{"total":194,"rows":[{"id":"2410.12761","title":"SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation","created":"2024-10-16","cited_by_count":133,"area":"diffusion"},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2404.08031","title":"Latent Guard: a Safety Framework for Text-to-image Generation","created":"2024-04-11","cited_by_count":71,"area":null},{"id":"2407.05965","title":"T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Models","created":"2024-07-08","cited_by_count":66,"area":null},{"id":"2403.01446","title":"GuardT2I: Defending Text-to-Image Models from Adversarial Prompts","created":"2024-03-03","cited_by_count":62,"area":"safety"},{"id":"2405.16341","title":"R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Model","created":"2024-05-25","cited_by_count":58,"area":"diffusion"},{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2405.19237","title":"ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning","created":"2024-05-29","cited_by_count":55,"area":"diffusion"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2408.10848","title":"Perception-guided Jailbreak against Text-to-Image Models","created":"2024-08-20","cited_by_count":40,"area":"safety"},{"id":"2412.06143","title":"Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters","created":"2024-12-09","cited_by_count":40,"area":"diffusion"},{"id":"2405.20112","title":"RIGID: A Training-free and Model-Agnostic Framework for Robust AI-Generated Image Detection","created":"2024-05-30","cited_by_count":36,"area":null},{"id":"2503.07392","title":"SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Models","created":"2025-03-10","cited_by_count":36,"area":"diffusion"},{"id":"2405.19360","title":"ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users","created":"2024-05-24","cited_by_count":35,"area":"safety"},{"id":"2407.15861","title":"Adversarial Attacks and Defenses on Text-to-Image Diffusion Models: A Survey","created":"2024-07-10","cited_by_count":35,"area":"diffusion"},{"id":"2408.03400","title":"Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey","created":"2024-08-06","cited_by_count":32,"area":"diffusion"},{"id":"2411.09259","title":"Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey","created":"2024-11-14","cited_by_count":32,"area":"safety"},{"id":"2402.05947","title":"Separable Multi-Concept Erasure from Diffusion Models","created":"2024-02-03","cited_by_count":28,"area":"diffusion"},{"id":"2408.00523","title":"Fuzz-Testing Meets LLM-Based Agents: An Automated and Efficient Framework for Jailbreaking Text-To-Image Generation Models","created":"2024-08-01","cited_by_count":27,"area":"agents"},{"id":"2505.12677","title":"CURE: Concept Unlearning via Orthogonal Representation Editing in Diffusion Models","created":"2025-05-19","cited_by_count":27,"area":"diffusion"},{"id":"2412.07658","title":"TraSCE: Trajectory Steering for Concept Erasure","created":"2024-12-10","cited_by_count":26,"area":"diffusion"},{"id":"2410.15362","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","created":"2024-10-20","cited_by_count":25,"area":"alignment"},{"id":"2410.05664","title":"Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning","created":"2024-10-08","cited_by_count":21,"area":"diffusion"},{"id":"2502.08011","title":"Training-Free Safe Denoisers for Safe Use of Diffusion Models","created":"2025-02-11","cited_by_count":21,"area":"diffusion"},{"id":"2505.06679","title":"T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks","created":"2025-05-10","cited_by_count":21,"area":"diffusion"},{"id":"2412.10493","title":"AlignGuard: Scalable Safety Alignment for Text-to-Image Generation","created":"2024-12-13","cited_by_count":20,"area":"alignment"},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2501.03544","title":"PromptGuard: Soft Prompt-Guided Unsafe Content Moderation for Text-to-Image Models","created":"2025-01-07","cited_by_count":17,"area":"safety"},{"id":"2510.22300","title":"T2I-RiskyPrompt: A Benchmark for Safety Evaluation, Attack, and Defense on Text-to-Image Model","created":"2025-10-25","cited_by_count":17,"area":null},{"id":"2412.15341","title":"Efficient Fine-Tuning and Concept Suppression for Pruned Diffusion Models","created":"2024-12-19","cited_by_count":16,"area":"diffusion"},{"id":"2503.07389","title":"TRCE: Towards Reliable Malicious Concept Erasure in Text-to-Image Diffusion Models","created":"2025-03-10","cited_by_count":15,"area":"diffusion"},{"id":"2508.15314","title":"VideoEraser: Concept Erasure in Text-to-Video Diffusion Models","created":"2025-08-21","cited_by_count":14,"area":"diffusion"},{"id":"2409.05668","title":"Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Models","created":"2024-09-09","cited_by_count":13,"area":"diffusion"},{"id":"2409.19149","title":"Multimodal Pragmatic Jailbreak on Text-to-image Models","created":"2024-09-27","cited_by_count":13,"area":"diffusion"},{"id":"2503.15197","title":"Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization","created":"2025-03-19","cited_by_count":13,"area":"diffusion"},{"id":"2505.04575","title":"Componential Prompt-Knowledge Alignment for Domain Incremental Learning","created":"2025-05-07","cited_by_count":13,"area":null},{"id":"2507.13386","title":"Minimalist Concept Erasure in Generative Models","created":"2025-07-16","cited_by_count":13,"area":null},{"id":"2404.13706","title":"Concept Arithmetics for Circumventing Concept Inhibition in Diffusion Models","created":"2024-04-21","cited_by_count":12,"area":"diffusion"},{"id":"2505.19911","title":"Attention! Your Vision Language Model Could Be Maliciously Manipulated","created":"2025-05-26","cited_by_count":12,"area":"mllm"},{"id":"2509.22292","title":"Jailbreaking on Text-to-Video Models via Scene Splitting Strategy","created":"2025-09-26","cited_by_count":12,"area":"safety"},{"id":"2410.03869","title":"Chain-of-Jailbreak Attack for Image Generation Models via Editing Step by Step","created":"2024-10-04","cited_by_count":11,"area":"safety"},{"id":"2412.02542","title":"Unveiling Concept Attribution in Diffusion Models","created":"2024-12-03","cited_by_count":11,"area":"diffusion"},{"id":"2502.16368","title":"Concept Corrector: Erase concepts on the fly for text-to-image diffusion models","created":"2025-02-22","cited_by_count":11,"area":"diffusion"},{"id":"2602.20880","title":"When Safety Collides: Resolving Multi-Category Harmful Conflicts in Text-to-Image Diffusion via Adaptive Safety Guidance","created":"2026-02-24","cited_by_count":11,"area":"diffusion"},{"id":"2410.02710","title":"SteerDiff: Steering towards Safe Text-to-Image Diffusion Models","created":"2024-10-03","cited_by_count":10,"area":"diffusion"},{"id":"2410.21471","title":"AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion models","created":"2024-10-28","cited_by_count":10,"area":"diffusion"},{"id":"2412.00064","title":"DiffGuard: Text-Based Safety Checker for Diffusion Models","created":"2024-11-25","cited_by_count":10,"area":"diffusion"},{"id":"2505.19398","title":"Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression","created":"2025-05-26","cited_by_count":10,"area":null},{"id":"2507.07139","title":"Image Can Bring Your Memory Back: A Novel Multi-Modal Guided Attack against Image Generation Model Unlearning","created":"2025-07-09","cited_by_count":10,"area":"diffusion"},{"id":"2406.14855","title":"Six-CD: Benchmarking Concept Removals for Benign Text-to-image Diffusion Models","created":"2024-06-21","cited_by_count":9,"area":"diffusion"},{"id":"2502.14896","title":"A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models","created":"2025-02-17","cited_by_count":9,"area":"diffusion"},{"id":"2504.11106","title":"Token-Level Constraint Boundary Search for Jailbreaking Text-to-Image Models","created":"2025-04-15","cited_by_count":9,"area":"safety"},{"id":"2506.02761","title":"Rethinking Machine Unlearning in Image Generation Models","created":"2025-06-03","cited_by_count":9,"area":"safety"},{"id":"2507.16302","title":"Towards Resilient Safety-driven Unlearning for Diffusion Models against Downstream Fine-tuning","created":"2025-07-22","cited_by_count":9,"area":"diffusion"},{"id":"2508.03696","title":"PLA: Prompt Learning Attack against Text-to-Image Generative Models","created":"2025-07-14","cited_by_count":9,"area":"safety"},{"id":"2511.00804","title":"EraseFlow: Learning Concept Erasure Policies via GFlowNet-Driven Alignment","created":"2025-11-02","cited_by_count":9,"area":"alignment"},{"id":"2601.06162","title":"Forget Many, Forget Right: Scalable and Precise Concept Unlearning in Diffusion Models","created":"2026-01-06","cited_by_count":9,"area":"diffusion"},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2505.21074","title":"Red-Teaming Text-to-Image Systems by Rule-based Preference Modeling","created":"2025-05-27","cited_by_count":8,"area":"safety"},{"id":"2510.22851","title":"Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models","created":"2025-10-26","cited_by_count":8,"area":"diffusion"},{"id":"2412.18123","title":"AEIOU: A Unified Defense Framework against NSFW Prompts in Text-to-Image Models","created":"2024-12-24","cited_by_count":7,"area":null},{"id":"2501.18877","title":"Mitigating Sexual Content Generation via Embedding Distortion in Text-conditioned Diffusion Models","created":"2025-01-31","cited_by_count":7,"area":"diffusion"},{"id":"2501.19066","title":"Concept Steerers: Leveraging K-Sparse Autoencoders for Test-Time Controllable Generations","created":"2025-01-31","cited_by_count":7,"area":"mechinterp"},{"id":"2502.20623","title":"SafeText: Safe Text-to-image Models via Aligning the Text Encoder","created":"2025-02-28","cited_by_count":7,"area":null},{"id":"2503.13994","title":"TarPro: Targeted Protection against Malicious Image Editing","created":"2025-03-18","cited_by_count":7,"area":null},{"id":"2603.13435","title":"CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models","created":"2026-03-13","cited_by_count":7,"area":"wm"},{"id":"2504.11707","title":"Towards Safe Synthetic Image Generation On the Web: A Multimodal Robust NSFW Defense and Million Scale Dataset","created":"2025-04-16","cited_by_count":6,"area":null},{"id":"2510.24034","title":"AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts","created":"2025-10-28","cited_by_count":6,"area":"safety"},{"id":"2603.13300","title":"Safety-Guided Flow (SGF): A Unified Framework for Negative Guidance in Safe Generation","created":"2026-03-02","cited_by_count":6,"area":null},{"id":"2502.16423","title":"Unified Prompt Attack Against Text-to-Image Generation Models","created":"2025-02-23","cited_by_count":5,"area":"safety"},{"id":"2503.01839","title":"Jailbreaking Safeguarded Text-to-Image Models via Large Language Models","created":"2025-03-03","cited_by_count":5,"area":"safety"},{"id":"2504.20376","title":"When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems","created":"2025-04-29","cited_by_count":5,"area":"safety"},{"id":"2505.18979","title":"Dynamic Optimization and Safety Indicator Injection for Jailbreaking Text-to-Image Models with Multimodal Safety Filters","created":"2025-05-25","cited_by_count":5,"area":"safety"},{"id":"2505.21347","title":"OVERT: A Benchmark for Over-Refusal Evaluation on Text-to-Image Models","created":"2025-05-27","cited_by_count":5,"area":"safety"},{"id":"2507.16329","title":"DREAM: Scalable Red Teaming for Text-to-Image Generative Systems via Distribution Modeling","created":"2025-07-22","cited_by_count":5,"area":"alignment"},{"id":"2508.05658","title":"Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards","created":"2025-07-30","cited_by_count":5,"area":"safety"},{"id":"2512.23546","title":"PurifyGen: A Risk-Discrimination and Semantic-Purification Model for Safe Text-to-Image Generation","created":"2025-12-29","cited_by_count":5,"area":"diffusion"},{"id":"2512.23953","title":"T2VAttack: Adversarial Attack on Text-to-Video Diffusion Models","created":"2025-12-30","cited_by_count":5,"area":"diffusion"},{"id":"2602.01089","title":"Differential Vector Erasure: Unified Training-Free Concept Erasure for Flow Matching Models","created":"2026-02-01","cited_by_count":5,"area":"diffusion"},{"id":"2604.01888","title":"Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters","created":"2026-04-02","cited_by_count":5,"area":"safety"},{"id":"2411.10329","title":"Safe Text-to-Image Generation: Simply Sanitize the Prompt Embedding","created":"2024-11-15","cited_by_count":4,"area":null},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2504.14815","title":"What Lurks Within? Concept Auditing for Shared Diffusion Models at Scale","created":"2025-04-21","cited_by_count":4,"area":"diffusion"},{"id":"2506.10047","title":"GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models","created":"2025-06-11","cited_by_count":4,"area":"diffusion"},{"id":"2510.23960","title":"SafeVision: Efficient Image Guardrail with Robust Policy Adherence and Explainability","created":"2025-10-28","cited_by_count":4,"area":"safety"},{"id":"2511.18684","title":"Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generation","created":"2025-11-24","cited_by_count":4,"area":"safety"},{"id":"2601.00267","title":"ActErase: A Training-Free Paradigm for Precise Concept Erasure via Activation Redirection","created":"2026-01-01","cited_by_count":4,"area":"diffusion"},{"id":"2603.17828","title":"TINA: Text-Free Inversion Attack for Unlearned Text-to-Image Diffusion Models","created":"2026-03-18","cited_by_count":4,"area":"diffusion"},{"id":"2412.08156","title":"Antelope: Potent and Concealed Jailbreak Attack Strategy","created":"2024-12-11","cited_by_count":3,"area":"safety"},{"id":"2506.18325","title":"NSFW-Classifier Guided Prompt Sanitization for Safe Text-to-Image Generation","created":"2025-06-23","cited_by_count":3,"area":"safety"},{"id":"2508.00591","title":"Wukong Framework for Not Safe For Work Detection in Text-to-Image systems","created":"2025-08-01","cited_by_count":3,"area":"diffusion"},{"id":"2508.03006","title":"Seeing It Before It Happens: In-Generation NSFW Detection for Diffusion-Based Text-to-Image Models","created":"2025-08-05","cited_by_count":3,"area":"diffusion"},{"id":"2509.22723","title":"Responsible Diffusion: A Comprehensive Survey on Safety, Ethics, and Trust in Diffusion Models","created":"2025-09-25","cited_by_count":3,"area":"diffusion"},{"id":"2511.05865","title":"CGCE: Classifier-Guided Concept Erasure in Generative Models","created":"2025-11-08","cited_by_count":3,"area":"safety"},{"id":"2601.08623","title":"SafeRedir: Prompt Embedding Redirection for Robust Unlearning in Image Generation Models","created":"2026-01-13","cited_by_count":3,"area":"safety"},{"id":"2602.19631","title":"Localized Concept Erasure in Text-to-Image Diffusion Models via High-Level Representation Misdirection","created":"2026-02-23","cited_by_count":3,"area":"diffusion"},{"id":"2603.07028","title":"Two Frames Matter: A Temporal Attack for Text-to-Video Model Jailbreaking","created":"2026-03-07","cited_by_count":3,"area":"alignment"},{"id":"2603.21208","title":"JANUS: A Lightweight Framework for Jailbreaking Text-to-Image Models via Distribution Optimization","created":"2026-03-22","cited_by_count":3,"area":"diffusion"},{"id":"2606.01481","title":"SafeGen-Bench: Benchmarking Safety in Image-Conditioned Text-to-Video Generation","created":"2026-05-31","cited_by_count":3,"area":"diffusion"},{"id":"2502.17537","title":"Rethinking the Vulnerability of Concept Erasure and a New Method","created":"2025-02-24","cited_by_count":2,"area":"diffusion"}],"next_cursor":"100"}