{"total":189,"rows":[{"id":"2310.11986","title":"Sociotechnical Safety Evaluation of Generative AI Systems","created":"2023-10-18","cited_by_count":157,"area":null},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2404.02928","title":"Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models","created":"2024-04-02","cited_by_count":72,"area":"diffusion"},{"id":"2404.08031","title":"Latent Guard: a Safety Framework for Text-to-image Generation","created":"2024-04-11","cited_by_count":71,"area":null},{"id":"2404.06666","title":"SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models","created":"2024-04-10","cited_by_count":66,"area":"diffusion"},{"id":"2410.22108","title":"Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench","created":"2024-10-29","cited_by_count":64,"area":"mllm"},{"id":"2403.01446","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","created":"2024-03-03","cited_by_count":62,"area":"safety"},{"id":"2407.21035","title":"Direct Unlearning Optimization for Robust and Safe Text-to-Image Models","created":"2024-07-17","cited_by_count":50,"area":"safety"},{"id":"2410.15618","title":"Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation","created":"2024-10-21","cited_by_count":50,"area":"diffusion"},{"id":"2501.12612","title":"T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation","created":"2025-01-22","cited_by_count":48,"area":null},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2501.18950","title":"Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Them","created":"2025-01-31","cited_by_count":37,"area":"diffusion"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2409.08045","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","created":"2024-09-12","cited_by_count":30,"area":"safety"},{"id":"2408.00523","title":"Fuzz-Testing Meets LLM-Based Agents: An Automated and Efficient Framework for Jailbreaking Text-To-Image Generation Models","created":"2024-08-01","cited_by_count":27,"area":"agents"},{"id":"2409.14457","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","created":"2024-09-22","cited_by_count":26,"area":null},{"id":"2406.08725","title":"RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs","created":"2024-06-13","cited_by_count":23,"area":"alignment"},{"id":"2408.11071","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","created":"2024-08-18","cited_by_count":22,"area":"diffusion"},{"id":"2410.05664","title":"Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning","created":"2024-10-08","cited_by_count":21,"area":"diffusion"},{"id":"2505.06679","title":"T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks","created":"2025-05-10","cited_by_count":21,"area":"diffusion"},{"id":"2403.12075","title":"Adversarial Nibbler: An Open Red-Teaming Method for Identifying Diverse Harms in Text-to-Image Generation","created":"2024-02-14","cited_by_count":20,"area":"safety"},{"id":"2412.10493","title":"AlignGuard: Scalable Safety Alignment for Text-to-Image Generation","created":"2024-12-13","cited_by_count":20,"area":"alignment"},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2412.05892","title":"PBI-Attack: Prior-Guided Bimodal Interactive Black-Box Jailbreak Attack for Toxicity Maximization","created":"2024-12-08","cited_by_count":17,"area":"mllm"},{"id":"2501.03544","title":"PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models","created":"2025-01-07","cited_by_count":17,"area":"safety"},{"id":"2410.08074","title":"Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models","created":"2024-10-10","cited_by_count":15,"area":"diffusion"},{"id":"2404.19227","title":"Espresso: Robust Concept Filtering in Text-to-Image Models","created":"2024-04-30","cited_by_count":14,"area":"diffusion"},{"id":"2504.18598","title":"BadMoE: Backdooring Mixture-of-Experts LLMs via Optimizing Routing Triggers and Infecting Dormant Experts","created":"2025-04-24","cited_by_count":14,"area":"moe"},{"id":"2507.13386","title":"Minimalist Concept Erasure in Generative Models","created":"2025-07-16","cited_by_count":13,"area":null},{"id":"2312.07130","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","created":"2023-12-12","cited_by_count":12,"area":"safety"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2410.03869","title":"Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step","created":"2024-10-04","cited_by_count":11,"area":"safety"},{"id":"2412.02542","title":"Unveiling Concept Attribution in Diffusion Models","created":"2024-12-03","cited_by_count":11,"area":"diffusion"},{"id":"2410.02710","title":"SteerDiff: Steering towards Safe Text-to-Image Diffusion Models","created":"2024-10-03","cited_by_count":10,"area":"diffusion"},{"id":"2410.21471","title":"AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion models","created":"2024-10-28","cited_by_count":10,"area":"diffusion"},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2412.00064","title":"DiffGuard: Text-Based Safety Checker for Diffusion Models","created":"2024-11-25","cited_by_count":10,"area":"diffusion"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2507.16302","title":"Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning","created":"2025-07-22","cited_by_count":9,"area":"diffusion"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2403.12326","title":"Hiding and Recovering Knowledge in Text-to-Image Diffusion Models via Learnable Prompts","created":"2024-03-18","cited_by_count":8,"area":"diffusion"},{"id":"2503.09446","title":"Sparse Autoencoder as a Zero-Shot Classifier for Concept Erasing in Text-to-Image Diffusion Models","created":"2025-03-12","cited_by_count":8,"area":"diffusion"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2512.06674","title":"RunawayEvil: Jailbreaking the Image-to-Video Generative Models","created":"2025-12-07","cited_by_count":8,"area":"safety"},{"id":"2410.05309","title":"ShieldDiff: Suppressing Sexual Content Generation from Diffusion Models through Reinforcement Learning","created":"2024-10-04","cited_by_count":7,"area":"diffusion"},{"id":"2412.03876","title":"Safeguarding Text-to-Image Generation via Inference-Time Prompt-Noise Optimization","created":"2024-12-05","cited_by_count":7,"area":"diffusion"},{"id":"2412.05538","title":"Not Just Text: Uncovering Vision Modality Typographic Threats in Image Generation Models","created":"2024-12-07","cited_by_count":7,"area":null},{"id":"2412.18123","title":"AEIOU: A Unified Defense Framework against NSFW Prompts in Text-to-Image Models","created":"2024-12-24","cited_by_count":7,"area":null},{"id":"2501.18877","title":"Mitigating Sexual Content Generation via Embedding Distortion in Text-conditioned Diffusion Models","created":"2025-01-31","cited_by_count":7,"area":"diffusion"},{"id":"2502.20623","title":"SafeText: Safe Text-to-image Models via Aligning the Text Encoder","created":"2025-02-28","cited_by_count":7,"area":null},{"id":"2507.21820","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","created":"2025-07-29","cited_by_count":7,"area":"safety"},{"id":"2510.24012","title":"Training-Free Safe Text Embedding Guidance for Text-to-Image Diffusion Models","created":"2025-10-28","cited_by_count":7,"area":"diffusion"},{"id":"2603.11493","title":"OrthoEraser: Coupled-Neuron Orthogonal Projection for Concept Erasure","created":"2026-03-12","cited_by_count":7,"area":"mechinterp"},{"id":"2603.13435","title":"CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models","created":"2026-03-13","cited_by_count":7,"area":"wm"},{"id":"2607.07907","title":"Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks","created":"2026-07-08","cited_by_count":7,"area":"safety"},{"id":"2503.05445","title":"Are Your LLM-based Text-to-SQL Models Secure? Exploring SQL Injection via Backdoor Attacks","created":"2025-03-07","cited_by_count":6,"area":"safety"},{"id":"2510.05173","title":"SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models","created":"2025-10-05","cited_by_count":6,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2503.01839","title":"Jailbreaking Safeguarded Text-to-Image Models via Large Language Models","created":"2025-03-03","cited_by_count":5,"area":"safety"},{"id":"2504.20376","title":"When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems","created":"2025-04-29","cited_by_count":5,"area":"safety"},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2505.21347","title":"OVERT: A Benchmark for Over-Refusal Evaluation on Text-to-Image Models","created":"2025-05-27","cited_by_count":5,"area":"safety"},{"id":"2507.16329","title":"DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling","created":"2025-07-22","cited_by_count":5,"area":"alignment"},{"id":"2508.05658","title":"Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards","created":"2025-07-30","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2512.23953","title":"T2VAttack: Adversarial Attack on Text-to-Video Diffusion Models","created":"2025-12-30","cited_by_count":5,"area":"diffusion"},{"id":"2602.06771","title":"AEGIS: Adversarial Target-Guided Retention-Data-Free Robust Concept Erasure from Diffusion Models","created":"2026-02-06","cited_by_count":5,"area":"diffusion"},{"id":"2604.01888","title":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","created":"2026-04-02","cited_by_count":5,"area":"safety"},{"id":"2411.10329","title":"Safe Text-to-Image Generation: Simply Sanitize the Prompt Embedding","created":"2024-11-15","cited_by_count":4,"area":null},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2502.17710","title":"Mind the Gesture: Evaluating AI Sensitivity to Culturally Offensive Non-Verbal Gestures","created":"2025-02-24","cited_by_count":4,"area":null},{"id":"2506.10047","title":"GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models","created":"2025-06-11","cited_by_count":4,"area":"diffusion"},{"id":"2510.23960","title":"SafeVision: Efficient Image Guardrail with Robust Policy Adherence and Explainability","created":"2025-10-28","cited_by_count":4,"area":"safety"},{"id":"2412.08156","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","created":"2024-12-11","cited_by_count":3,"area":"safety"},{"id":"2508.00591","title":"Wukong Framework for Not Safe For Work Detection in Text-to-Image systems","created":"2025-08-01","cited_by_count":3,"area":"diffusion"},{"id":"2508.03006","title":"Seeing It Before It Happens: In-Generation NSFW Detection for Diffusion-Based Text-to-Image Models","created":"2025-08-05","cited_by_count":3,"area":"diffusion"},{"id":"2509.22723","title":"Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models","created":"2025-09-25","cited_by_count":3,"area":"diffusion"},{"id":"2510.17277","title":"PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2511.21145","title":"TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models","created":"2025-11-26","cited_by_count":3,"area":"safety"},{"id":"2601.08623","title":"SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models","created":"2026-01-13","cited_by_count":3,"area":"safety"},{"id":"2603.03163","title":"Conditioned Activation Transport for T2I Safety Steering","created":"2026-03-03","cited_by_count":3,"area":"mechinterp"},{"id":"2603.21208","title":"JANUS: A Lightweight Framework for Jailbreaking Text-to-Image Models via Distribution Optimization","created":"2026-03-22","cited_by_count":3,"area":"diffusion"},{"id":"2605.26552","title":"Aligning Few-Step Generative Models by Amortizing Sample-based Variational Inference","created":"2026-05-26","cited_by_count":3,"area":null},{"id":"2606.01481","title":"SafeGen-Bench: Benchmarking Safety in Image-Conditioned Text-to-Video Generation","created":"2026-05-31","cited_by_count":3,"area":"diffusion"},{"id":"2409.15381","title":"Adversarial Attacks on Parts of Speech: An Empirical Study in Text-to-Image Generation","created":"2024-09-21","cited_by_count":2,"area":"safety"},{"id":"2409.18395","title":"Code Vulnerability Repair with Large Language Model using Context-Aware Prompt Tuning","created":"2024-09-27","cited_by_count":2,"area":null},{"id":"2411.07619","title":"Artificial Intelligence for Biomedical Video Generation","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2503.00020","title":"A Systematic Review of Open Datasets Used in Text-to-Image (T2I) Gen AI Model Safety","created":"2025-02-23","cited_by_count":2,"area":null},{"id":"2504.21307","title":"The Linear Geometry of Interpretable Tokens: Jailbreaking Attacks and Defenses for Unlearned Diffusion Models","created":"2025-04-30","cited_by_count":2,"area":"diffusion"},{"id":"2506.03683","title":"PRJ: Perception-Retrieval-Judgement for Generated Images","created":"2025-06-04","cited_by_count":2,"area":null},{"id":"2507.04673","title":"Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message","created":"2025-07-07","cited_by_count":2,"area":"safety"},{"id":"2507.21985","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","created":"2025-07-29","cited_by_count":2,"area":"safety"},{"id":"2508.01272","title":"PromptSafe: Gated Prompt Tuning for Safe Text-to-Image Generation","created":"2025-08-02","cited_by_count":2,"area":null},{"id":"2508.06837","title":"Towards Effective Prompt Stealing Attack against Text-to-Image Diffusion Models","created":"2025-08-09","cited_by_count":2,"area":"diffusion"},{"id":"2508.21099","title":"Beyond the Safety Tax: Mitigating Unsafe Text-to-Image Generation via External Safety Rectification","created":"2025-08-28","cited_by_count":2,"area":null}],"next_cursor":"100"}