{"total":37,"rows":[{"id":"2502.12197","title":"A Closer Look at System Prompt Robustness","created":"2025-02-15","cited_by_count":32,"area":"safety"},{"id":"2409.07314","title":"MEDIC: Comprehensive Evaluation of Leading Indicators for LLM Safety and Utility in Clinical Applications","created":"2024-09-11","cited_by_count":25,"area":"safety"},{"id":"2501.07238","title":"Lessons From Red Teaming 100 Generative AI Products","created":"2025-01-13","cited_by_count":23,"area":"safety"},{"id":"2603.10521","title":"IH-Challenge: A Training Dataset to Improve Instruction Hierarchy on Frontier LLMs","created":"2026-03-11","cited_by_count":15,"area":"safety"},{"id":"2505.16934","title":"In-Context Watermarks for Large Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2501.16497","title":"Smoothed Embeddings for Robust Language Models","created":"2025-01-27","cited_by_count":8,"area":"safety"},{"id":"2510.18333","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","created":"2025-10-21","cited_by_count":7,"area":"safety"},{"id":"2504.14738","title":"PROMPTEVALS: A Dataset of Assertions and Guardrails for Custom Production Large Language Model Pipelines","created":"2025-04-20","cited_by_count":6,"area":"safety"},{"id":"2512.16602","title":"Refusal Steering: Fine-grained Control over LLM Refusal Behaviour for Sensitive Topics","created":"2025-12-18","cited_by_count":6,"area":"safety"},{"id":"2602.12418","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","created":"2026-02-12","cited_by_count":6,"area":"safety"},{"id":"2504.19521","title":"Security Steerability is All You Need","created":"2025-04-28","cited_by_count":4,"area":"safety"},{"id":"2602.00388","title":"Safer by Diffusion, Broken by Context: Diffusion LLM's Safety Blessing and Its Failure Mode","created":"2026-01-30","cited_by_count":4,"area":"safety"},{"id":"2510.07626","title":"LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics","created":"2025-10-08","cited_by_count":2,"area":"safety"},{"id":"2602.06911","title":"TamperBench: Systematically Stress-Testing LLM Safety Under Fine-Tuning and Tampering","created":"2026-02-06","cited_by_count":2,"area":"safety"},{"id":"2603.20206","title":"Enhancing Safety of Large Language Models via Embedding Space Separation","created":"2026-03-01","cited_by_count":2,"area":"safety"},{"id":"2605.21834","title":"On-Policy Consistency Training Improves LLM Safety with Minimal Capability Degradation","created":"2026-05-20","cited_by_count":2,"area":"safety"},{"id":"2606.30783","title":"Security--Fidelity Tradeoffs: The Hidden Cost of Prompt Injection Defense","created":"2026-06-29","cited_by_count":2,"area":"safety"},{"id":"2604.04231","title":"Subspace Control: Turning Constrained Model Steering into Controllable Spectral Optimization","created":"2026-04-05","cited_by_count":1,"area":"safety"},{"id":"2605.01462","title":"LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training","created":"2026-05-02","cited_by_count":1,"area":"safety"},{"id":"2606.02640","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","created":"2026-05-31","cited_by_count":1,"area":"safety"},{"id":"2606.29887","title":"SafePyramid: A Hierarchical Benchmark for In-context Policy Guardrailing","created":"2026-06-29","cited_by_count":1,"area":"safety"},{"id":"2512.04457","title":"RapidUn: Influence-Driven Parameter Reweighting for Efficient Large Language Model Unlearning","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2602.20102","title":"BarrierSteer: LLM Safety via Learning Barrier Steering","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2605.06213","title":"Beyond Fixed Benchmarks and Worst-Case Attacks: Dynamic Boundary Evaluation for Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.10582","title":"Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.10611","title":"Re-Triggering Safeguards within LLMs for Jailbreak Detection","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2606.09388","title":"Distilling Safe LLM Systems via Soft Prompts for On Device Settings","created":"2026-06-08","cited_by_count":0,"area":"safety"},{"id":"2606.28525","title":"A Gravitational Interpretation of Safety Reversion under Fine-Tuning","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2607.24392","title":"When LLM Defenses Backfire: Characterizing Safety, Performance, and Cost Trade-offs","created":"2026-07-27","cited_by_count":0,"area":"safety"},{"id":"2608.29030","title":"Learning to Follow In-Context Watermark Instructions via Self-Distillation","created":"2026-08-29","cited_by_count":0,"area":"safety"},{"id":"2609.08410","title":"Compositional Multilingual and Behavioral Attribute Steering","created":"2026-09-08","cited_by_count":0,"area":"safety"},{"id":"2609.29948","title":"ENDOPROMPT: Victim-Side Pseudo-References for Utility Degradation","created":"2026-09-24","cited_by_count":0,"area":"safety"},{"id":"2609.32434","title":"From Latents to Wires: Surgical Post-Editing on Large Language Models","created":"2026-09-26","cited_by_count":0,"area":"safety"},{"id":"2609.38909","title":"Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2609.39882","title":"LLM Persona Unlearning","created":"2026-09-30","cited_by_count":0,"area":"safety"},{"id":"2610.00348","title":"Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs via Weight Orthogonalisation","created":"2026-09-29","cited_by_count":0,"area":"safety"}],"next_cursor":null}