{"total":48,"rows":[{"id":"2310.03693","title":"Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!","created":"2023-10-05","cited_by_count":1154,"area":"alignment"},{"id":"2310.04451","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","created":"2023-10-03","cited_by_count":785,"area":"alignment"},{"id":"2307.15217","title":"Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedback","created":"2023-07-27","cited_by_count":759,"area":"alignment"},{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2406.14598","title":"SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal","created":"2024-06-20","cited_by_count":240,"area":"alignment"},{"id":"2402.05162","title":"Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications","created":"2024-02-07","cited_by_count":231,"area":"alignment"},{"id":"2403.17710","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","created":"2024-03-26","cited_by_count":143,"area":"alignment"},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111,"area":"alignment"},{"id":"2401.11206","title":"InferAligner: Inference-Time Alignment for Harmlessness through Cross-Model Guidance","created":"2024-01-20","cited_by_count":83,"area":"alignment"},{"id":"2401.06561","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","created":"2024-01-12","cited_by_count":74,"area":"alignment"},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35,"area":"alignment"},{"id":"2406.12935","title":"ChatBug: A Common Vulnerability of Aligned LLMs Induced by Chat Templates","created":"2024-06-17","cited_by_count":30,"area":"alignment"},{"id":"2405.20653","title":"Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundaries","created":"2024-05-31","cited_by_count":28,"area":"alignment"},{"id":"2503.11751","title":"reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs","created":"2025-03-14","cited_by_count":25,"area":"alignment"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2406.08725","title":"RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs","created":"2024-06-13","cited_by_count":23,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2503.02574","title":"LLM-Safety Evaluations Lack Robustness","created":"2025-03-04","cited_by_count":18,"area":"alignment"},{"id":"2505.13527","title":"Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical Expression","created":"2025-05-18","cited_by_count":16,"area":"alignment"},{"id":"2412.15623","title":"JailPO: A Novel Black-box Jailbreak Framework via Preference Optimization against Aligned LLMs","created":"2024-12-20","cited_by_count":11,"area":"alignment"},{"id":"2408.14866","title":"Advancing Adversarial Suffix Transfer Learning on Aligned Large Language Models","created":"2024-08-27","cited_by_count":10,"area":"alignment"},{"id":"2502.15435","title":"Single-pass Detection of Jailbreaking Input in Large Language Models","created":"2025-02-21","cited_by_count":10,"area":"alignment"},{"id":"2411.06835","title":"HarmLevelBench: Evaluating Harm-Level Compliance and the Impact of Quantization on Model Alignment","created":"2024-11-11","cited_by_count":9,"area":"alignment"},{"id":"2601.01887","title":"Safety at One Shot: Patching Fine-Tuned LLMs with A Single Instance","created":"2026-01-05","cited_by_count":8,"area":"alignment"},{"id":"2602.07892","title":"Safety Alignment as Continual Learning: Mitigating the Alignment Tax via Orthogonal Gradient Projection","created":"2026-02-08","cited_by_count":6,"area":"alignment"},{"id":"2410.09181","title":"Can a large language model be a gaslighter?","created":"2024-10-11","cited_by_count":5,"area":"alignment"},{"id":"2411.02785","title":"Stochastic Monkeys at Play: Random Augmentations Cheaply Break LLM Safety Alignment","created":"2024-11-05","cited_by_count":5,"area":"alignment"},{"id":"2504.02193","title":"More is Less: The Pitfalls of Multi-Model Synthetic Preference Data in DPO Safety Alignment","created":"2025-04-03","cited_by_count":5,"area":"alignment"},{"id":"2506.04679","title":"Normative Conflicts and Shallow AI Alignment","created":"2025-06-05","cited_by_count":5,"area":"alignment"},{"id":"2402.01706","title":"MULTIVERSE: Exposing Large Language Model Alignment Problems in Diverse Worlds","created":"2024-01-25","cited_by_count":4,"area":"alignment"},{"id":"2505.13862","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","created":"2025-05-20","cited_by_count":4,"area":"alignment"},{"id":"2511.19218","title":"Adversarial Attack-Defense Co-Evolution for LLM Safety Alignment via Tree-Group Dual-Aware Search and Optimization","created":"2025-11-24","cited_by_count":4,"area":"alignment"},{"id":"2311.08487","title":"Alignment is not sufficient to prevent large language models from generating harmful information: A psychoanalytic perspective","created":"2023-11-14","cited_by_count":3,"area":"alignment"},{"id":"2406.11039","title":"Dynamic Normativity: Necessary and Sufficient Conditions for Value Alignment","created":"2024-06-16","cited_by_count":3,"area":"alignment"},{"id":"2406.11285","title":"Self and Cross-Model Distillation for LLMs: Effective Methods for Refusal Pattern Alignment","created":"2024-06-17","cited_by_count":3,"area":"alignment"},{"id":"2408.07663","title":"Alignment-Enhanced Decoding:Defending via Token-Level Adaptive Refining of Probability Distributions","created":"2024-08-14","cited_by_count":2,"area":"alignment"},{"id":"2410.13785","title":"PopAlign: Diversifying Contrasting Patterns for a More Comprehensive Alignment","created":"2024-10-17","cited_by_count":2,"area":"alignment"},{"id":"2512.01037","title":"How Semantically Stable Are LLM Refusals? Measuring Confusion in Local Safety Boundaries","created":"2025-11-30","cited_by_count":2,"area":"alignment"},{"id":"2602.16977","title":"Fail-Closed Alignment for Large Language Models","created":"2026-02-19","cited_by_count":2,"area":"alignment"},{"id":"2603.03081","title":"TAO-Attack: Toward Advanced Optimization-Based Jailbreak Attacks for Large Language Models","created":"2026-03-03","cited_by_count":2,"area":"alignment"},{"id":"2507.14202","title":"PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training","created":"2025-07-14","cited_by_count":1,"area":"alignment"},{"id":"2605.29396","title":"Aligned but Fragile: Enhancing LLM Safety Robustness via Zeroth-Order Optimization","created":"2026-05-28","cited_by_count":1,"area":"alignment"},{"id":"2511.13548","title":"ForgeDAN: An Evolutionary Framework for Jailbreaking Aligned Large Language Models","created":"2025-11-17","cited_by_count":0,"area":"alignment"},{"id":"2512.24556","title":"Safe in the Future, Dangerous in the Past: Dissecting Temporal and Linguistic Vulnerabilities in LLMs","created":"2025-12-31","cited_by_count":0,"area":"alignment"},{"id":"2601.06157","title":"ECLIPTICA -- A Framework for Switchable LLM Alignment via CITA - Contrastive Instruction-Tuned Alignment","created":"2026-01-06","cited_by_count":0,"area":"alignment"},{"id":"2605.20654","title":"REFLECTOR: Internalizing Step-wise Reflection against Indirect Jailbreak","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2605.28030","title":"SPARD: Defending Harmful Fine-Tuning Attack via Safety Projection with Relevance-Diversity Data Selection","created":"2026-05-27","cited_by_count":0,"area":"alignment"},{"id":"2608.26222","title":"NeuronFuzz: Safety Neuron Guided Fuzzing for LLM Safety Evaluation","created":"2026-08-26","cited_by_count":0,"area":"alignment"}],"next_cursor":null}