{"total":31,"rows":[{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2312.14197","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","created":"2023-12-21","cited_by_count":264,"area":"safety"},{"id":"2402.08983","title":"SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding","created":"2024-02-14","cited_by_count":247,"area":"safety"},{"id":"2310.20150","title":"Unlearn What You Want to Forget: Efficient Unlearning for LLMs","created":"2023-10-31","cited_by_count":215,"area":"safety"},{"id":"2311.07689","title":"MART: Improving LLM Safety with Multi-round Automatic Red-Teaming","created":"2023-11-13","cited_by_count":163,"area":"safety"},{"id":"2307.16888","title":"Backdooring Instruction-Tuned Large Language Models with Virtual Prompt Injection","created":"2023-07-31","cited_by_count":157,"area":"safety"},{"id":"2403.01218","title":"Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy","created":"2024-03-02","cited_by_count":82,"area":"safety"},{"id":"2402.09091","title":"Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues","created":"2024-02-14","cited_by_count":68,"area":"safety"},{"id":"2310.15851","title":"Self-Guard: Empower the LLM to Safeguard Itself","created":"2023-10-24","cited_by_count":54,"area":"safety"},{"id":"2308.04451","title":"Vulnerabilities in AI Code Generators: Exploring Targeted Data Poisoning Attacks","created":"2023-08-04","cited_by_count":33,"area":"safety"},{"id":"2505.19056","title":"An Embarrassingly Simple Defense Against LLM Abliteration Attacks","created":"2025-05-25","cited_by_count":13,"area":"safety"},{"id":"2312.02382","title":"New Evaluation Metrics Capture Quality Degradation due to LLM Watermarking","created":"2023-12-04","cited_by_count":11,"area":"safety"},{"id":"2407.01376","title":"Badllama 3: removing safety finetuning from Llama 3 in minutes","created":"2024-07-01","cited_by_count":11,"area":"safety"},{"id":"2308.13449","title":"The Poison of Alignment","created":"2023-08-25","cited_by_count":10,"area":"safety"},{"id":"2409.15361","title":"Multitask Mayhem: Unveiling and Mitigating Safety Gaps in LLMs Fine-tuning","created":"2024-09-18","cited_by_count":8,"area":"safety"},{"id":"2410.23496","title":"Smaller Large Language Models Can Do Moral Self-Correction","created":"2024-10-30","cited_by_count":5,"area":"safety"},{"id":"2502.10450","title":"Trustworthy AI: Safety, Bias, and Privacy -- A Survey","created":"2025-02-11","cited_by_count":5,"area":"safety"},{"id":"2502.15594","title":"SafeInt: Shielding Large Language Models from Jailbreak Attacks via Safety-Aware Representation Intervention","created":"2025-02-21","cited_by_count":4,"area":"safety"},{"id":"2507.18203","title":"Exploring the Impact of Instruction-Tuning on LLM's Susceptibility to Misinformation","created":"2025-07-24","cited_by_count":4,"area":"safety"},{"id":"2509.08000","title":"AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs","created":"2025-09-06","cited_by_count":4,"area":"safety"},{"id":"2601.04448","title":"Merging Triggers, Breaking Backdoors: Defensive Poisoning for Instruction-Tuned Language Models","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2412.10423","title":"Look Before You Leap: Enhancing Attention and Vigilance Regarding Harmful Content with GuidelineLLM","created":"2024-12-10","cited_by_count":2,"area":"safety"},{"id":"2412.12192","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","created":"2024-12-13","cited_by_count":2,"area":"safety"},{"id":"2511.08367","title":"Why Does Weak-OOD Help? A Further Step Towards Understanding Jailbreaking VLMs","created":"2025-11-11","cited_by_count":1,"area":"safety"},{"id":"2503.12339","title":"A Closer Look at Adversarial Suffix Learning for Jailbreaking LLMs: Augmented Adversarial Trigger Learning","created":"2025-03-16","cited_by_count":0,"area":"safety"},{"id":"2508.13246","title":"Involuntary Jailbreak: On Self-Prompting Attacks","created":"2025-08-18","cited_by_count":0,"area":"safety"},{"id":"2512.01892","title":"Exploring Human Perceptions of AI Responses: Insights from a Mixed-Methods Study on Risk Mitigation in Generative Models","created":"2025-12-01","cited_by_count":0,"area":"safety"},{"id":"2605.19147","title":"Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks","created":"2026-05-18","cited_by_count":0,"area":"safety"},{"id":"2605.19321","title":"Exploring and Developing a Pre-Model Safeguard with Draft Models","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2606.28525","title":"A Gravitational Interpretation of Safety Reversion under Fine-Tuning","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2609.15044","title":"Data Attribution via Sketched Metadifferentiation","created":"2026-09-14","cited_by_count":0,"area":"safety"}],"next_cursor":null}