{"total":65,"rows":[{"id":"2312.02119","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","created":"2023-12-04","cited_by_count":672,"area":"safety"},{"id":"2311.17600","title":"MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models","created":"2023-11-29","cited_by_count":274,"area":"mllm"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2403.09572","title":"Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation","created":"2024-03-14","cited_by_count":124,"area":"lr"},{"id":"2402.13457","title":"A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Models","created":"2024-02-21","cited_by_count":106,"area":"safety"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2401.15897","title":"Red-Teaming for Generative AI: Silver Bullet or Security Theater?","created":"2024-01-29","cited_by_count":83,"area":"safety"},{"id":"2402.00357","title":"Safety of Multimodal Large Language Models on Images and Texts","created":"2024-02-01","cited_by_count":75,"area":"mllm"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2411.19939","title":"VLSBench: Unveiling Visual Leakage in Multimodal Safety","created":"2024-11-29","cited_by_count":63,"area":"mllm"},{"id":"2407.20516","title":"Machine Unlearning in Generative AI: A Survey","created":"2024-07-30","cited_by_count":49,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2410.05346","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","created":"2024-10-07","cited_by_count":46,"area":"mllm"},{"id":"2410.10855","title":"Core Knowledge Deficits in Multi-Modal Language Models","created":"2024-10-06","cited_by_count":38,"area":"mllm"},{"id":"2404.15381","title":"Advances and Open Challenges in Federated Foundation Models","created":"2024-04-23","cited_by_count":36,"area":null},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2405.19334","title":"LLMs Meet Multimodal Generation and Editing: A Survey","created":"2024-05-29","cited_by_count":35,"area":null},{"id":"2406.07594","title":"MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models","created":"2024-06-11","cited_by_count":34,"area":"mllm"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2502.14744","title":"HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden States","created":"2025-02-20","cited_by_count":33,"area":"mllm"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2504.14064","title":"DoomArena: A framework for Testing AI Agents Against Evolving Security Threats","created":"2025-04-18","cited_by_count":32,"area":"agents"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2404.03631","title":"Robust Concept Erasure Using Task Vectors","created":"2024-04-04","cited_by_count":27,"area":null},{"id":"2406.03589","title":"Ranking Manipulation for Conversational Search Engines","created":"2024-06-05","cited_by_count":26,"area":"safety"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2503.13962","title":"Survey of Adversarial Robustness in Multimodal Large Language Models","created":"2025-03-18","cited_by_count":16,"area":"mllm"},{"id":"2407.08583","title":"The Synergy between Data and Multi-Modal Large Language Models: A Survey from Co-Development Perspective","created":"2024-07-11","cited_by_count":15,"area":"mllm"},{"id":"2510.00231","title":"The Pitfalls of KV Cache Compression","created":"2025-09-30","cited_by_count":15,"area":"inference"},{"id":"2404.16557","title":"Energy-Latency Manipulation of Multi-modal Large Language Models via Verbose Samples","created":"2024-04-25","cited_by_count":14,"area":"mllm"},{"id":"2505.00976","title":"Attack and defense techniques in large language models: A survey and new perspectives","created":"2025-05-02","cited_by_count":14,"area":null},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2505.17598","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","created":"2025-05-23","cited_by_count":12,"area":"alignment"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2411.11496","title":"Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models","created":"2024-11-18","cited_by_count":10,"area":"lr"},{"id":"2502.01576","title":"Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models","created":"2025-02-03","cited_by_count":9,"area":"mllm"},{"id":"2506.17090","title":"Better Language Model Inversion by Compactly Representing Next-Token Distributions","created":"2025-06-20","cited_by_count":9,"area":null},{"id":"2406.11007","title":"Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applications","created":"2024-06-16","cited_by_count":8,"area":"safety"},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2510.07835","title":"MetaDefense: Defending Finetuning-based Jailbreak Attack Before and During Generation","created":"2025-10-09","cited_by_count":8,"area":"safety"},{"id":"2405.20657","title":"DORY: Deliberative Prompt Recovery for LLM","created":"2024-05-31","cited_by_count":7,"area":null},{"id":"2501.02029","title":"Spot Risks Before Speaking! Unraveling Safety Attention Heads in Large Vision-Language Models","created":"2025-01-03","cited_by_count":7,"area":"mllm"},{"id":"2501.02629","title":"Layer-Level Self-Exposure and Patch: Affirmative Token Mitigation for Jailbreak Attack Defense","created":"2025-01-05","cited_by_count":7,"area":"safety"},{"id":"2407.14644","title":"Human-Interpretable Adversarial Prompt Attack on Large Language Models with Situational Context","created":"2024-07-19","cited_by_count":6,"area":"safety"},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2502.10760","title":"Why is prompting hard? Understanding prompts on binary sequence predictors","created":"2025-02-15","cited_by_count":4,"area":null},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2603.20198","title":"Visual Exclusivity Attacks: Automatic Multimodal Red Teaming via Agentic Planning","created":"2026-02-05","cited_by_count":4,"area":"agents"},{"id":"2404.01571","title":"Leveraging YOLO-World and GPT-4V LMMs for Zero-Shot Person Detection and Action Recognition in Drone Imagery","created":"2024-04-02","cited_by_count":3,"area":"mllm"},{"id":"2412.16359","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","created":"2024-12-20","cited_by_count":3,"area":"safety"},{"id":"2407.16686","title":"Can Large Language Models Automatically Jailbreak GPT-4V?","created":"2024-07-23","cited_by_count":2,"area":"safety"},{"id":"2501.08814","title":"SAIF: A Comprehensive Framework for Evaluating the Risks of Generative AI in the Public Sector","created":"2025-01-15","cited_by_count":2,"area":"safety"},{"id":"2503.11619","title":"Tit-for-Tat: Safeguarding Large Vision-Language Models Against Jailbreak Attacks via Adversarial Defense","created":"2025-03-14","cited_by_count":2,"area":"safety"},{"id":"2504.04373","title":"StyleRec: A Benchmark Dataset for Prompt Recovery in Writing Style Transformation","created":"2025-04-06","cited_by_count":2,"area":null},{"id":"2501.11183","title":"Can Safety Fine-Tuning Be More Principled? Lessons Learned from Cybersecurity","created":"2025-01-19","cited_by_count":1,"area":"safety"},{"id":"2510.17000","title":"Bits Leaked per Query: Information-Theoretic Bounds on Adversarial Attacks against LLMs","created":"2025-10-19","cited_by_count":1,"area":"safety"},{"id":"2512.01185","title":"DefenSee: Dissecting Threat from Sight and Text -- A Multi-View Defensive Pipeline for Multi-modal Jailbreaks","created":"2025-12-01","cited_by_count":1,"area":"safety"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2402.01725","title":"Fortifying Ethical Boundaries in AI: Advanced Strategies for Enhancing Security in Large Language Models","created":"2024-01-27","cited_by_count":0,"area":null},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null}],"next_cursor":null}