{"total":28,"rows":[{"id":"2311.16119","title":"Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition","created":"2023-10-24","cited_by_count":68,"area":"safety"},{"id":"2311.09127","title":"Jailbreaking GPT-4V via Self-Adversarial Attacks with System Prompts","created":"2023-11-15","cited_by_count":65,"area":"safety"},{"id":"2402.15180","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","created":"2024-02-23","cited_by_count":29,"area":"safety"},{"id":"2406.05948","title":"Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Models","created":"2024-06-10","cited_by_count":28,"area":"safety"},{"id":"2407.04411","title":"Waterfall: Framework for Robust and Scalable Text Watermarking and Provenance for LLMs","created":"2024-07-05","cited_by_count":15,"area":"safety"},{"id":"2507.06908","title":"MIND: A Multi-agent Framework for Zero-shot Harmful Meme Detection","created":"2025-07-09","cited_by_count":15,"area":"safety"},{"id":"2406.07188","title":"Merging Improves Self-Critique Against Jailbreak Attacks","created":"2024-06-11","cited_by_count":8,"area":"safety"},{"id":"2407.01461","title":"Enhancing the Capability and Robustness of Large Language Models through Reinforcement Learning-Driven Query Refinement","created":"2024-07-01","cited_by_count":5,"area":"safety"},{"id":"2410.23496","title":"Smaller Large Language Models Can Do Moral Self-Correction","created":"2024-10-30","cited_by_count":5,"area":"safety"},{"id":"2510.15975","title":"Generative AI for Biosciences: Emerging Threats and Roadmap to Biosecurity","created":"2025-10-13","cited_by_count":5,"area":"safety"},{"id":"2503.08919","title":"Backtracking for Safety","created":"2025-03-11","cited_by_count":4,"area":"safety"},{"id":"2508.05557","title":"MV-Debate: Multi-view Agent Debate with Dynamic Reflection Gating for Multimodal Harmful Content Detection in Social Media","created":"2025-08-07","cited_by_count":4,"area":"safety"},{"id":"2410.02220","title":"Data to Defense: The Role of Curation in Customizing LLMs Against Jailbreaking Attacks","created":"2024-10-03","cited_by_count":3,"area":"safety"},{"id":"2502.09974","title":"Has My System Prompt Been Used? Large Language Model Prompt Membership Inference","created":"2025-02-14","cited_by_count":3,"area":"safety"},{"id":"2508.10033","title":"Cognitive Cybersecurity for Artificial Intelligence: Guardrail Engineering with CCS-7","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2509.21360","title":"Multimodal Prompt Decoupling Attack on the Safety Filters in Text-to-Image Models","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2509.25973","title":"Scalable and Robust LLM Unlearning by Correcting Responses with Retrieved Exclusions","created":"2025-09-30","cited_by_count":2,"area":"safety"},{"id":"2502.16109","title":"Be a Multitude to Itself: A Prompt Evolution Framework for Red Teaming","created":"2025-02-22","cited_by_count":1,"area":"safety"},{"id":"2603.25176","title":"Prompt Attack Detection with LLM-as-a-Judge and Mixture-of-Models","created":"2026-03-26","cited_by_count":1,"area":"safety"},{"id":"2503.00600","title":"Semantic Integrity Constraints: Declarative Guardrails for AI-Augmented Data Processing Systems","created":"2025-03-01","cited_by_count":0,"area":"safety"},{"id":"2504.16120","title":"A Data-Centric Approach for Safe and Secure Large Language Models against Threatening and Toxic Content","created":"2025-04-19","cited_by_count":0,"area":"safety"},{"id":"2508.13246","title":"Involuntary Jailbreak: On Self-Prompting Attacks","created":"2025-08-18","cited_by_count":0,"area":"safety"},{"id":"2604.25203","title":"BARRED: Synthetic Training of Custom Policy Guardrails via Asymmetric Debate","created":"2026-04-28","cited_by_count":0,"area":"safety"},{"id":"2608.08795","title":"Toward Metacognitive One-Shot Indirect Prompt Injection: Strategy Abstraction Via Outcome-Conditioned Reflection","created":"2026-08-09","cited_by_count":0,"area":"safety"},{"id":"2608.28646","title":"BiasMix-Finance: Post-Generation KYC Guardrails for LLM Portfolio Advice","created":"2026-08-14","cited_by_count":0,"area":"safety"},{"id":"2609.08256","title":"ACEA: An Adversarial Co-Evolution Arena for Head-to-Head Red-Team and Blue-Team LLM Testing","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2610.05282","title":"Red-TTT: Test-Time Training for Automated Jailbreaking Large Language Models","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.08840","title":"Beyond the Sycophancy Score: How Task, Model, and Pressure Shape LLM Yielding","created":"2026-09-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}