{"total":110,"rows":[{"id":"2307.02483","title":"Jailbroken: How Does LLM Safety Training Fail?","created":"2023-07-05","cited_by_count":1651,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2309.10253","title":"GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts","created":"2023-09-19","cited_by_count":560,"area":"safety"},{"id":"2305.13860","title":"Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study","created":"2023-05-23","cited_by_count":498,"area":"safety"},{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489,"area":"safety"},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2402.06363","title":"StruQ: Defending Against Prompt Injection with Structured Queries","created":"2024-02-09","cited_by_count":375,"area":"safety"},{"id":"2407.06460","title":"MUSE: Machine Unlearning Six-Way Evaluation for Language Models","created":"2024-07-08","cited_by_count":261,"area":"safety"},{"id":"2310.06474","title":"Multilingual Jailbreak Challenges in Large Language Models","created":"2023-10-10","cited_by_count":240,"area":"safety"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2307.08715","title":"MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots","created":"2023-07-16","cited_by_count":183,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2311.09096","title":"Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritization","created":"2023-11-15","cited_by_count":170,"area":"safety"},{"id":"2306.09442","title":"Explore, Establish, Exploit: Red Teaming Language Models from Scratch","created":"2023-06-15","cited_by_count":114,"area":"safety"},{"id":"2312.17673","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","created":"2023-12-29","cited_by_count":106,"area":"safety"},{"id":"2402.05668","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","created":"2024-02-08","cited_by_count":95,"area":"safety"},{"id":"2403.17336","title":"Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Models","created":"2024-03-26","cited_by_count":86,"area":"safety"},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2310.12505","title":"Attack Prompt Generation for Red Teaming and Defending Large Language Models","created":"2023-10-19","cited_by_count":76,"area":"safety"},{"id":"2410.13708","title":"On the Role of Attention Heads in Large Language Model Safety","created":"2024-10-17","cited_by_count":72,"area":"safety"},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2403.12171","title":"EasyJailbreak: A Unified Framework for Jailbreaking Large Language Models","created":"2024-03-18","cited_by_count":60,"area":"safety"},{"id":"2308.10819","title":"Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injection","created":"2023-08-17","cited_by_count":59,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56,"area":"safety"},{"id":"2402.14872","title":"Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs","created":"2024-02-21","cited_by_count":53,"area":"safety"},{"id":"2309.05274","title":"FuzzLLM: A Novel and Universal Fuzzing Framework for Proactively Discovering Jailbreak Vulnerabilities in Large Language Models","created":"2023-09-11","cited_by_count":51,"area":"safety"},{"id":"2305.14965","title":"Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreaks","created":"2023-05-24","cited_by_count":49,"area":"safety"},{"id":"2402.03299","title":"GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Models","created":"2024-02-05","cited_by_count":48,"area":"safety"},{"id":"2403.04893","title":"A Safe Harbor for AI Evaluation and Red Teaming","created":"2024-03-07","cited_by_count":47,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2405.19103","title":"Voice Jailbreak Attacks Against GPT-4o","created":"2024-05-29","cited_by_count":42,"area":"safety"},{"id":"2405.20413","title":"Jailbreaking Large Language Models Against Moderation Guardrails via Cipher Characters","created":"2024-05-30","cited_by_count":42,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2311.07138","title":"WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models","created":"2023-11-13","cited_by_count":32,"area":"safety"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2311.09433","title":"Trojan Activation Attack: Red-Teaming Large Language Models using Activation Steering for Safety-Alignment","created":"2023-11-15","cited_by_count":30,"area":"safety"},{"id":"2402.00898","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","created":"2024-01-31","cited_by_count":30,"area":"safety"},{"id":"2402.13148","title":"Defending Jailbreak Prompts via In-Context Adversarial Game","created":"2024-02-20","cited_by_count":29,"area":"safety"},{"id":"2407.02855","title":"From Theft to Bomb-Making: The Ripple Effect of Unlearning in Defending Against Jailbreak Attacks","created":"2024-07-03","cited_by_count":29,"area":"safety"},{"id":"2401.09002","title":"AttackEval: How to Evaluate the Effectiveness of Jailbreak Attacking on Large Language Models","created":"2024-01-17","cited_by_count":28,"area":"safety"},{"id":"2309.11830","title":"Goal-Oriented Prompt Attack and Safety Evaluation for LLMs","created":"2023-09-21","cited_by_count":24,"area":"safety"},{"id":"2312.04127","title":"Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreak","created":"2023-12-07","cited_by_count":23,"area":"safety"},{"id":"2311.09763","title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations","created":"2023-11-16","cited_by_count":21,"area":"safety"},{"id":"2402.14857","title":"Is the System Message Really Important to Jailbreaks in Large Language Models?","created":"2024-02-20","cited_by_count":20,"area":"safety"},{"id":"2405.09113","title":"Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization","created":"2024-05-15","cited_by_count":18,"area":"safety"},{"id":"2409.14729","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","created":"2024-09-23","cited_by_count":17,"area":"safety"},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17,"area":"safety"},{"id":"2510.21189","title":"Adjacent Words, Divergent Intents: Jailbreaking Large Language Models via Task Concurrency","created":"2025-10-24","cited_by_count":17,"area":"safety"},{"id":"2401.00991","title":"A Novel Evaluation Framework for Assessing Resilience Against Prompt Injection Attacks in Large Language Models","created":"2024-01-02","cited_by_count":15,"area":"safety"},{"id":"2312.11513","title":"Maatphor: Automated Variant Analysis for Prompt Injection Attacks","created":"2023-12-12","cited_by_count":14,"area":"safety"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2503.08195","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","created":"2025-03-11","cited_by_count":14,"area":"safety"},{"id":"2406.09325","title":"REVS: Unlearning Sensitive Information in Language Models via Rank Editing in the Vocabulary Space","created":"2024-06-13","cited_by_count":13,"area":"safety"},{"id":"2410.11272","title":"Cognitive Overload Attack:Prompt Injection for Long Context","created":"2024-10-15","cited_by_count":13,"area":"safety"},{"id":"2509.14558","title":"LLM Jailbreak Detection for (Almost) Free!","created":"2025-09-18","cited_by_count":13,"area":"safety"},{"id":"2505.09921","title":"PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization","created":"2025-05-15","cited_by_count":11,"area":"safety"},{"id":"2403.14988","title":"Risk and Response in Large Language Models: Evaluating Key Threat Categories","created":"2024-03-22","cited_by_count":10,"area":"safety"},{"id":"2411.04223","title":"Diversity Helps Jailbreak Large Language Models","created":"2024-11-06","cited_by_count":10,"area":"safety"},{"id":"2504.21038","title":"Prefill-level Jailbreak: A Black-Box Risk Analysis of Large Language Models","created":"2025-04-28","cited_by_count":10,"area":"safety"},{"id":"2403.08701","title":"Review of Generative AI Methods in Cybersecurity","created":"2024-03-13","cited_by_count":9,"area":"safety"},{"id":"2502.19041","title":"Beyond Surface-Level Patterns: An Essence-Driven Defense Framework Against Jailbreak Attacks in LLMs","created":"2025-02-26","cited_by_count":9,"area":"safety"},{"id":"2505.02862","title":"Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMs","created":"2025-05-03","cited_by_count":9,"area":"safety"},{"id":"2405.03654","title":"Can LLMs Deeply Detect Complex Malicious Queries? A Framework for Jailbreaking via Obfuscating Intent","created":"2024-05-06","cited_by_count":8,"area":"safety"},{"id":"2406.11007","title":"Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applications","created":"2024-06-16","cited_by_count":8,"area":"safety"},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2308.11521","title":"Self-Deception: Reverse Penetrating the Semantic Firewall of Large Language Models","created":"2023-08-16","cited_by_count":7,"area":"safety"},{"id":"2404.08793","title":"JailbreakLens: Visual Analysis of Jailbreak Attacks Against Large Language Models","created":"2024-04-12","cited_by_count":7,"area":"safety"},{"id":"2407.02534","title":"Image-to-Text Logic Jailbreak: Your Imagination can Help You Do Anything","created":"2024-07-01","cited_by_count":7,"area":"safety"},{"id":"2409.19521","title":"GenTel-Safe: A Unified Benchmark and Shielding Framework for Defending Against Prompt Injection Attacks","created":"2024-09-29","cited_by_count":7,"area":"safety"},{"id":"2408.08924","title":"Prefix Guidance: A Steering Wheel for Large Language Models to Defend Against Jailbreak Attacks","created":"2024-08-15","cited_by_count":6,"area":"safety"},{"id":"2501.13115","title":"Dagger Behind Smile: Fool LLMs with a Happy Ending Story","created":"2025-01-19","cited_by_count":6,"area":"safety"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2502.01241","title":"Peering Behind the Shield: Guardrail Identification in Large Language Models","created":"2025-02-03","cited_by_count":5,"area":"safety"},{"id":"2502.05223","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","created":"2025-02-05","cited_by_count":5,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2505.18864","title":"Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework","created":"2025-05-24","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2406.14048","title":"Prompt Injection Attacks in Defended Systems","created":"2024-06-20","cited_by_count":4,"area":"safety"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2503.14900","title":"Deep Contrastive Unlearning for Language Models","created":"2025-03-19","cited_by_count":4,"area":"safety"},{"id":"2509.08000","title":"AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs","created":"2025-09-06","cited_by_count":4,"area":"safety"},{"id":"2603.04459","title":"Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks","created":"2026-03-03","cited_by_count":4,"area":"safety"},{"id":"2408.09459","title":"WPN: An Unlearning Method Based on N-pair Contrastive Learning in Language Models","created":"2024-08-18","cited_by_count":3,"area":"safety"},{"id":"2509.00391","title":"The Resurgence of GCG Adversarial Attacks on Large Language Models","created":"2025-08-30","cited_by_count":3,"area":"safety"},{"id":"2407.03045","title":"JailbreakHunter: A Visual Analytics Approach for Jailbreak Prompts Discovery from Large-Scale Human-LLM Conversational Datasets","created":"2024-07-03","cited_by_count":2,"area":"safety"},{"id":"2504.13774","title":"DP2Unlearning: An Efficient and Guaranteed Unlearning Framework for LLMs","created":"2025-04-18","cited_by_count":2,"area":"safety"},{"id":"2505.24232","title":"From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2508.08629","title":"Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment","created":"2025-08-12","cited_by_count":2,"area":"safety"},{"id":"2508.16484","title":"HAMSA: Hijacking Aligned Compact Models via Stealthy Automation","created":"2025-08-22","cited_by_count":2,"area":"safety"},{"id":"2510.15017","title":"Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks","created":"2025-10-16","cited_by_count":2,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2508.00555","title":"Activation-Guided Local Editing for Jailbreaking Attacks","created":"2025-08-01","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2512.12583","title":"Detecting Prompt Injection Attacks Against Application Using Classifiers","created":"2025-12-14","cited_by_count":1,"area":"safety"},{"id":"2605.02921","title":"EvoJail: Evolutionary Diverse Jailbreak Prompt Generation for Large Language Models","created":"2026-04-22","cited_by_count":1,"area":"safety"},{"id":"2403.00292","title":"Enhancing Jailbreak Attacks with Diversity Guidance","created":"2024-03-01","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}