{"total":67,"rows":[{"id":"2404.05993","title":"AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Experts","created":"2024-04-09","cited_by_count":136,"area":null},{"id":"2501.09004","title":"Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails","created":"2025-01-15","cited_by_count":132,"area":"safety"},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2403.00867","title":"Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapes","created":"2024-03-01","cited_by_count":74,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2508.09224","title":"From Hard Refusals to Safe-Completions: Toward Output-Centric Safety Training","created":"2025-08-12","cited_by_count":52,"area":null},{"id":"2408.11491","title":"SCANS: Mitigating the Exaggerated Safety for LLMs via Safety-Conscious Activation Steering","created":"2024-08-21","cited_by_count":50,"area":"alignment"},{"id":"2405.18634","title":"A Theoretical Understanding of Self-Correction through In-context Alignment","created":"2024-05-28","cited_by_count":44,"area":"lr"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2412.12472","title":"Knowledge Boundary of Large Language Models: A Survey","created":"2024-12-17","cited_by_count":40,"area":null},{"id":"2409.00598","title":"Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models","created":"2024-09-01","cited_by_count":35,"area":"alignment"},{"id":"2402.16006","title":"ASETF: A Novel Method for Jailbreak Attack on LLMs through Translate Suffix Embeddings","created":"2024-02-25","cited_by_count":32,"area":"safety"},{"id":"2402.13148","title":"Defending Jailbreak Prompts via In-Context Adversarial Game","created":"2024-02-20","cited_by_count":29,"area":"safety"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2404.16251","title":"Prompt Leakage effect and defense strategies for multi-turn LLM interactions","created":"2024-04-24","cited_by_count":23,"area":null},{"id":"2502.09990","title":"X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability","created":"2025-02-14","cited_by_count":20,"area":"alignment"},{"id":"2504.11373","title":"Cancer-Myth: Evaluating Large Language Models on Patient Questions with False Presuppositions","created":"2025-04-15","cited_by_count":15,"area":null},{"id":"2504.01205","title":"Epistemic Alignment: A Mediating Framework for User-LLM Knowledge Delivery","created":"2025-04-01","cited_by_count":14,"area":null},{"id":"2506.12707","title":"SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression","created":"2025-06-15","cited_by_count":13,"area":"inference"},{"id":"2505.18658","title":"Robustness in Large Language Models: A Survey of Mitigation Strategies and Evaluation Metrics","created":"2025-05-24","cited_by_count":12,"area":null},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2502.05911","title":"GRAIT: Gradient-Driven Refusal-Aware Instruction Tuning for Effective Hallucination Mitigation","created":"2025-02-09","cited_by_count":11,"area":"safety"},{"id":"2510.01270","title":"Think Twice, Generate Once: Safeguarding by Progressive Self-Reflection","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2406.03827","title":"Chaos with Keywords: Exposing Large Language Models Sycophantic Hallucination to Misleading Keywords and Evaluating Defense Strategies","created":"2024-06-06","cited_by_count":10,"area":null},{"id":"2407.16318","title":"PrimeGuard: Safe and Helpful LLMs through Tuning-Free Routing","created":"2024-07-23","cited_by_count":10,"area":"safety"},{"id":"2502.19041","title":"Beyond Surface-Level Patterns: An Essence-Driven Defense Framework Against Jailbreak Attacks in LLMs","created":"2025-02-26","cited_by_count":9,"area":"safety"},{"id":"2412.12527","title":"When to Speak, When to Abstain: Contrastive Decoding with Abstention","created":"2024-12-17","cited_by_count":8,"area":null},{"id":"2504.01444","title":"PiCo: Jailbreaking Multimodal Large Language Models via Pictorial Code Contextualization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2410.13901","title":"SoK: Prompt Hacking of Large Language Models","created":"2024-10-16","cited_by_count":7,"area":null},{"id":"2412.18171","title":"Token Highlighter: Inspecting and Mitigating Jailbreak Prompts for Large Language Models","created":"2024-12-24","cited_by_count":7,"area":"safety"},{"id":"2501.18626","title":"The TIP of the Iceberg: Revealing a Hidden Class of Task-in-Prompt Adversarial Attacks on LLMs","created":"2025-01-27","cited_by_count":7,"area":"safety"},{"id":"2504.02458","title":"Retrieval-Augmented Purifier for Robust LLM-Empowered Recommendation","created":"2025-04-03","cited_by_count":7,"area":"rag"},{"id":"2603.11388","title":"Deactivating Refusal Triggers: Understanding and Mitigating Overrefusal in Safety Alignment","created":"2026-03-12","cited_by_count":7,"area":"alignment"},{"id":"2504.01850","title":"Code Red! On the Harmfulness of Applying Off-the-shelf Large Language Models to Programming Tasks","created":"2025-04-02","cited_by_count":6,"area":null},{"id":"2504.11182","title":"Exploring Backdoor Attack and Defense for LLM-empowered Recommendations","created":"2025-04-15","cited_by_count":6,"area":"safety"},{"id":"2409.07772","title":"Alignment with Preference Optimization Is All You Need for LLM Safety","created":"2024-09-12","cited_by_count":5,"area":"alignment"},{"id":"2410.16672","title":"The Tug of War Within: Mitigating the Fairness-Privacy Conflicts in Large Language Models","created":"2024-10-22","cited_by_count":5,"area":null},{"id":"2505.09602","title":"Adversarial Suffix Filtering: a Defense Pipeline for LLMs","created":"2025-05-14","cited_by_count":5,"area":"safety"},{"id":"2505.15674","title":"UniErase: Towards Balanced and Precise Unlearning in Language Models","created":"2025-05-21","cited_by_count":5,"area":"safety"},{"id":"2603.15800","title":"Evolving Contextual Safety in Multi-Modal Large Language Models via Inference-Time Self-Reflective Memory","created":"2026-03-16","cited_by_count":5,"area":"lr"},{"id":"2410.08776","title":"FATS: A Prompt Injection Attack Utilizing Feign Security Agents with Deceptive Few-shots Learning","created":"2024-10-11","cited_by_count":4,"area":"agents"},{"id":"2502.15594","title":"SafeInt: Shielding Large Language Models from Jailbreak Attacks via Safety-Aware Representation Intervention","created":"2025-02-21","cited_by_count":4,"area":"safety"},{"id":"2508.09473","title":"NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs","created":"2025-08-13","cited_by_count":4,"area":"alignment"},{"id":"2512.02282","title":"DialogGuard: Multi-Agent Psychosocial Safety Evaluation of Sensitive LLM Responses","created":"2025-12-01","cited_by_count":3,"area":"agents"},{"id":"2412.12192","title":"No Free Lunch for Defending Against Prefilling Attack by In-Context Learning","created":"2024-12-13","cited_by_count":2,"area":"safety"},{"id":"2504.09712","title":"The Structural Safety Generalization Problem","created":"2025-04-13","cited_by_count":2,"area":"safety"},{"id":"2410.04009","title":"ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs","created":"2024-10-05","cited_by_count":1,"area":"safety"},{"id":"2410.18114","title":"Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond","created":"2024-10-09","cited_by_count":1,"area":null},{"id":"2410.21597","title":"Reducing the Scope of Language Models","created":"2024-10-28","cited_by_count":1,"area":null},{"id":"2506.01770","title":"ReGA: Model-Based Safeguard for LLMs via Representation-Guided Abstraction","created":"2025-06-02","cited_by_count":1,"area":"safety"},{"id":"2506.09067","title":"Enhancing the Safety of Medical Vision-Language Models by Synthetic Demonstrations","created":"2025-06-08","cited_by_count":1,"area":"mllm"},{"id":"2508.16406","title":"Retrieval-Augmented Defense: Adaptive and Controllable Jailbreak Prevention for Large Language Models","created":"2025-08-22","cited_by_count":1,"area":"rag"},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2509.24488","title":"Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Models","created":"2025-09-29","cited_by_count":1,"area":"safety"},{"id":"2511.00509","title":"Reimagining Safety Alignment with An Image","created":"2025-11-01","cited_by_count":1,"area":"alignment"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2607.21804","title":"Adversarial Prompts for Acceptance Collapse in Speculative Decoding","created":"2026-07-23","cited_by_count":1,"area":"inference"},{"id":"2601.01037","title":"Multi-Dimensional Prompt Chaining to Improve Open-Domain Dialogue Generation","created":"2026-01-03","cited_by_count":0,"area":null},{"id":"2605.00955","title":"E-MIA: Exam-Style Black-Box Membership Inference Attacks against RAG Systems","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.17029","title":"Task Abstention for Large Language Models in Code Generation","created":"2026-05-16","cited_by_count":0,"area":null},{"id":"2605.24883","title":"Inverting the Shield: Systematically Generating Safety Tests from Policy Specifications","created":"2026-05-24","cited_by_count":0,"area":null},{"id":"2607.24392","title":"When LLM Defenses Backfire: Characterizing Safety, Performance, and Cost Trade-offs","created":"2026-07-27","cited_by_count":0,"area":"safety"},{"id":"2608.21570","title":"A Reproducible, License-Aware Distillation Recipe for CPUDeployable Safety Classification","created":"2026-08-21","cited_by_count":0,"area":null},{"id":"2609.20846","title":"Rewarding Efficient Reasoning Improves Abstention on Underspecified Tasks in Reasoning Models","created":"2026-08-05","cited_by_count":0,"area":"lr"}],"next_cursor":null}