{"total":103,"rows":[{"id":"2404.01318","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","created":"2024-03-28","cited_by_count":536,"area":"safety"},{"id":"2310.03684","title":"SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks","created":"2023-10-05","cited_by_count":469,"area":"safety"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2401.17263","title":"Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attacks","created":"2024-01-30","cited_by_count":156,"area":"safety"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2402.18104","title":"Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction","created":"2024-02-28","cited_by_count":107,"area":"safety"},{"id":"2312.17673","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","created":"2023-12-29","cited_by_count":106,"area":"safety"},{"id":"2402.13457","title":"A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models","created":"2024-02-21","cited_by_count":106,"area":"safety"},{"id":"2402.05668","title":"JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMs","created":"2024-02-08","cited_by_count":95,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2402.15570","title":"Fast Adversarial Attacks on Language Models In One GPU Minute","created":"2024-02-23","cited_by_count":88,"area":"safety"},{"id":"2403.00867","title":"Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapes","created":"2024-03-01","cited_by_count":74,"area":"safety"},{"id":"2402.16459","title":"Defending LLMs against Jailbreaking Attacks via Backtranslation","created":"2024-02-26","cited_by_count":70,"area":"safety"},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2402.15911","title":"PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Rails","created":"2024-02-24","cited_by_count":52,"area":"safety"},{"id":"2404.05880","title":"Eraser: Jailbreaking Defense in Large Language Models via Unlearning Harmful Knowledge","created":"2024-04-08","cited_by_count":51,"area":"safety"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2405.07932","title":"PARDEN, Can You Repeat That? Defending against Jailbreaks via Repetition","created":"2024-05-13","cited_by_count":35,"area":"safety"},{"id":"2311.11509","title":"Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information","created":"2023-11-20","cited_by_count":33,"area":"safety"},{"id":"2402.16006","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","created":"2024-02-25","cited_by_count":32,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2402.13148","title":"Defending Jailbreak Prompts via In-Context Adversarial Game","created":"2024-02-20","cited_by_count":29,"area":"safety"},{"id":"2502.01042","title":"SafeSwitch: Steering Unsafe LLM Behavior via Internal Activation Signals","created":"2025-02-03","cited_by_count":29,"area":"safety"},{"id":"2401.10862","title":"Pruning for Protection: Increasing Jailbreak Resistance in Aligned LLMs Without Fine-Tuning","created":"2024-01-19","cited_by_count":26,"area":"safety"},{"id":"2502.03052","title":"Understanding and Enhancing the Transferability of Jailbreaking Attacks","created":"2025-02-05","cited_by_count":22,"area":"safety"},{"id":"2409.14866","title":"PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs","created":"2024-09-23","cited_by_count":21,"area":"safety"},{"id":"2410.19937","title":"RobustKV: Defending Large Language Models against Jailbreak Attacks via KV Eviction","created":"2024-10-25","cited_by_count":21,"area":"safety"},{"id":"2407.00869","title":"Large Language Models Are Involuntary Truth-Tellers: Exploiting Fallacy Failure for Jailbreak Attacks","created":"2024-07-01","cited_by_count":19,"area":"safety"},{"id":"2411.06426","title":"SequentialBreak: Large Language Models Can be Fooled by Embedding Jailbreak Prompts into Sequential Prompt Chains","created":"2024-11-10","cited_by_count":19,"area":"safety"},{"id":"2502.13141","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","created":"2025-02-18","cited_by_count":16,"area":"safety"},{"id":"2412.03235","title":"Does Safety Training of LLMs Generalize to Semantically Related Natural Prompts?","created":"2024-12-04","cited_by_count":15,"area":"safety"},{"id":"2404.04392","title":"Fine-Tuning, Quantization, and LLMs: Navigating Unintended Outcomes","created":"2024-04-05","cited_by_count":14,"area":"safety"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2509.14558","title":"LLM Jailbreak Detection for (Almost) Free!","created":"2025-09-18","cited_by_count":13,"area":"safety"},{"id":"2602.22983","title":"Obscure but Effective: Classical Chinese Jailbreak Prompt Optimization via Bio-Inspired Search","created":"2026-02-26","cited_by_count":13,"area":"safety"},{"id":"2410.21083","title":"Stealthy Jailbreak Attacks on Large Language Models via Benign Data Mirroring","created":"2024-10-28","cited_by_count":12,"area":"safety"},{"id":"2408.11313","title":"An Optimizable Suffix Is Worth A Thousand Templates: Efficient Black-box Jailbreaking without Affirmative Phrases via LLM as Optimizer","created":"2024-08-21","cited_by_count":11,"area":"safety"},{"id":"2505.13541","title":"SPIRIT: Patching Speech Language Models against Jailbreak Attacks","created":"2025-05-18","cited_by_count":9,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2408.15207","title":"Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attacks","created":"2024-08-27","cited_by_count":8,"area":"safety"},{"id":"2501.16497","title":"Smoothed Embeddings for Robust Language Models","created":"2025-01-27","cited_by_count":8,"area":"safety"},{"id":"2502.08142","title":"Bridging the Safety Gap: A Guardrail Pipeline for Trustworthy LLM Inferences","created":"2025-02-12","cited_by_count":8,"area":"safety"},{"id":"2412.18171","title":"Token Highlighter: Inspecting and Mitigating Jailbreak Prompts for Large Language Models","created":"2024-12-24","cited_by_count":7,"area":"safety"},{"id":"2501.02629","title":"Layer-Level Self-Exposure and Patch: Affirmative Token Mitigation for Jailbreak Attack Defense","created":"2025-01-05","cited_by_count":7,"area":"safety"},{"id":"2512.05485","title":"TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations","created":"2025-12-05","cited_by_count":7,"area":"safety"},{"id":"2510.17021","title":"Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearning","created":"2025-10-19","cited_by_count":6,"area":"safety"},{"id":"2512.08967","title":"CluCERT: Certifying LLM Robustness via Clustering-Guided Denoising Smoothing","created":"2025-12-01","cited_by_count":6,"area":"safety"},{"id":"2404.02532","title":"Learn to Disguise: Avoid Refusal Responses in LLM's Defense via a Multi-agent Attacker-Disguiser Game","created":"2024-04-03","cited_by_count":5,"area":"safety"},{"id":"2501.08246","title":"Text-Diffusion Red-Teaming of Large Language Models: Unveiling Harmful Behaviors with Proximity Constraints","created":"2025-01-14","cited_by_count":5,"area":"safety"},{"id":"2501.18280","title":"Jailbreaking LLMs' Safeguard with Universal Magic Words for Text Embedding Models","created":"2025-01-30","cited_by_count":5,"area":"safety"},{"id":"2505.09602","title":"Adversarial Suffix Filtering: a Defense Pipeline for LLMs","created":"2025-05-14","cited_by_count":5,"area":"safety"},{"id":"2506.15751","title":"Sysformer: Safeguarding Frozen Large Language Models with Adaptive System Prompts","created":"2025-06-18","cited_by_count":5,"area":"safety"},{"id":"2507.06043","title":"CAVGAN: Unifying Jailbreak and Defense of LLMs via Generative Adversarial Attacks on their Internal Representations","created":"2025-07-08","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2511.14423","title":"Unified Defense for Large Language Models against Jailbreak and Fine-Tuning Attacks in Education","created":"2025-11-18","cited_by_count":5,"area":"safety"},{"id":"2406.10847","title":"TorchOpera: A Compound AI System for LLM Safety","created":"2024-06-16","cited_by_count":4,"area":"safety"},{"id":"2406.14048","title":"Prompt Injection Attacks in Defended Systems","created":"2024-06-20","cited_by_count":4,"area":"safety"},{"id":"2502.15594","title":"SafeInt: Shielding Large Language Models from Jailbreak Attacks via Safety-Aware Representation Intervention","created":"2025-02-21","cited_by_count":4,"area":"safety"},{"id":"2605.06605","title":"How Many Iterations to Jailbreak? Dynamic Budget Allocation for Multi-Turn LLM Evaluation","created":"2026-05-07","cited_by_count":4,"area":"safety"},{"id":"2412.16359","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","created":"2024-12-20","cited_by_count":3,"area":"safety"},{"id":"2503.17932","title":"STShield: Single-Token Sentinel for Real-Time Jailbreak Detection in Large Language Models","created":"2025-03-23","cited_by_count":3,"area":"safety"},{"id":"2507.23453","title":"Counterfactual Evaluation for Blind Attack Detection in LLM-based Evaluation Systems","created":"2025-07-31","cited_by_count":3,"area":"safety"},{"id":"2508.14128","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","created":"2025-08-19","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2605.05058","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","created":"2026-05-06","cited_by_count":3,"area":"safety"},{"id":"2407.13796","title":"Continuous Embedding Attacks via Clipped Inputs in Jailbreaking Large Language Models","created":"2024-07-16","cited_by_count":2,"area":"safety"},{"id":"2502.14486","title":"How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2606.05609","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","created":"2026-06-04","cited_by_count":2,"area":"safety"},{"id":"2405.04756","title":"Red-Teaming for Inducing Societal Bias in Large Language Models","created":"2024-05-08","cited_by_count":1,"area":"safety"},{"id":"2502.16109","title":"Be a Multitude to Itself: A Prompt Evolution Framework for Red Teaming","created":"2025-02-22","cited_by_count":1,"area":"safety"},{"id":"2507.22160","title":"Strategic Deflection: Defending LLMs from Logit Manipulation","created":"2025-07-29","cited_by_count":1,"area":"safety"},{"id":"2510.09689","title":"When Search Goes Wrong: Red-Teaming Web-Augmented Large Language Models","created":"2025-10-09","cited_by_count":1,"area":"safety"},{"id":"2602.06440","title":"TrailBlazer: History-Guided Reinforcement Learning for Black-Box LLM Jailbreaking","created":"2026-02-06","cited_by_count":1,"area":"safety"},{"id":"2606.11409","title":"Risk Under Pressure: Compute-Aware Evaluation of Adversarial Robustness in Language Models","created":"2026-06-09","cited_by_count":1,"area":"safety"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2502.12445","title":"Computational Safety for Generative AI: A Hypothesis Testing Perspective","created":"2025-02-18","cited_by_count":0,"area":"safety"},{"id":"2503.15205","title":"A Peek Behind the Curtain: Using Step-Around Prompt Engineering to Identify Bias and Misinformation in GenAI Models","created":"2025-03-19","cited_by_count":0,"area":"safety"},{"id":"2505.07167","title":"Decoding One Safety Trigger Token for Balancing Safety and Usability in Large Language Models","created":"2025-05-12","cited_by_count":0,"area":"safety"},{"id":"2505.11835","title":"Multilingual Collaborative Defense for Large Language Models","created":"2025-05-17","cited_by_count":0,"area":"safety"},{"id":"2507.12185","title":"Jailbreaking Generative AI: Multivector Phishing Threats and Transformer based Defenses","created":"2025-07-16","cited_by_count":0,"area":"safety"},{"id":"2508.11290","title":"SafeConstellations: Mitigating Over-Refusals in LLMs Through Task-Aware Representation Steering","created":"2025-08-15","cited_by_count":0,"area":"safety"},{"id":"2511.18581","title":"TASO: Jailbreak LLMs via Alternative Template and Suffix Optimization","created":"2025-11-23","cited_by_count":0,"area":"safety"},{"id":"2512.04841","title":"SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2602.02280","title":"RACC: Representation-Aware Coverage Criteria for LLM Safety Testing","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2602.04893","title":"A Causal Perspective for Enhancing Jailbreak Attack and Defense","created":"2026-01-31","cited_by_count":0,"area":"safety"},{"id":"2602.17696","title":"Can LLM Safety Be Ensured by Constraining Parameter Regions?","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2604.18756","title":"Towards Understanding the Robustness of Sparse Autoencoders","created":"2026-04-20","cited_by_count":0,"area":"safety"},{"id":"2604.24700","title":"Green Shielding: A User-Centric Approach Towards Trustworthy AI","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.03095","title":"Revisiting JBShield: Breaking and Rebuilding Representation-Level Jailbreak Defenses","created":"2026-05-04","cited_by_count":0,"area":"safety"},{"id":"2605.10611","title":"Re-Triggering Safeguards within LLMs for Jailbreak Detection","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.21674","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","created":"2026-05-20","cited_by_count":0,"area":"safety"},{"id":"2608.20820","title":"Certified Multi-Turn Robustness for LLM Safety via Compositional Bounds and Safety Persistence","created":"2026-08-21","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}