{"total":63,"rows":[{"id":"2401.06373","title":"How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs","created":"2024-01-12","cited_by_count":573,"area":"lr"},{"id":"2502.12025","title":"SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities","created":"2025-02-17","cited_by_count":136,"area":"lr"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2502.12893","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","created":"2025-02-18","cited_by_count":99,"area":"lr"},{"id":"2502.02384","title":"STAIR: Improving Safety Alignment with Introspective Reasoning","created":"2025-02-04","cited_by_count":77,"area":"lr"},{"id":"2504.01903","title":"STAR-1: Safer Alignment of Reasoning LLMs with 1K Data","created":"2025-04-02","cited_by_count":68,"area":"lr"},{"id":"2502.11054","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-02-16","cited_by_count":64,"area":"lr"},{"id":"2505.08054","title":"FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoning","created":"2025-05-12","cited_by_count":58,"area":"lr"},{"id":"2405.18634","title":"A Theoretical Understanding of Self-Correction through In-context Alignment","created":"2024-05-28","cited_by_count":44,"area":"lr"},{"id":"2407.05557","title":"$R^2$-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning","created":"2024-07-08","cited_by_count":43,"area":"lr"},{"id":"2503.05021","title":"Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety","created":"2025-03-06","cited_by_count":39,"area":"lr"},{"id":"2402.10601","title":"When \"Competency\" in Reasoning Opens the Door to Vulnerability: Jailbreaking LLMs via Novel Complex Ciphers","created":"2024-02-16","cited_by_count":30,"area":"lr"},{"id":"2502.01633","title":"Adversarial Reasoning at Jailbreaking Time","created":"2025-02-03","cited_by_count":29,"area":"lr"},{"id":"2504.09420","title":"SaRO: Enhancing LLM Safety through Reasoning-based Alignment","created":"2025-04-13","cited_by_count":26,"area":"lr"},{"id":"2507.20526","title":"Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition","created":"2025-07-28","cited_by_count":24,"area":"lr"},{"id":"2504.13626","title":"Thought Manipulation: External Thought Can Be Efficient for Large Reasoning Models","created":"2025-04-18","cited_by_count":23,"area":"lr"},{"id":"2507.00971","title":"Reasoning as an Adaptive Defense for Safety","created":"2025-07-01","cited_by_count":23,"area":"lr"},{"id":"2405.20902","title":"Preemptive Answer \"Attacks\" on Chain-of-Thought Reasoning","created":"2024-05-31","cited_by_count":19,"area":"lr"},{"id":"2507.19060","title":"PurpCode: Reasoning for Safer Code Generation","created":"2025-07-25","cited_by_count":18,"area":"lr"},{"id":"2503.22048","title":"ThinkEdit: Interpretable Weight Editing to Mitigate Overly Short Thinking in Reasoning Models","created":"2025-03-27","cited_by_count":17,"area":"lr"},{"id":"2502.04040","title":"Safety Reasoning with Guidelines","created":"2025-02-06","cited_by_count":15,"area":"lr"},{"id":"2504.17130","title":"Steering the CensorShip: Uncovering Representation Vectors for LLM \"Thought\" Control","created":"2025-04-23","cited_by_count":14,"area":"lr"},{"id":"2412.09722","title":"GReaTer: Gradients over Reasoning Makes Smaller Language Models Strong Prompt Optimizers","created":"2024-12-12","cited_by_count":12,"area":"lr"},{"id":"2508.16347","title":"Confusion is the Final Barrier: Rethinking Jailbreak Evaluation and Investigating the Real Misuse Threat of LLMs","created":"2025-08-22","cited_by_count":11,"area":"lr"},{"id":"2510.01270","title":"Think Twice, Generate Once: Safeguarding by Progressive Self-Reflection","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2504.16489","title":"Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate","created":"2025-04-23","cited_by_count":10,"area":"lr"},{"id":"2603.00131","title":"Thought Virus: Viral Misalignment via Subliminal Prompting in Multi-Agent Systems","created":"2026-02-23","cited_by_count":9,"area":"lr"},{"id":"2407.16205","title":"Reasoning as a Weapon: Adaptive Dual-Path Jailbreak Attack on Large Language Models","created":"2024-07-23","cited_by_count":8,"area":"lr"},{"id":"2505.16241","title":"Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers","created":"2025-05-22","cited_by_count":8,"area":"lr"},{"id":"2505.10846","title":"AutoRAN: Automated Hijacking of Safety Reasoning in Large Reasoning Models","created":"2025-05-16","cited_by_count":7,"area":"lr"},{"id":"2505.16446","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2508.20737","title":"Rethinking Testing for LLM Applications: Characteristics, Challenges, and a Lightweight Interaction Protocol","created":"2025-08-28","cited_by_count":6,"area":"lr"},{"id":"2511.04694","title":"Reasoning Up the Instruction Ladder for Controllable Language Models","created":"2025-10-30","cited_by_count":5,"area":"lr"},{"id":"2512.05853","title":"VRSA: Jailbreaking Multimodal Large Language Models through Visual Reasoning Sequential Attack","created":"2025-12-05","cited_by_count":5,"area":"lr"},{"id":"2504.02725","title":"SAFER: Advancing Safety Alignment via Efficient Ex-Ante Reasoning","created":"2025-04-03","cited_by_count":4,"area":"lr"},{"id":"2505.17089","title":"Chain-of-Thought Driven Adversarial Scenario Extrapolation for Robust Language Models","created":"2025-05-20","cited_by_count":4,"area":"lr"},{"id":"2508.20151","title":"IntentionReasoner: Facilitating Adaptive LLM Safeguards through Intent Reasoning and Selective Query Refinement","created":"2025-08-27","cited_by_count":4,"area":"lr"},{"id":"2512.23881","title":"Breaking Audio Large Language Models by Attacking Only the Encoder: A Universal Targeted Latent-Space Audio Attack","created":"2025-12-29","cited_by_count":4,"area":"lr"},{"id":"2602.01600","title":"Expected Harm: Rethinking Safety Evaluation of (Mis)Aligned LLMs","created":"2026-02-02","cited_by_count":4,"area":"lr"},{"id":"2605.08876","title":"OTora: A Unified Red Teaming Framework for Reasoning-Level Denial-of-Service in LLM Agents","created":"2026-05-09","cited_by_count":3,"area":"lr"},{"id":"2606.25013","title":"Do Thinking Tokens Help with Safety?","created":"2026-06-23","cited_by_count":3,"area":"lr"},{"id":"2508.10032","title":"The Cost of Thinking: Increased Jailbreak Risk in Large Language Models","created":"2025-08-09","cited_by_count":2,"area":"lr"},{"id":"2510.08592","title":"Less Diverse, Less Safe: The Indirect But Pervasive Risk of Test-Time Scaling in Large Language Models","created":"2025-10-04","cited_by_count":2,"area":"lr"},{"id":"2603.17305","title":"Contrastive Reasoning Alignment: Reinforcement Learning from Hidden Representations","created":"2026-03-18","cited_by_count":2,"area":"lr"},{"id":"2603.17368","title":"Towards Safer Large Reasoning Models by Promoting Safety Decision-Making before Chain-of-Thought Generation","created":"2026-03-18","cited_by_count":2,"area":"lr"},{"id":"2604.00012","title":"Finding and Reactivating Post-Trained LLMs' Hidden Safety Mechanisms","created":"2026-03-10","cited_by_count":2,"area":"lr"},{"id":"2606.11949","title":"Online Shift Detection and Conformal Adaptation for Deployed Safety Classifiers","created":"2026-06-10","cited_by_count":2,"area":"lr"},{"id":"2607.08066","title":"Persuasion Attacks Can Decrease Effectiveness of CoT Monitoring","created":"2026-07-09","cited_by_count":2,"area":"lr"},{"id":"2509.19775","title":"bi-GRPO: Bidirectional Optimization for Jailbreak Backdoor Injection on LLMs","created":"2025-09-24","cited_by_count":1,"area":"lr"},{"id":"2511.08055","title":"MSCR: Exploring the Vulnerability of LLMs' Mathematical Reasoning Abilities Using Multi-Source Candidate Replacement","created":"2025-11-11","cited_by_count":1,"area":"lr"},{"id":"2511.14106","title":"Stealth Fine-Tuning: Efficiently Breaking Alignment in RVLMs Using Self-Generated CoT","created":"2025-11-18","cited_by_count":1,"area":"lr"},{"id":"2601.16506","title":"SafeThinker: Reasoning about Risk to Deepen Safety Beyond Shallow Alignment","created":"2026-01-23","cited_by_count":1,"area":"lr"},{"id":"2509.26345","title":"SafeBehavior: Simulating Human-Like Multistage Reasoning to Mitigate Jailbreak Attacks in Large Language Models","created":"2025-09-30","cited_by_count":0,"area":"lr"},{"id":"2510.09062","title":"ReFIne: A Framework for Trustworthy Large Reasoning Models with Reliability, Faithfulness, and Interpretability","created":"2025-10-10","cited_by_count":0,"area":"lr"},{"id":"2511.12155","title":"Rethinking Deep Alignment Through The Lens Of Incomplete Learning","created":"2025-11-15","cited_by_count":0,"area":"lr"},{"id":"2511.21214","title":"Self-Guided Adaptive Safety Alignment: Synthesizing and Internalizing Guidelines in Reasoning Models","created":"2025-11-26","cited_by_count":0,"area":"lr"},{"id":"2603.02675","title":"From Shallow to Deep: Pinning Semantic Intent via Causal GRPO","created":"2026-03-03","cited_by_count":0,"area":"lr"},{"id":"2605.19485","title":"Attention-Guided Reward for Reinforcement Learning-based Jailbreak against Large Reasoning Models","created":"2026-05-19","cited_by_count":0,"area":"lr"},{"id":"2605.24497","title":"Reasoning as an Attack Surface: Adaptive Evolutionary CoT Jailbreaks for LLMs","created":"2026-05-23","cited_by_count":0,"area":"lr"},{"id":"2608.09542","title":"Dual-Adversarial Safety Alignment: Cultivating Intrinsic Threat Comprehension in LRMs","created":"2026-08-10","cited_by_count":0,"area":"lr"},{"id":"2609.15989","title":"Corrupt Plans, Clean Traces: Evading Chain-of-Thought Monitoring with Plan Injection","created":"2026-09-14","cited_by_count":0,"area":"lr"},{"id":"2609.23587","title":"On the Efficiency-Safety Dilemma in Large Reasoning Models","created":"2026-09-20","cited_by_count":0,"area":"lr"},{"id":"2610.16312","title":"Narrative Paradoxes in LLM Inference: Shaping Reasoning Trajectories toward Misalignment","created":"2026-10-12","cited_by_count":0,"area":"lr"}],"next_cursor":null}