{"total":21,"rows":[{"id":"2312.00273","title":"Mark My Words: Analyzing and Evaluating Language Model Watermarks","created":"2023-12-01","cited_by_count":71,"area":"safety"},{"id":"2410.02879","title":"Position: LLM Unlearning Benchmarks are Weak Measures of Progress","created":"2024-10-03","cited_by_count":63,"area":"safety"},{"id":"2506.09443","title":"LLMs Cannot Reliably Judge (Yet?): A Comprehensive Assessment on the Robustness of LLM-as-a-Judge","created":"2025-06-11","cited_by_count":37,"area":"safety"},{"id":"2311.07138","title":"WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models","created":"2023-11-13","cited_by_count":32,"area":"safety"},{"id":"2406.14517","title":"PostMark: A Robust Blackbox Watermark for Large Language Models","created":"2024-06-20","cited_by_count":29,"area":"safety"},{"id":"2409.07314","title":"MEDIC: Comprehensive Evaluation of Leading Indicators for LLM Safety and Utility in Clinical Applications","created":"2024-09-11","cited_by_count":25,"area":"safety"},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2411.01077","title":"Emoji Attack: Enhancing Jailbreak Attacks Against Judge LLM Detection","created":"2024-11-01","cited_by_count":23,"area":"safety"},{"id":"2504.07887","title":"Benchmarking Adversarial Robustness to Bias Elicitation in Large Language Models: Scalable Automated Assessment with LLM-as-a-Judge","created":"2025-04-10","cited_by_count":23,"area":"safety"},{"id":"2311.09763","title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations","created":"2023-11-16","cited_by_count":21,"area":"safety"},{"id":"2410.13808","title":"De-mark: Watermark Removal in Large Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2312.02382","title":"New Evaluation Metrics Capture Quality Degradation due to LLM Watermarking","created":"2023-12-04","cited_by_count":11,"area":"safety"},{"id":"2605.06161","title":"Beyond Accuracy: Policy Invariance as a Reliability Test for LLM Safety Judges","created":"2026-05-07","cited_by_count":8,"area":"safety"},{"id":"2609.29429","title":"Just Ask Jev: Reinforcement Learning for Calibrated Decisions as a Zero-Shot Detector of AI Alignment Failures","created":"2026-09-24","cited_by_count":8,"area":"safety"},{"id":"2504.18333","title":"Adversarial Attacks on LLM-as-a-Judge Systems: Insights from Prompt Injections","created":"2025-04-25","cited_by_count":6,"area":"safety"},{"id":"2403.06131","title":"PPFedIT: Towards Privacy-Preserving Federated Instruction Tuning with Few-shot Local Examples","created":"2024-03-10","cited_by_count":3,"area":"safety"},{"id":"2507.05980","title":"Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gaps","created":"2025-07-08","cited_by_count":2,"area":"safety"},{"id":"2601.12937","title":"On the Evidentiary Limits of Membership Inference for Copyright Auditing","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2608.08212","title":"Harmful Content Is Not Enough: Continuation Framing Moderates In-Context Emergent Misalignment","created":"2026-08-08","cited_by_count":0,"area":"safety"},{"id":"2609.08236","title":"Style Over Substance: Content-Invariant Wrappers Flip LLM Safety-Judge Verdicts","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2609.10594","title":"An Empirical Measurement of Jailbreaking Evaluators","created":"2026-09-07","cited_by_count":0,"area":"safety"}],"next_cursor":null}