{"total":223,"rows":[{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2309.11998","title":"LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Dataset","created":"2023-09-21","cited_by_count":461,"area":null},{"id":"2310.02949","title":"Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models","created":"2023-10-04","cited_by_count":297,"area":"alignment"},{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2310.06474","title":"Multilingual Jailbreak Challenges in Large Language Models","created":"2023-10-10","cited_by_count":240,"area":"safety"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2402.05044","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","created":"2024-02-07","cited_by_count":228,"area":null},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2404.05993","title":"AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Experts","created":"2024-04-09","cited_by_count":136,"area":null},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2505.23836","title":"Large Language Models Often Know When They Are Being Evaluated","created":"2025-05-28","cited_by_count":128,"area":null},{"id":"2402.11746","title":"Language Models are Homer Simpson! Safety Re-Alignment of Fine-tuned Language Models through Task Arithmetic","created":"2024-02-19","cited_by_count":112,"area":"alignment"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2402.02416","title":"Aligner: Efficient Alignment by Learning to Correct","created":"2024-02-04","cited_by_count":98,"area":"alignment"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2402.18667","title":"FOFO: A Benchmark to Evaluate LLMs' Format-Following Capability","created":"2024-02-28","cited_by_count":80,"area":null},{"id":"2404.05399","title":"SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety","created":"2024-04-08","cited_by_count":77,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2504.01903","title":"STAR-1: Safer Alignment of Reasoning LLMs with 1K Data","created":"2025-04-02","cited_by_count":68,"area":"lr"},{"id":"2401.00287","title":"The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensiveness","created":"2023-12-30","cited_by_count":67,"area":null},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2404.12038","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","created":"2024-04-18","cited_by_count":67,"area":"alignment"},{"id":"2407.05965","title":"T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Models","created":"2024-07-08","cited_by_count":66,"area":null},{"id":"2401.12915","title":"Red Teaming Visual Language Models","created":"2024-01-23","cited_by_count":65,"area":"mllm"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2406.05954","title":"Aligning Large Language Models with Representation Editing: A Control Perspective","created":"2024-06-10","cited_by_count":64,"area":"alignment"},{"id":"2404.12241","title":"Introducing v0.5 of the AI Safety Benchmark from MLCommons","created":"2024-04-18","cited_by_count":62,"area":null},{"id":"2410.21965","title":"SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Types","created":"2024-10-29","cited_by_count":60,"area":"safety"},{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56,"area":"safety"},{"id":"2406.07057","title":"MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models","created":"2024-06-11","cited_by_count":53,"area":"mllm"},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2402.04247","title":"Risks of AI Scientists: Prioritizing Safeguarding Over Autonomy","created":"2024-02-06","cited_by_count":49,"area":null},{"id":"2404.15676","title":"Beyond Chain-of-Thought: A Survey of Chain-of-X Paradigms for LLMs","created":"2024-04-24","cited_by_count":48,"area":"lr"},{"id":"2405.14125","title":"ALI-Agent: Assessing LLMs' Alignment with Human Values via Agent-based Evaluation","created":"2024-05-23","cited_by_count":47,"area":"agents"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2402.05699","title":"Self-Alignment of Large Language Models via Monopolylogue-based Social Scene Simulation","created":"2024-02-08","cited_by_count":46,"area":"alignment"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2403.03744","title":"MedSafetyBench: Evaluating and Improving the Medical Safety of Large Language Models","created":"2024-03-06","cited_by_count":44,"area":null},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2405.09055","title":"A safety realignment framework via subspace-oriented model fusion for large language models","created":"2024-05-15","cited_by_count":41,"area":"safety"},{"id":"2312.00027","title":"Stealthy and Persistent Unalignment on Large Language Models via Backdoor Injections","created":"2023-11-15","cited_by_count":39,"area":"safety"},{"id":"2403.12503","title":"Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices","created":"2024-03-19","cited_by_count":37,"area":null},{"id":"2402.09177","title":"Leveraging the Context through Multi-Round Interactions for Jailbreaking Attacks","created":"2024-02-14","cited_by_count":36,"area":"safety"},{"id":"2403.17830","title":"Assessment of Multimodal Large Language Models in Alignment with Human Values","created":"2024-03-26","cited_by_count":36,"area":"mllm"},{"id":"2310.10077","title":"Prompt Packer: Deceiving LLMs through Compositional Instruction with Hidden Attacks","created":"2023-10-16","cited_by_count":35,"area":"safety"},{"id":"2311.04072","title":"Beyond Imitation: Leveraging Fine-grained Quality Signals for Alignment","created":"2023-11-07","cited_by_count":35,"area":"alignment"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2311.09447","title":"How Trustworthy are Open-Source LLMs? An Assessment under Malicious Demonstrations Shows their Vulnerabilities","created":"2023-11-15","cited_by_count":33,"area":null},{"id":"2405.14191","title":"S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Models","created":"2024-05-23","cited_by_count":33,"area":null},{"id":"2402.11889","title":"ROSE Doesn't Do That: Boosting the Safety of Instruction-Tuned Large Language Models with Reverse Prompt Contrastive Decoding","created":"2024-02-19","cited_by_count":32,"area":null},{"id":"2406.11801","title":"Safety Arithmetic: A Framework for Test-time Safety Alignment of Language Models by Steering Parameters and Activations","created":"2024-06-17","cited_by_count":32,"area":"alignment"},{"id":"2505.17147","title":"MTSA: Multi-turn Safety Alignment for LLMs through Multi-round Red-teaming","created":"2025-05-22","cited_by_count":32,"area":"alignment"},{"id":"2508.17281","title":"From Language to Action: A Review of Large Language Models as Autonomous Agents and Tool Users","created":"2025-08-24","cited_by_count":32,"area":"agents"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2503.17682","title":"Safe RLHF-V: Safe Reinforcement Learning from Multi-modal Human Feedback","created":"2025-03-22","cited_by_count":30,"area":"mllm"},{"id":"2310.03400","title":"Adapting Large Language Models for Content Moderation: Pitfalls in Data Engineering and Supervised Fine-tuning","created":"2023-10-05","cited_by_count":29,"area":null},{"id":"2402.13148","title":"Defending Jailbreak Prompts via In-Context Adversarial Game","created":"2024-02-20","cited_by_count":29,"area":"safety"},{"id":"2402.15180","title":"Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinement","created":"2024-02-23","cited_by_count":29,"area":"safety"},{"id":"2505.18807","title":"Mitigating Deceptive Alignment via Self-Monitoring","created":"2025-05-24","cited_by_count":29,"area":"lr"},{"id":"2505.18889","title":"Security Concerns for Large Language Models: A Survey","created":"2025-05-24","cited_by_count":29,"area":null},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2312.06861","title":"Disentangling Perceptions of Offensiveness: Cultural and Moral Correlates","created":"2023-12-11","cited_by_count":26,"area":null},{"id":"2505.15400","title":"When to Continue Thinking: Adaptive Thinking Mode Switching for Efficient Reasoning","created":"2025-05-21","cited_by_count":26,"area":"lr"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2409.16783","title":"Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction","created":"2024-09-25","cited_by_count":25,"area":"safety"},{"id":"2503.17239","title":"SafeMERGE: Preserving Safety Alignment in Fine-Tuned Large Language Models via Selective Layer-Wise Model Merging","created":"2025-03-21","cited_by_count":25,"area":"alignment"},{"id":"2310.14303","title":"Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases","created":"2023-10-22","cited_by_count":24,"area":"safety"},{"id":"2312.12736","title":"Learning and Forgetting Unsafe Examples in Large Language Models","created":"2023-12-20","cited_by_count":24,"area":null},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2403.07708","title":"Improving Reinforcement Learning from Human Feedback Using Contrastive Rewards","created":"2024-03-12","cited_by_count":23,"area":"alignment"},{"id":"2406.08725","title":"RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs","created":"2024-06-13","cited_by_count":23,"area":"alignment"},{"id":"2407.08770","title":"Model Surgery: Modulating LLM's Behavior Via Simple Parameter Editing","created":"2024-07-11","cited_by_count":23,"area":"alignment"},{"id":"2407.10725","title":"CLAVE: An Adaptive Framework for Evaluating Values of LLM Generated Responses","created":"2024-07-15","cited_by_count":23,"area":null},{"id":"2509.11864","title":"NeuroStrike: Neuron-Level Attacks on Aligned LLMs","created":"2025-09-15","cited_by_count":22,"area":"alignment"},{"id":"2403.04204","title":"On the Essence and Prospect: An Investigation of Alignment Approaches for Big Models","created":"2024-03-07","cited_by_count":21,"area":"alignment"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2401.10647","title":"Sowing the Wind, Reaping the Whirlwind: The Impact of Editing Language Models","created":"2024-01-19","cited_by_count":20,"area":"safety"},{"id":"2404.07242","title":"Sandwich attack: Multi-language Mixture Adaptive Attack on LLMs","created":"2024-04-09","cited_by_count":20,"area":null},{"id":"2406.09098","title":"SciKnowEval: Evaluating Multi-level Scientific Knowledge of Large Language Models","created":"2024-06-13","cited_by_count":19,"area":null},{"id":"2410.11459","title":"Jigsaw Puzzles: Splitting Harmful Questions to Jailbreak Large Language Models","created":"2024-10-15","cited_by_count":19,"area":"lr"},{"id":"2503.02574","title":"LLM-Safety Evaluations Lack Robustness","created":"2025-03-04","cited_by_count":18,"area":"alignment"},{"id":"2312.06632","title":"Controlling risks of AI in chemical science with agents","created":"2023-12-11","cited_by_count":17,"area":"agents"},{"id":"2406.14230","title":"Raising the Bar: Investigating the Values of Large Language Models via Generative Evolving Testing","created":"2024-06-20","cited_by_count":17,"area":null},{"id":"2410.17040","title":"Arabic Dataset for LLM Safeguard Evaluation","created":"2024-10-22","cited_by_count":17,"area":null},{"id":"2403.09017","title":"AraTrust: An Evaluation of Trustworthiness for LLMs in Arabic","created":"2024-03-14","cited_by_count":16,"area":null},{"id":"2406.04879","title":"A Deep Dive into the Trade-Offs of Parameter-Efficient Preference Alignment Techniques","created":"2024-06-07","cited_by_count":16,"area":"alignment"},{"id":"2507.11316","title":"Internal Value Alignment in Large Language Models through Controlled Value Vector Activation","created":"2025-07-15","cited_by_count":16,"area":"alignment"},{"id":"2311.16989","title":"ChatGPT's One-year Anniversary: Are Open-Source Large Language Models Catching up?","created":"2023-11-28","cited_by_count":15,"area":null},{"id":"2406.10311","title":"CHiSafetyBench: A Chinese Hierarchical Safety Benchmark for Large Language Models","created":"2024-06-14","cited_by_count":15,"area":null},{"id":"2407.01505","title":"Self-Cognition in Large Language Models: An Exploratory Study","created":"2024-07-01","cited_by_count":15,"area":null},{"id":"2311.09585","title":"LifeTox: Unveiling Implicit Toxicity in Life Advice","created":"2023-11-16","cited_by_count":14,"area":null},{"id":"2407.03876","title":"Automated Progressive Red Teaming","created":"2024-07-04","cited_by_count":13,"area":"safety"},{"id":"2312.02554","title":"ULMA: Unified Language Model Alignment with Human Demonstration and Point-wise Preference","created":"2023-12-05","cited_by_count":12,"area":"alignment"},{"id":"2503.04833","title":"E$^2$AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models","created":"2025-03-05","cited_by_count":12,"area":"mllm"},{"id":"2403.18341","title":"IterAlign: Iterative Constitutional Alignment of Large Language Models","created":"2024-03-27","cited_by_count":11,"area":"alignment"},{"id":"2408.11313","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","created":"2024-08-21","cited_by_count":11,"area":"safety"}],"next_cursor":"100"}