{"total":195,"rows":[{"id":"2406.11717","title":"Refusal in Language Models Is Mediated by a Single Direction","created":"2024-06-17","cited_by_count":1032,"area":"safety"},{"id":"2402.08787","title":"Rethinking Machine Unlearning for Large Language Models","created":"2024-02-13","cited_by_count":257,"area":"lr"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2402.16835","title":"Eight Methods to Evaluate Robust Unlearning in LLMs","created":"2024-02-26","cited_by_count":163,"area":"safety"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2409.18025","title":"An Adversarial Perspective on Machine Unlearning for AI Safety","created":"2024-09-26","cited_by_count":123,"area":"safety"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2402.01109","title":"Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack","created":"2024-02-02","cited_by_count":115,"area":"alignment"},{"id":"2402.18540","title":"Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templates","created":"2024-02-28","cited_by_count":96,"area":null},{"id":"2403.03329","title":"Guardrail Baselines for Unlearning in LLMs","created":"2024-03-05","cited_by_count":96,"area":"safety"},{"id":"2405.14577","title":"Representation Noising: A Defence Mechanism Against Harmful Finetuning","created":"2024-05-23","cited_by_count":96,"area":"safety"},{"id":"2405.18641","title":"Lisa: Lazy Safety Alignment for Large Language Models against Harmful Fine-tuning Attack","created":"2024-05-28","cited_by_count":92,"area":"alignment"},{"id":"2409.01586","title":"Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation","created":"2024-09-03","cited_by_count":92,"area":null},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2403.05030","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","created":"2024-03-08","cited_by_count":88,"area":"safety"},{"id":"2408.09600","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","created":"2024-08-18","cited_by_count":72,"area":"alignment"},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2311.09578","title":"Tied-Lora: Enhancing parameter efficiency of LoRA with weight tying","created":"2023-11-16","cited_by_count":65,"area":null},{"id":"2406.06391","title":"Towards Lifelong Learning of Large Language Models: A Survey","created":"2024-06-10","cited_by_count":64,"area":null},{"id":"2403.08350","title":"CoIN: A Benchmark of Continual Instruction tuNing for Multimodel Large Language Model","created":"2024-03-13","cited_by_count":61,"area":"mllm"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2410.03415","title":"Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation","created":"2024-10-04","cited_by_count":48,"area":null},{"id":"2405.19550","title":"Stress-Testing Capability Elicitation With Password-Locked Models","created":"2024-05-29","cited_by_count":46,"area":null},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2501.01765","title":"SaLoRA: Safety-Alignment Preserved Low-Rank Adaptation","created":"2025-01-03","cited_by_count":42,"area":"safety"},{"id":"2502.07218","title":"LLM Unlearning via Neural Activation Redirection","created":"2025-02-11","cited_by_count":41,"area":"safety"},{"id":"2502.05209","title":"Model Tampering Attacks Enable More Rigorous Evaluations of LLM Capabilities","created":"2025-02-03","cited_by_count":39,"area":null},{"id":"2403.01251","title":"Accelerating Greedy Coordinate Gradient and General Prompt Optimization via Probe Sampling","created":"2024-03-02","cited_by_count":37,"area":"safety"},{"id":"2410.09760","title":"Targeted Vaccine: Safety Alignment for Large Language Models against Harmful Fine-Tuning via Layer-wise Perturbation","created":"2024-10-13","cited_by_count":37,"area":"alignment"},{"id":"2402.16382","title":"Immunization against harmful fine-tuning attacks","created":"2024-02-26","cited_by_count":35,"area":null},{"id":"2412.13879","title":"Crabs: Consuming Resource via Auto-generation for LLM-DoS Attack under Black-box Settings","created":"2024-12-18","cited_by_count":35,"area":null},{"id":"2410.04332","title":"Gradient Routing: Masking Gradients to Localize Computation in Neural Networks","created":"2024-10-06","cited_by_count":34,"area":null},{"id":"2406.14595","title":"Adversaries Can Misuse Combinations of Safe Models","created":"2024-06-20","cited_by_count":32,"area":null},{"id":"2402.14968","title":"Mitigating Fine-tuning based Jailbreak Attack with Backdoor Enhanced Safety Alignment","created":"2024-02-22","cited_by_count":31,"area":null},{"id":"2406.16797","title":"Lottery Ticket Adaptation: Mitigating Destructive Interference in LLMs","created":"2024-06-24","cited_by_count":31,"area":null},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2405.16229","title":"No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attacks","created":"2024-05-25","cited_by_count":29,"area":"alignment"},{"id":"2410.15686","title":"NetSafe: Exploring the Topological Safety of Multi-agent Networks","created":"2024-10-21","cited_by_count":29,"area":"agents"},{"id":"2506.17209","title":"Fine-Tuning Lowers Safety and Disrupts Evaluation Consistency","created":"2025-06-20","cited_by_count":27,"area":"safety"},{"id":"2410.17509","title":"WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models","created":"2024-10-23","cited_by_count":26,"area":"safety"},{"id":"2403.00108","title":"LoRATK: LoRA Once, Backdoor Everywhere in the Share-and-Play Ecosystem","created":"2024-02-29","cited_by_count":24,"area":null},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2407.13934","title":"Towards Trustworthy AI: A Review of Ethical and Robust Large Language Models","created":"2024-06-01","cited_by_count":22,"area":null},{"id":"2407.20224","title":"Can Editing LLMs Inject Harm?","created":"2024-07-29","cited_by_count":22,"area":"safety"},{"id":"2505.06843","title":"Benign Samples Matter! Fine-tuning On Outlier Benign Samples Severely Breaks Safety","created":"2025-05-11","cited_by_count":22,"area":"safety"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2407.17915","title":"The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models","created":"2024-07-25","cited_by_count":20,"area":"agents"},{"id":"2409.19998","title":"Do Influence Functions Work on Large Language Models?","created":"2024-09-30","cited_by_count":20,"area":null},{"id":"2501.18100","title":"Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbation","created":"2025-01-30","cited_by_count":20,"area":null},{"id":"2506.05346","title":"Why LLM Safety Guardrails Collapse After Fine-tuning: A Similarity Analysis Between Alignment and Fine-tuning Datasets","created":"2025-06-05","cited_by_count":20,"area":"alignment"},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2503.11880","title":"FedALT: Federated Fine-Tuning through Adaptive Local Training with Rest-of-World LoRA","created":"2025-03-14","cited_by_count":13,"area":"moe"},{"id":"2507.21182","title":"SDD: Self-Degraded Defense against Malicious Fine-tuning","created":"2025-07-27","cited_by_count":13,"area":"alignment"},{"id":"2410.09114","title":"Catastrophic Cyber Capabilities Benchmark (3CB): Robustly Evaluating LLM Agent Cyber Offense Capabilities","created":"2024-10-10","cited_by_count":12,"area":"agents"},{"id":"2411.05818","title":"Open LLMs are Necessary for Current Private Adaptations and Outperform their Closed Alternatives","created":"2024-11-02","cited_by_count":12,"area":null},{"id":"2505.22310","title":"From Dormant to Deleted: Tamper-Resistant Unlearning Through Weight-Space Regularization","created":"2025-05-28","cited_by_count":12,"area":"safety"},{"id":"2505.01456","title":"Unlearning Sensitive Information in Multimodal LLMs: Benchmark and Attack-Defense Evaluation","created":"2025-05-01","cited_by_count":11,"area":"mllm"},{"id":"2505.16559","title":"CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2505.17196","title":"Shape it Up! Restoring LLM Safety during Finetuning","created":"2025-05-22","cited_by_count":11,"area":"alignment"},{"id":"2508.07172","title":"Gradient Surgery for Safe LLM Fine-Tuning","created":"2025-08-10","cited_by_count":11,"area":"alignment"},{"id":"2512.05648","title":"Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs","created":"2025-12-05","cited_by_count":11,"area":"safety"},{"id":"2512.12069","title":"Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring","created":"2025-12-12","cited_by_count":11,"area":"lr"},{"id":"2510.02833","title":"Attack via Overfitting: 10-shot Benign Fine-tuning to Jailbreak LLMs","created":"2025-10-03","cited_by_count":10,"area":"alignment"},{"id":"2512.10150","title":"Unforgotten Safety: Preserving Safety Alignment of Large Language Models with Continual Learning","created":"2025-12-10","cited_by_count":10,"area":"alignment"},{"id":"2403.08822","title":"LoRA-SP: Streamlined Partial Parameter Adaptation for Resource-Efficient Fine-Tuning of Large Language Models","created":"2024-02-28","cited_by_count":9,"area":null},{"id":"2404.13060","title":"The Necessity of AI Audit Standards Boards","created":"2024-04-11","cited_by_count":9,"area":null},{"id":"2406.01514","title":"Decoupled Alignment for Robust Plug-and-Play Adaptation","created":"2024-06-03","cited_by_count":9,"area":"alignment"},{"id":"2407.17447","title":"FLRT: Fluent Student-Teacher Redteaming","created":"2024-07-24","cited_by_count":9,"area":"safety"},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2508.14031","title":"Unintended Misalignment from Agentic Fine-Tuning: Risks and Mitigation","created":"2025-08-19","cited_by_count":9,"area":"agents"},{"id":"2510.14301","title":"A Guardrail for Safety Preservation: When Safety-Sensitive Subspace Meets Harmful-Resistant Null-Space","created":"2025-10-16","cited_by_count":9,"area":"alignment"},{"id":"2511.21399","title":"Steering Awareness: Detecting Activation Steering from Within","created":"2025-11-26","cited_by_count":9,"area":"mechinterp"},{"id":"2512.24143","title":"Activation Steering for Masked Diffusion Language Models","created":"2025-12-30","cited_by_count":9,"area":"diffusion"},{"id":"2508.20697","title":"Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning","created":"2025-08-28","cited_by_count":8,"area":null},{"id":"2510.07835","title":"MetaDefense: Defending Finetuning-based Jailbreak Attack Before and During Generation","created":"2025-10-09","cited_by_count":8,"area":"safety"},{"id":"2601.01887","title":"Safety at One Shot: Patching Fine-Tuned LLMs with A Single Instance","created":"2026-01-05","cited_by_count":8,"area":"alignment"},{"id":"2503.19041","title":"LookAhead Tuning: Safer Language Models via Partial Answer Previews","created":"2025-03-24","cited_by_count":7,"area":"alignment"},{"id":"2504.04215","title":"Towards Understanding and Improving Refusal in Compressed Models via Mechanistic Interpretability","created":"2025-04-05","cited_by_count":7,"area":"mechinterp"},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2601.10141","title":"Understanding and Preserving Safety in Fine-Tuned LLMs","created":"2026-01-15","cited_by_count":7,"area":"safety"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2504.21053","title":"NeuRel-Attack: Neuron Relearning for Safety Disalignment in Large Language Models","created":"2025-04-29","cited_by_count":6,"area":"alignment"},{"id":"2505.14185","title":"Safety Subspaces are Not Linearly Distinct: A Fine-Tuning Case Study","created":"2025-05-20","cited_by_count":6,"area":"alignment"},{"id":"2508.21300","title":"Improving Fisher Information Estimation and Efficiency for LoRA-based LLM Unlearning","created":"2025-08-29","cited_by_count":6,"area":"safety"},{"id":"2603.03308","title":"Old Habits Die Hard: How Conversational History Geometrically Traps LLMs","created":"2026-02-08","cited_by_count":6,"area":null},{"id":"2409.00055","title":"SORSA: Singular Values and Orthonormal Regularized Singular Vectors Adaptation of Large Language Models","created":"2024-08-21","cited_by_count":5,"area":null},{"id":"2410.10150","title":"Jailbreak Instruction-Tuned LLMs via end-of-sentence MLP Re-weighting","created":"2024-10-14","cited_by_count":5,"area":"safety"},{"id":"2410.22944","title":"Focus On This, Not That! Steering LLMs with Adaptive Feature Specification","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2508.20766","title":"Turning the Spell Around: Lightweight Alignment Amplification via Rank-One Safety Injection","created":"2025-08-28","cited_by_count":5,"area":"alignment"},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2510.12178","title":"Evolution of meta's llama models and parameter-efficient fine-tuning of large language models: a survey","created":"2025-10-14","cited_by_count":5,"area":null},{"id":"2511.20104","title":"The Devil in the Details: Emergent Misalignment, Format and Coherence in Open-Weights LLMs","created":"2025-11-25","cited_by_count":5,"area":null},{"id":"2409.12914","title":"Evaluating Defences against Unsafe Feedback in RLHF","created":"2024-09-19","cited_by_count":4,"area":"alignment"}],"next_cursor":"100"}