{"total":39,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2310.06987","title":"Catastrophic Jailbreak of Open-source LLMs via Exploiting Generation","created":"2023-10-10","cited_by_count":451,"area":"safety"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2311.03348","title":"Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulation","created":"2023-11-06","cited_by_count":214,"area":"safety"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2402.19464","title":"Curiosity-driven Red-teaming for Large Language Models","created":"2024-02-29","cited_by_count":88,"area":"safety"},{"id":"2308.04265","title":"FLIRT: Feedback Loop In-context Red Teaming","created":"2023-08-08","cited_by_count":83,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2406.18682","title":"The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm","created":"2024-06-26","cited_by_count":70,"area":"safety"},{"id":"2311.09948","title":"Hijacking Large Language Models via Adversarial In-Context Learning","created":"2023-11-16","cited_by_count":45,"area":"safety"},{"id":"2401.16656","title":"Gradient-Based Language Model Red Teaming","created":"2024-01-30","cited_by_count":34,"area":"safety"},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2412.18693","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","created":"2024-12-24","cited_by_count":25,"area":"safety"},{"id":"2310.14303","title":"Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases","created":"2023-10-22","cited_by_count":24,"area":"safety"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2405.20778","title":"Improved Generation of Adversarial Examples Against Safety-aligned LLMs","created":"2024-05-28","cited_by_count":18,"area":"safety"},{"id":"2601.18076","title":"Comparison requires valid measurement: Rethinking attack success rate comparisons in AI red teaming","created":"2026-01-26","cited_by_count":15,"area":"safety"},{"id":"2503.01742","title":"Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models","created":"2025-03-03","cited_by_count":11,"area":"safety"},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2410.11317","title":"Deciphering the Chaos: Enhancing Jailbreak Attacks via Adversarial Prompt Translation","created":"2024-10-15","cited_by_count":6,"area":"safety"},{"id":"2312.10057","title":"Generative AI in Writing Research Papers: A New Type of Algorithmic Bias and Uncertainty in Scholarly Work","created":"2023-12-04","cited_by_count":5,"area":"safety"},{"id":"2501.08246","title":"Text-Diffusion Red-Teaming of Large Language Models: Unveiling Harmful Behaviors with Proximity Constraints","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2510.12993","title":"Tailored untruths: How personalisation challenges LLM safeguards","created":"2025-10-14","cited_by_count":2,"area":"safety"},{"id":"2501.17715","title":"RICoTA: Red-teaming of In-the-wild Conversation with Test Attempts","created":"2025-01-29","cited_by_count":1,"area":"safety"},{"id":"2506.04302","title":"RedRFT: A Light-Weight Benchmark for Reinforcement Fine-Tuning-Based Red Teaming","created":"2025-06-04","cited_by_count":1,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2603.10010","title":"FERRET: Framework for Expansion Reliant Red Teaming","created":"2026-02-17","cited_by_count":1,"area":"safety"},{"id":"2503.12339","title":"A Closer Look at Adversarial Suffix Learning for Jailbreaking LLMs: Augmented Adversarial Trigger Learning","created":"2025-03-16","cited_by_count":0,"area":"safety"},{"id":"2512.04841","title":"SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2602.18483","title":"Red Teaming LLMs as Socio-Technical Practice: From Exploration and Data Creation to Evaluation","created":"2026-02-10","cited_by_count":0,"area":"safety"},{"id":"2605.07032","title":"A Systematic Investigation of RL-Jailbreaking in LLMs","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.22258","title":"Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting","created":"2026-05-21","cited_by_count":0,"area":"safety"},{"id":"2610.08840","title":"Beyond the Sycophancy Score: How Task, Model, and Pressure Shape LLM Yielding","created":"2026-09-30","cited_by_count":0,"area":"safety"}],"next_cursor":null}