{"total":66,"rows":[{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2403.01446","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","created":"2024-03-03","cited_by_count":62,"area":"safety"},{"id":"2407.21035","title":"Direct Unlearning Optimization for Robust and Safe Text-to-Image Models","created":"2024-07-17","cited_by_count":50,"area":"safety"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2409.08045","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","created":"2024-09-12","cited_by_count":30,"area":"safety"},{"id":"2403.12075","title":"Adversarial Nibbler: An Open Red-Teaming Method for Identifying Diverse Harms in Text-to-Image Generation","created":"2024-02-14","cited_by_count":20,"area":"safety"},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2501.03544","title":"PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models","created":"2025-01-07","cited_by_count":17,"area":"safety"},{"id":"2312.07130","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","created":"2023-12-12","cited_by_count":12,"area":"safety"},{"id":"2410.03869","title":"Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step","created":"2024-10-04","cited_by_count":11,"area":"safety"},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2512.06674","title":"RunawayEvil: Jailbreaking the Image-to-Video Generative Models","created":"2025-12-07","cited_by_count":8,"area":"safety"},{"id":"2507.21820","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","created":"2025-07-29","cited_by_count":7,"area":"safety"},{"id":"2607.07907","title":"Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks","created":"2026-07-08","cited_by_count":7,"area":"safety"},{"id":"2503.05445","title":"Are Your LLM-based Text-to-SQL Models Secure? Exploring SQL Injection via Backdoor Attacks","created":"2025-03-07","cited_by_count":6,"area":"safety"},{"id":"2510.05173","title":"SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models","created":"2025-10-05","cited_by_count":6,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2503.01839","title":"Jailbreaking Safeguarded Text-to-Image Models via Large Language Models","created":"2025-03-03","cited_by_count":5,"area":"safety"},{"id":"2504.20376","title":"When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems","created":"2025-04-29","cited_by_count":5,"area":"safety"},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2505.21347","title":"OVERT: A Benchmark for Over-Refusal Evaluation on Text-to-Image Models","created":"2025-05-27","cited_by_count":5,"area":"safety"},{"id":"2508.05658","title":"Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards","created":"2025-07-30","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2604.01888","title":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","created":"2026-04-02","cited_by_count":5,"area":"safety"},{"id":"2510.23960","title":"SafeVision: Efficient Image Guardrail with Robust Policy Adherence and Explainability","created":"2025-10-28","cited_by_count":4,"area":"safety"},{"id":"2412.08156","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","created":"2024-12-11","cited_by_count":3,"area":"safety"},{"id":"2510.17277","title":"PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2511.21145","title":"TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models","created":"2025-11-26","cited_by_count":3,"area":"safety"},{"id":"2601.08623","title":"SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models","created":"2026-01-13","cited_by_count":3,"area":"safety"},{"id":"2409.15381","title":"Adversarial Attacks on Parts of Speech: An Empirical Study in Text-to-Image Generation","created":"2024-09-21","cited_by_count":2,"area":"safety"},{"id":"2507.04673","title":"Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message","created":"2025-07-07","cited_by_count":2,"area":"safety"},{"id":"2507.21985","title":"ZIUM: Zero-Shot Intent-Aware Adversarial Attack on Unlearned Models","created":"2025-07-29","cited_by_count":2,"area":"safety"},{"id":"2509.21360","title":"Multimodal Prompt Decoupling Attack on the Safety Filters in Text-to-Image Models","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2510.24820","title":"SafeEditor: Unified MLLM for Efficient Post-hoc T2I Safety Editing","created":"2025-10-28","cited_by_count":2,"area":"safety"},{"id":"2607.24897","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","created":"2026-07-27","cited_by_count":2,"area":"safety"},{"id":"2411.16769","title":"Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewriting","created":"2024-11-25","cited_by_count":1,"area":"safety"},{"id":"2507.00026","title":"RedTopic: Toward Topic-Diverse Red Teaming of Large Language Models","created":"2025-06-17","cited_by_count":1,"area":"safety"},{"id":"2507.07056","title":"LoRAShield: Data-Free Editing Alignment for Secure Personalized LoRA Sharing","created":"2025-07-05","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2601.05150","title":"$PC^2$: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models","created":"2026-01-08","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2605.01761","title":"TrajShield: Trajectory-Level Safety Mediation for Defending Text-to-Video Models Against Jailbreak Attacks","created":"2026-05-03","cited_by_count":1,"area":"safety"},{"id":"2607.17279","title":"Between Safe Boundaries: Exploiting Temporal Consistency for Jailbreaking Text-To-Video Generation Models","created":"2026-07-19","cited_by_count":1,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2410.04447","title":"Attention Shift: Steering AI Away from Unsafe Content","created":"2024-10-06","cited_by_count":0,"area":"safety"},{"id":"2411.02622","title":"AdaProb: Efficient Machine Unlearning via Adaptive Probability","created":"2024-11-04","cited_by_count":0,"area":"safety"},{"id":"2505.08804","title":"TokenProber: Jailbreaking Text-to-image Models via Fine-grained Word Impact Analysis","created":"2025-05-11","cited_by_count":0,"area":"safety"},{"id":"2603.16576","title":"REFORGE: Multi-modal Attacks Reveal Vulnerable Concept Unlearning in Image Generation Models","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2604.05853","title":"Reading Between the Pixels: An Inscriptive Jailbreak Attack on Text-to-Image Models","created":"2026-04-07","cited_by_count":0,"area":"safety"},{"id":"2606.01837","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","created":"2026-06-01","cited_by_count":0,"area":"safety"},{"id":"2606.21077","title":"OTTER: A Red-Teaming System for Toxicity-Evading Jailbreak Prompt Optimization","created":"2026-06-19","cited_by_count":0,"area":"safety"},{"id":"2606.24081","title":"PixJail: Self-Evolving Paper-to-Pipeline Reproduction for Text-to-Image Jailbreak Evaluation","created":"2026-06-23","cited_by_count":0,"area":"safety"},{"id":"2606.27511","title":"When the Aggregator Cheats: Data-Free Backdoors in Federated LLM-based QA Systems","created":"2026-06-25","cited_by_count":0,"area":"safety"},{"id":"2607.07827","title":"Open Models, Open Risks: Measuring Unsafe Generation in Text-to-Image Models In the Wild","created":"2026-07-08","cited_by_count":0,"area":"safety"},{"id":"2607.17779","title":"Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models","created":"2026-07-20","cited_by_count":0,"area":"safety"},{"id":"2608.15578","title":"ARENA: Automated Red-Teaming for Large Audio Language Models","created":"2026-08-16","cited_by_count":0,"area":"safety"},{"id":"2608.17067","title":"DiSCO: Defending text-to-image generation through distribution-guided contrastive prompt optimization","created":"2026-08-17","cited_by_count":0,"area":"safety"},{"id":"2609.31032","title":"TempQ-Jail: Query-Constrained Candidate Ranking for Text-to-Video Jailbreak Attacks","created":"2026-09-25","cited_by_count":0,"area":"safety"},{"id":"2609.34920","title":"RISE: Red-teaming via Iterative Strategy Evolution for Modern Text-to-Image Models","created":"2026-09-28","cited_by_count":0,"area":"safety"},{"id":"2609.38253","title":"CollageAttack: Exploiting Cross-Modal Alignment Flaws in T2I Models through Spatial Text Composition","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}