{"total":16,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2402.06363","title":"StruQ: Defending Against Prompt Injection with Structured Queries","created":"2024-02-09","cited_by_count":375,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2402.16006","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","created":"2024-02-25","cited_by_count":32,"area":"safety"},{"id":"2407.02551","title":"Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responses","created":"2024-07-02","cited_by_count":18,"area":"safety"},{"id":"2408.11006","title":"Security Attacks on LLM-based Code Completion Tools","created":"2024-08-20","cited_by_count":16,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2503.21598","title":"Prompt, Divide, and Conquer: Bypassing Large Language Model Safety Filters via Segmented and Distributed Prompt Processing","created":"2025-03-27","cited_by_count":7,"area":"safety"},{"id":"2409.01247","title":"Conversational Complexity for Assessing Risk in Large Language Models","created":"2024-09-02","cited_by_count":6,"area":"safety"},{"id":"2607.22868","title":"What Can Be Enforced? A Theory of Certified Runtime Safety for Tool-Using Agents","created":"2026-07-24","cited_by_count":4,"area":"safety"},{"id":"2503.17578","title":"Large Language Models Can Verbatim Reproduce Long Malicious Sequences","created":"2025-03-21","cited_by_count":1,"area":"safety"}],"next_cursor":null}