{"total":28,"rows":[{"id":"2403.03218","title":"The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearning","created":"2024-03-05","cited_by_count":509,"area":"safety"},{"id":"2510.14276","title":"Qwen3Guard Technical Report","created":"2025-10-16","cited_by_count":155,"area":"safety"},{"id":"2410.14827","title":"Enhancing Prompt Injection Attacks to LLMs via Poisoning Alignment","created":"2024-10-18","cited_by_count":21,"area":"safety"},{"id":"2603.10521","title":"IH-Challenge: A Training Dataset to Improve Instruction Hierarchy on Frontier LLMs","created":"2026-03-11","cited_by_count":15,"area":"safety"},{"id":"2501.19202","title":"Improving LLM Unlearning Robustness via Random Perturbations","created":"2025-01-31","cited_by_count":9,"area":"safety"},{"id":"2510.10994","title":"Deep Research with Open-Domain Evaluation and Multi-Stage Guardrails for Safety","created":"2025-10-13","cited_by_count":7,"area":"safety"},{"id":"2504.19521","title":"Security Steerability is All You Need","created":"2025-04-28","cited_by_count":4,"area":"safety"},{"id":"2505.06027","title":"Unilogit: Robust Machine Unlearning for LLMs Using Uniform-Target Self-Distillation","created":"2025-05-09","cited_by_count":4,"area":"safety"},{"id":"2508.12072","title":"Mitigating Jailbreaks with Intent-Aware LLMs","created":"2025-08-16","cited_by_count":4,"area":"safety"},{"id":"2509.14651","title":"MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2602.00388","title":"Safer by Diffusion, Broken by Context: Diffusion LLM's Safety Blessing and Its Failure Mode","created":"2026-01-30","cited_by_count":4,"area":"safety"},{"id":"2510.05699","title":"Membership Inference Attacks on Tokenizers of Large Language Models","created":"2025-10-07","cited_by_count":3,"area":"safety"},{"id":"2604.14865","title":"Segment-Level Coherence for Robust Harmful Intent Probing in LLMs","created":"2026-04-16","cited_by_count":3,"area":"safety"},{"id":"2605.08778","title":"Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking","created":"2026-05-09","cited_by_count":3,"area":"safety"},{"id":"2608.21500","title":"SecOPD: Mitigating Adaptive Prompt Injections by On-Policy Distillation","created":"2026-08-21","cited_by_count":3,"area":"safety"},{"id":"2502.18518","title":"Swallowing the Poison Pills: Insights from Vulnerability Disparity Among LLMs","created":"2025-02-23","cited_by_count":2,"area":"safety"},{"id":"2603.20206","title":"Enhancing Safety of Large Language Models via Embedding Space Separation","created":"2026-03-01","cited_by_count":2,"area":"safety"},{"id":"2605.21834","title":"On-Policy Consistency Training Improves LLM Safety with Minimal Capability Degradation","created":"2026-05-20","cited_by_count":2,"area":"safety"},{"id":"2603.29038","title":"Trojan-Speak: Bypassing Constitutional Classifiers with No Jailbreak Tax via Adversarial Finetuning","created":"2026-03-30","cited_by_count":1,"area":"safety"},{"id":"2605.00267","title":"Jailbroken Frontier Models Retain Their Capabilities","created":"2026-04-30","cited_by_count":1,"area":"safety"},{"id":"2608.28233","title":"REINS: Refusal-Enhanced Inhibitory Steering with Sparse Autoencoder Features","created":"2026-08-28","cited_by_count":1,"area":"safety"},{"id":"2605.06213","title":"Beyond Fixed Benchmarks and Worst-Case Attacks: Dynamic Boundary Evaluation for Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2606.24267","title":"Pigeonholing: how bad prompts hurt models, causing collapse and mistakes","created":"2026-06-23","cited_by_count":0,"area":"safety"},{"id":"2606.27632","title":"Yuvion LLM: An Adversarially-Aware Large Language Model for Content And AI Safety","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2606.31748","title":"Addressing Over-Refusal in LLMs with Competing Rewards","created":"2026-06-30","cited_by_count":0,"area":"safety"},{"id":"2608.28361","title":"GRACE:Gradient-guided Coreset Selection for LLM Unlearning","created":"2026-08-28","cited_by_count":0,"area":"safety"},{"id":"2610.05712","title":"SimpleMark: Fast Multi-Bit Text Watermarking under f -Divergence Constraints","created":"2026-10-05","cited_by_count":0,"area":"safety"},{"id":"2610.06064","title":"TrustMI: Causally controlling how assistants trust their users","created":"2026-10-05","cited_by_count":0,"area":"safety"}],"next_cursor":null}