{"total":108,"rows":[{"id":"2310.06387","title":"Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrations","created":"2023-10-10","cited_by_count":431,"area":"alignment"},{"id":"2406.15513","title":"PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preference","created":"2024-06-20","cited_by_count":261,"area":"alignment"},{"id":"2403.17710","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","created":"2024-03-26","cited_by_count":143,"area":"alignment"},{"id":"2406.00045","title":"Personalized Steering of Large Language Models: Versatile Steering Vectors Through Bi-directional Preference Optimization","created":"2024-05-28","cited_by_count":118,"area":"alignment"},{"id":"2310.15140","title":"AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Models","created":"2023-10-23","cited_by_count":111,"area":"alignment"},{"id":"2402.09063","title":"Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Space","created":"2024-02-14","cited_by_count":91,"area":"alignment"},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2402.16192","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","created":"2024-02-25","cited_by_count":74,"area":"alignment"},{"id":"2404.12038","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","created":"2024-04-18","cited_by_count":67,"area":"alignment"},{"id":"2402.12329","title":"Query-Based Adversarial Prompt Generation","created":"2024-02-19","cited_by_count":62,"area":"alignment"},{"id":"2404.16369","title":"Don't Say No: Jailbreaking LLM by Suppressing Refusal","created":"2024-04-25","cited_by_count":56,"area":"alignment"},{"id":"2503.03710","title":"Improving LLM Safety Alignment with Dual-Objective Optimization","created":"2025-03-05","cited_by_count":43,"area":"alignment"},{"id":"2506.07468","title":"Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models","created":"2025-06-09","cited_by_count":39,"area":"alignment"},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35,"area":"alignment"},{"id":"2409.14586","title":"Backtracking Improves Generation Safety","created":"2024-09-22","cited_by_count":32,"area":"alignment"},{"id":"2405.16229","title":"No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attacks","created":"2024-05-25","cited_by_count":29,"area":"alignment"},{"id":"2405.20653","title":"Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundaries","created":"2024-05-31","cited_by_count":28,"area":"alignment"},{"id":"2410.15362","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","created":"2024-10-20","cited_by_count":25,"area":"alignment"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2509.11864","title":"NeuroStrike: Neuron-Level Attacks on Aligned LLMs","created":"2025-09-15","cited_by_count":22,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2502.09990","title":"X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability","created":"2025-02-14","cited_by_count":20,"area":"alignment"},{"id":"2503.18991","title":"Inverse Reinforcement Learning with Dynamic Reward Scaling for LLM Alignment","created":"2025-03-23","cited_by_count":20,"area":"alignment"},{"id":"2503.02574","title":"LLM-Safety Evaluations Lack Robustness","created":"2025-03-04","cited_by_count":18,"area":"alignment"},{"id":"2506.17368","title":"SAFEx: Analyzing Vulnerabilities of MoE-Based LLMs via Stable Safety-critical Expert Identification","created":"2025-06-20","cited_by_count":18,"area":"alignment"},{"id":"2505.20259","title":"Lifelong Safety Alignment for Language Models","created":"2025-05-26","cited_by_count":15,"area":"alignment"},{"id":"2406.10977","title":"Toward Optimal LLM Alignments Using Two-Player Games","created":"2024-06-16","cited_by_count":13,"area":"alignment"},{"id":"2505.17598","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","created":"2025-05-23","cited_by_count":12,"area":"alignment"},{"id":"2411.12762","title":"Playing Language Game with LLMs Leads to Jailbreaking","created":"2024-11-16","cited_by_count":11,"area":"alignment"},{"id":"2510.02833","title":"Attack via Overfitting: 10-shot Benign Fine-tuning to Jailbreak LLMs","created":"2025-10-03","cited_by_count":10,"area":"alignment"},{"id":"2406.01514","title":"Decoupled Alignment for Robust Plug-and-Play Adaptation","created":"2024-06-03","cited_by_count":9,"area":"alignment"},{"id":"2505.17072","title":"Safety Alignment Can Be Not Superficial With Explicit Safety Signals","created":"2025-05-19","cited_by_count":9,"area":"alignment"},{"id":"2510.14301","title":"A Guardrail for Safety Preservation: When Safety-Sensitive Subspace Meets Harmful-Resistant Null-Space","created":"2025-10-16","cited_by_count":9,"area":"alignment"},{"id":"2507.11500","title":"ARMOR: Aligning Secure and Safe Large Language Models via Meticulous Reasoning","created":"2025-07-14","cited_by_count":8,"area":"alignment"},{"id":"2501.10639","title":"Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attacks","created":"2025-01-18","cited_by_count":7,"area":"alignment"},{"id":"2510.05052","title":"Proactive defense against LLM Jailbreak","created":"2025-10-06","cited_by_count":7,"area":"alignment"},{"id":"2601.03868","title":"What Matters For Safety Alignment?","created":"2026-01-07","cited_by_count":7,"area":"alignment"},{"id":"2502.00657","title":"LLM Safety Alignment is Divergence Estimation in Disguise","created":"2025-02-02","cited_by_count":6,"area":"alignment"},{"id":"2505.23473","title":"EVOREFUSE: Evolutionary Prompt Optimization for Evaluation and Mitigation of LLM Over-Refusal to Pseudo-Malicious Instructions","created":"2025-05-29","cited_by_count":6,"area":"alignment"},{"id":"2509.06982","title":"CARE: Decoding Time Safety Alignment via Rollback and Introspection Intervention","created":"2025-09-01","cited_by_count":6,"area":"alignment"},{"id":"2605.02946","title":"RouteHijack: Routing-Aware Attack on Mixture-of-Experts LLMs","created":"2026-05-01","cited_by_count":6,"area":"alignment"},{"id":"2410.11283","title":"AdvBDGen: Adversarially Fortified Prompt-Specific Fuzzy Backdoor Generator Against LLM Alignment","created":"2024-10-15","cited_by_count":5,"area":"alignment"},{"id":"2412.07192","title":"PrisonBreak: Jailbreaking Large Language Models with at Most Twenty-Five Targeted Bit-flips","created":"2024-12-10","cited_by_count":5,"area":"alignment"},{"id":"2507.02332","title":"PII Jailbreaking in LLMs via Activation Steering Reveals Personal Information Leakage","created":"2025-07-03","cited_by_count":5,"area":"alignment"},{"id":"2412.08201","title":"Model-Editing-Based Jailbreak against Safety-aligned Large Language Models","created":"2024-12-11","cited_by_count":4,"area":"alignment"},{"id":"2505.13862","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","created":"2025-05-20","cited_by_count":4,"area":"alignment"},{"id":"2506.16078","title":"Probing the Robustness of Large Language Models Safety to Latent Perturbations","created":"2025-06-19","cited_by_count":4,"area":"alignment"},{"id":"2512.17375","title":"AdvJudge-Zero: Binary Decision Flips in LLM-as-a-Judge via Adversarial Control Tokens","created":"2025-12-19","cited_by_count":4,"area":"alignment"},{"id":"2603.11331","title":"Jailbreak Scaling Laws for Large Language Models: Polynomial-Exponential Crossover","created":"2026-03-11","cited_by_count":4,"area":"alignment"},{"id":"2603.15684","title":"State-Dependent Safety Failures in Multi-Turn Language Model Interaction","created":"2026-03-15","cited_by_count":4,"area":"alignment"},{"id":"2502.02153","title":"Vulnerability Mitigation for Safety-Aligned Language Models via Debiasing","created":"2025-02-04","cited_by_count":3,"area":"alignment"},{"id":"2502.08657","title":"Refining Positive and Toxic Samples for Dual Safety Self-Alignment of LLMs with Minimal Human Interventions","created":"2025-02-08","cited_by_count":3,"area":"alignment"},{"id":"2505.11790","title":"JULI: Jailbreak Large Language Models by Self-Introspection","created":"2025-05-17","cited_by_count":3,"area":"alignment"},{"id":"2506.07402","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","created":"2025-06-09","cited_by_count":3,"area":"alignment"},{"id":"2509.19360","title":"Semantic Representation Attack against Aligned Large Language Models","created":"2025-09-18","cited_by_count":3,"area":"alignment"},{"id":"2510.08604","title":"LatentBreak: Jailbreaking Large Language Models through Latent Space Feedback","created":"2025-10-07","cited_by_count":3,"area":"alignment"},{"id":"2510.18081","title":"Any-Depth Alignment: Unlocking Innate Safety Alignment of LLMs to Any-Depth","created":"2025-10-20","cited_by_count":3,"area":"alignment"},{"id":"2510.21190","title":"The Trojan Example: Jailbreaking LLMs through Template Filling and Unsafety Reasoning","created":"2025-10-24","cited_by_count":3,"area":"alignment"},{"id":"2408.07663","title":"Alignment-Enhanced Decoding:Defending via Token-Level Adaptive Refining of Probability Distributions","created":"2024-08-14","cited_by_count":2,"area":"alignment"},{"id":"2502.11853","title":"StructTransform: A Scalable Attack Surface for Safety-Aligned Large Language Models","created":"2025-02-17","cited_by_count":2,"area":"alignment"},{"id":"2504.05050","title":"Revealing the Intrinsic Ethical Vulnerability of Aligned Large Language Models","created":"2025-04-07","cited_by_count":2,"area":"alignment"},{"id":"2508.14853","title":"Universal and Transferable Adversarial Attack on Large Language Models Using Exponentiated Gradient Descent","created":"2025-08-20","cited_by_count":2,"area":"alignment"},{"id":"2602.16835","title":"NeST: Neuron Selective Tuning for LLM Safety","created":"2026-02-18","cited_by_count":2,"area":"alignment"},{"id":"2602.16977","title":"Fail-Closed Alignment for Large Language Models","created":"2026-02-19","cited_by_count":2,"area":"alignment"},{"id":"2603.03081","title":"TAO-Attack: Toward Advanced Optimization-Based Jailbreak Attacks for Large Language Models","created":"2026-03-03","cited_by_count":2,"area":"alignment"},{"id":"2603.10243","title":"GR-SAP: Generative Replay for Safety Alignment Preservation during Fine-Tuning","created":"2026-03-10","cited_by_count":2,"area":"alignment"},{"id":"2603.12681","title":"Colluding LoRA: A Compositional Vulnerability in LLM Safety Alignment","created":"2026-03-13","cited_by_count":2,"area":"alignment"},{"id":"2603.14355","title":"Exposing Long-Tail Safety Failures in Large Language Models through Efficient Diverse Response Sampling","created":"2026-03-15","cited_by_count":2,"area":"alignment"},{"id":"2605.26158","title":"Furina: Fragmented Uncertainty-Driven Refusal Instability Attack","created":"2026-05-24","cited_by_count":2,"area":"alignment"},{"id":"2606.02995","title":"Patcher: Post-Hoc Patching of Backdoored Large Language Models","created":"2026-06-02","cited_by_count":2,"area":"alignment"},{"id":"2410.11533","title":"Multi-round jailbreak attack on large language models","created":"2024-10-15","cited_by_count":1,"area":"alignment"},{"id":"2509.03985","title":"NeuroBreak: Unveil Internal Jailbreak Mechanisms in Large Language Models","created":"2025-09-04","cited_by_count":1,"area":"alignment"},{"id":"2511.00509","title":"Reimagining Safety Alignment with An Image","created":"2025-11-01","cited_by_count":1,"area":"alignment"},{"id":"2603.04355","title":"Efficient Refusal Ablation in LLM through Optimal Transport","created":"2026-03-04","cited_by_count":1,"area":"alignment"},{"id":"2603.22829","title":"Improving Safety Alignment via Balanced Direct Preference Optimization","created":"2026-03-24","cited_by_count":1,"area":"alignment"},{"id":"2605.01899","title":"Disentangling Intent from Role: Adversarial Self-Play for Persona-Invariant Safety Alignment","created":"2026-05-03","cited_by_count":1,"area":"alignment"},{"id":"2605.24154","title":"Palette: A Modular, Controllable, and Efficient Framework for On-demand Authorized Safety Alignment Relaxation in LLMs","created":"2026-05-22","cited_by_count":1,"area":"alignment"},{"id":"2606.00813","title":"Cross-Generational Transfer of Adversarial Attacks Reveals Non-Monotonic Safety Alignment in LLMs","created":"2026-05-30","cited_by_count":1,"area":"alignment"},{"id":"2606.19168","title":"Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflection","created":"2026-06-17","cited_by_count":1,"area":"alignment"},{"id":"2607.02714","title":"Not All Refusals Are Equal: How Safety Alignment Fails Cybersecurity at Scale","created":"2026-07-02","cited_by_count":1,"area":"alignment"},{"id":"2410.13334","title":"BiasJailbreak:Analyzing Ethical Biases and Jailbreak Vulnerabilities in Large Language Models","created":"2024-10-17","cited_by_count":0,"area":"alignment"},{"id":"2502.11379","title":"CCJA: Context-Coherent Jailbreak Attack for Aligned Large Language Models","created":"2025-02-17","cited_by_count":0,"area":"alignment"},{"id":"2506.24056","title":"Logit-Gap Steering: A Forward-Pass Diagnostic for Alignment Robustness","created":"2025-06-30","cited_by_count":0,"area":"alignment"},{"id":"2508.07139","title":"A Real-Time, Self-Tuning Moderator Framework for Adversarial Prompt Detection","created":"2025-08-10","cited_by_count":0,"area":"alignment"},{"id":"2510.20129","title":"SAID: Safety-Aware Intent Defense via Prefix Probing for Large Language Models","created":"2025-10-23","cited_by_count":0,"area":"alignment"},{"id":"2511.12487","title":"ToxSearch: Evolving Prompts for Toxicity Search in Large Language Models","created":"2025-11-16","cited_by_count":0,"area":"alignment"},{"id":"2511.13548","title":"ForgeDAN: An Evolutionary Framework for Jailbreaking Aligned Large Language Models","created":"2025-11-17","cited_by_count":0,"area":"alignment"},{"id":"2512.05518","title":"Matching Ranks Over Probability Yields Truly Deep Safety Alignment","created":"2025-12-05","cited_by_count":0,"area":"alignment"},{"id":"2512.18755","title":"MEEA: Mere Exposure Effect-Driven Confrontational Optimization for LLM Jailbreaking","created":"2025-12-21","cited_by_count":0,"area":"alignment"},{"id":"2605.00236","title":"Attention Is Where You Attack","created":"2026-04-30","cited_by_count":0,"area":"alignment"},{"id":"2605.08878","title":"Why Do Aligned LLMs Remain Jailbreakable: Refusal-Escape Directions, Operator-Level Sources, and Safety-Utility Trade-off","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.17971","title":"Babel: Jailbreaking Safety Attention via Obfuscation Distribution Optimized Sampling","created":"2026-05-18","cited_by_count":0,"area":"alignment"},{"id":"2605.19966","title":"Detecting Fluent Optimization-Based Adversarial Prompts via Sequential Entropy Changes","created":"2026-05-19","cited_by_count":0,"area":"alignment"},{"id":"2605.20654","title":"REFLECTOR: Internalizing Step-wise Reflection against Indirect Jailbreak","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2605.21362","title":"LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2606.04168","title":"When Autoregressive Consistency Hurts Safety Alignment","created":"2026-06-02","cited_by_count":0,"area":"alignment"},{"id":"2606.04778","title":"Inference-Time Vulnerability Beyond Shallow Safety: Alignment Along Generation Trajectories","created":"2026-06-03","cited_by_count":0,"area":"alignment"},{"id":"2606.16349","title":"From Refusal Geometry to Safety Geometry: Harmfulness--Refusal Coupling under Dynamic Adversarial Fine-Tuning","created":"2026-06-15","cited_by_count":0,"area":"alignment"},{"id":"2607.00572","title":"HARC: Coupling Harmfulness and Refusal Directions for Robust Safety Alignment","created":"2026-07-01","cited_by_count":0,"area":"alignment"},{"id":"2607.20494","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","created":"2026-06-12","cited_by_count":0,"area":"alignment"}],"next_cursor":"100"}