{"total":34,"rows":[{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2309.14348","title":"Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM","created":"2023-09-18","cited_by_count":192,"area":"alignment"},{"id":"2403.17710","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","created":"2024-03-26","cited_by_count":143,"area":"alignment"},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111,"area":"alignment"},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2401.06561","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","created":"2024-01-12","cited_by_count":74,"area":"alignment"},{"id":"2402.16192","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","created":"2024-02-25","cited_by_count":74,"area":"alignment"},{"id":"2405.16229","title":"No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attacks","created":"2024-05-25","cited_by_count":29,"area":"alignment"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2406.08725","title":"RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs","created":"2024-06-13","cited_by_count":23,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2502.09723","title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language","created":"2025-02-13","cited_by_count":18,"area":"alignment"},{"id":"2405.13820","title":"Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching","created":"2024-05-22","cited_by_count":17,"area":"alignment"},{"id":"2505.18588","title":"Safety Alignment via Constrained Knowledge Unlearning","created":"2025-05-24","cited_by_count":14,"area":"alignment"},{"id":"2412.15289","title":"SATA: A Paradigm for LLM Jailbreak via Simple Assistive Task Linkage","created":"2024-12-19","cited_by_count":11,"area":"alignment"},{"id":"2505.17196","title":"Shape it Up! Restoring LLM Safety during Finetuning","created":"2025-05-22","cited_by_count":11,"area":"alignment"},{"id":"2502.15435","title":"Single-pass Detection of Jailbreaking Input in Large Language Models","created":"2025-02-21","cited_by_count":10,"area":"alignment"},{"id":"2406.18118","title":"SafeAligner: Safety Alignment against Jailbreak Attacks via Response Disparity Guidance","created":"2024-06-26","cited_by_count":9,"area":"alignment"},{"id":"2508.05775","title":"Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLM","created":"2025-08-07","cited_by_count":9,"area":"alignment"},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2506.00166","title":"Disentangled Safety Adapters Enable Efficient Guardrails and Flexible Inference-Time Alignment","created":"2025-05-30","cited_by_count":6,"area":"alignment"},{"id":"2404.16020","title":"Investigating Adversarial Trigger Transfer in Large Language Models","created":"2024-04-24","cited_by_count":5,"area":"alignment"},{"id":"2410.19933","title":"Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization","created":"2024-10-25","cited_by_count":5,"area":"alignment"},{"id":"2505.13862","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","created":"2025-05-20","cited_by_count":4,"area":"alignment"},{"id":"2510.18081","title":"Any-Depth Alignment: Unlocking Innate Safety Alignment of LLMs to Any-Depth","created":"2025-10-20","cited_by_count":3,"area":"alignment"},{"id":"2605.02971","title":"Multilingual Safety Alignment via Self-Distillation","created":"2026-05-03","cited_by_count":3,"area":"alignment"},{"id":"2508.09016","title":"A Survey on Training-free Alignment of Large Language Models","created":"2025-08-12","cited_by_count":2,"area":"alignment"},{"id":"2508.10031","title":"Context Misleads LLMs: The Role of Context Filtering in Maintaining Safe Alignment of LLMs","created":"2025-08-09","cited_by_count":1,"area":"alignment"},{"id":"2509.22732","title":"Bidirectional Intention Inference Enhances LLMs' Defense Against Multi-Turn Jailbreak Attacks","created":"2025-09-25","cited_by_count":1,"area":"alignment"},{"id":"2511.00509","title":"Reimagining Safety Alignment with An Image","created":"2025-11-01","cited_by_count":1,"area":"alignment"},{"id":"2605.01899","title":"Disentangling Intent from Role: Adversarial Self-Play for Persona-Invariant Safety Alignment","created":"2026-05-03","cited_by_count":1,"area":"alignment"},{"id":"2510.20129","title":"SAID: Safety-Aware Intent Defense via Prefix Probing for Large Language Models","created":"2025-10-23","cited_by_count":0,"area":"alignment"},{"id":"2602.04294","title":"How Few-shot Demonstrations Affect Prompt-based Defenses Against LLM Jailbreak Attacks","created":"2026-02-04","cited_by_count":0,"area":"alignment"}],"next_cursor":null}