{"total":87,"rows":[{"id":"2310.08419","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","created":"2023-10-12","cited_by_count":1420,"area":"safety"},{"id":"2402.10260","title":"A StrongREJECT for Empty Jailbreaks","created":"2024-02-15","cited_by_count":385,"area":"safety"},{"id":"2402.18104","title":"Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction","created":"2024-02-28","cited_by_count":107,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2405.18166","title":"Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editing","created":"2024-05-28","cited_by_count":79,"area":"safety"},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2311.09127","title":"Jailbreaking GPT-4V via Self-Adversarial Attacks with System Prompts","created":"2023-11-15","cited_by_count":65,"area":"safety"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56,"area":"safety"},{"id":"2403.13682","title":"Threats, Attacks, and Defenses in Machine Unlearning: A Survey","created":"2024-03-20","cited_by_count":39,"area":"safety"},{"id":"2310.10077","title":"Prompt Packer: Deceiving LLMs through Compositional Instruction with Hidden Attacks","created":"2023-10-16","cited_by_count":35,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2410.09040","title":"AttnGCG: Enhancing Jailbreaking Attacks on LLMs with Attention Manipulation","created":"2024-10-11","cited_by_count":33,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2406.05948","title":"Chain-of-Scrutiny: Detecting Backdoor Attacks for Large Language Models","created":"2024-06-10","cited_by_count":28,"area":"safety"},{"id":"2409.14866","title":"PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs","created":"2024-09-23","cited_by_count":21,"area":"safety"},{"id":"2506.07596","title":"TwinBreak: Jailbreaking LLM Security Alignments based on Twin Prompts","created":"2025-06-09","cited_by_count":19,"area":"safety"},{"id":"2409.14729","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","created":"2024-09-23","cited_by_count":17,"area":"safety"},{"id":"2408.11006","title":"Security Attacks on LLM-based Code Completion Tools","created":"2024-08-20","cited_by_count":16,"area":"safety"},{"id":"2409.11445","title":"Jailbreaking Large Language Models with Symbolic Mathematics","created":"2024-09-17","cited_by_count":16,"area":"safety"},{"id":"2505.17568","title":"JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models","created":"2025-05-23","cited_by_count":16,"area":"safety"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2503.08195","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","created":"2025-03-11","cited_by_count":14,"area":"safety"},{"id":"2410.11272","title":"Cognitive Overload Attack:Prompt Injection for Long Context","created":"2024-10-15","cited_by_count":13,"area":"safety"},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2502.16903","title":"GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods","created":"2025-02-24","cited_by_count":12,"area":"safety"},{"id":"2409.14177","title":"PathSeeker: Exploring LLM Security Vulnerabilities with a Reinforcement Learning-Based Jailbreak Approach","created":"2024-09-21","cited_by_count":11,"area":"safety"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2411.04223","title":"Diversity Helps Jailbreak Large Language Models","created":"2024-11-06","cited_by_count":10,"area":"safety"},{"id":"2504.21038","title":"Prefill-level Jailbreak: A Black-Box Risk Analysis of Large Language Models","created":"2025-04-28","cited_by_count":10,"area":"safety"},{"id":"2412.12621","title":"Jailbreaking? One Step Is Enough!","created":"2024-12-17","cited_by_count":9,"area":"safety"},{"id":"2506.10022","title":"LLMs Caught in the Crossfire: Malware Requests and Jailbreak Challenges","created":"2025-06-09","cited_by_count":9,"area":"safety"},{"id":"2408.15207","title":"Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attacks","created":"2024-08-27","cited_by_count":8,"area":"safety"},{"id":"2409.07503","title":"AdaPPA: Adaptive Position Pre-Fill Jailbreak Attack Approach Targeting LLMs","created":"2024-09-11","cited_by_count":8,"area":"safety"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2404.08793","title":"JailbreakLens: Visual Analysis of Jailbreak Attacks Against Large Language Models","created":"2024-04-12","cited_by_count":7,"area":"safety"},{"id":"2505.17160","title":"Harry Potter is Still Here! Probing Knowledge Leakage in Targeted Unlearned Large Language Models via Automated Adversarial Prompting","created":"2025-05-22","cited_by_count":7,"area":"safety"},{"id":"2507.21820","title":"Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is","created":"2025-07-29","cited_by_count":7,"area":"safety"},{"id":"2409.01247","title":"Conversational Complexity for Assessing Risk in Large Language Models","created":"2024-09-02","cited_by_count":6,"area":"safety"},{"id":"2504.00446","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","created":"2025-04-01","cited_by_count":6,"area":"safety"},{"id":"2407.01461","title":"Enhancing the Capability and Robustness of Large Language Models through Reinforcement Learning-Driven Query Refinement","created":"2024-07-01","cited_by_count":5,"area":"safety"},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2510.22085","title":"Jailbreak Mimicry: Automated Discovery of Narrative-Based Jailbreaks for Large Language Models","created":"2025-10-24","cited_by_count":5,"area":"safety"},{"id":"2503.24191","title":"When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output","created":"2025-03-31","cited_by_count":4,"area":"safety"},{"id":"2508.15182","title":"SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks","created":"2025-08-21","cited_by_count":4,"area":"safety"},{"id":"2408.08464","title":"$\\textit{MMJ-Bench}$: A Comprehensive Study on Jailbreak Attacks and Defenses for Multimodal Large Language Models","created":"2024-08-16","cited_by_count":3,"area":"safety"},{"id":"2604.14604","title":"Hijacking Large Audio-Language Models via Context-Agnostic and Imperceptible Auditory Prompt Injection","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2604.21159","title":"Adaptive Instruction Composition for Automated LLM Red-Teaming","created":"2026-04-22","cited_by_count":3,"area":"safety"},{"id":"2605.29237","title":"Evolving Skill-Structured Attack Memory Enhances LLM Jailbreaking","created":"2026-05-28","cited_by_count":3,"area":"safety"},{"id":"2406.12702","title":"[WIP] Jailbreak Paradox: The Achilles' Heel of LLMs","created":"2024-06-18","cited_by_count":2,"area":"safety"},{"id":"2407.13796","title":"Continuous Embedding Attacks via Clipped Inputs in Jailbreaking Large Language Models","created":"2024-07-16","cited_by_count":2,"area":"safety"},{"id":"2505.01315","title":"Helping Large Language Models Protect Themselves: An Enhanced Filtering and Summarization System","created":"2025-05-02","cited_by_count":2,"area":"safety"},{"id":"2506.05376","title":"A Red Teaming Roadmap Towards System-Level Safety","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2508.02997","title":"CoCoTen: Detecting Adversarial Inputs to Large Language Models through Latent Space Features of Contextual Co-occurrence Tensors","created":"2025-08-05","cited_by_count":2,"area":"safety"},{"id":"2508.16484","title":"HAMSA: Hijacking Aligned Compact Models via Stealthy Automation","created":"2025-08-22","cited_by_count":2,"area":"safety"},{"id":"2510.10271","title":"MetaBreak: Jailbreaking Online LLM Services via Special Token Manipulation","created":"2025-10-11","cited_by_count":2,"area":"safety"},{"id":"2512.23173","title":"EquaCode: A Multi-Strategy Jailbreak Approach for Large Language Models via Equation Solving and Code Completion","created":"2025-12-29","cited_by_count":2,"area":"safety"},{"id":"2410.24049","title":"Desert Camels and Oil Sheikhs: Arab-Centric Red Teaming of Frontier LLMs","created":"2024-10-31","cited_by_count":1,"area":"safety"},{"id":"2501.17715","title":"RICoTA: Red-teaming of In-the-wild Conversation with Test Attempts","created":"2025-01-29","cited_by_count":1,"area":"safety"},{"id":"2503.01395","title":"Jailbreaking Generative AI: Empowering Novices to Conduct Phishing Attacks","created":"2025-03-03","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2508.19554","title":"MobText-SISA: Efficient Machine Unlearning for Mobility Logs with Spatio-Temporal and Natural-Language Data","created":"2025-08-27","cited_by_count":1,"area":"safety"},{"id":"2509.08729","title":"X-Teaming Evolutionary M2S: Automated Discovery of Multi-turn to Single-turn Jailbreak Templates","created":"2025-09-10","cited_by_count":1,"area":"safety"},{"id":"2510.01644","title":"Machine Learning for Detection and Analysis of Novel LLM Jailbreaks","created":"2025-10-02","cited_by_count":1,"area":"safety"},{"id":"2512.21110","title":"Beyond Context: Large Language Models' Failure to Grasp Users' Intent","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2603.13847","title":"Sirens' Whisper: Inaudible Near-Ultrasonic Jailbreaks of Speech-Driven LLMs","created":"2026-03-14","cited_by_count":1,"area":"safety"},{"id":"2604.25921","title":"One Word at a Time: Incremental Completion Decomposition Breaks LLM Safety","created":"2026-04-01","cited_by_count":1,"area":"safety"},{"id":"2605.02921","title":"EvoJail: Evolutionary Diverse Jailbreak Prompt Generation for Large Language Models","created":"2026-04-22","cited_by_count":1,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2505.07167","title":"Decoding One Safety Trigger Token for Balancing Safety and Usability in Large Language Models","created":"2025-05-12","cited_by_count":0,"area":"safety"},{"id":"2505.17066","title":"Improving LLM Outputs Against Jailbreak Attacks with Expert Model Integration","created":"2025-05-18","cited_by_count":0,"area":"safety"},{"id":"2505.23404","title":"AJF: Adaptive Jailbreak Framework Based on the Comprehension Ability of Black-Box Large Language Models","created":"2025-05-29","cited_by_count":0,"area":"safety"},{"id":"2508.00602","title":"LeakSealer: A Semisupervised Defense for LLMs Against Prompt Injection and Leakage Attacks","created":"2025-08-01","cited_by_count":0,"area":"safety"},{"id":"2509.12724","title":"Defense-to-Attack: Bypassing Weak Defenses Enables Stronger Jailbreaks in Vision-Language Models","created":"2025-09-16","cited_by_count":0,"area":"safety"},{"id":"2512.04841","title":"SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2512.08185","title":"A Practical Framework for Evaluating Medical AI Security: Reproducible Assessment of Jailbreaking and Privacy Vulnerabilities Across Clinical Specialties","created":"2025-12-09","cited_by_count":0,"area":"safety"},{"id":"2601.19487","title":"LLM-VA: Resolving the Jailbreak-Overrefusal Trade-off via Vector Alignment","created":"2026-01-27","cited_by_count":0,"area":"safety"},{"id":"2602.05484","title":"Clouding the Mirror: Stealthy Prompt Injection Attacks Targeting LLM-based Phishing Detection","created":"2026-02-05","cited_by_count":0,"area":"safety"},{"id":"2604.07835","title":"Silencing the Guardrails: Inference-Time Jailbreaking via Dynamic Contextual Representation Ablation","created":"2026-04-09","cited_by_count":0,"area":"safety"},{"id":"2605.21674","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","created":"2026-05-20","cited_by_count":0,"area":"safety"},{"id":"2608.29564","title":"TACS: Trajectory-Aware Candidate Selection for LLM Jailbreak Suffix Optimization","created":"2026-08-30","cited_by_count":0,"area":"safety"},{"id":"2609.10594","title":"An Empirical Measurement of Jailbreaking Evaluators","created":"2026-09-07","cited_by_count":0,"area":"safety"},{"id":"2610.03857","title":"Beware EviLLM: Enabling Vulnerability Injection via Large Language Models","created":"2026-10-02","cited_by_count":0,"area":"safety"},{"id":"2610.16305","title":"ATTCK-R: Knowledge-Aware Long-Horizon Jailbreaking for Protected LLMs","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}