{"total":62,"rows":[{"id":"2310.04451","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","created":"2023-10-03","cited_by_count":785,"area":"alignment"},{"id":"2406.05946","title":"Safety Alignment Should Be Made More Than Just a Few Tokens Deep","created":"2024-06-10","cited_by_count":472,"area":"alignment"},{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2406.14598","title":"SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal","created":"2024-06-20","cited_by_count":240,"area":"alignment"},{"id":"2402.05162","title":"Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications","created":"2024-02-07","cited_by_count":231,"area":"alignment"},{"id":"2309.14348","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","created":"2023-09-18","cited_by_count":192,"area":"alignment"},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111,"area":"alignment"},{"id":"2401.06561","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","created":"2024-01-12","cited_by_count":74,"area":"alignment"},{"id":"2503.20823","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","created":"2025-03-26","cited_by_count":44,"area":"alignment"},{"id":"2506.07468","title":"Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models","created":"2025-06-09","cited_by_count":39,"area":"alignment"},{"id":"2504.09466","title":"AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defender","created":"2025-04-13","cited_by_count":38,"area":"alignment"},{"id":"2505.17147","title":"MTSA: Multi-turn Safety Alignment for LLMs through Multi-round Red-teaming","created":"2025-05-22","cited_by_count":32,"area":"alignment"},{"id":"2405.20653","title":"Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundaries","created":"2024-05-31","cited_by_count":28,"area":"alignment"},{"id":"2410.15362","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","created":"2024-10-20","cited_by_count":25,"area":"alignment"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2406.08725","title":"RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs","created":"2024-06-13","cited_by_count":23,"area":"alignment"},{"id":"2407.07342","title":"Multilingual Blending: LLM Safety Alignment Evaluation with Language Mixture","created":"2024-07-10","cited_by_count":22,"area":"alignment"},{"id":"2506.09996","title":"From Judgment to Interference: Early Stopping LLM Harmful Outputs via Streaming Content Monitoring","created":"2025-06-11","cited_by_count":22,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2502.09723","title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language","created":"2025-02-13","cited_by_count":18,"area":"alignment"},{"id":"2505.13527","title":"Logic Jailbreak: Efficiently Unlocking LLM Safety Restrictions Through Formal Logical Expression","created":"2025-05-18","cited_by_count":16,"area":"alignment"},{"id":"2505.20259","title":"Lifelong Safety Alignment for Language Models","created":"2025-05-26","cited_by_count":15,"area":"alignment"},{"id":"2407.16637","title":"Course-Correction: Safety Alignment Using Synthetic Preferences","created":"2024-07-23","cited_by_count":13,"area":"alignment"},{"id":"2411.12762","title":"Playing Language Game with LLMs Leads to Jailbreaking","created":"2024-11-16","cited_by_count":11,"area":"alignment"},{"id":"2412.15623","title":"JailPO: A Novel Black-box Jailbreak Framework via Preference Optimization against Aligned LLMs","created":"2024-12-20","cited_by_count":11,"area":"alignment"},{"id":"2501.16727","title":"xJailbreak: Representation Space Guided Reinforcement Learning for Interpretable LLM Jailbreaking","created":"2025-01-28","cited_by_count":11,"area":"alignment"},{"id":"2408.14866","title":"Advancing Adversarial Suffix Transfer Learning on Aligned Large Language Models","created":"2024-08-27","cited_by_count":10,"area":"alignment"},{"id":"2502.15435","title":"Single-pass Detection of Jailbreaking Input in Large Language Models","created":"2025-02-21","cited_by_count":10,"area":"alignment"},{"id":"2406.18118","title":"SafeAligner: Safety Alignment against Jailbreak Attacks via Response Disparity Guidance","created":"2024-06-26","cited_by_count":9,"area":"alignment"},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2407.15399","title":"Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Models","created":"2024-07-22","cited_by_count":7,"area":"alignment"},{"id":"2505.24369","title":"Adversarial Preference Learning for Robust LLM Alignment","created":"2025-05-30","cited_by_count":7,"area":"alignment"},{"id":"2504.21053","title":"NeuRel-Attack: Neuron Relearning for Safety Disalignment in Large Language Models","created":"2025-04-29","cited_by_count":6,"area":"alignment"},{"id":"2404.16020","title":"Investigating Adversarial Trigger Transfer in Large Language Models","created":"2024-04-24","cited_by_count":5,"area":"alignment"},{"id":"2402.01706","title":"MULTIVERSE: Exposing Large Language Model Alignment Problems in Diverse Worlds","created":"2024-01-25","cited_by_count":4,"area":"alignment"},{"id":"2504.09895","title":"Learning from Reference Answers: Versatile Language Model Alignment without Binary Human Preference Data","created":"2025-04-14","cited_by_count":4,"area":"alignment"},{"id":"2505.13862","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","created":"2025-05-20","cited_by_count":4,"area":"alignment"},{"id":"2510.21190","title":"The Trojan Example: Jailbreaking LLMs through Template Filling and Unsafety Reasoning","created":"2025-10-24","cited_by_count":3,"area":"alignment"},{"id":"2506.02479","title":"BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage","created":"2025-06-03","cited_by_count":2,"area":"alignment"},{"id":"2507.08898","title":"SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems","created":"2025-07-11","cited_by_count":2,"area":"alignment"},{"id":"2603.05773","title":"Knowing without Acting: The Disentangled Geometry of Safety Mechanisms in Large Language Models","created":"2026-03-06","cited_by_count":2,"area":"alignment"},{"id":"2603.08104","title":"Invisible Safety Threat: Malicious Finetuning for LLM via Steganography","created":"2026-03-09","cited_by_count":2,"area":"alignment"},{"id":"2604.16916","title":"When Choices Become Risks: Safety Failures of Large Language Models under Multiple-Choice Constraints","created":"2026-04-18","cited_by_count":2,"area":"alignment"},{"id":"2604.19461","title":"Involuntary In-Context Learning: Exploiting Few-Shot Pattern Completion to Bypass Safety Alignment in GPT-5.4","created":"2026-04-21","cited_by_count":2,"area":"alignment"},{"id":"2605.26158","title":"Furina: Fragmented Uncertainty-Driven Refusal Instability Attack","created":"2026-05-24","cited_by_count":2,"area":"alignment"},{"id":"2509.22732","title":"Bidirectional Intention Inference Enhances LLMs' Defense Against Multi-Turn Jailbreak Attacks","created":"2025-09-25","cited_by_count":1,"area":"alignment"},{"id":"2511.02356","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","created":"2025-11-04","cited_by_count":1,"area":"alignment"},{"id":"2512.13837","title":"Explainable reinforcement learning from human feedback to improve alignment","created":"2025-12-15","cited_by_count":1,"area":"alignment"},{"id":"2410.13334","title":"BiasJailbreak:Analyzing Ethical Biases and Jailbreak Vulnerabilities in Large Language Models","created":"2024-10-17","cited_by_count":0,"area":"alignment"},{"id":"2509.06338","title":"Embedding Poisoning: Bypassing Safety Alignment via Embedding Semantic Shift","created":"2025-09-08","cited_by_count":0,"area":"alignment"},{"id":"2605.00974","title":"SRTJ: Self-Evolving Rule-Driven Training-Free LLM Jailbreaking","created":"2026-05-01","cited_by_count":0,"area":"alignment"},{"id":"2605.21362","title":"LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2605.28030","title":"SPARD: Defending Harmful Fine-Tuning Attack via Safety Projection with Relevance-Diversity Data Selection","created":"2026-05-27","cited_by_count":0,"area":"alignment"},{"id":"2606.06037","title":"SpeechJBB: Probing Safety Alignment and Comprehension in Large Audio Language Models under Code-Switched Speech","created":"2026-06-04","cited_by_count":0,"area":"alignment"},{"id":"2608.20554","title":"aiXamine: Unified Black-Box Evaluation of Cross-Dimensional Trade-offs in LLM Safety, Security, and Privacy","created":"2026-08-20","cited_by_count":0,"area":"alignment"},{"id":"2609.02215","title":"ASCII Attack: Recontextualising Harmful Requests as Artistic Critique in Large Language Models","created":"2026-09-02","cited_by_count":0,"area":"alignment"},{"id":"2609.03693","title":"AlcaTRAz - Anchored Tree-Rule Defense Against Jailbreaks","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.04022","title":"Representational alignment yields generalizable safety in language models","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.36956","title":"Controlled Decoding Attacks on Black-Box LLMs","created":"2026-09-29","cited_by_count":0,"area":"alignment"},{"id":"2609.39902","title":"CodeMimicry: Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion","created":"2026-09-30","cited_by_count":0,"area":"alignment"},{"id":"2610.11005","title":"How Narrative Wrapping Affects LLM Refusal: A Cross-Language Benchmark and Defense","created":"2026-10-07","cited_by_count":0,"area":"alignment"}],"next_cursor":null}