10-15","cited_by_count":6,"area":"safety"},{"id":"2510.24034","title":"AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts","created":"2025-10-28","cited_by_count":6,"area":"safety"},{"id":"2411.08862","title":"LLMStinger: Jailbreaking LLMs using RL fine-tuned LLMs","created":"2024-11-13","cited_by_count":5,"area":"safety"},{"id":"2512.03771","title":"In-Context Representation Hijacking","created":"2025-12-03","cited_by_count":5,"area":"safety"},{"id":"2405.20015","title":"Efficient LLM-Jailbreaking via Multimodal-LLM Jailbreak","created":"2024-05-30","cited_by_count":4,"area":"safety"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2505.09820","title":"Adversarial Attack on Large Language Models using Exponentiated Gradient Descent","created":"2025-05-14","cited_by_count":4,"area":"safety"},{"id":"2506.22666","title":"VERA: Variational Inference Framework for Jailbreaking Large Language Models","created":"2025-06-27","cited_by_count":4,"area":"safety"},{"id":"2406.02044","title":"Towards Universal and Black-Box Query-Response Only Attack on LLMs with QROA","created":"2024-06-04","cited_by_count":3,"area":"safety"},{"id":"2502.09974","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","created":"2025-02-14","cited_by_count":3,"area":"safety"},{"id":"2509.03117","title":"PromptCOS: Towards Content-only System Prompt Copyright Auditing for LLMs","created":"2025-09-03","cited_by_count":3,"area":"safety"},{"id":"2503.08990","title":"Effective and Efficient Jailbreaks of Black-Box LLMs with Cross-Behavior Attacks","created":"2025-03-12","cited_by_count":2,"area":"safety"},{"id":"2507.01693","title":"GPT, But Backwards: Exactly Inverting Language Model Outputs","created":"2025-07-02","cited_by_count":2,"area":"safety"},{"id":"2411.16769","title":"Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewriting","created":"2024-11-25","cited_by_count":1,"area":"safety"},{"id":"2505.00843","title":"OET: Optimization-based prompt injection Evaluation Toolkit","created":"2025-05-01","cited_by_count":1,"area":"safety"},{"id":"2609.26185","title":"Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs","created":"2026-08-10","cited_by_count":1,"area":"safety"},{"id":"2504.08757","title":"A Framework for Lightweight Responsible Prompting Recommendation","created":"2025-03-29","cited_by_count":0,"area":"safety"},{"id":"2511.18581","title":"TASO: Jailbreak LLMs via Alternative Template and Suffix Optimization","created":"2025-11-23","cited_by_count":0,"area":"safety"},{"id":"2602.20102","title":"BarrierSteer: LLM Safety via Learning Barrier Steering","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2603.17174","title":"Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2604.07835","title":"Silencing the Guardrails: Inference-Time Jailbreaking via Dynamic Contextual Representation Ablation","created":"2026-04-09","cited_by_count":0,"area":"safety"},{"id":"2604.10403","title":"Latent Instruction Representation Alignment: defending against jailbreaks, backdoors and undesired knowledge in LLMs","created":"2026-04-12","cited_by_count":0,"area":"safety"},{"id":"2604.24983","title":"Adaptive Prompt Embedding Optimization for LLM Jailbreaking","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.05116","title":"On the Hardness of Junking LLMs","created":"2026-05-06","cited_by_count":0,"area":"safety"},{"id":"2605.08898","title":"LLM-Agnostic Semantic Representation Attack","created":"2026-05-09","cited_by_count":0,"area":"safety"},{"id":"2605.21674","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","created":"2026-05-20","cited_by_count":0,"area":"safety"},{"id":"2606.05101","title":"FoeGlass: Simple In-Context Learning Is Enough for Red Teaming Audio Deepfake Detectors","created":"2026-06-03","cited_by_count":0,"area":"safety"},{"id":"2607.08883","title":"Optimizing Against Safety Representations: Activation-Guided Adversarial Suffixes and the Geometry of Refusal","created":"2026-07-09","cited_by_count":0,"area":"safety"},{"id":"2609.20129","title":"Local Sparsity Enables Unsupervised LLM Safety Detection","created":"2026-09-17","cited_by_count":0,"area":"safety"},{"id":"2609.29948","title":"ENDOPROMPT: Victim-Side Pseudo-References for Utility Degradation","created":"2026-09-24","cited_by_count":0,"area":"safety"}],"next_cursor":null}