{"total":83,"rows":[{"id":"2309.00614","title":"Baseline Defenses for Adversarial Attacks Against Aligned Language Models","created":"2023-09-01","cited_by_count":651,"area":"alignment"},{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2310.10012","title":"Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?","created":"2023-10-16","cited_by_count":250,"area":"diffusion"},{"id":"2406.01297","title":"When Can LLMs Actually Correct Their Own Mistakes? A Critical Survey of Self-Correction of LLMs","created":"2024-06-03","cited_by_count":240,"area":null},{"id":"2309.13788","title":"Can LLM-Generated Misinformation Be Detected?","created":"2023-09-25","cited_by_count":177,"area":null},{"id":"2311.07689","title":"MART: Improving LLM Safety with Multi-round Automatic Red-Teaming","created":"2023-11-13","cited_by_count":163,"area":"safety"},{"id":"2410.12761","title":"SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation","created":"2024-10-16","cited_by_count":133,"area":"diffusion"},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2402.13950","title":"Making Reasoning Matter: Measuring and Improving Faithfulness of Chain-of-Thought Reasoning","created":"2024-02-21","cited_by_count":110,"area":"lr"},{"id":"2402.19464","title":"Curiosity-driven Red-teaming for Large Language Models","created":"2024-02-29","cited_by_count":88,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2403.07865","title":"CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completion","created":"2024-03-12","cited_by_count":76,"area":"safety"},{"id":"2405.03486","title":"UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Images","created":"2024-05-06","cited_by_count":53,"area":null},{"id":"2402.12563","title":"Confidence Matters: Revisiting Intrinsic Self-Correction Capabilities of Large Language Models","created":"2024-02-19","cited_by_count":47,"area":null},{"id":"2310.02224","title":"Can Language Models be Instructed to Protect Personal Information?","created":"2023-10-03","cited_by_count":46,"area":"mllm"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2506.12103","title":"The Amazon Nova Family of Models: Technical Report and Model Card","created":"2025-03-17","cited_by_count":41,"area":null},{"id":"2405.19360","title":"ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users","created":"2024-05-24","cited_by_count":35,"area":"safety"},{"id":"2407.15861","title":"Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey","created":"2024-07-10","cited_by_count":35,"area":"diffusion"},{"id":"2412.19792","title":"InfAlign: Inference-aware language model alignment","created":"2024-12-27","cited_by_count":35,"area":"alignment"},{"id":"2401.16656","title":"Gradient-Based Language Model Red Teaming","created":"2024-01-30","cited_by_count":34,"area":"safety"},{"id":"2402.05947","title":"Separable Multi-Concept Erasure from Diffusion Models","created":"2024-02-03","cited_by_count":28,"area":"diffusion"},{"id":"2412.18693","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","created":"2024-12-24","cited_by_count":25,"area":"safety"},{"id":"2503.01781","title":"Cats Confuse Reasoning LLM: Query Agnostic Adversarial Triggers for Reasoning Models","created":"2025-03-03","cited_by_count":23,"area":"lr"},{"id":"2502.09723","title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language","created":"2025-02-13","cited_by_count":18,"area":"alignment"},{"id":"2403.16527","title":"Hallucination Detection in Foundation Models for Decision-Making: A Flexible Definition and Review of the State of the Art","created":"2024-03-25","cited_by_count":17,"area":null},{"id":"2405.14488","title":"MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability","created":"2024-05-23","cited_by_count":15,"area":null},{"id":"2503.17987","title":"Reason2Attack: Jailbreaking Text-to-Image Models via LLM Reasoning","created":"2025-03-23","cited_by_count":15,"area":"lr"},{"id":"2407.03876","title":"Automated Progressive Red Teaming","created":"2024-07-04","cited_by_count":13,"area":"safety"},{"id":"2407.11282","title":"Uncertainty is Fragile: Manipulating Uncertainty in Large Language Models","created":"2024-07-15","cited_by_count":13,"area":"safety"},{"id":"2410.05269","title":"Data Advisor: Dynamic Data Curation for Safety Alignment of Large Language Models","created":"2024-10-07","cited_by_count":13,"area":"alignment"},{"id":"2504.03174","title":"Multi-lingual Multi-turn Automated Red Teaming for LLMs","created":"2025-04-04","cited_by_count":13,"area":"safety"},{"id":"2505.17646","title":"Unveiling the Basin-Like Loss Landscape in Large Language Models","created":"2025-05-23","cited_by_count":13,"area":null},{"id":"2406.11654","title":"Ruby Teaming: Improving Quality Diversity Search with Memory for Automated Red Teaming","created":"2024-06-17","cited_by_count":10,"area":"safety"},{"id":"2402.13926","title":"Large Language Models are Vulnerable to Bait-and-Switch Attacks for Generating Harmful Content","created":"2024-02-21","cited_by_count":9,"area":"safety"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2405.03654","title":"Can LLMs Deeply Detect Complex Malicious Queries? A Framework for Jailbreaking via Obfuscating Intent","created":"2024-05-06","cited_by_count":8,"area":"safety"},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2410.15641","title":"SMILES-Prompting: A Novel Approach to LLM Jailbreak Attacks in Chemical Synthesis","created":"2024-10-21","cited_by_count":7,"area":"safety"},{"id":"2501.00054","title":"AdvAnchor: Enhancing Diffusion Model Unlearning with Adversarial Anchors","created":"2024-12-28","cited_by_count":7,"area":"diffusion"},{"id":"2505.24369","title":"Adversarial Preference Learning for Robust LLM Alignment","created":"2025-05-30","cited_by_count":7,"area":"alignment"},{"id":"2506.11083","title":"RedDebate: Safer Responses Through Multi-Agent Red Teaming Debates","created":"2025-06-04","cited_by_count":7,"area":"agents"},{"id":"2405.12604","title":"Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teaming","created":"2024-05-21","cited_by_count":6,"area":"safety"},{"id":"2503.10192","title":"Red Teaming Contemporary AI Models: Insights from Spanish and Basque Perspectives","created":"2025-03-13","cited_by_count":6,"area":"safety"},{"id":"2601.18292","title":"TriPlay-RL: Tri-Role Self-Play Reinforcement Learning for LLM Safety Alignment","created":"2026-01-26","cited_by_count":6,"area":"alignment"},{"id":"2311.09473","title":"JAB: Joint Adversarial Prompting and Belief Augmentation","created":"2023-11-16","cited_by_count":5,"area":"safety"},{"id":"2412.21052","title":"Towards Effective Discrimination Testing for Generative AI","created":"2024-12-30","cited_by_count":5,"area":null},{"id":"2501.08246","title":"Text-Diffusion Red-Teaming of Large Language Models: Unveiling Harmful Behaviors with Proximity Constraints","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2507.16329","title":"DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling","created":"2025-07-22","cited_by_count":5,"area":"alignment"},{"id":"2508.05658","title":"Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards","created":"2025-07-30","cited_by_count":5,"area":"safety"},{"id":"2510.07239","title":"Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts","created":"2025-10-08","cited_by_count":5,"area":"safety"},{"id":"2510.15975","title":"Generative AI for Biosciences: Emerging Threats and Roadmap to Biosecurity","created":"2025-10-13","cited_by_count":5,"area":"safety"},{"id":"2512.23546","title":"PurifyGen: A Risk-Discrimination and Semantic-Purification Model for Safe Text-to-Image Generation","created":"2025-12-29","cited_by_count":5,"area":"diffusion"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2504.01931","title":"On the Role of Feedback in Test-Time Scaling of Agentic AI Workflows","created":"2025-04-02","cited_by_count":4,"area":"lr"},{"id":"2506.10047","title":"GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models","created":"2025-06-11","cited_by_count":4,"area":"diffusion"},{"id":"2311.08487","title":"Alignment is not sufficient to prevent large language models from generating harmful information: A psychoanalytic perspective","created":"2023-11-14","cited_by_count":3,"area":"alignment"},{"id":"2406.17104","title":"Automated Adversarial Discovery for Safety Classifiers","created":"2024-06-24","cited_by_count":3,"area":null},{"id":"2510.17947","title":"PLAGUE: Plug-and-play framework for Lifelong Adaptive Generation of Multi-turn Exploits","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2511.21145","title":"TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models","created":"2025-11-26","cited_by_count":3,"area":"safety"},{"id":"2606.06533","title":"Position: Don't Just \"Fix it in Post\": A Science of AI Must Study Training Dynamics","created":"2026-06-03","cited_by_count":3,"area":null},{"id":"2509.12521","title":"Phi: Preference Hijacking in Multi-modal Large Language Models at Inference Time","created":"2025-09-15","cited_by_count":2,"area":"mllm"},{"id":"2509.21360","title":"Multimodal Prompt Decoupling Attack on the Safety Filters in Text-to-Image Models","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2512.23132","title":"Multi-Agent Framework for Threat Mitigation and Resilience in AI-Based Systems","created":"2025-12-29","cited_by_count":2,"area":"agents"},{"id":"2411.16769","title":"Red-Teaming Text-to-Image Models via In-Context Experience Replay and Semantic-Preserving Prompt Rewriting","created":"2024-11-25","cited_by_count":1,"area":"safety"},{"id":"2502.16109","title":"Be a Multitude to Itself: A Prompt Evolution Framework for Red Teaming","created":"2025-02-22","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2509.06807","title":"MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security","created":"2025-09-08","cited_by_count":1,"area":null},{"id":"2511.00554","title":"Red-teaming Activation Probes using Prompted LLMs","created":"2025-11-01","cited_by_count":1,"area":"safety"},{"id":"2602.14844","title":"Interactionless Inverse Reinforcement Learning: A Data-Centric Framework for Durable Alignment","created":"2026-02-16","cited_by_count":1,"area":"offlinerl"},{"id":"2603.10010","title":"FERRET: Framework for Expansion Reliant Red Teaming","created":"2026-02-17","cited_by_count":1,"area":"safety"},{"id":"2606.26566","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","created":"2026-06-25","cited_by_count":1,"area":"mllm"},{"id":"2403.00292","title":"Enhancing Jailbreak Attacks with Diversity Guidance","created":"2024-03-01","cited_by_count":0,"area":"safety"},{"id":"2403.08017","title":"Red Teaming Models for Hyperspectral Image Analysis Using Explainable AI","created":"2024-03-12","cited_by_count":0,"area":null},{"id":"2409.10515","title":"An Efficient Self-Learning Framework For Interactive Spoken Dialog Systems","created":"2024-09-16","cited_by_count":0,"area":null},{"id":"2503.12339","title":"A Closer Look at Adversarial Suffix Learning for Jailbreaking LLMs: Augmented Adversarial Trigger Learning","created":"2025-03-16","cited_by_count":0,"area":"safety"},{"id":"2512.10766","title":"Metaphor-based Jailbreak Attacks on Text-to-Image Models","created":"2025-12-06","cited_by_count":0,"area":"safety"},{"id":"2604.18789","title":"ARES: Adaptive Red-Teaming and End-to-End Repair of Policy-Reward System","created":"2026-04-20","cited_by_count":0,"area":"alignment"},{"id":"2607.17779","title":"Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models","created":"2026-07-20","cited_by_count":0,"area":"safety"},{"id":"2609.34920","title":"RISE: Red-teaming via Iterative Strategy Evolution for Modern Text-to-Image Models","created":"2026-09-28","cited_by_count":0,"area":"safety"},{"id":"2610.16305","title":"ATTCK-R: Knowledge-Aware Long-Horizon Jailbreaking for Protected LLMs","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}