{"total":16,"rows":[{"id":"2310.04451","title":"AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models","created":"2023-10-03","cited_by_count":785,"area":"alignment"},{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2403.17710","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","created":"2024-03-26","cited_by_count":143,"area":"alignment"},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111,"area":"alignment"},{"id":"2402.09154","title":"Attacking Large Language Models with Projected Gradient Descent","created":"2024-02-14","cited_by_count":94,"area":"alignment"},{"id":"2402.09063","title":"Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Space","created":"2024-02-14","cited_by_count":91,"area":"alignment"},{"id":"2402.16192","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","created":"2024-02-25","cited_by_count":74,"area":"alignment"},{"id":"2503.20823","title":"Playing the Fool: Jailbreaking LLMs and Multimodal LLMs with Out-of-Distribution Strategy","created":"2025-03-26","cited_by_count":44,"area":"alignment"},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35,"area":"alignment"},{"id":"2405.20653","title":"Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundaries","created":"2024-05-31","cited_by_count":28,"area":"alignment"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2509.19360","title":"Semantic Representation Attack against Aligned Large Language Models","created":"2025-09-18","cited_by_count":3,"area":"alignment"},{"id":"2512.01037","title":"How Semantically Stable Are LLM Refusals? Measuring Confusion in Local Safety Boundaries","created":"2025-11-30","cited_by_count":2,"area":"alignment"},{"id":"2506.12382","title":"Exploring the Secondary Risks of Large Language Models","created":"2025-06-14","cited_by_count":1,"area":"alignment"},{"id":"2410.13334","title":"BiasJailbreak:Analyzing Ethical Biases and Jailbreak Vulnerabilities in Large Language Models","created":"2024-10-17","cited_by_count":0,"area":"alignment"},{"id":"2512.18755","title":"MEEA: Mere Exposure Effect-Driven Confrontational Optimization for LLM Jailbreaking","created":"2025-12-21","cited_by_count":0,"area":"alignment"}],"next_cursor":null}