{"total":42,"rows":[{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2404.07921","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","created":"2024-04-11","cited_by_count":172,"area":"safety"},{"id":"2404.16873","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","created":"2024-04-21","cited_by_count":156,"area":"safety"},{"id":"2405.21018","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","created":"2024-05-31","cited_by_count":110,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2404.11045","title":"Offset Unlearning for Large Language Models","created":"2024-04-17","cited_by_count":36,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2504.01094","title":"Multilingual and Multi-Accent Jailbreaking of Audio LLMs","created":"2025-04-01","cited_by_count":31,"area":"safety"},{"id":"2404.13968","title":"Protecting Your LLMs with Information Bottleneck","created":"2024-04-22","cited_by_count":29,"area":"safety"},{"id":"2402.15302","title":"How (un)ethical are instruction-centric responses of LLMs? Unveiling the vulnerabilities of safety guardrails to harmful queries","created":"2024-02-23","cited_by_count":27,"area":"safety"},{"id":"2406.01946","title":"Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature","created":"2024-06-04","cited_by_count":25,"area":"safety"},{"id":"2412.10321","title":"AdvPrefix: An Objective for Nuanced LLM Jailbreaks","created":"2024-12-13","cited_by_count":25,"area":"safety"},{"id":"2402.05864","title":"Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs","created":"2024-02-08","cited_by_count":22,"area":"safety"},{"id":"2502.03052","title":"Understanding and Enhancing the Transferability of Jailbreaking Attacks","created":"2025-02-05","cited_by_count":22,"area":"safety"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2410.06809","title":"Root Defence Strategies: Ensuring Safety of LLM at the Decoding Level","created":"2024-10-09","cited_by_count":11,"area":"safety"},{"id":"2411.04223","title":"Diversity Helps Jailbreak Large Language Models","created":"2024-11-06","cited_by_count":10,"area":"safety"},{"id":"2502.08142","title":"Bridging the Safety Gap: A Guardrail Pipeline for Trustworthy LLM Inferences","created":"2025-02-12","cited_by_count":8,"area":"safety"},{"id":"2412.18171","title":"Token Highlighter: Inspecting and Mitigating Jailbreak Prompts for Large Language Models","created":"2024-12-24","cited_by_count":7,"area":"safety"},{"id":"2510.24034","title":"AutoPrompt: Automated Red-Teaming of Text-to-Image Models via LLM-Driven Adversarial Prompts","created":"2025-10-28","cited_by_count":6,"area":"safety"},{"id":"2410.09804","title":"BlackDAN: A Black-Box Multi-Objective Approach for Effective and Contextual Jailbreaking of Large Language Models","created":"2024-10-13","cited_by_count":5,"area":"safety"},{"id":"2502.01241","title":"Peering Behind the Shield: Guardrail Identification in Large Language Models","created":"2025-02-03","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2406.10847","title":"TorchOpera: A Compound AI System for LLM Safety","created":"2024-06-16","cited_by_count":4,"area":"safety"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2506.17299","title":"Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem","created":"2025-06-17","cited_by_count":4,"area":"safety"},{"id":"2510.06594","title":"Do Internal Layers of LLMs Reveal Patterns for Jailbreak Detection?","created":"2025-10-08","cited_by_count":3,"area":"safety"},{"id":"2508.02997","title":"CoCoTen: Detecting Adversarial Inputs to Large Language Models through Latent Space Features of Contextual Co-occurrence Tensors","created":"2025-08-05","cited_by_count":2,"area":"safety"},{"id":"2602.10179","title":"When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models","created":"2026-02-10","cited_by_count":2,"area":"safety"},{"id":"2604.06436","title":"The Defense Trilemma: Why Prompt Injection Defense Wrappers Fail?","created":"2026-04-07","cited_by_count":2,"area":"safety"},{"id":"2606.05609","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","created":"2026-06-04","cited_by_count":2,"area":"safety"},{"id":"2504.01533","title":"LightDefense: A Lightweight Uncertainty-Driven Defense against Jailbreaks via Shifted Token Distribution","created":"2025-04-02","cited_by_count":1,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2603.23269","title":"Not All Tokens Are Created Equal: Query-Efficient Jailbreak Fuzzing for LLMs","created":"2026-03-24","cited_by_count":1,"area":"safety"},{"id":"2604.01444","title":"Cooking Up Risks: Benchmarking and Reducing Food Safety Risks in Large Language Models","created":"2026-04-01","cited_by_count":1,"area":"safety"},{"id":"2604.25921","title":"One Word at a Time: Incremental Completion Decomposition Breaks LLM Safety","created":"2026-04-01","cited_by_count":1,"area":"safety"},{"id":"2406.11682","title":"Knowledge-to-Jailbreak: Investigating Knowledge-driven Jailbreaking Attacks for Large Language Models","created":"2024-06-17","cited_by_count":0,"area":"safety"},{"id":"2505.07167","title":"Decoding One Safety Trigger Token for Balancing Safety and Usability in Large Language Models","created":"2025-05-12","cited_by_count":0,"area":"safety"},{"id":"2602.04893","title":"A Causal Perspective for Enhancing Jailbreak Attack and Defense","created":"2026-01-31","cited_by_count":0,"area":"safety"}],"next_cursor":null}