{"total":49,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2406.04313","title":"Improving Alignment and Robustness with Circuit Breakers","created":"2024-06-06","cited_by_count":322,"area":"safety"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2405.15589","title":"Efficient Adversarial Training in LLMs with Continuous Attacks","created":"2024-05-24","cited_by_count":113,"area":"safety"},{"id":"2410.09102","title":"Instructional Segment Embedding: Improving LLM Safety with Instruction Hierarchy","created":"2024-10-09","cited_by_count":67,"area":"safety"},{"id":"2501.15145","title":"PromptShield: Deployable Detection for Prompt Injection Attacks","created":"2025-01-25","cited_by_count":50,"area":"safety"},{"id":"2406.15518","title":"Steering Without Side Effects: Improving Post-Deployment Control of Language Models","created":"2024-06-21","cited_by_count":46,"area":"safety"},{"id":"2410.22770","title":"InjecGuard: Benchmarking and Mitigating Over-defense in Prompt Injection Guardrail Models","created":"2024-10-30","cited_by_count":42,"area":"safety"},{"id":"2402.14007","title":"Can Watermarks Survive Translation? On the Cross-lingual Consistency of Text Watermark for Large Language Models","created":"2024-02-21","cited_by_count":33,"area":"safety"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2407.02855","title":"From Theft to Bomb-Making: The Ripple Effect of Unlearning in Defending Against Jailbreak Attacks","created":"2024-07-03","cited_by_count":29,"area":"safety"},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2406.12257","title":"CleanGen: Mitigating Backdoor Attacks for Generation Tasks in Large Language Models","created":"2024-06-18","cited_by_count":24,"area":"safety"},{"id":"2405.01886","title":"Aloe: A Family of Fine-tuned Open Healthcare LLMs","created":"2024-05-03","cited_by_count":20,"area":"safety"},{"id":"2503.00596","title":"BadJudge: Backdoor Vulnerabilities of LLM-as-a-Judge","created":"2025-03-01","cited_by_count":18,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2404.19597","title":"TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuning","created":"2024-04-30","cited_by_count":14,"area":"safety"},{"id":"2404.02406","title":"Exploring Backdoor Vulnerabilities of Chat Models","created":"2024-04-03","cited_by_count":13,"area":"safety"},{"id":"2411.06899","title":"LongSafety: Enhance Safety for Long-Context LLMs","created":"2024-11-11","cited_by_count":11,"area":"safety"},{"id":"2505.16559","title":"CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2505.16947","title":"MixAT: Combining Continuous and Discrete Adversarial Training for LLMs","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2506.14003","title":"Unlearning Isn't Invisible: Detecting Unlearning Traces in LLMs from Model Outputs","created":"2025-06-16","cited_by_count":11,"area":"safety"},{"id":"2507.05248","title":"Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2502.15427","title":"Adversarial Prompt Evaluation: Systematic Benchmarking of Guardrails Against Prompt Input Attacks on LLMs","created":"2025-02-21","cited_by_count":9,"area":"safety"},{"id":"2508.00161","title":"Watch the Weights: Unsupervised monitoring and control of fine-tuned LLMs","created":"2025-07-31","cited_by_count":7,"area":"safety"},{"id":"2511.00203","title":"Diffusion LLMs are Natural Adversaries for any LLM","created":"2025-10-31","cited_by_count":7,"area":"safety"},{"id":"2601.02751","title":"Window-based Membership Inference Attacks Against Fine-tuned Large Language Models","created":"2026-01-06","cited_by_count":7,"area":"safety"},{"id":"2407.04151","title":"Securing Multi-turn Conversational Language Models From Distributed Backdoor Triggers","created":"2024-07-04","cited_by_count":5,"area":"safety"},{"id":"2505.09602","title":"Adversarial Suffix Filtering: a Defense Pipeline for LLMs","created":"2025-05-14","cited_by_count":5,"area":"safety"},{"id":"2503.06519","title":"Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation","created":"2025-03-09","cited_by_count":3,"area":"safety"},{"id":"2503.17932","title":"STShield: Single-Token Sentinel for Real-Time Jailbreak Detection in Large Language Models","created":"2025-03-23","cited_by_count":3,"area":"safety"},{"id":"2607.18639","title":"Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs","created":"2026-07-21","cited_by_count":2,"area":"safety"},{"id":"2509.25843","title":"ASGuard: Activation-Scaling Guard to Mitigate Targeted Jailbreaking Attack","created":"2025-09-30","cited_by_count":1,"area":"safety"},{"id":"2511.19009","title":"Understanding and Mitigating Over-refusal for Large Language Models via Representation Intervention","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2601.08189","title":"ForgetMark: Stealthy Fingerprint Embedding via Targeted Unlearning in Language Models","created":"2026-01-13","cited_by_count":1,"area":"safety"},{"id":"2604.12817","title":"Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory","created":"2026-04-14","cited_by_count":1,"area":"safety"},{"id":"2604.15780","title":"Pruning Unsafe Tickets: A Resource-Efficient Framework for Safer and More Robust LLMs","created":"2026-04-17","cited_by_count":1,"area":"safety"},{"id":"2604.18970","title":"Mechanistic Anomaly Detection via Functional Attribution","created":"2026-04-21","cited_by_count":1,"area":"safety"},{"id":"2604.27861","title":"TwinGate: Stateful Defense against Decompositional Jailbreaks in Untraceable Traffic via Asymmetric Contrastive Learning","created":"2026-04-30","cited_by_count":1,"area":"safety"},{"id":"2606.27567","title":"On the Inseparability of Instructions and Data in Shared-Embedding Sequence Models","created":"2026-06-25","cited_by_count":1,"area":"safety"},{"id":"2601.08223","title":"DNF: Dual-Layer Nested Fingerprinting for Large Language Model Intellectual Property Protection","created":"2026-01-13","cited_by_count":0,"area":"safety"},{"id":"2601.14340","title":"Turn-Based Structural Triggers: Structure-Conditioned Backdoors in Multi-Turn LLMs","created":"2026-01-20","cited_by_count":0,"area":"safety"},{"id":"2604.24162","title":"Defusing the Trigger: Tail-Risk-Informed Attention Rebalancing for LLM Backdoor Mitigation","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.06596","title":"FedAttr: Towards Privacy-preserving Client-Level Attribution in Federated LLM Fine-tuning","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.24552","title":"Ellipsoid Control: A White-list Jailbreak Defense via Benign Latent Modeling","created":"2026-05-23","cited_by_count":0,"area":"safety"},{"id":"2606.21082","title":"Scalable Hierarchical Attention Transformers for Multi-Turn Jailbreak Detection in Long Conversations","created":"2026-06-19","cited_by_count":0,"area":"safety"},{"id":"2606.28525","title":"A Gravitational Interpretation of Safety Reversion under Fine-Tuning","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2610.00348","title":"Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs via Weight Orthogonalisation","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}