{"total":63,"rows":[{"id":"2401.06373","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","created":"2024-01-12","cited_by_count":573,"area":"lr"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2308.11483","title":"Large Language Models Sensitivity to The Order of Options in Multiple-Choice Questions","created":"2023-08-22","cited_by_count":263,"area":null},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2307.13721","title":"Foundational Models Defining a New Era in Vision: A Survey and Outlook","created":"2023-07-25","cited_by_count":110,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2407.20859","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","created":"2024-07-30","cited_by_count":81,"area":"agents"},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2403.13031","title":"RigorLLM: Resilient Guardrails for Large Language Models against Undesired Content","created":"2024-03-19","cited_by_count":68,"area":"safety"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2308.14367","title":"A Comprehensive Overview of Backdoor Attacks in Large Language Models within Communication Networks","created":"2023-08-28","cited_by_count":42,"area":"safety"},{"id":"2402.09177","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","created":"2024-02-14","cited_by_count":36,"area":"safety"},{"id":"2312.04730","title":"DeceptPrompt: Exploiting LLM-driven Code Generation via Adversarial Natural Language Instructions","created":"2023-12-07","cited_by_count":33,"area":null},{"id":"2309.01686","title":"MathAttack: Attacking Large Language Models Towards Math Solving Ability","created":"2023-09-04","cited_by_count":32,"area":null},{"id":"2405.20774","title":"Can We Trust Embodied Agents? Exploring Backdoor Attacks against Embodied LLM-based Decision-Making Systems","created":"2024-05-27","cited_by_count":27,"area":"lr"},{"id":"2406.08689","title":"Security of AI Agents","created":"2024-06-12","cited_by_count":26,"area":"agents"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2406.03009","title":"Unveiling Selection Biases: Exploring Order and Token Sensitivity in Large Language Models","created":"2024-06-05","cited_by_count":20,"area":null},{"id":"2405.20902","title":"Preemptive Answer \"Attacks\" on Chain-of-Thought Reasoning","created":"2024-05-31","cited_by_count":19,"area":"lr"},{"id":"2404.16841","title":"Machine Unlearning in Large Language Models","created":"2024-02-03","cited_by_count":17,"area":"safety"},{"id":"2404.18191","title":"Exploring the Robustness of In-Context Learning with Noisy Labels","created":"2024-04-28","cited_by_count":14,"area":null},{"id":"2502.04204","title":"Short-length Adversarial Training Helps LLMs Defend Long-length Jailbreak Attacks: Theoretical and Empirical Evidence","created":"2025-02-06","cited_by_count":14,"area":"safety"},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2509.25609","title":"A Framework for Studying AI Agent Behavior: Evidence from Consumer Choice Experiments","created":"2025-09-30","cited_by_count":12,"area":"agents"},{"id":"2406.00240","title":"Exploring Vulnerabilities and Protections in Large Language Models: A Survey","created":"2024-06-01","cited_by_count":11,"area":"safety"},{"id":"2507.07814","title":"Pay Attention to Attention Distribution: A New Local Lipschitz Bound for Transformers","created":"2025-07-10","cited_by_count":11,"area":null},{"id":"2409.07503","title":"AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs","created":"2024-09-11","cited_by_count":8,"area":"safety"},{"id":"2312.07553","title":"Hijacking Context in Large Multi-modal Models","created":"2023-12-07","cited_by_count":6,"area":"mllm"},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2411.18280","title":"Neutralizing Backdoors through Information Conflicts for Large Language Models","created":"2024-11-27","cited_by_count":5,"area":"safety"},{"id":"2505.11584","title":"LLM Agents Are Hypersensitive to Nudges","created":"2025-05-16","cited_by_count":5,"area":"agents"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2510.16558","title":"A First Look at the Security Issues in the Model Context Protocol Ecosystem","created":"2025-10-18","cited_by_count":5,"area":"agents"},{"id":"2405.15984","title":"Evaluating and Safeguarding the Adversarial Robustness of Retrieval-Based In-Context Learning","created":"2024-05-24","cited_by_count":4,"area":"rag"},{"id":"2502.15609","title":"On the Robustness of Transformers against Context Hijacking for Linear Classification","created":"2025-02-21","cited_by_count":4,"area":null},{"id":"2505.17089","title":"Chain-of-Thought Driven Adversarial Scenario Extrapolation for Robust Language Models","created":"2025-05-20","cited_by_count":4,"area":"lr"},{"id":"2410.15396","title":"The Best Defense is a Good Offense: Countering LLM-Powered Cyberattacks","created":"2024-10-20","cited_by_count":3,"area":null},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2309.12481","title":"HANS, are you clever? Clever Hans Effect Analysis of Neural Systems","created":"2023-09-21","cited_by_count":2,"area":null},{"id":"2409.04831","title":"MILE: A Mutation Testing Framework of In-Context Learning Systems","created":"2024-09-07","cited_by_count":2,"area":null},{"id":"2603.04464","title":"Understanding the Dynamics of Demonstration Conflict in In-Context Learning","created":"2026-03-03","cited_by_count":2,"area":"mechinterp"},{"id":"2503.03502","title":"Geometry-Guided Adversarial Prompt Detection via Curvature and Local Intrinsic Dimension","created":"2025-03-05","cited_by_count":1,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2602.15278","title":"Visual Persuasion: What Influences Decisions of Vision-Language Models?","created":"2026-02-17","cited_by_count":1,"area":"mllm"},{"id":"2608.18081","title":"Position: Behavioral Systems Require Behavioral Tests","created":"2026-05-31","cited_by_count":1,"area":"agents"},{"id":"2306.03503","title":"Applying Standards to Advance Upstream & Downstream Ethics in Large Language Models","created":"2023-06-06","cited_by_count":0,"area":null},{"id":"2405.00718","title":"Can't say cant? Measuring and Reasoning of Dark Jargons in Large Language Models","created":"2024-04-25","cited_by_count":0,"area":"lr"},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2507.13761","title":"Innocence in the Crossfire: Roles of Skip Connections in Jailbreaking Visual Language Models","created":"2025-07-18","cited_by_count":0,"area":"mllm"},{"id":"2605.20382","title":"Do as I Say, Not as I Do: Instruction-Induction Conflict in LLMs","created":"2026-05-19","cited_by_count":0,"area":null},{"id":"2605.26350","title":"When Correct Demonstrations Hurt: Rethinking the Role of Exemplars in In-Context Learning","created":"2026-05-25","cited_by_count":0,"area":null},{"id":"2607.08017","title":"Can We Trust LLM's Logic? Quantifying Uncertainty, Coherence, and Robustness via a Graph-Based Framework","created":"2026-07-09","cited_by_count":0,"area":"lr"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"},{"id":"2609.27763","title":"Alignment of LRMs via Counter-Aligned Few-Shot Conversation Exposure","created":"2026-08-16","cited_by_count":0,"area":"lr"}],"next_cursor":null}