{"total":21,"rows":[{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2403.14720","title":"Defending Against Indirect Prompt Injection Attacks With Spotlighting","created":"2024-03-20","cited_by_count":267,"area":"safety"},{"id":"2312.14197","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","created":"2023-12-21","cited_by_count":264,"area":"safety"},{"id":"2306.04528","title":"PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts","created":"2023-06-07","cited_by_count":226,"area":"safety"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2402.09674","title":"PAL: Proxy-Guided Black-Box Attack on Large Language Models","created":"2024-02-15","cited_by_count":50,"area":"safety"},{"id":"2405.07932","title":"PARDEN, Can You Repeat That? Defending against Jailbreaks via Repetition","created":"2024-05-13","cited_by_count":35,"area":"safety"},{"id":"2411.01077","title":"Emoji Attack: Enhancing Jailbreak Attacks Against Judge LLM Detection","created":"2024-11-01","cited_by_count":23,"area":"safety"},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2404.08793","title":"JailbreakLens: Visual Analysis of Jailbreak Attacks Against Large Language Models","created":"2024-04-12","cited_by_count":7,"area":"safety"},{"id":"2402.05723","title":"In-Context Learning Can Re-learn Forbidden Tasks","created":"2024-02-08","cited_by_count":5,"area":"safety"},{"id":"2407.00075","title":"Logicbreaks: A Framework for Understanding Subversion of Rule-based Inference","created":"2024-06-21","cited_by_count":4,"area":"safety"},{"id":"2504.19019","title":"Graph of Attacks: Improved Black-Box and Interpretable Jailbreaks for LLMs","created":"2025-04-26","cited_by_count":2,"area":"safety"},{"id":"2505.00010","title":"Jailbreak Detection in Clinical Training LLMs Using Feature-Based Predictive Models","created":"2025-04-21","cited_by_count":1,"area":"safety"},{"id":"2507.03620","title":"Is It Time To Treat Prompts As Code? A Multi-Use Case Study For Prompt Optimization Using DSPy","created":"2025-07-04","cited_by_count":1,"area":"safety"},{"id":"2602.07107","title":"ShallowJail: Steering Jailbreaks against Large Language Models","created":"2026-02-06","cited_by_count":1,"area":"safety"},{"id":"2505.18672","title":"Concept Concentration for Faithful Representation Intervention","created":"2025-05-24","cited_by_count":0,"area":"safety"},{"id":"2605.06423","title":"Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2607.00361","title":"ReShift: Aha-Moment-Driven Reasoning-Level Backdoor Attacks on Vision-Language Models","created":"2026-07-01","cited_by_count":0,"area":"safety"},{"id":"2609.04495","title":"Rethinking Indirect Prompt Injection as a Test-Time Search Problem","created":"2026-09-03","cited_by_count":0,"area":"safety"}],"next_cursor":null}