{"total":77,"rows":[{"id":"2402.05044","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","created":"2024-02-07","cited_by_count":228,"area":null},{"id":"2401.01286","title":"A Comprehensive Study of Knowledge Editing for Large Language Models","created":"2024-01-02","cited_by_count":163,"area":null},{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2405.16833","title":"Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Models","created":"2024-05-27","cited_by_count":125,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2402.18540","title":"Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templates","created":"2024-02-28","cited_by_count":96,"area":null},{"id":"2403.14472","title":"Detoxifying Large Language Models via Knowledge Editing","created":"2024-03-21","cited_by_count":87,"area":null},{"id":"2402.05119","title":"A Closer Look at the Limitations of Instruction Tuning","created":"2024-02-03","cited_by_count":77,"area":null},{"id":"2504.20984","title":"ACE: A Security Architecture for LLM-Integrated App Systems","created":"2025-04-29","cited_by_count":55,"area":null},{"id":"2510.26243","title":"Angular Steering: Behavior Control via Rotation in Activation Space","created":"2025-10-30","cited_by_count":53,"area":null},{"id":"2412.07097","title":"On Evaluating the Durability of Safeguards for Open-Weight LLMs","created":"2024-12-10","cited_by_count":52,"area":null},{"id":"2310.10383","title":"Privacy in Large Language Models: Attacks, Defenses and Future Directions","created":"2023-10-16","cited_by_count":51,"area":null},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2505.17306","title":"Refusal Direction is Universal Across Safety-Aligned Languages","created":"2025-05-22","cited_by_count":38,"area":null},{"id":"2311.09447","title":"How Trustworthy are Open-Source LLMs? An Assessment under Malicious Demonstrations Shows their Vulnerabilities","created":"2023-11-15","cited_by_count":33,"area":null},{"id":"2402.11889","title":"ROSE Doesn't Do That: Boosting the Safety of Instruction-Tuned Large Language Models with Reverse Prompt Contrastive Decoding","created":"2024-02-19","cited_by_count":32,"area":null},{"id":"2310.11409","title":"LLMs as Hackers: Autonomous Linux Privilege Escalation Attacks","created":"2023-10-17","cited_by_count":27,"area":null},{"id":"2402.11725","title":"How Susceptible are Large Language Models to Ideological Manipulation?","created":"2024-02-18","cited_by_count":26,"area":null},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2401.12585","title":"SLANG: New Concept Comprehension of Large Language Models","created":"2024-01-23","cited_by_count":20,"area":null},{"id":"2405.09373","title":"PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Models","created":"2024-05-15","cited_by_count":20,"area":null},{"id":"2509.03888","title":"False Sense of Security: Why Probing-based Malicious Input Detection Fails to Generalize","created":"2025-09-04","cited_by_count":19,"area":null},{"id":"2505.12038","title":"Safe Delta: Consistently Preserving Safety when Fine-Tuning LLMs on Diverse Datasets","created":"2025-05-17","cited_by_count":18,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2402.01909","title":"On Catastrophic Inheritance of Large Foundation Models","created":"2024-02-02","cited_by_count":15,"area":null},{"id":"2504.07137","title":"Large Language Model (LLM) for Software Security: Code Analysis, Malware Analysis, Reverse Engineering","created":"2025-04-07","cited_by_count":15,"area":null},{"id":"2311.00687","title":"Improving Interpersonal Communication by Simulating Audiences with Language Models","created":"2023-11-01","cited_by_count":14,"area":null},{"id":"2412.06748","title":"Refusal Tokens: A Simple Way to Calibrate Refusals in Large Language Models","created":"2024-12-09","cited_by_count":14,"area":null},{"id":"2410.19160","title":"Adversarial Attacks on Large Language Models Using Regularized Relaxation","created":"2024-10-24","cited_by_count":12,"area":null},{"id":"2509.13281","title":"RepIt: Steering Language Models with Concept-Specific Refusal Vectors","created":"2025-09-16","cited_by_count":12,"area":null},{"id":"2505.13348","title":"Investigating the Vulnerability of LLM-as-a-Judge Architectures to Prompt-Injection Attacks","created":"2025-05-19","cited_by_count":10,"area":null},{"id":"2403.13309","title":"Mapping LLM Security Landscapes: A Comprehensive Stakeholder Risk Assessment Proposal","created":"2024-03-20","cited_by_count":9,"area":null},{"id":"2405.15202","title":"Cross-Task Defense: Instruction-Tuning LLMs for Content Safety","created":"2024-05-24","cited_by_count":8,"area":null},{"id":"2411.08243","title":"Beyond the Safety Bundle: Auditing the Helpful and Harmless Dataset","created":"2024-11-12","cited_by_count":8,"area":null},{"id":"2601.23255","title":"Now You Hear Me: Audio Narrative Attacks Against Large Audio-Language Models","created":"2026-01-30","cited_by_count":8,"area":null},{"id":"2501.17132","title":"ASTRAL: Automated Safety Testing of Large Language Models","created":"2025-01-28","cited_by_count":7,"area":null},{"id":"2502.00840","title":"Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense","created":"2025-02-02","cited_by_count":7,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2310.14455","title":"An International Consortium for Evaluations of Societal-Scale Risks from Advanced AI","created":"2023-10-22","cited_by_count":5,"area":null},{"id":"2405.17998","title":"Exploring the Escalation of Source Bias in User, Data, and Recommender System Feedback Loop","created":"2024-05-28","cited_by_count":5,"area":null},{"id":"2410.04628","title":"Control Large Language Models via Divide and Conquer","created":"2024-10-06","cited_by_count":5,"area":null},{"id":"2410.09569","title":"Are You Human? An Adversarial Benchmark to Expose LLMs","created":"2024-10-12","cited_by_count":5,"area":null},{"id":"2502.04643","title":"Confidence Elicitation: A New Attack Vector for Large Language Models","created":"2025-02-07","cited_by_count":5,"area":null},{"id":"2402.09132","title":"Exploring the Adversarial Capabilities of Large Language Models","created":"2024-02-14","cited_by_count":4,"area":null},{"id":"2506.07330","title":"JavelinGuard: Low-Cost Transformer Architectures for LLM Security","created":"2025-06-09","cited_by_count":4,"area":null},{"id":"2406.02721","title":"Self-Control of LLM Behaviors by Compressing Suffix Gradient into Prefix Controller","created":"2024-06-04","cited_by_count":3,"area":null},{"id":"2503.17388","title":"AI Companies Should Report Pre- and Post-Mitigation Safety Evaluations","created":"2025-03-17","cited_by_count":3,"area":null},{"id":"2602.14135","title":"ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AI","created":"2026-02-15","cited_by_count":3,"area":null},{"id":"2603.01185","title":"Token-level Data Selection for Safe LLM Fine-tuning","created":"2026-03-01","cited_by_count":3,"area":null},{"id":"2606.14388","title":"A Low-Rank Subspace Analysis of LLM Interventions","created":"2026-06-12","cited_by_count":3,"area":null},{"id":"2411.07691","title":"New Emerged Security and Privacy of Pre-trained Model: a Survey and Outlook","created":"2024-11-12","cited_by_count":2,"area":null},{"id":"2412.18551","title":"Libra-Leaderboard: Towards Responsible AI through a Balanced Leaderboard of Safety and Capability","created":"2024-12-24","cited_by_count":2,"area":null},{"id":"2501.01741","title":"How Toxic Can You Get? Search-based Toxicity Testing for Large Language Models","created":"2025-01-03","cited_by_count":2,"area":null},{"id":"2506.20251","title":"Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Models","created":"2025-06-25","cited_by_count":2,"area":null},{"id":"2512.05439","title":"BEAVER: An Efficient Deterministic LLM Verifier","created":"2025-12-05","cited_by_count":2,"area":null},{"id":"2605.06901","title":"Reflections and New Directions for Human-Centered Large Language Models","created":"2026-05-07","cited_by_count":2,"area":null},{"id":"2502.16366","title":"A Generative Approach to LLM Harmfulness Mitigation with Red Flag Tokens","created":"2025-02-22","cited_by_count":1,"area":null},{"id":"2508.20333","title":"Poison Once, Refuse Forever: Weaponizing Alignment for Injecting Bias in LLMs","created":"2025-08-28","cited_by_count":1,"area":null},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2511.16699","title":"Detecting and Steering LLMs' Empathy in Action","created":"2025-11-17","cited_by_count":1,"area":null},{"id":"2606.13720","title":"Refusal Beyond a Single Direction: A Preliminary Comparison of Diff-in-Means and INLP","created":"2026-06-11","cited_by_count":1,"area":null},{"id":"2402.01725","title":"Fortifying Ethical Boundaries in AI: Advanced Strategies for Enhancing Security in Large Language Models","created":"2024-01-27","cited_by_count":0,"area":null},{"id":"2410.02465","title":"Revealing the Inherent Instructability of Pre-Trained Language Models","created":"2024-10-03","cited_by_count":0,"area":null},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2510.10486","title":"MEASER: Malware embedding attacks on open-source LLMs","created":"2025-10-12","cited_by_count":0,"area":null},{"id":"2512.10234","title":"InFerActive: Interactive Tree-Based Exploration of LLM Sampling for Safety Evaluation","created":"2025-12-11","cited_by_count":0,"area":null},{"id":"2602.17546","title":"Learning to Stay Safe: Adaptive Regularization Against Safety Degradation during Fine-Tuning","created":"2026-02-19","cited_by_count":0,"area":null},{"id":"2604.00324","title":"The Persistent Vulnerability of Aligned AI Systems","created":"2026-03-31","cited_by_count":0,"area":null},{"id":"2604.22089","title":"Ethics Testing: Proactive Identification of Generative AI System Harms","created":"2026-04-23","cited_by_count":0,"area":null},{"id":"2605.10639","title":"Navigating the Sea of LLM Evaluation: Investigating Bias in Toxicity Benchmarks","created":"2026-05-11","cited_by_count":0,"area":null},{"id":"2606.31876","title":"Harnessing Textual Refusal Directions for Multimodal Safety","created":"2026-06-30","cited_by_count":0,"area":null},{"id":"2607.20791","title":"Refusal-Gated Decoding: Preserving Refusal Behavior Under High-Temperature Sampling","created":"2026-07-22","cited_by_count":0,"area":null},{"id":"2608.05158","title":"Safe Evolution with Circuit Anchors","created":"2026-05-24","cited_by_count":0,"area":null},{"id":"2610.02373","title":"Hop-Decayed Influence: New Vulnerabilities of Structural Auxiliary Indexing in GraphRAG Pipelines with LLM","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}