{"total":175,"rows":[{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489,"area":"safety"},{"id":"2310.10012","title":"Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?","created":"2023-10-16","cited_by_count":250,"area":"diffusion"},{"id":"2311.17516","title":"MMA-Diffusion: MultiModal Attack on Diffusion Models","created":"2023-11-29","cited_by_count":194,"area":"diffusion"},{"id":"2310.11986","title":"Sociotechnical Safety Evaluation of Generative AI Systems","created":"2023-10-18","cited_by_count":157,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2402.05668","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","created":"2024-02-08","cited_by_count":95,"area":"safety"},{"id":"2308.01508","title":"Circumventing Concept Erasure Methods For Text-to-Image Generative Models","created":"2023-08-03","cited_by_count":85,"area":null},{"id":"2404.02928","title":"Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models","created":"2024-04-02","cited_by_count":72,"area":"diffusion"},{"id":"2404.08031","title":"Latent Guard: a Safety Framework for Text-to-image Generation","created":"2024-04-11","cited_by_count":71,"area":null},{"id":"2404.06666","title":"SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models","created":"2024-04-10","cited_by_count":66,"area":"diffusion"},{"id":"2407.05965","title":"T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Models","created":"2024-07-08","cited_by_count":66,"area":null},{"id":"2403.01446","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","created":"2024-03-03","cited_by_count":62,"area":"safety"},{"id":"2506.13759","title":"Discrete Diffusion in Large Language and Multimodal Models: A Survey","created":"2025-06-16","cited_by_count":61,"area":"mllm"},{"id":"2306.04542","title":"On the Design Fundamentals of Diffusion Models: A Survey","created":"2023-06-07","cited_by_count":60,"area":"diffusion"},{"id":"2403.12037","title":"MineDreamer: Learning to Follow Instructions via Chain-of-Imagination for Simulated-World Control","created":"2024-03-18","cited_by_count":53,"area":"wm"},{"id":"2405.03486","title":"UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Images","created":"2024-05-06","cited_by_count":53,"area":null},{"id":"2410.15618","title":"Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation","created":"2024-10-21","cited_by_count":50,"area":"diffusion"},{"id":"2501.12612","title":"T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation","created":"2025-01-22","cited_by_count":48,"area":null},{"id":"2403.04893","title":"A Safe Harbor for AI Evaluation and Red Teaming","created":"2024-03-07","cited_by_count":47,"area":"safety"},{"id":"2405.19103","title":"Voice Jailbreak Attacks Against GPT-4o","created":"2024-05-29","cited_by_count":42,"area":"safety"},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2405.19360","title":"ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users","created":"2024-05-24","cited_by_count":35,"area":"safety"},{"id":"2407.15861","title":"Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey","created":"2024-07-10","cited_by_count":35,"area":"diffusion"},{"id":"2309.14122","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","created":"2023-09-25","cited_by_count":34,"area":null},{"id":"2401.03315","title":"Malla: Demystifying Real-world Large Language Model Integrated Malicious Services","created":"2024-01-06","cited_by_count":33,"area":null},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2402.10882","title":"Universal Prompt Optimizer for Safe Text-to-Image Generation","created":"2024-02-16","cited_by_count":28,"area":null},{"id":"2509.26625","title":"Learning to See Before Seeing: Demystifying LLM Visual Priors from Language Pre-training","created":"2025-09-30","cited_by_count":23,"area":null},{"id":"2409.14866","title":"PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs","created":"2024-09-23","cited_by_count":21,"area":"safety"},{"id":"2403.12075","title":"Adversarial Nibbler: An Open Red-Teaming Method for Identifying Diverse Harms in Text-to-Image Generation","created":"2024-02-14","cited_by_count":20,"area":"safety"},{"id":"2412.10493","title":"AlignGuard: Scalable Safety Alignment for Text-to-Image Generation","created":"2024-12-13","cited_by_count":20,"area":"alignment"},{"id":"2311.18815","title":"IMMA: Immunizing text-to-image Models against Malicious Adaptation","created":"2023-11-30","cited_by_count":18,"area":null},{"id":"2501.03544","title":"PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models","created":"2025-01-07","cited_by_count":17,"area":"safety"},{"id":"2402.01787","title":"Harm Amplification in Text-to-Image Models","created":"2024-02-01","cited_by_count":15,"area":null},{"id":"2408.07728","title":"Moderator: Moderating Text-to-Image Diffusion Models through Fine-grained Context-based Policies","created":"2024-08-14","cited_by_count":15,"area":"diffusion"},{"id":"2410.08074","title":"Unstable Unlearning: The Hidden Risk of Concept Resurgence in Diffusion Models","created":"2024-10-10","cited_by_count":15,"area":"diffusion"},{"id":"2503.17987","title":"Reason2Attack: Jailbreaking Text-to-Image Models via LLM Reasoning","created":"2025-03-23","cited_by_count":15,"area":"lr"},{"id":"2402.12100","title":"Groot: Adversarial Testing for Generative Text-to-Image Models with Tree-based Semantic Transformation","created":"2024-02-19","cited_by_count":14,"area":null},{"id":"2404.19227","title":"Espresso: Robust Concept Filtering in Text-to-Image Models","created":"2024-04-30","cited_by_count":14,"area":"diffusion"},{"id":"2508.20848","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","created":"2025-08-28","cited_by_count":14,"area":"safety"},{"id":"2406.07353","title":"Toxic Memes: A Survey of Computational Perspectives on the Detection and Explanation of Meme Toxicities","created":"2024-06-11","cited_by_count":13,"area":null},{"id":"2409.19149","title":"Multimodal Pragmatic Jailbreak on Text-to-image Models","created":"2024-09-27","cited_by_count":13,"area":"diffusion"},{"id":"2503.15197","title":"Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization","created":"2025-03-19","cited_by_count":13,"area":"diffusion"},{"id":"2507.13386","title":"Minimalist Concept Erasure in Generative Models","created":"2025-07-16","cited_by_count":13,"area":null},{"id":"2312.07130","title":"Harnessing LLM to Attack LLM-Guarded Text-to-Image Models","created":"2023-12-12","cited_by_count":12,"area":"safety"},{"id":"2408.00001","title":"Replication in Visual Diffusion Models: A Survey and Outlook","created":"2024-07-07","cited_by_count":11,"area":"diffusion"},{"id":"2502.16368","title":"Concept Corrector: Erase concepts on the fly for text-to-image diffusion models","created":"2025-02-22","cited_by_count":11,"area":"diffusion"},{"id":"2602.20880","title":"When Safety Collides: Resolving Multi-Category Harmful Conflicts in Text-to-Image Diffusion via Adaptive Safety Guidance","created":"2026-02-24","cited_by_count":11,"area":"diffusion"},{"id":"2407.12581","title":"Towards Understanding Unsafe Video Generation","created":"2024-07-17","cited_by_count":10,"area":null},{"id":"2410.02710","title":"SteerDiff: Steering towards Safe Text-to-Image Diffusion Models","created":"2024-10-03","cited_by_count":10,"area":"diffusion"},{"id":"2410.16527","title":"Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis","created":"2024-10-21","cited_by_count":10,"area":"safety"},{"id":"2412.00064","title":"DiffGuard: Text-Based Safety Checker for Diffusion Models","created":"2024-11-25","cited_by_count":10,"area":"diffusion"},{"id":"2507.07139","title":"Image Can Bring Your Memory Back: A Novel Multi-Modal Guided Attack against Image Generation Model Unlearning","created":"2025-07-09","cited_by_count":10,"area":"diffusion"},{"id":"2507.21391","title":"Multimodal LLMs as Customized Reward Models for Text-to-Image Generation","created":"2025-07-28","cited_by_count":10,"area":"mllm"},{"id":"2406.14855","title":"Six-CD: Benchmarking Concept Removals for Benign Text-to-image Diffusion Models","created":"2024-06-21","cited_by_count":9,"area":"diffusion"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2506.02761","title":"Rethinking Machine Unlearning in Image Generation Models","created":"2025-06-03","cited_by_count":9,"area":"safety"},{"id":"2507.16302","title":"Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning","created":"2025-07-22","cited_by_count":9,"area":"diffusion"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2403.12326","title":"Hiding and Recovering Knowledge in Text-to-Image Diffusion Models via Learnable Prompts","created":"2024-03-18","cited_by_count":8,"area":"diffusion"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2402.15218","title":"BSPA: Exploring Black-box Stealthy Prompt Attacks against Image Generators","created":"2024-02-23","cited_by_count":7,"area":null},{"id":"2407.15399","title":"Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Models","created":"2024-07-22","cited_by_count":7,"area":"alignment"},{"id":"2408.00352","title":"Autonomous LLM-Enhanced Adversarial Attack for Text-to-Motion","created":"2024-08-01","cited_by_count":7,"area":"safety"},{"id":"2408.17285","title":"Image-Perfect Imperfections: Safety, Bias, and Authenticity in the Shadow of Text-To-Image Model Evolution","created":"2024-08-30","cited_by_count":7,"area":"diffusion"},{"id":"2412.03876","title":"Safeguarding Text-to-Image Generation via Inference-Time Prompt-Noise Optimization","created":"2024-12-05","cited_by_count":7,"area":"diffusion"},{"id":"2412.18123","title":"AEIOU: A Unified Defense Framework against NSFW Prompts in Text-to-Image Models","created":"2024-12-24","cited_by_count":7,"area":null},{"id":"2502.20623","title":"SafeText: Safe Text-to-image Models via Aligning the Text Encoder","created":"2025-02-28","cited_by_count":7,"area":null},{"id":"2503.16835","title":"Safe and Reliable Diffusion Models via Subspace Projection","created":"2025-03-21","cited_by_count":7,"area":"diffusion"},{"id":"2412.00580","title":"Continuous Concepts Removal in Text-to-image Diffusion Models","created":"2024-11-30","cited_by_count":6,"area":"diffusion"},{"id":"2503.14232","title":"CRCE: Coreference-Retention Concept Erasure in Text-to-Image Diffusion Models","created":"2025-03-18","cited_by_count":6,"area":"diffusion"},{"id":"2505.16446","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2510.05173","title":"SafeGuider: Robust and Practical Content Safety Control for Text-to-Image Models","created":"2025-10-05","cited_by_count":6,"area":"safety"},{"id":"2603.01228","title":"Towards Policy-Adaptive Image Guardrail: Benchmark and Method","created":"2026-03-01","cited_by_count":6,"area":"safety"},{"id":"2312.00057","title":"VA3: Virtually Assured Amplification Attack on Probabilistic Copyright Protection for Text-to-Image Generative Models","created":"2023-11-29","cited_by_count":5,"area":null},{"id":"2312.14440","title":"Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks","created":"2023-12-22","cited_by_count":5,"area":"safety"},{"id":"2410.14881","title":"Class-RAG: Real-Time Content Moderation with Retrieval Augmented Generation","created":"2024-10-18","cited_by_count":5,"area":"rag"},{"id":"2412.21052","title":"Towards Effective Discrimination Testing for Generative AI","created":"2024-12-30","cited_by_count":5,"area":null},{"id":"2504.20376","title":"When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems","created":"2025-04-29","cited_by_count":5,"area":"safety"},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2507.16329","title":"DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling","created":"2025-07-22","cited_by_count":5,"area":"alignment"},{"id":"2508.05658","title":"Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards","created":"2025-07-30","cited_by_count":5,"area":"safety"},{"id":"2602.01089","title":"Differential Vector Erasure: Unified Training-Free Concept Erasure for Flow Matching Models","created":"2026-02-01","cited_by_count":5,"area":"diffusion"},{"id":"2604.01888","title":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","created":"2026-04-02","cited_by_count":5,"area":"safety"},{"id":"2404.12104","title":"Ethical-Lens: Curbing Malicious Usages of Open-Source Text-to-Image Models","created":"2024-04-18","cited_by_count":4,"area":null},{"id":"2407.15009","title":"RogueGPT: dis-ethical tuning transforms ChatGPT4 into a Rogue AI in 158 Words","created":"2024-06-11","cited_by_count":4,"area":"safety"},{"id":"2411.10329","title":"Safe Text-to-Image Generation: Simply Sanitize the Prompt Embedding","created":"2024-11-15","cited_by_count":4,"area":null},{"id":"2506.10047","title":"GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models","created":"2025-06-11","cited_by_count":4,"area":"diffusion"},{"id":"2507.11155","title":"Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities","created":"2025-07-15","cited_by_count":4,"area":"lr"},{"id":"2510.23960","title":"SafeVision: Efficient Image Guardrail with Robust Policy Adherence and Explainability","created":"2025-10-28","cited_by_count":4,"area":"safety"},{"id":"2512.17320","title":"EMMA: Concept Erasure Benchmark with Comprehensive Semantic Metrics and Diverse Categories","created":"2025-12-19","cited_by_count":4,"area":null},{"id":"2602.21977","title":"When LoRA Betrays: Backdooring Text-to-Image Models by Masquerading as Benign Adapters","created":"2026-02-25","cited_by_count":4,"area":"diffusion"},{"id":"2306.11393","title":"The Cultivated Practices of Text-to-Image Generation","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2402.07562","title":"Discovering Universal Semantic Triggers for Text-to-Image Synthesis","created":"2024-02-12","cited_by_count":3,"area":null},{"id":"2408.08340","title":"METR: Image Watermarking with Large Number of Unique Messages","created":"2024-08-15","cited_by_count":3,"area":"diffusion"},{"id":"2412.07249","title":"Buster: Implanting Semantic Backdoor into Text Encoder to Mitigate NSFW Content Generation","created":"2024-12-10","cited_by_count":3,"area":"safety"},{"id":"2412.08156","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","created":"2024-12-11","cited_by_count":3,"area":"safety"},{"id":"2509.22723","title":"Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models","created":"2025-09-25","cited_by_count":3,"area":"diffusion"}],"next_cursor":"100"}