{"total":88,"rows":[{"id":"2402.05162","title":"Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications","created":"2024-02-07","cited_by_count":231,"area":"alignment"},{"id":"2403.17710","title":"Optimization-based Prompt Injection Attack to LLM-as-a-Judge","created":"2024-03-26","cited_by_count":143,"area":"alignment"},{"id":"2402.09154","title":"Attacking Large Language Models with Projected Gradient Descent","created":"2024-02-14","cited_by_count":94,"area":"alignment"},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2402.16192","title":"Defending Large Language Models against Jailbreak Attacks via Semantic Smoothing","created":"2024-02-25","cited_by_count":74,"area":"alignment"},{"id":"2402.12329","title":"Query-Based Adversarial Prompt Generation","created":"2024-02-19","cited_by_count":62,"area":"alignment"},{"id":"2506.07468","title":"Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Models","created":"2025-06-09","cited_by_count":39,"area":"alignment"},{"id":"2405.14023","title":"WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response","created":"2024-05-22","cited_by_count":29,"area":"alignment"},{"id":"2405.20653","title":"Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs' Refusal Boundaries","created":"2024-05-31","cited_by_count":28,"area":"alignment"},{"id":"2410.15362","title":"Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Models","created":"2024-10-20","cited_by_count":25,"area":"alignment"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2406.08725","title":"RL-JACK: Reinforcement Learning-powered Black-box Jailbreaking Attack against LLMs","created":"2024-06-13","cited_by_count":23,"area":"alignment"},{"id":"2509.11864","title":"NeuroStrike: Neuron-Level Attacks on Aligned LLMs","created":"2025-09-15","cited_by_count":22,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2502.04322","title":"Speak Easy: Eliciting Harmful Jailbreaks from LLMs with Simple Interactions","created":"2025-02-06","cited_by_count":15,"area":"alignment"},{"id":"2502.17254","title":"REINFORCE Adversarial Attacks on Large Language Models: An Adaptive, Distributional, and Semantic Objective","created":"2025-02-24","cited_by_count":15,"area":"alignment"},{"id":"2505.17598","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","created":"2025-05-23","cited_by_count":12,"area":"alignment"},{"id":"2508.05775","title":"Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLM","created":"2025-08-07","cited_by_count":9,"area":"alignment"},{"id":"2408.10701","title":"Ferret: Faster and Effective Automated Red Teaming with Reward-Based Scoring Technique","created":"2024-08-20","cited_by_count":8,"area":"alignment"},{"id":"2512.20806","title":"Safety Alignment of LMs via Non-cooperative Games","created":"2025-12-23","cited_by_count":8,"area":"alignment"},{"id":"2602.04896","title":"Steering Externalities: Benign Activation Steering Unintentionally Increases Jailbreak Risk for Large Language Models","created":"2026-02-03","cited_by_count":8,"area":"alignment"},{"id":"2407.15399","title":"Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Models","created":"2024-07-22","cited_by_count":7,"area":"alignment"},{"id":"2501.10639","title":"Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attacks","created":"2025-01-18","cited_by_count":7,"area":"alignment"},{"id":"2510.05052","title":"Proactive defense against LLM Jailbreak","created":"2025-10-06","cited_by_count":7,"area":"alignment"},{"id":"2502.01925","title":"PANDAS: Improving Many-shot Jailbreaking via Positive Affirmation, Negative Demonstration, and Adaptive Sampling","created":"2025-02-04","cited_by_count":6,"area":"alignment"},{"id":"2509.06982","title":"CARE: Decoding Time Safety Alignment via Rollback and Introspection Intervention","created":"2025-09-01","cited_by_count":6,"area":"alignment"},{"id":"2601.10589","title":"Be Your Own Red Teamer: Safety Alignment via Self-Play and Reflective Experience Replay","created":"2026-01-15","cited_by_count":6,"area":"alignment"},{"id":"2602.22554","title":"Multilingual Safety Alignment Via Sparse Weight Editing","created":"2026-02-26","cited_by_count":6,"area":"alignment"},{"id":"2404.16020","title":"Investigating Adversarial Trigger Transfer in Large Language Models","created":"2024-04-24","cited_by_count":5,"area":"alignment"},{"id":"2507.02332","title":"PII Jailbreaking in LLMs via Activation Steering Reveals Personal Information Leakage","created":"2025-07-03","cited_by_count":5,"area":"alignment"},{"id":"2508.19697","title":"Safety Alignment Should Be Made More Than Just A Few Attention Heads","created":"2025-08-27","cited_by_count":5,"area":"alignment"},{"id":"2502.13603","title":"Efficient Safety Retrofitting Against Jailbreaking for LLMs","created":"2025-02-19","cited_by_count":4,"area":"alignment"},{"id":"2505.13862","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","created":"2025-05-20","cited_by_count":4,"area":"alignment"},{"id":"2603.15684","title":"State-Dependent Safety Failures in Multi-Turn Language Model Interaction","created":"2026-03-15","cited_by_count":4,"area":"alignment"},{"id":"2407.09447","title":"ASTPrompter: Preference-Aligned Automated Language Model Red-Teaming to Generate Low-Perplexity Unsafe Prompts","created":"2024-07-12","cited_by_count":3,"area":"alignment"},{"id":"2506.07402","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","created":"2025-06-09","cited_by_count":3,"area":"alignment"},{"id":"2509.19360","title":"Semantic Representation Attack against Aligned Large Language Models","created":"2025-09-18","cited_by_count":3,"area":"alignment"},{"id":"2510.08604","title":"LatentBreak: Jailbreaking Large Language Models through Latent Space Feedback","created":"2025-10-07","cited_by_count":3,"area":"alignment"},{"id":"2510.18081","title":"Any-Depth Alignment: Unlocking Innate Safety Alignment of LLMs to Any-Depth","created":"2025-10-20","cited_by_count":3,"area":"alignment"},{"id":"2504.05050","title":"Revealing the Intrinsic Ethical Vulnerability of Aligned Large Language Models","created":"2025-04-07","cited_by_count":2,"area":"alignment"},{"id":"2506.02479","title":"BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage","created":"2025-06-03","cited_by_count":2,"area":"alignment"},{"id":"2508.14853","title":"Universal and Transferable Adversarial Attack on Large Language Models Using Exponentiated Gradient Descent","created":"2025-08-20","cited_by_count":2,"area":"alignment"},{"id":"2602.16835","title":"NeST: Neuron Selective Tuning for LLM Safety","created":"2026-02-18","cited_by_count":2,"area":"alignment"},{"id":"2602.16977","title":"Fail-Closed Alignment for Large Language Models","created":"2026-02-19","cited_by_count":2,"area":"alignment"},{"id":"2603.03081","title":"TAO-Attack: Toward Advanced Optimization-Based Jailbreak Attacks for Large Language Models","created":"2026-03-03","cited_by_count":2,"area":"alignment"},{"id":"2603.10243","title":"GR-SAP: Generative Replay for Safety Alignment Preservation during Fine-Tuning","created":"2026-03-10","cited_by_count":2,"area":"alignment"},{"id":"2603.14355","title":"Exposing Long-Tail Safety Failures in Large Language Models through Efficient Diverse Response Sampling","created":"2026-03-15","cited_by_count":2,"area":"alignment"},{"id":"2605.02647","title":"ContextualJailbreak: Evolutionary Red-Teaming via Simulated Conversational Priming","created":"2026-05-04","cited_by_count":2,"area":"alignment"},{"id":"2606.02995","title":"Patcher: Post-Hoc Patching of Backdoored Large Language Models","created":"2026-06-02","cited_by_count":2,"area":"alignment"},{"id":"2608.23959","title":"NeuronGuard: Robust LLM Safety Alignment via Ablation-Aware Safety Signal Redistribution","created":"2026-08-25","cited_by_count":2,"area":"alignment"},{"id":"2506.12382","title":"Exploring the Secondary Risks of Large Language Models","created":"2025-06-14","cited_by_count":1,"area":"alignment"},{"id":"2508.20038","title":"Forewarned is Forearmed: Pre-Synthesizing Jailbreak-like Instructions to Enhance LLM Safety Guardrail to Potential Attacks","created":"2025-08-27","cited_by_count":1,"area":"alignment"},{"id":"2509.03985","title":"NeuroBreak: Unveil Internal Jailbreak Mechanisms in Large Language Models","created":"2025-09-04","cited_by_count":1,"area":"alignment"},{"id":"2511.02356","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","created":"2025-11-04","cited_by_count":1,"area":"alignment"},{"id":"2603.04355","title":"Efficient Refusal Ablation in LLM through Optimal Transport","created":"2026-03-04","cited_by_count":1,"area":"alignment"},{"id":"2604.17769","title":"Reverse Constitutional AI: A Framework for Controllable Toxic Data Generation via Probability-Clamped RLAIF","created":"2026-04-20","cited_by_count":1,"area":"alignment"},{"id":"2605.01899","title":"Disentangling Intent from Role: Adversarial Self-Play for Persona-Invariant Safety Alignment","created":"2026-05-03","cited_by_count":1,"area":"alignment"},{"id":"2607.07918","title":"Efficient Safety Alignment of Language Models via Latent Personality Traits","created":"2026-07-08","cited_by_count":1,"area":"alignment"},{"id":"2502.11379","title":"CCJA: Context-Coherent Jailbreak Attack for Aligned Large Language Models","created":"2025-02-17","cited_by_count":0,"area":"alignment"},{"id":"2508.07139","title":"A Real-Time, Self-Tuning Moderator Framework for Adversarial Prompt Detection","created":"2025-08-10","cited_by_count":0,"area":"alignment"},{"id":"2512.05518","title":"Matching Ranks Over Probability Yields Truly Deep Safety Alignment","created":"2025-12-05","cited_by_count":0,"area":"alignment"},{"id":"2512.18755","title":"MEEA: Mere Exposure Effect-Driven Confrontational Optimization for LLM Jailbreaking","created":"2025-12-21","cited_by_count":0,"area":"alignment"},{"id":"2602.00619","title":"Jailbreaking LLMs via Calibration","created":"2026-01-31","cited_by_count":0,"area":"alignment"},{"id":"2603.01784","title":"Co-Evolutionary Multi-Modal Alignment via Structured Adversarial Evolution","created":"2026-03-02","cited_by_count":0,"area":"alignment"},{"id":"2604.02574","title":"Understanding the Effects of Safety Unalignment on Large Language Models","created":"2026-04-02","cited_by_count":0,"area":"alignment"},{"id":"2604.06833","title":"FedDetox: Robust Federated SLM Alignment via On-Device Data Sanitization","created":"2026-04-08","cited_by_count":0,"area":"alignment"},{"id":"2605.08878","title":"Why Do Aligned LLMs Remain Jailbreakable: Refusal-Escape Directions, Operator-Level Sources, and Safety-Utility Trade-off","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.10998","title":"Few-Shot Truly Benign DPO Attack for Jailbreaking LLMs","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.17971","title":"Babel: Jailbreaking Safety Attention via Obfuscation Distribution Optimized Sampling","created":"2026-05-18","cited_by_count":0,"area":"alignment"},{"id":"2605.20654","title":"REFLECTOR: Internalizing Step-wise Reflection against Indirect Jailbreak","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2605.21362","title":"LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2606.04168","title":"When Autoregressive Consistency Hurts Safety Alignment","created":"2026-06-02","cited_by_count":0,"area":"alignment"},{"id":"2606.16349","title":"From Refusal Geometry to Safety Geometry: Harmfulness--Refusal Coupling under Dynamic Adversarial Fine-Tuning","created":"2026-06-15","cited_by_count":0,"area":"alignment"},{"id":"2607.20494","title":"Isolating LLM Alignment from Regex: Zero Coverage and Metric-Dependent Divergence Under Adversarial Mutation","created":"2026-06-12","cited_by_count":0,"area":"alignment"},{"id":"2607.23153","title":"In-Context Learning as Implicit Policy Gradient","created":"2026-07-25","cited_by_count":0,"area":"alignment"},{"id":"2607.23496","title":"Do LLMs Know Their Vulnerable Scenarios?","created":"2026-07-26","cited_by_count":0,"area":"alignment"},{"id":"2609.02215","title":"ASCII Attack: Recontextualising Harmful Requests as Artistic Critique in Large Language Models","created":"2026-09-02","cited_by_count":0,"area":"alignment"},{"id":"2609.03693","title":"AlcaTRAz - Anchored Tree-Rule Defense Against Jailbreaks","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.04022","title":"Representational alignment yields generalizable safety in language models","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.08373","title":"Structural Jailbreaks Generalize but Do Not Compound: A cross-provider and multilingual study of Involuntary In-Context Learning","created":"2026-09-08","cited_by_count":0,"area":"alignment"},{"id":"2609.08634","title":"Suan: Rectifying Direct Preference Safety Alignment in Large Language Models","created":"2026-09-08","cited_by_count":0,"area":"alignment"},{"id":"2609.34519","title":"EOPSA: Efficient On-Policy Self-Distilled Safety Alignment","created":"2026-09-28","cited_by_count":0,"area":"alignment"},{"id":"2609.36849","title":"Does the Unsafe Gradient Survive a Conversation? On the Fragility of Gradient-Based Jailbreak Detection in Multi-Turn Dialogue","created":"2026-09-29","cited_by_count":0,"area":"alignment"},{"id":"2609.36956","title":"Controlled Decoding Attacks on Black-Box LLMs","created":"2026-09-29","cited_by_count":0,"area":"alignment"},{"id":"2609.38389","title":"The Geometry of Harmfulness in Multi-Turn Attacks","created":"2026-09-29","cited_by_count":0,"area":"alignment"},{"id":"2609.39902","title":"CodeMimicry: Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion","created":"2026-09-30","cited_by_count":0,"area":"alignment"},{"id":"2610.15513","title":"REPRO: Reflective Evolutionary Prompt Optimizer for Automated LLM Red-Teaming","created":"2026-10-11","cited_by_count":0,"area":"alignment"}],"next_cursor":null}