{"total":41,"rows":[{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2309.07124","title":"RAIN: Your Language Models Can Align Themselves without Finetuning","created":"2023-09-13","cited_by_count":157,"area":"alignment"},{"id":"2403.17710","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","created":"2024-03-26","cited_by_count":143,"area":"alignment"},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111,"area":"alignment"},{"id":"2401.06561","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","created":"2024-01-12","cited_by_count":74,"area":"alignment"},{"id":"2402.16192","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","created":"2024-02-25","cited_by_count":74,"area":"alignment"},{"id":"2405.14023","title":"WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response","created":"2024-05-22","cited_by_count":29,"area":"alignment"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2506.09996","title":"From Judgment to Interference: Early Stopping LLM Harmful Outputs via Streaming Content Monitoring","created":"2025-06-11","cited_by_count":22,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2405.13068","title":"Uncovering Logit Suppression Vulnerabilities in LLM Safety Alignment","created":"2024-05-20","cited_by_count":18,"area":"alignment"},{"id":"2406.10977","title":"Toward Optimal LLM Alignments Using Two-Player Games","created":"2024-06-16","cited_by_count":13,"area":"alignment"},{"id":"2312.07876","title":"Causality Analysis for Evaluating the Security of Large Language Models","created":"2023-12-13","cited_by_count":11,"area":"alignment"},{"id":"2412.15623","title":"JailPO: A Novel Black-box Jailbreak Framework via Preference Optimization against Aligned LLMs","created":"2024-12-20","cited_by_count":11,"area":"alignment"},{"id":"2406.18118","title":"SafeAligner: Safety Alignment against Jailbreak Attacks via Response Disparity Guidance","created":"2024-06-26","cited_by_count":9,"area":"alignment"},{"id":"2509.15202","title":"Beyond Surface Alignment: Rebuilding LLMs Safety Mechanism via Probabilistically Ablating Refusal Direction","created":"2025-09-18","cited_by_count":8,"area":"alignment"},{"id":"2512.20806","title":"Safety Alignment of LMs via Non-cooperative Games","created":"2025-12-23","cited_by_count":8,"area":"alignment"},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2510.05052","title":"Proactive defense against LLM Jailbreak","created":"2025-10-06","cited_by_count":7,"area":"alignment"},{"id":"2601.10589","title":"Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience Replay","created":"2026-01-15","cited_by_count":6,"area":"alignment"},{"id":"2410.19933","title":"Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization","created":"2024-10-25","cited_by_count":5,"area":"alignment"},{"id":"2412.07192","title":"PrisonBreak: Jailbreaking Large Language Models with at Most Twenty-Five Targeted Bit-flips","created":"2024-12-10","cited_by_count":5,"area":"alignment"},{"id":"2511.19218","title":"Adversarial Attack-Defense Co-Evolution for LLM Safety Alignment via Tree-Group Dual-Aware Search and Optimization","created":"2025-11-24","cited_by_count":4,"area":"alignment"},{"id":"2510.08604","title":"LatentBreak: Jailbreaking Large Language Models through Latent Space Feedback","created":"2025-10-07","cited_by_count":3,"area":"alignment"},{"id":"2408.07663","title":"Alignment-Enhanced Decoding:Defending via Token-Level Adaptive Refining of Probability Distributions","created":"2024-08-14","cited_by_count":2,"area":"alignment"},{"id":"2507.08898","title":"SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems","created":"2025-07-11","cited_by_count":2,"area":"alignment"},{"id":"2604.26167","title":"Test-Time Safety Alignment","created":"2026-04-28","cited_by_count":2,"area":"alignment"},{"id":"2605.26158","title":"Furina: Fragmented Uncertainty-Driven Refusal Instability Attack","created":"2026-05-24","cited_by_count":2,"area":"alignment"},{"id":"2608.23959","title":"NeuronGuard: Robust LLM Safety Alignment via Ablation-Aware Safety Signal Redistribution","created":"2026-08-25","cited_by_count":2,"area":"alignment"},{"id":"2511.00509","title":"Reimagining Safety Alignment with An Image","created":"2025-11-01","cited_by_count":1,"area":"alignment"},{"id":"2606.25182","title":"What Intermediate Layers Know: Detecting Jailbreaks from Entropy Dynamics","created":"2026-06-23","cited_by_count":1,"area":"alignment"},{"id":"2606.28153","title":"Robust Harmful Features Under Jailbreak Attacks: Mechanistic Evidence from Attention Head Specialization in Large Language Models","created":"2026-06-26","cited_by_count":1,"area":"alignment"},{"id":"2410.13334","title":"BiasJailbreak:Analyzing Ethical Biases and Jailbreak Vulnerabilities in Large Language Models","created":"2024-10-17","cited_by_count":0,"area":"alignment"},{"id":"2506.24056","title":"Logit-Gap Steering: A Forward-Pass Diagnostic for Alignment Robustness","created":"2025-06-30","cited_by_count":0,"area":"alignment"},{"id":"2508.07139","title":"A Real-Time, Self-Tuning Moderator Framework for Adversarial Prompt Detection","created":"2025-08-10","cited_by_count":0,"area":"alignment"},{"id":"2510.20129","title":"SAID: Safety-Aware Intent Defense via Prefix Probing for Large Language Models","created":"2025-10-23","cited_by_count":0,"area":"alignment"},{"id":"2605.00236","title":"Attention Is Where You Attack","created":"2026-04-30","cited_by_count":0,"area":"alignment"},{"id":"2605.19966","title":"Detecting Fluent Optimization-Based Adversarial Prompts via Sequential Entropy Changes","created":"2026-05-19","cited_by_count":0,"area":"alignment"},{"id":"2608.26222","title":"NeuronFuzz: Safety Neuron Guided Fuzzing for LLM Safety Evaluation","created":"2026-08-26","cited_by_count":0,"area":"alignment"},{"id":"2609.03693","title":"AlcaTRAz - Anchored Tree-Rule Defense Against Jailbreaks","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.05850","title":"SAFEGuard: Detect Optimization-Based Jailbreak Attacks Through Harmful Semantic Analysis and Fluency Measurement","created":"2026-09-05","cited_by_count":0,"area":"alignment"}],"next_cursor":null}