{"total":187,"rows":[{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2406.18495","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","created":"2024-06-26","cited_by_count":496,"area":"safety"},{"id":"2310.10683","title":"Large Language Model Unlearning","created":"2023-10-14","cited_by_count":302,"area":"safety"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2402.10058","title":"Towards Safer Large Language Models through Machine Unlearning","created":"2024-02-15","cited_by_count":139,"area":"safety"},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2404.18239","title":"SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearning","created":"2024-04-28","cited_by_count":104,"area":"safety"},{"id":"2405.14577","title":"Representation Noising: A Defence Mechanism Against Harmful Finetuning","created":"2024-05-23","cited_by_count":96,"area":"safety"},{"id":"2403.05030","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","created":"2024-03-08","cited_by_count":88,"area":"safety"},{"id":"2410.21965","title":"SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Types","created":"2024-10-29","cited_by_count":60,"area":"safety"},{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56,"area":"safety"},{"id":"2502.07557","title":"JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation","created":"2025-02-11","cited_by_count":54,"area":"safety"},{"id":"2310.00905","title":"All Languages Matter: On the Multilingual Safety of Large Language Models","created":"2023-10-02","cited_by_count":53,"area":"safety"},{"id":"2407.10223","title":"On Large Language Model Continual Unlearning","created":"2024-07-14","cited_by_count":52,"area":"safety"},{"id":"2406.17626","title":"CoSafe: Evaluating Large Language Model Safety in Multi-Turn Dialogue Coreference","created":"2024-06-25","cited_by_count":51,"area":"safety"},{"id":"2407.20516","title":"Machine Unlearning in Generative AI: A Survey","created":"2024-07-30","cited_by_count":49,"area":"safety"},{"id":"2405.09055","title":"A safety realignment framework via subspace-oriented model fusion for large language models","created":"2024-05-15","cited_by_count":41,"area":"safety"},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2410.18057","title":"CLEAR: Character Unlearning in Textual and Visual Modalities","created":"2024-10-23","cited_by_count":39,"area":"safety"},{"id":"2406.06302","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","created":"2024-06-10","cited_by_count":38,"area":"safety"},{"id":"2410.08811","title":"PoisonBench: Assessing Large Language Model Vulnerability to Data Poisoning","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2410.18210","title":"Towards Understanding the Fragility of Multilingual LLMs against Fine-Tuning Attacks","created":"2024-10-23","cited_by_count":33,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2408.02946","title":"Scaling Trends for Data Poisoning in LLMs","created":"2024-08-06","cited_by_count":30,"area":"safety"},{"id":"2402.15180","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","created":"2024-02-23","cited_by_count":29,"area":"safety"},{"id":"2409.15154","title":"RMCBench: Benchmarking Large Language Models' Resistance to Malicious Code","created":"2024-09-23","cited_by_count":28,"area":"safety"},{"id":"2410.17509","title":"WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models","created":"2024-10-23","cited_by_count":26,"area":"safety"},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2412.10321","title":"AdvPrefix: An Objective for Nuanced LLM Jailbreaks","created":"2024-12-13","cited_by_count":25,"area":"safety"},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2502.11090","title":"SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attacks","created":"2025-02-16","cited_by_count":23,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2407.20224","title":"Can Editing LLMs Inject Harm?","created":"2024-07-29","cited_by_count":22,"area":"safety"},{"id":"2411.11114","title":"JailbreakLens: Interpreting Jailbreak Mechanism in the Lens of Representation and Circuit","created":"2024-11-17","cited_by_count":22,"area":"safety"},{"id":"2505.06843","title":"Benign Samples Matter! Fine-tuning On Outlier Benign Samples Severely Breaks Safety","created":"2025-05-11","cited_by_count":22,"area":"safety"},{"id":"2503.22759","title":"Data Poisoning in Deep Learning: A Survey","created":"2025-03-27","cited_by_count":20,"area":"safety"},{"id":"2411.06426","title":"SequentialBreak: Large Language Models Can be Fooled by Embedding Jailbreak Prompts into Sequential Prompt Chains","created":"2024-11-10","cited_by_count":19,"area":"safety"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2509.02563","title":"DynaGuard: A Dynamic Guardian Model With User-Defined Policies","created":"2025-09-02","cited_by_count":19,"area":"safety"},{"id":"2508.07173","title":"Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Models","created":"2025-08-10","cited_by_count":18,"area":"safety"},{"id":"2509.26238","title":"Beyond Linear Probes: Dynamic Safety Monitoring for Language Models","created":"2025-09-30","cited_by_count":16,"area":"safety"},{"id":"2406.15796","title":"Unveiling Entity-Level Unlearning for Large Language Models: A Comprehensive Analysis","created":"2024-06-22","cited_by_count":14,"area":"safety"},{"id":"2410.22153","title":"Benchmarking LLM Guardrails in Handling Multilingual Toxicity","created":"2024-10-29","cited_by_count":14,"area":"safety"},{"id":"2503.08195","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","created":"2025-03-11","cited_by_count":14,"area":"safety"},{"id":"2407.03876","title":"Automated Progressive Red Teaming","created":"2024-07-04","cited_by_count":13,"area":"safety"},{"id":"2408.15488","title":"Legilimens: Practical and Unified Content Moderation for Large Language Model Services","created":"2024-08-28","cited_by_count":13,"area":"safety"},{"id":"2501.14250","title":"Siren: A Learning-Based Multi-Turn Attack Framework for Simulating Real-World Human Jailbreak Behaviors","created":"2025-01-24","cited_by_count":13,"area":"safety"},{"id":"2505.19056","title":"An Embarrassingly Simple Defense Against LLM Abliteration Attacks","created":"2025-05-25","cited_by_count":13,"area":"safety"},{"id":"2505.24445","title":"Learning Safety Constraints for Large Language Models","created":"2025-05-30","cited_by_count":13,"area":"safety"},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2411.19530","title":"Quantized Delta Weight Is Safety Keeper","created":"2024-11-29","cited_by_count":12,"area":"safety"},{"id":"2407.01376","title":"Badllama 3: removing safety finetuning from Llama 3 in minutes","created":"2024-07-01","cited_by_count":11,"area":"safety"},{"id":"2408.11313","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","created":"2024-08-21","cited_by_count":11,"area":"safety"},{"id":"2411.06899","title":"LongSafety: Enhance Safety for Long-Context LLMs","created":"2024-11-11","cited_by_count":11,"area":"safety"},{"id":"2504.15047","title":"RainbowPlus: Enhancing Adversarial Prompt Generation via Evolutionary Quality-Diversity Search","created":"2025-04-21","cited_by_count":11,"area":"safety"},{"id":"2505.16559","title":"CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2604.18519","title":"LLM Safety From Within: Detecting Harmful Content with Internal Representations","created":"2026-04-20","cited_by_count":11,"area":"safety"},{"id":"2411.04223","title":"Diversity Helps Jailbreak Large Language Models","created":"2024-11-06","cited_by_count":10,"area":"safety"},{"id":"2505.12186","title":"Self-Destructive Language Model","created":"2025-05-18","cited_by_count":10,"area":"safety"},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2510.09694","title":"Kelp: A Streaming Safeguard for Large Models via Latent Dynamics-Guided Risk Detection","created":"2025-10-09","cited_by_count":9,"area":"safety"},{"id":"2409.07503","title":"AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs","created":"2024-09-11","cited_by_count":8,"area":"safety"},{"id":"2409.15361","title":"Multitask Mayhem: Unveiling and Mitigating Safety Gaps in LLMs Fine-tuning","created":"2024-09-18","cited_by_count":8,"area":"safety"},{"id":"2505.19773","title":"What Really Matters in Many-Shot Attacks? An Empirical Study of Long-Context Vulnerabilities in LLMs","created":"2025-05-26","cited_by_count":8,"area":"safety"},{"id":"2505.23839","title":"GeneBreaker: Jailbreak Attacks against DNA Language Models with Pathogenicity Guidance","created":"2025-05-28","cited_by_count":8,"area":"safety"},{"id":"2510.07835","title":"MetaDefense: Defending Finetuning-based Jailbreak Attack Before and During Generation","created":"2025-10-09","cited_by_count":8,"area":"safety"},{"id":"2412.20412","title":"Multi-Objective Large Language Model Unlearning","created":"2024-12-29","cited_by_count":7,"area":"safety"},{"id":"2501.00055","title":"LLM-Virus: Evolutionary Jailbreak Attack on Large Language Models","created":"2024-12-28","cited_by_count":7,"area":"safety"},{"id":"2509.20977","title":"CLUE: Conflict-guided Localization for LLM Unlearning Framework","created":"2025-09-25","cited_by_count":7,"area":"safety"},{"id":"2510.10994","title":"Deep Research with Open-Domain Evaluation and Multi-Stage Guardrails for Safety","created":"2025-10-13","cited_by_count":7,"area":"safety"},{"id":"2504.14738","title":"PROMPTEVALS: A Dataset of Assertions and Guardrails for Custom Production Large Language Model Pipelines","created":"2025-04-20","cited_by_count":6,"area":"safety"},{"id":"2509.10546","title":"Learning to Conceal Risk: Controllable Multi-turn Red Teaming for LLMs in the Financial Domain","created":"2025-09-07","cited_by_count":6,"area":"safety"},{"id":"2603.00498","title":"Antibody: Strengthening Defense Against Harmful Fine-Tuning for Large Language Models via Attenuating Harmful Gradient Influence","created":"2026-02-28","cited_by_count":6,"area":"safety"},{"id":"2603.01291","title":"JailNewsBench: Multi-Lingual and Regional Benchmark for Fake News Generation under Jailbreak Attacks","created":"2026-03-01","cited_by_count":6,"area":"safety"},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2407.01461","title":"Enhancing the Capability and Robustness of Large Language Models through Reinforcement Learning-Driven Query Refinement","created":"2024-07-01","cited_by_count":5,"area":"safety"},{"id":"2411.19335","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","created":"2024-11-28","cited_by_count":5,"area":"safety"},{"id":"2501.08246","title":"Text-Diffusion Red-Teaming of Large Language Models: Unveiling Harmful Behaviors with Proximity Constraints","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2502.01241","title":"Peering Behind the Shield: Guardrail Identification in Large Language Models","created":"2025-02-03","cited_by_count":5,"area":"safety"},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2505.20435","title":"The Shape of Adversarial Influence: Characterizing LLM Latent Spaces with Persistent Homology","created":"2025-05-26","cited_by_count":5,"area":"safety"},{"id":"2506.15751","title":"Sysformer: Safeguarding Frozen Large Language Models with Adaptive System Prompts","created":"2025-06-18","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2511.06890","title":"EduGuardBench: A Holistic Benchmark for Evaluating the Pedagogical Fidelity and Adversarial Safety of LLMs as Simulated Teachers","created":"2025-11-10","cited_by_count":5,"area":"safety"},{"id":"2511.14423","title":"Unified Defense for Large Language Models against Jailbreak and Fine-Tuning Attacks in Education","created":"2025-11-18","cited_by_count":5,"area":"safety"},{"id":"2601.08089","title":"Q-realign: Piggybacking Realignment on Quantization for Safe and Efficient LLM Deployment","created":"2026-01-13","cited_by_count":5,"area":"safety"},{"id":"2411.01565","title":"SQL Injection Jailbreak: A Structural Disaster of Large Language Models","created":"2024-11-03","cited_by_count":4,"area":"safety"},{"id":"2503.24191","title":"When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output","created":"2025-03-31","cited_by_count":4,"area":"safety"},{"id":"2504.14985","title":"aiXamine: Simplified LLM Safety and Security","created":"2025-04-21","cited_by_count":4,"area":"safety"},{"id":"2506.12484","title":"Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization","created":"2025-06-14","cited_by_count":4,"area":"safety"},{"id":"2509.08000","title":"AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs","created":"2025-09-06","cited_by_count":4,"area":"safety"},{"id":"2509.14651","title":"MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2510.25117","title":"A Survey on Unlearning in Large Language Models","created":"2025-10-29","cited_by_count":4,"area":"safety"},{"id":"2511.00030","title":"Probing Knowledge Holes in Unlearned LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2605.07982","title":"GLiGuard: Schema-Conditioned Classification for LLM Safeguard","created":"2026-05-08","cited_by_count":4,"area":"safety"},{"id":"2408.09459","title":"WPN: An Unlearning Method Based on N-pair Contrastive Learning in Language Models","created":"2024-08-18","cited_by_count":3,"area":"safety"},{"id":"2410.02220","title":"Data to Defense: The Role of Curation in Customizing LLMs Against Jailbreaking Attacks","created":"2024-10-03","cited_by_count":3,"area":"safety"},{"id":"2504.19333","title":"Unified Multi-Task Learning & Model Fusion for Efficient Language Model Guardrailing","created":"2025-04-27","cited_by_count":3,"area":"safety"},{"id":"2511.12497","title":"SGuard-v1: Safety Guardrail for Large Language Models","created":"2025-11-16","cited_by_count":3,"area":"safety"}],"next_cursor":"100"}