{"total":26,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2402.10260","title":"A StrongREJECT for Empty Jailbreaks","created":"2024-02-15","cited_by_count":385,"area":"safety"},{"id":"2406.04313","title":"Improving Alignment and Robustness with Circuit Breakers","created":"2024-06-06","cited_by_count":322,"area":"safety"},{"id":"2310.10844","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","created":"2023-10-16","cited_by_count":194,"area":"safety"},{"id":"2402.02309","title":"Jailbreaking Attack against Multimodal Large Language Model","created":"2024-02-04","cited_by_count":135,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2403.05030","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","created":"2024-03-08","cited_by_count":88,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2412.03556","title":"Best-of-N Jailbreaking","created":"2024-12-04","cited_by_count":76,"area":"safety"},{"id":"2311.09127","title":"Jailbreaking GPT-4V via Self-Adversarial Attacks with System Prompts","created":"2023-11-15","cited_by_count":65,"area":"safety"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2511.10222","title":"Speech-Audio Compositional Attacks on Multimodal LLMs and Their Mitigation with SALMONN-Guard","created":"2025-11-13","cited_by_count":13,"area":"safety"},{"id":"2502.00653","title":"Towards Robust Multimodal Large Language Models Against Jailbreak Attacks","created":"2025-02-02","cited_by_count":5,"area":"safety"},{"id":"2408.08464","title":"$\\textit{MMJ-Bench}$: A Comprehensive Study on Jailbreak Attacks and Defenses for Multimodal Large Language Models","created":"2024-08-16","cited_by_count":3,"area":"safety"},{"id":"2502.14486","title":"How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2504.05838","title":"Mind the Trojan Horse: Image Prompt Adapter Enabling Scalable and Deceptive Jailbreaking","created":"2025-04-08","cited_by_count":2,"area":"safety"},{"id":"2602.10179","title":"When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models","created":"2026-02-10","cited_by_count":2,"area":"safety"},{"id":"2509.12724","title":"Defense-to-Attack: Bypassing Weak Defenses Enables Stronger Jailbreaks in Vision-Language Models","created":"2025-09-16","cited_by_count":0,"area":"safety"},{"id":"2602.02536","title":"From Sparse Decisions to Dense Reasoning: A Multi-attribute Trajectory Paradigm for Multimodal Moderation","created":"2026-01-28","cited_by_count":0,"area":"safety"},{"id":"2605.00699","title":"STARE: Step-wise Temporal Alignment and Red-teaming Engine for Multi-modal Toxicity Attack","created":"2026-05-01","cited_by_count":0,"area":"safety"},{"id":"2605.01758","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","created":"2026-05-03","cited_by_count":0,"area":"safety"},{"id":"2605.25194","title":"Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attack","created":"2026-05-24","cited_by_count":0,"area":"safety"},{"id":"2606.01837","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","created":"2026-06-01","cited_by_count":0,"area":"safety"},{"id":"2609.04533","title":"Repeat-After-Me: Black-Box Adaptive Visual Prompt Injection","created":"2026-09-03","cited_by_count":0,"area":"safety"}],"next_cursor":null}