{"total":367,"rows":[{"id":"2402.10260","title":"A StrongREJECT for Empty Jailbreaks","created":"2024-02-15","cited_by_count":385,"area":"safety"},{"id":"2402.08983","title":"SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding","created":"2024-02-14","cited_by_count":247,"area":"safety"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2402.00888","title":"Security and Privacy Challenges of Large Language Models: A Survey","created":"2024-01-30","cited_by_count":186,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2403.04783","title":"AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks","created":"2024-03-02","cited_by_count":145,"area":"agents"},{"id":"2402.09283","title":"Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey","created":"2024-02-14","cited_by_count":130,"area":null},{"id":"2405.21018","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","created":"2024-05-31","cited_by_count":110,"area":"safety"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2401.17256","title":"Weak-to-Strong Jailbreaking on Large Language Models","created":"2024-01-30","cited_by_count":107,"area":"safety"},{"id":"2402.13457","title":"A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models","created":"2024-02-21","cited_by_count":106,"area":"safety"},{"id":"2402.16914","title":"DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers","created":"2024-02-25","cited_by_count":101,"area":"alignment"},{"id":"2502.12893","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","created":"2025-02-18","cited_by_count":99,"area":"lr"},{"id":"2406.05644","title":"How Alignment and Jailbreak Work: Explain LLM Safety through Intermediate Hidden States","created":"2024-06-09","cited_by_count":98,"area":"alignment"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2405.18166","title":"Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editing","created":"2024-05-28","cited_by_count":79,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2401.06561","title":"Intention Analysis Makes LLMs A Good Jailbreak Defender","created":"2024-01-12","cited_by_count":74,"area":"alignment"},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2402.09091","title":"Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Clues","created":"2024-02-14","cited_by_count":68,"area":"safety"},{"id":"2404.12038","title":"Uncovering Safety Risks of Large Language Models through Concept Activation Vector","created":"2024-04-18","cited_by_count":67,"area":"alignment"},{"id":"2402.17262","title":"Speak Out of Turn: Safety Vulnerability of Large Language Models in Multi-turn Dialogue","created":"2024-02-27","cited_by_count":66,"area":"safety"},{"id":"2502.11054","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-02-16","cited_by_count":64,"area":"lr"},{"id":"2504.17704","title":"Safety in Large Reasoning Models: A Survey","created":"2025-04-24","cited_by_count":64,"area":"lr"},{"id":"2412.00473","title":"Jailbreak Large Vision-Language Models Through Multi-Modal Linkage","created":"2024-11-30","cited_by_count":62,"area":"safety"},{"id":"2403.12171","title":"EasyJailbreak: A Unified Framework for Jailbreaking Large Language Models","created":"2024-03-18","cited_by_count":60,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2502.19820","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","created":"2025-02-27","cited_by_count":54,"area":"safety"},{"id":"2312.12321","title":"Bypassing the Safety Training of Open-Source LLMs with Priming Attacks","created":"2023-12-19","cited_by_count":50,"area":"safety"},{"id":"2401.06824","title":"Revisiting Jailbreaking for Large Language Models: A Representation Engineering Perspective","created":"2024-01-12","cited_by_count":48,"area":"safety"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2405.12523","title":"Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Models","created":"2024-05-21","cited_by_count":46,"area":"mllm"},{"id":"2403.08424","title":"Distract Large Language Models for Automatic Jailbreak Attack","created":"2024-03-13","cited_by_count":45,"area":"safety"},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2403.04786","title":"Breaking Down the Defenses: A Comparative Survey of Attacks on Large Language Models","created":"2024-03-03","cited_by_count":44,"area":null},{"id":"2407.16667","title":"RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agent","created":"2024-07-23","cited_by_count":44,"area":"agents"},{"id":"2502.15806","title":"A Mousetrap: Fooling Large Reasoning Models for Jailbreak with Chain of Iterative Chaos","created":"2025-02-19","cited_by_count":43,"area":"lr"},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2401.16765","title":"A Cross-Language Investigation into Jailbreak Attacks in Large Language Models","created":"2024-01-30","cited_by_count":41,"area":"safety"},{"id":"2410.23856","title":"Can Language Models Perform Robust Reasoning in Chain-of-thought Prompting with Noisy Rationales?","created":"2024-10-31","cited_by_count":41,"area":"lr"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2505.11953","title":"Exploring Criteria of Loss Reweighting to Enhance LLM Unlearning","created":"2025-05-17","cited_by_count":39,"area":"safety"},{"id":"2506.07468","title":"Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models","created":"2025-06-09","cited_by_count":39,"area":"alignment"},{"id":"2503.04392","title":"AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management","created":"2025-03-06","cited_by_count":38,"area":"agents"},{"id":"2504.09466","title":"AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defender","created":"2025-04-13","cited_by_count":38,"area":"alignment"},{"id":"2506.14697","title":"AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions","created":"2025-06-17","cited_by_count":38,"area":"mllm"},{"id":"2402.12343","title":"Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!","created":"2024-02-19","cited_by_count":37,"area":"alignment"},{"id":"2410.23861","title":"Audio Is the Achilles' Heel: Red Teaming Audio Large Multimodal Models","created":"2024-10-31","cited_by_count":37,"area":"mllm"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2507.11097","title":"The Devil behind the mask: An emergent safety vulnerability of Diffusion LLMs","created":"2025-07-15","cited_by_count":34,"area":"inference"},{"id":"2403.04801","title":"Alpaca against Vicuna: Using LLMs to Uncover Memorization of LLMs","created":"2024-03-05","cited_by_count":33,"area":"agents"},{"id":"2405.14191","title":"S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Models","created":"2024-05-23","cited_by_count":33,"area":null},{"id":"2502.12520","title":"SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning","created":"2025-02-18","cited_by_count":32,"area":"mllm"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2406.12935","title":"ChatBug: A Common Vulnerability of Aligned LLMs Induced by Chat Templates","created":"2024-06-17","cited_by_count":30,"area":"alignment"},{"id":"2407.02855","title":"From Theft to Bomb-Making: The Ripple Effect of Unlearning in Defending Against Jailbreak Attacks","created":"2024-07-03","cited_by_count":29,"area":"safety"},{"id":"2505.24019","title":"LLM Agents Should Employ Security Principles","created":"2025-05-29","cited_by_count":29,"area":"agents"},{"id":"2410.20971","title":"BlueSuffix: Reinforced Blue Teaming for Vision-Language Models Against Jailbreak Attacks","created":"2024-10-28","cited_by_count":28,"area":"mllm"},{"id":"2312.04782","title":"Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMs","created":"2023-12-08","cited_by_count":27,"area":null},{"id":"2406.09179","title":"Towards Effective Evaluations and Comparisons for LLM Unlearning Methods","created":"2024-06-13","cited_by_count":27,"area":"safety"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2506.08292","title":"From Debate to Equilibrium: Belief-Driven Multi-Agent LLM Reasoning via Bayesian Nash Equilibrium","created":"2025-06-09","cited_by_count":26,"area":"lr"},{"id":"2406.11668","title":"\"Not Aligned\" is Not \"Malicious\": Being Careful about Hallucinations of Large Language Models' Jailbreak","created":"2024-06-17","cited_by_count":25,"area":"safety"},{"id":"2407.21659","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","created":"2024-07-31","cited_by_count":25,"area":"mllm"},{"id":"2503.22165","title":"Landscape of Thoughts: Visualizing the Reasoning Process of Large Language Models","created":"2025-03-28","cited_by_count":25,"area":"lr"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2406.08725","title":"RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs","created":"2024-06-13","cited_by_count":23,"area":"alignment"},{"id":"2411.01077","title":"Emoji Attack: Enhancing Jailbreak Attacks Against Judge LLM Detection","created":"2024-11-01","cited_by_count":23,"area":"safety"},{"id":"2412.17034","title":"Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language Models","created":"2024-12-22","cited_by_count":23,"area":"safety"},{"id":"2504.13626","title":"Thought Manipulation: External Thought Can Be Efficient for Large Reasoning Models","created":"2025-04-18","cited_by_count":23,"area":"lr"},{"id":"2506.08295","title":"From Passive to Active Reasoning: Can Large Language Models Ask the Right Questions under Incomplete Information?","created":"2025-06-09","cited_by_count":23,"area":"lr"},{"id":"2410.10343","title":"Locking Down the Finetuned LLMs Safety","created":"2024-10-14","cited_by_count":22,"area":null},{"id":"2411.11114","title":"JailbreakLens: Interpreting Jailbreak Mechanism in the Lens of Representation and Circuit","created":"2024-11-17","cited_by_count":22,"area":"safety"},{"id":"2502.03052","title":"Understanding and Enhancing the Transferability of Jailbreaking Attacks","created":"2025-02-05","cited_by_count":22,"area":"safety"},{"id":"2509.11864","title":"NeuroStrike: Neuron-Level Attacks on Aligned LLMs","created":"2025-09-15","cited_by_count":22,"area":"alignment"},{"id":"2601.01592","title":"OpenRT: An Open-Source Red Teaming Framework for Multimodal LLMs","created":"2026-01-04","cited_by_count":21,"area":"mllm"},{"id":"2402.16041","title":"Detecting Machine-Generated Texts by Multi-Population Aware Optimization for Maximum Mean Discrepancy","created":"2024-02-25","cited_by_count":20,"area":null},{"id":"2407.00869","title":"Large Language Models Are Involuntary Truth-Tellers: Exploiting Fallacy Failure for Jailbreak Attacks","created":"2024-07-01","cited_by_count":19,"area":"safety"},{"id":"2410.11459","title":"Jigsaw Puzzles: Splitting Harmful Questions to Jailbreak Large Language Models","created":"2024-10-15","cited_by_count":19,"area":"lr"},{"id":"2411.06426","title":"SequentialBreak: Large Language Models Can be Fooled by Embedding Jailbreak Prompts into Sequential Prompt Chains","created":"2024-11-10","cited_by_count":19,"area":"safety"},{"id":"2510.10073","title":"SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents","created":"2025-10-11","cited_by_count":19,"area":"agents"},{"id":"2405.04160","title":"A Causal Explainable Guardrails for Large Language Models","created":"2024-05-07","cited_by_count":18,"area":"safety"},{"id":"2505.14103","title":"AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Models","created":"2025-05-20","cited_by_count":18,"area":"safety"},{"id":"2406.19845","title":"Virtual Context: Enhancing Jailbreak Attacks with Special Token Injection","created":"2024-06-28","cited_by_count":17,"area":"safety"},{"id":"2505.17568","title":"JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models","created":"2025-05-23","cited_by_count":16,"area":"safety"},{"id":"2505.23559","title":"SafeScientist: Toward Risk-Aware Scientific Discoveries by LLM Agents","created":"2025-05-29","cited_by_count":16,"area":"agents"},{"id":"2510.26418","title":"Chain-of-Thought Hijacking","created":"2025-10-30","cited_by_count":16,"area":"lr"},{"id":"2402.07011","title":"FedImpro: Measuring and Improving Client Update in Federated Learning","created":"2024-02-10","cited_by_count":15,"area":null},{"id":"2412.08615","title":"Exploiting the Index Gradients for Optimization-Based Jailbreaking on Large Language Models","created":"2024-12-11","cited_by_count":15,"area":"safety"},{"id":"2402.05467","title":"Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia","created":"2024-02-08","cited_by_count":14,"area":"safety"},{"id":"2404.04392","title":"Fine-Tuning, Quantization, and LLMs: Navigating Unintended Outcomes","created":"2024-04-05","cited_by_count":14,"area":"safety"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2501.13080","title":"Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and Alignment","created":"2025-01-22","cited_by_count":14,"area":"lr"},{"id":"2502.04204","title":"Short-length Adversarial Training Helps LLMs Defend Long-length Jailbreak Attacks: Theoretical and Empirical Evidence","created":"2025-02-06","cited_by_count":14,"area":"safety"}],"next_cursor":"100"}