{"total":59,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2503.07885","title":"Safety Guardrails for LLM-Enabled Robots","created":"2025-03-10","cited_by_count":35,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2412.05934","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","created":"2024-12-08","cited_by_count":33,"area":"safety"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2501.13772","title":"Jailbreak-AudioBench: In-Depth Evaluation and Analysis of Jailbreak Threats for Large Audio Language Models","created":"2025-01-23","cited_by_count":23,"area":"safety"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2401.00991","title":"A Novel Evaluation Framework for Assessing Resilience Against Prompt Injection Attacks in Large Language Models","created":"2024-01-02","cited_by_count":15,"area":"safety"},{"id":"2501.14250","title":"Siren: A Learning-Based Multi-Turn Attack Framework for Simulating Real-World Human Jailbreak Behaviors","created":"2025-01-24","cited_by_count":13,"area":"safety"},{"id":"2512.06589","title":"OmniSafeBench-MM: A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack-Defense Evaluation","created":"2025-12-06","cited_by_count":11,"area":"safety"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2404.08793","title":"JailbreakLens: Visual Analysis of Jailbreak Attacks Against Large Language Models","created":"2024-04-12","cited_by_count":7,"area":"safety"},{"id":"2603.01228","title":"Towards Policy-Adaptive Image Guardrail: Benchmark and Method","created":"2026-03-01","cited_by_count":6,"area":"safety"},{"id":"2502.00653","title":"Towards Robust Multimodal Large Language Models Against Jailbreak Attacks","created":"2025-02-02","cited_by_count":5,"area":"safety"},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2503.21824","title":"Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations","created":"2025-03-26","cited_by_count":5,"area":"safety"},{"id":"2405.20015","title":"Efficient LLM-Jailbreaking via Multimodal-LLM Jailbreak","created":"2024-05-30","cited_by_count":4,"area":"safety"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2503.24191","title":"When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output","created":"2025-03-31","cited_by_count":4,"area":"safety"},{"id":"2510.05025","title":"Imperceptible Jailbreaking against Large Language Models","created":"2025-10-06","cited_by_count":4,"area":"safety"},{"id":"2506.16792","title":"MIST: Jailbreaking Black-box Large Language Models via Iterative Semantic Tuning","created":"2025-06-20","cited_by_count":3,"area":"safety"},{"id":"2510.17277","title":"PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2605.18168","title":"Acoustic Interference: A New Paradigm Weaponizing Acoustic Latent Semantic for Universal Jailbreak against Large Audio Language Models","created":"2026-05-18","cited_by_count":3,"area":"safety"},{"id":"2602.10179","title":"When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models","created":"2026-02-10","cited_by_count":2,"area":"safety"},{"id":"2605.04700","title":"Sparse Tokens Suffice: Jailbreaking Audio Language Models via Token-Aware Gradient Optimization","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2510.01494","title":"Understanding Adversarial Transfer: Why Representation-Space Attacks Fail Where Data-Space Attacks Succeed","created":"2025-10-01","cited_by_count":1,"area":"safety"},{"id":"2510.01644","title":"Machine Learning for Detection and Analysis of Novel LLM Jailbreaks","created":"2025-10-02","cited_by_count":1,"area":"safety"},{"id":"2510.26847","title":"Broken-Token: Filtering Obfuscated Prompts by Counting Characters-Per-Token","created":"2025-10-30","cited_by_count":1,"area":"safety"},{"id":"2511.08367","title":"Why Does Weak-OOD Help? A Further Step Towards Understanding Jailbreaking VLMs","created":"2025-11-11","cited_by_count":1,"area":"safety"},{"id":"2512.01185","title":"DefenSee: Dissecting Threat from Sight and Text -- A Multi-View Defensive Pipeline for Multi-modal Jailbreaks","created":"2025-12-01","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2509.21400","title":"SafeSteer: Adaptive Subspace Steering for Efficient Jailbreak Defense in Vision-Language Models","created":"2025-09-24","cited_by_count":0,"area":"safety"},{"id":"2510.21214","title":"Enhanced MLLM Black-Box Jailbreaking Attacks and Defenses","created":"2025-10-24","cited_by_count":0,"area":"safety"},{"id":"2512.08185","title":"A Practical Framework for Evaluating Medical AI Security: Reproducible Assessment of Jailbreaking and Privacy Vulnerabilities Across Clinical Specialties","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2605.00699","title":"STARE: Step-wise Temporal Alignment and Red-teaming Engine for Multi-modal Toxicity Attack","created":"2026-05-01","cited_by_count":0,"area":"safety"},{"id":"2605.07490","title":"Cross-Modal Backdoors in Multimodal Large Language Models","created":"2026-05-08","cited_by_count":0,"area":"safety"},{"id":"2605.10764","title":"Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.17128","title":"New Wide-Net-Casting Jailbreak Attacks Risk Large Models","created":"2026-05-16","cited_by_count":0,"area":"safety"},{"id":"2605.25194","title":"Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attack","created":"2026-05-24","cited_by_count":0,"area":"safety"},{"id":"2606.01837","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","created":"2026-06-01","cited_by_count":0,"area":"safety"},{"id":"2607.07903","title":"Mechanistic Interpretability of LLM Jailbreaks via Internal Attribution Graphs","created":"2026-07-08","cited_by_count":0,"area":"safety"},{"id":"2607.10269","title":"Devil in the Lens: Analyzing and Defending Physical Prompt Injection Against Vision-Language Models on Wearable Devices","created":"2026-07-11","cited_by_count":0,"area":"safety"},{"id":"2607.24859","title":"The Mirage of LLM Guardrails: A Case Study in AI-Assisted Medical Note Manipulation","created":"2026-07-26","cited_by_count":0,"area":"safety"},{"id":"2608.01373","title":"The Boy Who Cried Wolf: Adversarial Misclassification of Safe Inputs as Unsafe in Multimodal Guardrails","created":"2026-08-02","cited_by_count":0,"area":"safety"},{"id":"2608.03210","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","created":"2026-08-04","cited_by_count":0,"area":"safety"},{"id":"2609.04533","title":"Repeat-After-Me: Black-Box Adaptive Visual Prompt Injection","created":"2026-09-03","cited_by_count":0,"area":"safety"},{"id":"2610.07009","title":"Which Image Property Carries the Jailbreak? A Controlled Dissection of Image-to-Text Jailbreaks","created":"2026-10-04","cited_by_count":0,"area":"safety"}],"next_cursor":null}