{"total":32,"rows":[{"id":"2402.10260","title":"A StrongREJECT for Empty Jailbreaks","created":"2024-02-15","cited_by_count":385,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2310.15851","title":"Self-Guard: Empower the LLM to Safeguard Itself","created":"2023-10-24","cited_by_count":54,"area":"safety"},{"id":"2402.00898","title":"An Early Categorization of Prompt Injection Attacks on Large Language Models","created":"2024-01-31","cited_by_count":30,"area":"safety"},{"id":"2410.06606","title":"Dissecting Fine-Tuning Unlearning in Large Language Models","created":"2024-10-09","cited_by_count":26,"area":"safety"},{"id":"2502.11090","title":"SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attacks","created":"2025-02-16","cited_by_count":23,"area":"safety"},{"id":"2409.11844","title":"MEOW: MEMOry Supervised LLM Unlearning Via Inverted Facts","created":"2024-09-18","cited_by_count":18,"area":"safety"},{"id":"2410.07582","title":"Detecting Training Data of Large Language Models via Expectation Maximization","created":"2024-10-10","cited_by_count":13,"area":"safety"},{"id":"2408.07291","title":"Evaluating LLM-based Personal Information Extraction and Countermeasures","created":"2024-08-14","cited_by_count":12,"area":"safety"},{"id":"2502.16903","title":"GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods","created":"2025-02-24","cited_by_count":12,"area":"safety"},{"id":"2506.15606","title":"LoX: Low-Rank Extrapolation Robustifies LLM Safety Against Fine-tuning","created":"2025-06-18","cited_by_count":12,"area":"safety"},{"id":"2505.16252","title":"Does Localization Inform Unlearning? A Rigorous Examination of Local Parameter Attribution for Knowledge Unlearning in Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2410.15641","title":"SMILES-Prompting: A Novel Approach to LLM Jailbreak Attacks in Chemical Synthesis","created":"2024-10-21","cited_by_count":7,"area":"safety"},{"id":"2410.21146","title":"Palisade -- Prompt Injection Detection Framework","created":"2024-10-28","cited_by_count":5,"area":"safety"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2402.16889","title":"Generative Models are Self-Watermarked: Declaring Model Authentication through Re-Generation","created":"2024-02-23","cited_by_count":3,"area":"safety"},{"id":"2604.14865","title":"Segment-Level Coherence for Robust Harmful Intent Probing in LLMs","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2510.01223","title":"Jailbreaking LLMs via Semantically Relevant Nested Scenarios with Targeted Toxic Knowledge","created":"2025-09-22","cited_by_count":2,"area":"safety"},{"id":"2602.19275","title":"KUDA: Knowledge Unlearning by Deviating Representation for Large Language Models","created":"2026-02-22","cited_by_count":2,"area":"safety"},{"id":"2607.19424","title":"JailMeter: An Evidence-Based Evaluation Framework for Jailbreak Attacks on Large Language Models","created":"2026-07-20","cited_by_count":2,"area":"safety"},{"id":"2505.11837","title":"On Membership Inference Attacks in Knowledge Distillation","created":"2025-05-17","cited_by_count":1,"area":"safety"},{"id":"2403.00292","title":"Enhancing Jailbreak Attacks with Diversity Guidance","created":"2024-03-01","cited_by_count":0,"area":"safety"},{"id":"2406.11682","title":"Knowledge-to-Jailbreak: Investigating Knowledge-driven Jailbreaking Attacks for Large Language Models","created":"2024-06-17","cited_by_count":0,"area":"safety"},{"id":"2411.03363","title":"TDDBench: A Benchmark for Training data detection","created":"2024-11-05","cited_by_count":0,"area":"safety"},{"id":"2505.07167","title":"Decoding One Safety Trigger Token for Balancing Safety and Usability in Large Language Models","created":"2025-05-12","cited_by_count":0,"area":"safety"},{"id":"2512.15081","title":"Quantifying Return on Security Controls in LLM Systems","created":"2025-12-17","cited_by_count":0,"area":"safety"},{"id":"2604.12168","title":"Fully Homomorphic Encryption on Llama 3 model for privacy preserving LLM inference","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2609.10611","title":"Black-Box Membership Inference via Word-Level Probability Estimation","created":"2026-09-08","cited_by_count":0,"area":"safety"}],"next_cursor":null}