{"total":231,"rows":[{"id":"2312.06674","title":"Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversations","created":"2023-12-07","cited_by_count":1207,"area":null},{"id":"2403.04132","title":"Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preference","created":"2024-03-07","cited_by_count":1184,"area":"alignment"},{"id":"2406.18495","title":"WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs","created":"2024-06-26","cited_by_count":496,"area":"safety"},{"id":"2401.10019","title":"R-Judge: Benchmarking Safety Risk Awareness for LLM Agents","created":"2024-01-18","cited_by_count":288,"area":"agents"},{"id":"2405.20947","title":"OR-Bench: An Over-Refusal Benchmark for Large Language Models","created":"2024-05-31","cited_by_count":244,"area":"alignment"},{"id":"2406.18403","title":"LLMs instead of Human Judges? A Large Scale Empirical Study across 20 NLP Evaluation Tasks","created":"2024-06-26","cited_by_count":243,"area":null},{"id":"2407.21772","title":"ShieldGemma: Generative AI Content Moderation Based on Gemma","created":"2024-07-31","cited_by_count":243,"area":null},{"id":"2406.14598","title":"SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusal","created":"2024-06-20","cited_by_count":240,"area":"alignment"},{"id":"2402.05044","title":"SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Models","created":"2024-02-07","cited_by_count":228,"area":null},{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2404.05993","title":"AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Experts","created":"2024-04-09","cited_by_count":136,"area":null},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2505.23836","title":"Large Language Models Often Know When They Are Being Evaluated","created":"2025-05-28","cited_by_count":128,"area":null},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2502.17420","title":"The Geometry of Refusal in Large Language Models: Concept Cones and Representational Independence","created":"2025-02-24","cited_by_count":115,"area":"alignment"},{"id":"2501.18492","title":"GuardReasoner: Towards Reasoning-based LLM Safeguards","created":"2025-01-30","cited_by_count":100,"area":"lr"},{"id":"2404.08676","title":"ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming","created":"2024-04-06","cited_by_count":98,"area":"safety"},{"id":"2402.13494","title":"GradSafe: Detecting Jailbreak Prompts for LLMs via Safety-Critical Gradient Analysis","created":"2024-02-21","cited_by_count":96,"area":"safety"},{"id":"2403.02839","title":"An Empirical Study of LLM-as-a-Judge for LLM Evaluation: Fine-tuned Judge Model is not a General Substitute for GPT-4","created":"2024-03-05","cited_by_count":94,"area":null},{"id":"2507.11878","title":"LLMs Encode Harmfulness and Refusal Separately","created":"2025-07-16","cited_by_count":88,"area":"safety"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2404.05399","title":"SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety","created":"2024-04-08","cited_by_count":77,"area":"safety"},{"id":"2311.08370","title":"SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Models","created":"2023-11-14","cited_by_count":76,"area":null},{"id":"2407.17436","title":"AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policies","created":"2024-07-11","cited_by_count":74,"area":null},{"id":"2403.13031","title":"RigorLLM: Resilient Guardrails for Large Language Models against Undesired Content","created":"2024-03-19","cited_by_count":68,"area":"safety"},{"id":"2504.17704","title":"Safety in Large Reasoning Models: A Survey","created":"2025-04-24","cited_by_count":64,"area":"lr"},{"id":"2504.04377","title":"PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages","created":"2025-04-06","cited_by_count":59,"area":null},{"id":"2407.05557","title":"$R^2$-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning","created":"2024-07-08","cited_by_count":43,"area":"lr"},{"id":"2505.11049","title":"GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning","created":"2025-05-16","cited_by_count":42,"area":"lr"},{"id":"2507.16795","title":"Steering Out-of-Distribution Generalization with Concept Ablation Fine-Tuning","created":"2025-07-22","cited_by_count":39,"area":null},{"id":"2402.12343","title":"Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!","created":"2024-02-19","cited_by_count":37,"area":"alignment"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2406.00936","title":"A Survey of Useful LLM Evaluation","created":"2024-06-03","cited_by_count":29,"area":null},{"id":"2510.09781","title":"Building a Foundational Guardrail for General Agentic Systems via Synthetic Data","created":"2025-10-10","cited_by_count":29,"area":"agents"},{"id":"2409.15154","title":"RMCBench: Benchmarking Large Language Models' Resistance to Malicious Code","created":"2024-09-23","cited_by_count":28,"area":"safety"},{"id":"2504.18838","title":"Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks","created":"2025-04-26","cited_by_count":28,"area":null},{"id":"2407.10627","title":"Arena Learning: Build Data Flywheel for LLMs Post-training via Simulated Chatbot Arena","created":"2024-07-15","cited_by_count":26,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2501.00192","title":"MLLM-as-a-Judge for Image Safety without Human Labeling","created":"2024-12-31","cited_by_count":23,"area":null},{"id":"2506.09996","title":"From Judgment to Interference: Early Stopping LLM Harmful Outputs via Streaming Content Monitoring","created":"2025-06-11","cited_by_count":22,"area":"alignment"},{"id":"2503.06550","title":"BingoGuard: LLM Content Moderation Tools with Risk Levels","created":"2025-03-09","cited_by_count":21,"area":null},{"id":"2405.09373","title":"PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Models","created":"2024-05-15","cited_by_count":20,"area":null},{"id":"2501.14940","title":"CASE-Bench: Context-Aware SafEty Benchmark for Large Language Models","created":"2025-01-24","cited_by_count":20,"area":"alignment"},{"id":"2410.01524","title":"HarmAug: Effective Data Augmentation for Knowledge Distillation of Safety Guard Models","created":"2024-10-02","cited_by_count":19,"area":"distill"},{"id":"2502.05163","title":"Enhancing LLM Safety Through a Theoretical Minimax Game Lens","created":"2025-02-07","cited_by_count":19,"area":"safety"},{"id":"2509.02563","title":"DynaGuard: A Dynamic Guardian Model With User-Defined Policies","created":"2025-09-02","cited_by_count":19,"area":"safety"},{"id":"2406.09264","title":"Position: Towards Bidirectional Human-AI Alignment","created":"2024-06-13","cited_by_count":18,"area":"alignment"},{"id":"2502.15799","title":"Investigating the Impact of Quantization Methods on the Safety and Reliability of Large Language Models","created":"2025-02-18","cited_by_count":18,"area":"lr"},{"id":"2505.18325","title":"Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundary","created":"2025-05-23","cited_by_count":18,"area":"safety"},{"id":"2405.13820","title":"Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching","created":"2024-05-22","cited_by_count":17,"area":"alignment"},{"id":"2603.12277","title":"Prompt Injection as Role Confusion","created":"2026-02-22","cited_by_count":17,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2505.20087","title":"Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Models","created":"2025-05-26","cited_by_count":16,"area":"lr"},{"id":"2509.26238","title":"Beyond Linear Probes: Dynamic Safety Monitoring for Language Models","created":"2025-09-30","cited_by_count":16,"area":"safety"},{"id":"2404.03820","title":"CantTalkAboutThis: Aligning Language Models to Stay on Topic in Dialogues","created":"2024-04-04","cited_by_count":15,"area":"lr"},{"id":"2406.10311","title":"CHiSafetyBench: A Chinese Hierarchical Safety Benchmark for Large Language Models","created":"2024-06-14","cited_by_count":15,"area":null},{"id":"2606.28733","title":"Agentic Abstention: Do Agents Know When to Stop Instead of Act?","created":"2026-06-27","cited_by_count":15,"area":"agents"},{"id":"2406.01364","title":"BELLS: A Framework Towards Future Proof Benchmarks for the Evaluation of LLM Safeguards","created":"2024-06-03","cited_by_count":14,"area":null},{"id":"2407.08422","title":"On the (In)Security of LLM App Stores","created":"2024-07-11","cited_by_count":14,"area":null},{"id":"2410.22153","title":"Benchmarking LLM Guardrails in Handling Multilingual Toxicity","created":"2024-10-29","cited_by_count":14,"area":"safety"},{"id":"2406.10977","title":"Toward Optimal LLM Alignments Using Two-Player Games","created":"2024-06-16","cited_by_count":13,"area":"alignment"},{"id":"2504.12397","title":"Activated LoRA: Fine-tuned LLMs for Intrinsics","created":"2025-04-16","cited_by_count":12,"area":null},{"id":"2410.08660","title":"RePD: Defending Jailbreak Attack through a Retrieval-based Prompt Decomposition Process","created":"2024-10-11","cited_by_count":11,"area":"safety"},{"id":"2412.06483","title":"SafeWorld: Geo-Diverse Safety Alignment","created":"2024-12-09","cited_by_count":11,"area":"wm"},{"id":"2412.16974","title":"Cannot or Should Not? Automatic Analysis of Refusal Composition in IFT/RLHF Datasets and Refusal Behavior of Black-Box LLMs","created":"2024-12-22","cited_by_count":11,"area":"alignment"},{"id":"2501.18638","title":"Graph of Attacks with Pruning: Optimizing Stealthy Jailbreak Prompt Generation for Enhanced LLM Content Moderation","created":"2025-01-28","cited_by_count":11,"area":"safety"},{"id":"2604.18519","title":"LLM Safety From Within: Detecting Harmful Content with Internal Representations","created":"2026-04-20","cited_by_count":11,"area":"safety"},{"id":"2410.16665","title":"SafetyAnalyst: Interpretable, Transparent, and Steerable Safety Moderation for AI Behavior","created":"2024-10-22","cited_by_count":10,"area":null},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2502.11411","title":"Detecting and Filtering Unsafe Training Data via Data Attribution with Denoised Representation","created":"2025-02-17","cited_by_count":9,"area":null},{"id":"2502.15427","title":"Adversarial Prompt Evaluation: Systematic Benchmarking of Guardrails Against Prompt Input Attacks on LLMs","created":"2025-02-21","cited_by_count":9,"area":"safety"},{"id":"2609.37647","title":"Evaluating and Benchmarking the System One Model Jev","created":"2026-09-29","cited_by_count":9,"area":null},{"id":"2404.09785","title":"Benchmarking Llama2, Mistral, Gemma and GPT for Factuality, Toxicity, Bias and Propensity for Hallucinations","created":"2024-04-15","cited_by_count":8,"area":null},{"id":"2410.21791","title":"Enhancing Adversarial Attacks through Chain of Thought","created":"2024-10-29","cited_by_count":8,"area":"lr"},{"id":"2502.08142","title":"Bridging the Safety Gap: A Guardrail Pipeline for Trustworthy LLM Inferences","created":"2025-02-12","cited_by_count":8,"area":"safety"},{"id":"2504.10277","title":"RealHarm: A Collection of Real-World Language Model Application Failures","created":"2025-04-14","cited_by_count":8,"area":null},{"id":"2505.20309","title":"Guiding Giants: Lightweight Controllers for Weighted Activation Steering in LLMs","created":"2025-05-22","cited_by_count":8,"area":"mechinterp"},{"id":"2510.02286","title":"Tree-based Dialogue Reinforced Policy Optimization for Red-Teaming Attacks","created":"2025-10-02","cited_by_count":8,"area":"safety"},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2409.17190","title":"Enhancing Guardrails for Safe and Secure Healthcare AI","created":"2024-09-25","cited_by_count":7,"area":"safety"},{"id":"2409.19521","title":"GenTel-Safe: A Unified Benchmark and Shielding Framework for Defending Against Prompt Injection Attacks","created":"2024-09-29","cited_by_count":7,"area":"safety"},{"id":"2411.07122","title":"SCAR: Sparse Conditioned Autoencoders for Concept Detection and Steering in LLMs","created":"2024-11-11","cited_by_count":7,"area":"safety"},{"id":"2412.15035","title":"LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistencies","created":"2024-12-19","cited_by_count":7,"area":null},{"id":"2412.15265","title":"Chinese SafetyQA: A Safety Short-form Factuality Benchmark for Large Language Models","created":"2024-12-17","cited_by_count":7,"area":null},{"id":"2601.10141","title":"Understanding and Preserving Safety in Fine-Tuned LLMs","created":"2026-01-15","cited_by_count":7,"area":"safety"},{"id":"2602.23636","title":"FlexGuard: Continuous Risk Scoring for Strictness-Adaptive LLM Content Moderation","created":"2026-02-27","cited_by_count":7,"area":null},{"id":"2409.13979","title":"Role-Play Paradox in Large Language Models: Reasoning Performance Gains and Ethical Dilemmas","created":"2024-09-21","cited_by_count":6,"area":"lr"},{"id":"2410.22307","title":"SVIP: Towards Verifiable Inference of Open-source Large Language Models","created":"2024-10-29","cited_by_count":6,"area":null},{"id":"2504.20106","title":"Adaptive Helpfulness-Harmlessness Alignment with Preference Vectors","created":"2025-04-27","cited_by_count":6,"area":"alignment"},{"id":"2506.02945","title":"Quantitative LLM Judges","created":"2025-06-03","cited_by_count":6,"area":null},{"id":"2607.19829","title":"DARWIN: Evolving Jailbreak Adversary and Guardrail for LLM Safety Evaluation and Protection","created":"2026-07-22","cited_by_count":6,"area":"safety"},{"id":"2409.06072","title":"DetoxBench: Benchmarking Large Language Models for Multitask Fraud & Abuse Detection","created":"2024-09-09","cited_by_count":5,"area":null},{"id":"2412.14050","title":"Cross-Lingual Transfer of Debiasing and Detoxification in Multilingual LLMs: An Extensive Investigation","created":"2024-12-18","cited_by_count":5,"area":null},{"id":"2412.21052","title":"Towards Effective Discrimination Testing for Generative AI","created":"2024-12-30","cited_by_count":5,"area":null},{"id":"2502.14133","title":"Self-Regularization with Sparse Autoencoders for Controllable LLM-based Classification","created":"2025-02-19","cited_by_count":5,"area":"mechinterp"},{"id":"2502.18935","title":"JailBench: A Comprehensive Chinese Security Assessment Benchmark for Large Language Models","created":"2025-02-26","cited_by_count":5,"area":"safety"},{"id":"2507.09424","title":"DATE-LM: Benchmarking Data Attribution Evaluation for Large Language Models","created":"2025-07-12","cited_by_count":5,"area":null}],"next_cursor":"100"}