{"total":222,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2309.08600","title":"Sparse Autoencoders Find Highly Interpretable Features in Language Models","created":"2023-09-15","cited_by_count":1420,"area":"mechinterp"},{"id":"2406.18495","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","created":"2024-06-26","cited_by_count":496,"area":"safety"},{"id":"2310.02207","title":"Language Models Represent Space and Time","created":"2023-10-03","cited_by_count":316,"area":null},{"id":"2402.08787","title":"Rethinking Machine Unlearning for Large Language Models","created":"2024-02-13","cited_by_count":257,"area":"lr"},{"id":"2309.15025","title":"Large Language Model Alignment: A Survey","created":"2023-09-26","cited_by_count":243,"area":"alignment"},{"id":"2406.18510","title":"WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Models","created":"2024-06-26","cited_by_count":223,"area":"safety"},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2309.16240","title":"Beyond Reverse KL: Generalizing Direct Preference Optimization with Diverse Divergence Constraints","created":"2023-09-28","cited_by_count":174,"area":"alignment"},{"id":"2406.19384","title":"The Remarkable Robustness of LLMs: Stages of Inference?","created":"2024-06-27","cited_by_count":146,"area":null},{"id":"2309.00667","title":"Taken out of context: On measuring situational awareness in LLMs","created":"2023-09-01","cited_by_count":143,"area":null},{"id":"2409.12822","title":"Language Models Learn to Mislead Humans via RLHF","created":"2024-09-19","cited_by_count":124,"area":"alignment"},{"id":"2405.12832","title":"Wav-KAN: Wavelet Kolmogorov-Arnold Networks","created":"2024-05-21","cited_by_count":122,"area":null},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2401.12181","title":"Universal Neurons in GPT2 Language Models","created":"2024-01-22","cited_by_count":102,"area":"mechinterp"},{"id":"2307.16513","title":"Deception Abilities Emerged in Large Language Models","created":"2023-07-31","cited_by_count":101,"area":null},{"id":"2404.08676","title":"ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming","created":"2024-04-06","cited_by_count":98,"area":"safety"},{"id":"2405.06624","title":"Towards Guaranteed Safe AI: A Framework for Ensuring Robust and Reliable AI Systems","created":"2024-05-10","cited_by_count":96,"area":"wm"},{"id":"2403.08715","title":"SOTOPIA-$\\pi$: Interactive Learning of Socially Intelligent Language Agents","created":"2024-03-13","cited_by_count":93,"area":"agents"},{"id":"2407.17436","title":"AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies","created":"2024-07-11","cited_by_count":74,"area":null},{"id":"2503.03480","title":"SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning","created":"2025-03-05","cited_by_count":72,"area":"vla"},{"id":"2405.03644","title":"When LLMs Meet Cybersecurity: A Systematic Literature Review","created":"2024-05-06","cited_by_count":71,"area":null},{"id":"2506.15740","title":"SHADE-Arena: Evaluating Sabotage and Monitoring in LLM Agents","created":"2025-06-17","cited_by_count":71,"area":"agents"},{"id":"2502.08640","title":"Utility Engineering: Analyzing and Controlling Emergent Value Systems in AIs","created":"2025-02-12","cited_by_count":67,"area":"agents"},{"id":"2410.13886","title":"Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents","created":"2024-10-11","cited_by_count":65,"area":"agents"},{"id":"2406.13605","title":"Nicer Than Humans: How do Large Language Models Behave in the Prisoner's Dilemma?","created":"2024-06-19","cited_by_count":63,"area":null},{"id":"2404.12241","title":"Introducing v0.5 of the AI Safety Benchmark from MLCommons","created":"2024-04-18","cited_by_count":62,"area":null},{"id":"2403.05020","title":"Is this the real life? Is this just fantasy? The Misleading Success of Simulating Social Interactions With LLMs","created":"2024-03-08","cited_by_count":59,"area":null},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2406.05113","title":"LlavaGuard: An Open VLM-based Framework for Safeguarding Vision Datasets and Models","created":"2024-06-07","cited_by_count":52,"area":"safety"},{"id":"2410.21514","title":"Sabotage Evaluations for Frontier Models","created":"2024-10-28","cited_by_count":52,"area":null},{"id":"2407.06576","title":"Virtual Personas for Language Models via an Anthology of Backstories","created":"2024-07-09","cited_by_count":51,"area":null},{"id":"2310.17688","title":"Managing extreme AI risks amid rapid progress","created":"2023-10-26","cited_by_count":48,"area":null},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2312.15523","title":"The Persuasive Power of Large Language Models","created":"2023-12-24","cited_by_count":47,"area":null},{"id":"2403.04893","title":"A Safe Harbor for AI Evaluation and Red Teaming","created":"2024-03-07","cited_by_count":47,"area":"safety"},{"id":"2311.10538","title":"Testing Language Model Agents Safely in the Wild","created":"2023-11-17","cited_by_count":46,"area":"agents"},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2312.01350","title":"Honesty Is the Best Policy: Defining and Mitigating AI Deception","created":"2023-12-03","cited_by_count":40,"area":null},{"id":"2310.07972","title":"Interpretable Diffusion via Information Decomposition","created":"2023-10-12","cited_by_count":37,"area":"diffusion"},{"id":"2408.11779","title":"Personality Alignment of Large Language Models","created":"2024-08-21","cited_by_count":36,"area":"alignment"},{"id":"2405.17713","title":"AI Alignment with Changing and Influenceable Reward Functions","created":"2024-05-28","cited_by_count":33,"area":"alignment"},{"id":"2411.03336","title":"Towards evaluations-based safety cases for AI scheming","created":"2024-10-29","cited_by_count":33,"area":null},{"id":"2406.14595","title":"Adversaries Can Misuse Combinations of Safe Models","created":"2024-06-20","cited_by_count":32,"area":null},{"id":"2411.06837","title":"Persuasion with Large Language Models: A Survey of Empirical Evidence, Study Methodologies, and Ethical Implications","created":"2024-11-11","cited_by_count":32,"area":null},{"id":"2409.09013","title":"AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agents","created":"2024-09-13","cited_by_count":31,"area":"agents"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2602.17753","title":"The 2025 AI Agent Index: Documenting Technical and Safety Features of Deployed Agentic AI Systems","created":"2026-02-19","cited_by_count":30,"area":"agents"},{"id":"2309.01933","title":"Provably safe systems: the only path to controllable AGI","created":"2023-09-05","cited_by_count":29,"area":null},{"id":"2410.06981","title":"Quantifying Feature Space Universality Across Large Language Models via Sparse Autoencoders","created":"2024-10-09","cited_by_count":27,"area":"mechinterp"},{"id":"2406.11668","title":"\"Not Aligned\" is Not \"Malicious\": Being Careful about Hallucinations of Large Language Models' Jailbreak","created":"2024-06-17","cited_by_count":25,"area":"safety"},{"id":"2311.15131","title":"Localizing Lying in Llama: Understanding Instructed Dishonesty on True-False Questions Through Prompting, Probing, and Patching","created":"2023-11-25","cited_by_count":24,"area":"mechinterp"},{"id":"2503.07639","title":"Mixture of Experts Made Intrinsically Interpretable","created":"2025-03-05","cited_by_count":24,"area":"moe"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2511.20703","title":"PropensityBench: Evaluating Latent Safety Risks in Large Language Models via an Agentic Approach","created":"2025-11-24","cited_by_count":22,"area":"agents"},{"id":"2502.11367","title":"Sparse Autoencoder Features for Classifications and Transferability","created":"2025-02-17","cited_by_count":21,"area":"mechinterp"},{"id":"2411.15477","title":"Towards Robust Evaluation of Unlearning in LLMs via Data Transformations","created":"2024-11-23","cited_by_count":20,"area":"safety"},{"id":"2312.03096","title":"What Causes Polysemanticity? An Alternative Origin Story of Mixed Selectivity from Incidental Causes","created":"2023-12-05","cited_by_count":19,"area":null},{"id":"2402.08323","title":"Mapping the Ethics of Generative AI: A Comprehensive Scoping Review","created":"2024-02-13","cited_by_count":19,"area":null},{"id":"2407.01294","title":"A Collaborative, Human-Centred Taxonomy of AI, Algorithmic, and Automation Harms","created":"2024-07-01","cited_by_count":19,"area":null},{"id":"2601.05214","title":"Internal Representations as Indicators of Hallucinations in Agent Tool Selection","created":"2026-01-08","cited_by_count":19,"area":"agents"},{"id":"2503.02574","title":"LLM-Safety Evaluations Lack Robustness","created":"2025-03-04","cited_by_count":18,"area":"alignment"},{"id":"2505.14633","title":"Will AI Tell Lies to Save Sick Children? Litmus-Testing AI Values Prioritization with AIRiskDilemmas","created":"2025-05-20","cited_by_count":18,"area":null},{"id":"2602.15198","title":"Colosseum: Auditing Collusion in Cooperative Multi-Agent Systems","created":"2026-02-16","cited_by_count":18,"area":"agents"},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2408.12622","title":"The AI risk repository: A meta-review, database, and taxonomy of risks from artificial intelligence","created":"2024-08-14","cited_by_count":16,"area":"agents"},{"id":"2502.04322","title":"Speak Easy: Eliciting Harmful Jailbreaks from LLMs with Simple Interactions","created":"2025-02-06","cited_by_count":15,"area":"alignment"},{"id":"2503.01811","title":"AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses","created":"2025-03-03","cited_by_count":15,"area":null},{"id":"2504.13828","title":"Generative AI Act II: Test Time Scaling Drives Cognition Engineering","created":"2025-04-18","cited_by_count":15,"area":"lr"},{"id":"2405.10799","title":"Training Compute Thresholds: Features and Functions in AI Regulation","created":"2024-05-17","cited_by_count":14,"area":null},{"id":"2406.01013","title":"Scalable Ensembling For Mitigating Reward Overoptimisation","created":"2024-06-03","cited_by_count":14,"area":"alignment"},{"id":"2406.01364","title":"BELLS: A Framework Towards Future Proof Benchmarks for the Evaluation of LLM Safeguards","created":"2024-06-03","cited_by_count":14,"area":null},{"id":"2411.18797","title":"SEUF: Is Unlearning One Expert Enough for Mixture-of-Experts LLMs?","created":"2024-11-27","cited_by_count":14,"area":"moe"},{"id":"2506.24068","title":"STACK: Adversarial Attacks on LLM Safeguard Pipelines","created":"2025-06-30","cited_by_count":14,"area":null},{"id":"2509.21651","title":"Can AI Perceive Physical Danger and Intervene?","created":"2025-09-25","cited_by_count":14,"area":null},{"id":"2404.17047","title":"Near to Mid-term Risks and Opportunities of Open-Source Generative AI","created":"2024-04-25","cited_by_count":13,"area":null},{"id":"2405.08597","title":"Risks and Opportunities of Open-Source Generative AI","created":"2024-05-14","cited_by_count":13,"area":null},{"id":"2412.04139","title":"Monet: Mixture of Monosemantic Experts for Transformers","created":"2024-12-05","cited_by_count":13,"area":"mechinterp"},{"id":"2601.21571","title":"Shaping capabilities with token-level data filtering","created":"2026-01-29","cited_by_count":13,"area":null},{"id":"2410.09114","title":"Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities","created":"2024-10-10","cited_by_count":12,"area":"agents"},{"id":"2503.17882","title":"Think Before Refusal : Triggering Safety Reflection in LLMs to Mitigate False Refusal Behavior","created":"2025-03-22","cited_by_count":12,"area":"lr"},{"id":"2512.16856","title":"Distributional AGI Safety","created":"2025-12-18","cited_by_count":12,"area":null},{"id":"2406.16746","title":"The Responsible Foundation Model Development Cheatsheet: A Review of Tools & Resources","created":"2024-06-24","cited_by_count":11,"area":null},{"id":"2407.09221","title":"Evaluating AI Evaluation: Perils and Prospects","created":"2024-07-12","cited_by_count":11,"area":null},{"id":"2504.13959","title":"AI Safety Should Prioritize the Future of Work","created":"2025-04-16","cited_by_count":11,"area":null},{"id":"2604.23338","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","created":"2026-04-25","cited_by_count":11,"area":"agents"},{"id":"2309.16573","title":"Language Models as a Service: Overview of a New Paradigm and its Challenges","created":"2023-09-28","cited_by_count":10,"area":null},{"id":"2404.02675","title":"Responsible Reporting for Frontier AI Development","created":"2024-04-03","cited_by_count":10,"area":null},{"id":"2405.10295","title":"Societal Adaptation to Advanced AI","created":"2024-05-16","cited_by_count":10,"area":null},{"id":"2411.11731","title":"Moral Persuasion in Large Language Models: Evaluating Susceptibility and Ethical Alignment","created":"2024-11-18","cited_by_count":10,"area":null},{"id":"2411.16035","title":"Predicting Emergent Capabilities by Finetuning","created":"2024-11-25","cited_by_count":10,"area":null},{"id":"2605.07990","title":"Tool Calling is Linearly Readable and Steerable in Language Models","created":"2026-05-08","cited_by_count":10,"area":"agents"},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2310.18244","title":"A Review of the Evidence for Existential Risk from AI via Misaligned Power-Seeking","created":"2023-10-27","cited_by_count":8,"area":null},{"id":"2311.07723","title":"Generalization Analogies: A Testbed for Generalizing AI Oversight to Hard-To-Measure Domains","created":"2023-11-13","cited_by_count":8,"area":"alignment"},{"id":"2407.02518","title":"INDICT: Code Generation with Internal Dialogues of Critiques for Both Security and Helpfulness","created":"2024-06-23","cited_by_count":8,"area":null},{"id":"2410.11182","title":"A Middle Path for On-Premises LLM Deployment: Preserving Privacy Without Sacrificing Model Confidentiality","created":"2024-10-15","cited_by_count":8,"area":null},{"id":"2502.09297","title":"When Do Neural Networks Learn World Models?","created":"2025-02-13","cited_by_count":8,"area":"wm"},{"id":"2502.13329","title":"Language Models Can Predict Their Own Behavior","created":"2025-02-18","cited_by_count":8,"area":"lr"},{"id":"2512.05356","title":"AI & Human Co-Improvement for Safer Co-Superintelligence","created":"2025-12-05","cited_by_count":8,"area":null}],"next_cursor":"100"}