{"total":114,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2307.15217","title":"Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedback","created":"2023-07-27","cited_by_count":759,"area":"alignment"},{"id":"2310.06824","title":"The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasets","created":"2023-10-10","cited_by_count":712,"area":null},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651,"area":"alignment"},{"id":"2307.06435","title":"A Comprehensive Overview of Large Language Models","created":"2023-07-12","cited_by_count":648,"area":null},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2307.10169","title":"Challenges and Applications of Large Language Models","created":"2023-07-19","cited_by_count":254,"area":null},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2311.03348","title":"Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation","created":"2023-11-06","cited_by_count":214,"area":"safety"},{"id":"2308.14752","title":"AI Deception: A Survey of Examples, Risks, and Potential Solutions","created":"2023-08-28","cited_by_count":188,"area":null},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2310.11986","title":"Sociotechnical Safety Evaluation of Generative AI Systems","created":"2023-10-18","cited_by_count":157,"area":null},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2404.07503","title":"Best Practices and Lessons Learned on Synthetic Data","created":"2024-04-11","cited_by_count":106,"area":"synth"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2402.19464","title":"Curiosity-driven Red-teaming for Large Language Models","created":"2024-02-29","cited_by_count":88,"area":"safety"},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2407.12831","title":"Truth is Universal: Robust Detection of Lies in LLMs","created":"2024-07-03","cited_by_count":79,"area":null},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2401.05778","title":"Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems","created":"2024-01-11","cited_by_count":66,"area":null},{"id":"2310.02224","title":"Can Language Models be Instructed to Protect Personal Information?","created":"2023-10-03","cited_by_count":46,"area":"mllm"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2506.07468","title":"Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models","created":"2025-06-09","cited_by_count":39,"area":"alignment"},{"id":"2402.03659","title":"Learning to Generate Explainable Stock Predictions using Self-Reflective Large Language Models","created":"2024-02-06","cited_by_count":36,"area":null},{"id":"2412.13879","title":"Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settings","created":"2024-12-18","cited_by_count":35,"area":null},{"id":"2401.16656","title":"Gradient-Based Language Model Red Teaming","created":"2024-01-30","cited_by_count":34,"area":"safety"},{"id":"2410.15686","title":"NetSafe: Exploring the Topological Safety of Multi-agent Networks","created":"2024-10-21","cited_by_count":29,"area":"agents"},{"id":"2312.14302","title":"Exploiting Novel GPT-4 APIs","created":"2023-12-21","cited_by_count":28,"area":"agents"},{"id":"2312.06861","title":"Disentangling Perceptions of Offensiveness: Cultural and Moral Correlates","created":"2023-12-11","cited_by_count":26,"area":null},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2412.18693","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","created":"2024-12-24","cited_by_count":25,"area":"safety"},{"id":"2310.14303","title":"Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases","created":"2023-10-22","cited_by_count":24,"area":"safety"},{"id":"2406.19354","title":"Fundamental Problems With Model Editing: How Should Rational Belief Revision Work in LLMs?","created":"2024-06-27","cited_by_count":24,"area":null},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18,"area":"safety"},{"id":"2310.00322","title":"Evolving Diverse Red-team Language Models in Multi-round Multi-agent Games","created":"2023-09-30","cited_by_count":17,"area":"agents"},{"id":"2307.09579","title":"Understanding Multi-Turn Toxic Behaviors in Open-Domain Chatbots","created":"2023-07-14","cited_by_count":15,"area":null},{"id":"2405.14488","title":"MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability","created":"2024-05-23","cited_by_count":15,"area":null},{"id":"2601.18076","title":"Comparison requires valid measurement: Rethinking attack success rate comparisons in AI red teaming","created":"2026-01-26","cited_by_count":15,"area":"safety"},{"id":"2503.01742","title":"Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models","created":"2025-03-03","cited_by_count":11,"area":"safety"},{"id":"2502.15435","title":"Single-pass Detection of Jailbreaking Input in Large Language Models","created":"2025-02-21","cited_by_count":10,"area":"alignment"},{"id":"2507.22149","title":"When Truthful Representations Flip Under Deceptive Instructions?","created":"2025-07-29","cited_by_count":10,"area":"mechinterp"},{"id":"2311.07237","title":"In Search of the Long-Tail: Systematic Generation of Long-Tail Inferential Knowledge via Logical Rule Guided Search","created":"2023-11-13","cited_by_count":9,"area":null},{"id":"2410.19406","title":"An Auditing Test To Detect Behavioral Shift in Language Models","created":"2024-10-25","cited_by_count":9,"area":null},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2508.05775","title":"Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLM","created":"2025-08-07","cited_by_count":9,"area":"alignment"},{"id":"2508.19432","title":"Quantized but Deceptive? A Multi-Dimensional Truthfulness Evaluation of Quantized LLMs","created":"2025-08-26","cited_by_count":9,"area":null},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2410.04524","title":"Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuning","created":"2024-10-06","cited_by_count":8,"area":null},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2310.02263","title":"Automatic Pair Construction for Contrastive Post-training","created":"2023-10-03","cited_by_count":7,"area":null},{"id":"2505.24369","title":"Adversarial Preference Learning for Robust LLM Alignment","created":"2025-05-30","cited_by_count":7,"area":"alignment"},{"id":"2506.11083","title":"RedDebate: Safer Responses Through Multi-Agent Red Teaming Debates","created":"2025-06-04","cited_by_count":7,"area":"agents"},{"id":"2509.06795","title":"Anchoring Refusal Direction: Mitigating Safety Risks in Tuning via Projection Constraint","created":"2025-09-08","cited_by_count":7,"area":null},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2410.11317","title":"Deciphering the Chaos: Enhancing Jailbreak Attacks via Adversarial Prompt Translation","created":"2024-10-15","cited_by_count":6,"area":"safety"},{"id":"2601.18292","title":"TriPlay-RL: Tri-Role Self-Play Reinforcement Learning for LLM Safety Alignment","created":"2026-01-26","cited_by_count":6,"area":"alignment"},{"id":"2312.10057","title":"Generative AI in Writing Research Papers: A New Type of Algorithmic Bias and Uncertainty in Scholarly Work","created":"2023-12-04","cited_by_count":5,"area":"safety"},{"id":"2407.20529","title":"Can LLMs be Fooled? Investigating Vulnerabilities in LLMs","created":"2024-07-30","cited_by_count":5,"area":null},{"id":"2411.02461","title":"Enhancing Multiple Dimensions of Trustworthiness in LLMs via Sparse Activation Control","created":"2024-11-04","cited_by_count":5,"area":null},{"id":"2501.08246","title":"Text-Diffusion Red-Teaming of Large Language Models: Unveiling Harmful Behaviors with Proximity Constraints","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2404.07066","title":"Exploring Concept Depth: How Large Language Models Acquire Knowledge and Concept at Different Layers?","created":"2024-04-10","cited_by_count":4,"area":null},{"id":"2407.12999","title":"Securing the Future of GenAI: Policy and Technology","created":"2024-05-21","cited_by_count":4,"area":null},{"id":"2407.18712","title":"Cluster-norm for Unsupervised Probing of Knowledge","created":"2024-07-26","cited_by_count":4,"area":null},{"id":"2503.04113","title":"Uncovering Gaps in How Humans and LLMs Interpret Subjective Language","created":"2025-03-06","cited_by_count":4,"area":null},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2505.17089","title":"Chain-of-Thought Driven Adversarial Scenario Extrapolation for Robust Language Models","created":"2025-05-20","cited_by_count":4,"area":"lr"},{"id":"2510.17687","title":"CrossGuard: Safeguarding MLLMs against Joint-Modal Implicit Malicious Attacks","created":"2025-10-20","cited_by_count":4,"area":"lr"},{"id":"2311.08487","title":"Alignment is not sufficient to prevent large language models from generating harmful information: A psychoanalytic perspective","created":"2023-11-14","cited_by_count":3,"area":"alignment"},{"id":"2406.06475","title":"Survey for Landing Generative AI in Social and E-commerce Recsys -- the Industry Perspectives","created":"2024-06-10","cited_by_count":3,"area":null},{"id":"2406.17104","title":"Automated Adversarial Discovery for Safety Classifiers","created":"2024-06-24","cited_by_count":3,"area":null},{"id":"2407.09447","title":"ASTPrompter: Preference-Aligned Automated Language Model Red-Teaming to Generate Low-Perplexity Unsafe Prompts","created":"2024-07-12","cited_by_count":3,"area":"alignment"},{"id":"2512.01909","title":"Latent Debate: A Surrogate Framework for Interpreting LLM Thinking","created":"2025-12-01","cited_by_count":3,"area":"lr"},{"id":"2605.16198","title":"Formal Methods Meet LLMs: Auditing, Monitoring, and Intervention for Compliance of Advanced AI Systems","created":"2026-05-15","cited_by_count":3,"area":null},{"id":"2506.16150","title":"PRISON: Unmasking the Criminal Potential of Large Language Models","created":"2025-06-19","cited_by_count":2,"area":null},{"id":"2509.12521","title":"Phi: Preference Hijacking in Multi-modal Large Language Models at Inference Time","created":"2025-09-15","cited_by_count":2,"area":"mllm"},{"id":"2510.12993","title":"Tailored untruths: How personalisation challenges LLM safeguards","created":"2025-10-14","cited_by_count":2,"area":"safety"},{"id":"2512.23132","title":"Multi-Agent Framework for Threat Mitigation and Resilience in AI-Based Systems","created":"2025-12-29","cited_by_count":2,"area":"agents"},{"id":"2603.14355","title":"Exposing Long-Tail Safety Failures in Large Language Models through Efficient Diverse Response Sampling","created":"2026-03-15","cited_by_count":2,"area":"alignment"},{"id":"2608.21736","title":"Adaptive Multilevel Twisted Sequential Monte Carlo for Rare Events Estimation in Language Models","created":"2026-08-22","cited_by_count":2,"area":null},{"id":"2311.18215","title":"Automatic Construction of a Korean Toxic Instruction Dataset for Ethical Tuning of Large Language Models","created":"2023-11-30","cited_by_count":1,"area":null},{"id":"2410.04454","title":"Inner-Probe: Discovering Copyright-related Data Generation in LLM Architecture","created":"2024-10-06","cited_by_count":1,"area":null},{"id":"2501.17715","title":"RICoTA: Red-teaming of In-the-wild Conversation with Test Attempts","created":"2025-01-29","cited_by_count":1,"area":"safety"},{"id":"2505.18680","title":"$PD^3F$: A Pluggable and Dynamic DoS-Defense Framework Against Resource Consumption Attacks Targeting Large Language Models","created":"2025-05-24","cited_by_count":1,"area":null},{"id":"2506.04302","title":"RedRFT: A Light-Weight Benchmark for Reinforcement Fine-Tuning-Based Red Teaming","created":"2025-06-04","cited_by_count":1,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2507.14202","title":"PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training","created":"2025-07-14","cited_by_count":1,"area":"alignment"},{"id":"2509.06807","title":"MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security","created":"2025-09-08","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2602.20595","title":"OptiLeak: Efficient Prompt Reconstruction via Reinforcement Learning in Multi-tenant LLM Services","created":"2026-02-24","cited_by_count":1,"area":"inference"},{"id":"2603.05471","title":"Leveraging LLM Parametric Knowledge for Fact Checking without Retrieval","created":"2026-03-05","cited_by_count":1,"area":"agents"}],"next_cursor":"100"}