{"total":88,"rows":[{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2402.08679","title":"COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllability","created":"2024-02-13","cited_by_count":175,"area":"safety"},{"id":"2402.02207","title":"Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Models","created":"2024-02-03","cited_by_count":167,"area":"safety"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2412.03556","title":"Best-of-N Jailbreaking","created":"2024-12-04","cited_by_count":76,"area":"safety"},{"id":"2410.18927","title":"SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models","created":"2024-10-24","cited_by_count":69,"area":"safety"},{"id":"2405.20773","title":"Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Character","created":"2024-05-25","cited_by_count":68,"area":"safety"},{"id":"2412.00473","title":"Jailbreak Large Vision-Language Models Through Multi-Modal Linkage","created":"2024-11-30","cited_by_count":62,"area":"safety"},{"id":"2406.11036","title":"garak: A Framework for Security Probing Large Language Models","created":"2024-06-16","cited_by_count":49,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2410.18057","title":"CLEAR: Character Unlearning in Textual and Visual Modalities","created":"2024-10-23","cited_by_count":39,"area":"safety"},{"id":"2406.06302","title":"Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attacks","created":"2024-06-10","cited_by_count":38,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2412.05934","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","created":"2024-12-08","cited_by_count":33,"area":"safety"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2501.13772","title":"Jailbreak-AudioBench: In-Depth Evaluation and Analysis of Jailbreak Threats for Large Audio Language Models","created":"2025-01-23","cited_by_count":23,"area":"safety"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2502.21059","title":"FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowcharts","created":"2025-02-28","cited_by_count":18,"area":"safety"},{"id":"2508.07173","title":"Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Models","created":"2025-08-10","cited_by_count":18,"area":"safety"},{"id":"2505.17568","title":"JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models","created":"2025-05-23","cited_by_count":16,"area":"safety"},{"id":"2509.14558","title":"LLM Jailbreak Detection for (Almost) Free!","created":"2025-09-18","cited_by_count":13,"area":"safety"},{"id":"2509.22292","title":"Jailbreaking on Text-to-Video Models via Scene Splitting Strategy","created":"2025-09-26","cited_by_count":12,"area":"safety"},{"id":"2501.18638","title":"Graph of Attacks with Pruning: Optimizing Stealthy Jailbreak Prompt Generation for Enhanced LLM Content Moderation","created":"2025-01-28","cited_by_count":11,"area":"safety"},{"id":"2512.06589","title":"OmniSafeBench-MM: A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack-Defense Evaluation","created":"2025-12-06","cited_by_count":11,"area":"safety"},{"id":"2512.21008","title":"GateBreaker: Gate-Guided Attacks on Mixture-of-Expert LLMs","created":"2025-12-24","cited_by_count":11,"area":"safety"},{"id":"2410.16527","title":"Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis","created":"2024-10-21","cited_by_count":10,"area":"safety"},{"id":"2510.09694","title":"Kelp: A Streaming Safeguard for Large Models via Latent Dynamics-Guided Risk Detection","created":"2025-10-09","cited_by_count":9,"area":"safety"},{"id":"2601.09625","title":"The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism","created":"2026-01-14","cited_by_count":9,"area":"safety"},{"id":"2408.09093","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","created":"2024-08-17","cited_by_count":8,"area":"safety"},{"id":"2510.17633","title":"SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steering","created":"2025-10-20","cited_by_count":8,"area":"safety"},{"id":"2407.02411","title":"Video Watermarking: Safeguarding Your Video from (Unauthorized) Annotations by Video-based LLMs","created":"2024-07-02","cited_by_count":7,"area":"safety"},{"id":"2505.23856","title":"OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2607.07907","title":"Multimodal Unlearning Across Vision, Language, Video, and Audio: Survey of Methods, Datasets, and Benchmarks","created":"2026-07-08","cited_by_count":7,"area":"safety"},{"id":"2502.00653","title":"Towards Robust Multimodal Large Language Models Against Jailbreak Attacks","created":"2025-02-02","cited_by_count":5,"area":"safety"},{"id":"2505.18864","title":"Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework","created":"2025-05-24","cited_by_count":5,"area":"safety"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2509.08000","title":"AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs","created":"2025-09-06","cited_by_count":4,"area":"safety"},{"id":"2601.10543","title":"Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing","created":"2026-01-15","cited_by_count":4,"area":"safety"},{"id":"2408.08464","title":"$\\textit{MMJ-Bench}$: A Comprehensive Study on Jailbreak Attacks and Defenses for Multimodal Large Language Models","created":"2024-08-16","cited_by_count":3,"area":"safety"},{"id":"2510.17277","title":"PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2601.05339","title":"Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models","created":"2026-01-08","cited_by_count":3,"area":"safety"},{"id":"2605.18168","title":"Acoustic Interference: A New Paradigm Weaponizing Acoustic Latent Semantic for Universal Jailbreak against Large Audio Language Models","created":"2026-05-18","cited_by_count":3,"area":"safety"},{"id":"2407.16686","title":"Can Large Language Models Automatically Jailbreak GPT-4V?","created":"2024-07-23","cited_by_count":2,"area":"safety"},{"id":"2502.14486","title":"How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2502.19883","title":"Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models","created":"2025-02-27","cited_by_count":2,"area":"safety"},{"id":"2503.11619","title":"Tit-for-Tat: Safeguarding Large Vision-Language Models Against Jailbreak Attacks via Adversarial Defense","created":"2025-03-14","cited_by_count":2,"area":"safety"},{"id":"2504.09712","title":"The Structural Safety Generalization Problem","created":"2025-04-13","cited_by_count":2,"area":"safety"},{"id":"2505.16643","title":"From Evaluation to Defense: Advancing Safety in Video Large Language Models","created":"2025-05-22","cited_by_count":2,"area":"safety"},{"id":"2505.24232","title":"From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2507.04673","title":"Trojan Horse Prompting: Jailbreaking Conversational Multimodal Models by Forging Assistant Message","created":"2025-07-07","cited_by_count":2,"area":"safety"},{"id":"2602.10179","title":"When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models","created":"2026-02-10","cited_by_count":2,"area":"safety"},{"id":"2607.24897","title":"TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models","created":"2026-07-27","cited_by_count":2,"area":"safety"},{"id":"2507.00026","title":"RedTopic: Toward Topic-Diverse Red Teaming of Large Language Models","created":"2025-06-17","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2509.26473","title":"The Plot Twist: Jailbreaking Unified Multimodal Models with a Three-Act NarrativeAttack","created":"2025-09-30","cited_by_count":1,"area":"safety"},{"id":"2510.01494","title":"Understanding Adversarial Transfer: Why Representation-Space Attacks Fail Where Data-Space Attacks Succeed","created":"2025-10-01","cited_by_count":1,"area":"safety"},{"id":"2511.08367","title":"Why Does Weak-OOD Help? A Further Step Towards Understanding Jailbreaking VLMs","created":"2025-11-11","cited_by_count":1,"area":"safety"},{"id":"2512.01185","title":"DefenSee: Dissecting Threat from Sight and Text -- A Multi-View Defensive Pipeline for Multi-modal Jailbreaks","created":"2025-12-01","cited_by_count":1,"area":"safety"},{"id":"2601.05150","title":"$PC^2$: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models","created":"2026-01-08","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2508.13246","title":"Involuntary Jailbreak: On Self-Prompting Attacks","created":"2025-08-18","cited_by_count":0,"area":"safety"},{"id":"2509.12724","title":"Defense-to-Attack: Bypassing Weak Defenses Enables Stronger Jailbreaks in Vision-Language Models","created":"2025-09-16","cited_by_count":0,"area":"safety"},{"id":"2509.21400","title":"SafeSteer: Adaptive Subspace Steering for Efficient Jailbreak Defense in Vision-Language Models","created":"2025-09-24","cited_by_count":0,"area":"safety"},{"id":"2510.21214","title":"Enhanced MLLM Black-Box Jailbreaking Attacks and Defenses","created":"2025-10-24","cited_by_count":0,"area":"safety"},{"id":"2602.02536","title":"From Sparse Decisions to Dense Reasoning: A Multi-attribute Trajectory Paradigm for Multimodal Moderation","created":"2026-01-28","cited_by_count":0,"area":"safety"},{"id":"2605.01758","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","created":"2026-05-03","cited_by_count":0,"area":"safety"},{"id":"2605.10764","title":"Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.20286","title":"Adaptive Probe-based Steering for Robust LLM Jailbreaking","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2605.25194","title":"Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attack","created":"2026-05-24","cited_by_count":0,"area":"safety"},{"id":"2605.27545","title":"PAST2HARM: A Simple Adaptive Past Tense Attack for Jailbreaking Multimodal AI","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.01837","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","created":"2026-06-01","cited_by_count":0,"area":"safety"},{"id":"2606.09388","title":"Distilling Safe LLM Systems via Soft Prompts for On Device Settings","created":"2026-06-08","cited_by_count":0,"area":"safety"},{"id":"2606.21147","title":"AOR-Bench: Do Large Audio Language Models Over-Refuse Pseudo-Harmful Queries?","created":"2026-06-19","cited_by_count":0,"area":"safety"},{"id":"2607.05910","title":"PolicyShiftGuard: Benchmarking and Improving Policy-Adaptive Image Guardrails","created":"2026-07-07","cited_by_count":0,"area":"safety"},{"id":"2607.10269","title":"Devil in the Lens: Analyzing and Defending Physical Prompt Injection Against Vision-Language Models on Wearable Devices","created":"2026-07-11","cited_by_count":0,"area":"safety"},{"id":"2607.24859","title":"The Mirage of LLM Guardrails: A Case Study in AI-Assisted Medical Note Manipulation","created":"2026-07-26","cited_by_count":0,"area":"safety"},{"id":"2608.01043","title":"Decoy Images Amplify Caption-Mediated Defenses Against Encoded Jailbreaks","created":"2026-08-02","cited_by_count":0,"area":"safety"},{"id":"2608.01373","title":"The Boy Who Cried Wolf: Adversarial Misclassification of Safe Inputs as Unsafe in Multimodal Guardrails","created":"2026-08-02","cited_by_count":0,"area":"safety"},{"id":"2608.03210","title":"ICO: Enhancing Semantic-Shift Jailbreaks via Iterative Context Optimization","created":"2026-08-04","cited_by_count":0,"area":"safety"},{"id":"2608.04034","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","created":"2026-08-03","cited_by_count":0,"area":"safety"},{"id":"2608.25490","title":"MMJailBench: A Factorized Benchmark for Disentangling Multimodal Jailbreak Vulnerabilities","created":"2026-08-26","cited_by_count":0,"area":"safety"},{"id":"2608.27548","title":"Nemotron 3.5 Content Safety Moderator: A Compact Multimodal, Multilingual, and Reasoning Enabled Content Safety Moderator","created":"2026-08-27","cited_by_count":0,"area":"safety"},{"id":"2609.04533","title":"Repeat-After-Me: Black-Box Adaptive Visual Prompt Injection","created":"2026-09-03","cited_by_count":0,"area":"safety"},{"id":"2609.31558","title":"Region-Level Black-Box Defense Against Stealthy Embedding-Space Backdoors in CLIP","created":"2026-09-25","cited_by_count":0,"area":"safety"},{"id":"2609.36121","title":"Render Before Reading: Visual Rendering as a Prompt Injection Defense","created":"2026-09-28","cited_by_count":0,"area":"safety"},{"id":"2610.07009","title":"Which Image Property Carries the Jailbreak? A Controlled Dissection of Image-to-Text Jailbreaks","created":"2026-10-04","cited_by_count":0,"area":"safety"}],"next_cursor":null}