{"total":16,"rows":[{"id":"2511.20597","title":"BrowseSafe: Understanding and Preventing Prompt Injection Within AI Browser Agents","created":"2025-11-25","cited_by_count":24,"area":"safety"},{"id":"2506.10424","title":"SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks","created":"2025-06-12","cited_by_count":10,"area":"safety"},{"id":"2607.07184","title":"Predicting LLM Safety Before Release by Simulating Deployment","created":"2026-07-08","cited_by_count":8,"area":"safety"},{"id":"2506.14682","title":"AIRTBench: Measuring Autonomous AI Red Teaming Capabilities in Language Models","created":"2025-06-17","cited_by_count":7,"area":"safety"},{"id":"2601.22136","title":"StepShield: When, Not Whether to Intervene on Rogue Agents","created":"2026-01-29","cited_by_count":7,"area":"safety"},{"id":"2410.13691","title":"Jailbreaking LLM-Controlled Robots","created":"2024-10-17","cited_by_count":6,"area":"safety"},{"id":"2606.12747","title":"Prefill Awareness in Large Language Models","created":"2026-06-10","cited_by_count":4,"area":"safety"},{"id":"2511.16278","title":"\"To Survive, I Must Defect\": Jailbreaking LLMs via the Game-Theory Scenarios","created":"2025-11-20","cited_by_count":3,"area":"safety"},{"id":"2510.05169","title":"From Poisoned to Aware: Fostering Backdoor Self-Awareness in LLMs","created":"2025-10-05","cited_by_count":2,"area":"safety"},{"id":"2510.13727","title":"From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails","created":"2025-10-15","cited_by_count":1,"area":"safety"},{"id":"2603.25176","title":"Prompt Attack Detection with LLM-as-a-Judge and Mixture-of-Models","created":"2026-03-26","cited_by_count":1,"area":"safety"},{"id":"2602.04196","title":"The Missing Half: Unveiling Training-time Implicit Safety Risks Beyond Deployment","created":"2026-02-04","cited_by_count":0,"area":"safety"},{"id":"2606.16242","title":"Rapid Poison: Practical Poisoning Attacks Against the Rapid Response Framework","created":"2026-06-15","cited_by_count":0,"area":"safety"},{"id":"2606.24081","title":"PixJail: Self-Evolving Paper-to-Pipeline Reproduction for Text-to-Image Jailbreak Evaluation","created":"2026-06-23","cited_by_count":0,"area":"safety"},{"id":"2607.20852","title":"Code Monitor Red Teaming for Public-Test-Passing Code","created":"2026-07-23","cited_by_count":0,"area":"safety"},{"id":"2609.36121","title":"Render Before Reading: Visual Rendering as a Prompt Injection Defense","created":"2026-09-28","cited_by_count":0,"area":"safety"}],"next_cursor":null}