{"total":74,"rows":[{"id":"2402.04249","title":"HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusal","created":"2024-02-06","cited_by_count":1429,"area":"safety"},{"id":"2406.04313","title":"Improving Alignment and Robustness with Circuit Breakers","created":"2024-06-06","cited_by_count":322,"area":"safety"},{"id":"2402.08983","title":"SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding","created":"2024-02-14","cited_by_count":247,"area":"safety"},{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2408.00761","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","created":"2024-08-01","cited_by_count":138,"area":"safety"},{"id":"2510.09023","title":"The Attacker Moves Second: Stronger Adaptive Attacks Bypass Defenses Against Llm Jailbreaks and Prompt Injections","created":"2025-10-10","cited_by_count":129,"area":"safety"},{"id":"2402.14020","title":"Coercing LLMs to do and reveal (almost) anything","created":"2024-02-21","cited_by_count":89,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2402.16459","title":"Defending LLMs against Jailbreaking Attacks via Backtranslation","created":"2024-02-26","cited_by_count":70,"area":"safety"},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2402.06255","title":"Fight Back Against Jailbreaking via Prompt Adversarial Tuning","created":"2024-02-09","cited_by_count":67,"area":"safety"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2502.19820","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","created":"2025-02-27","cited_by_count":54,"area":"safety"},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2402.03299","title":"GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Models","created":"2024-02-05","cited_by_count":48,"area":"safety"},{"id":"2503.15754","title":"AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integration","created":"2025-03-20","cited_by_count":43,"area":"safety"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2405.20099","title":"Defensive Prompt Patch: A Robust and Interpretable Defense of LLMs against Jailbreak Attacks","created":"2024-05-30","cited_by_count":37,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2507.07974","title":"Defending Against Prompt Injection With a Few DefensiveTokens","created":"2025-07-10","cited_by_count":33,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2504.01094","title":"Multilingual and Multi-Accent Jailbreaking of Audio LLMs","created":"2025-04-01","cited_by_count":31,"area":"safety"},{"id":"2406.06622","title":"Adversarial Tuning: Defending Against Jailbreak Attacks for LLMs","created":"2024-06-07","cited_by_count":26,"area":"safety"},{"id":"2505.11413","title":"CARES: Comprehensive Evaluation of Safety and Adversarial Robustness in Medical LLMs","created":"2025-05-16","cited_by_count":26,"area":"safety"},{"id":"2503.10566","title":"ASIDE: Architectural Separation of Instructions and Data in Language Models","created":"2025-03-13","cited_by_count":24,"area":"safety"},{"id":"2506.14922","title":"FORTRESS: Frontier Risk Evaluation for National Security and Public Safety","created":"2025-06-17","cited_by_count":24,"area":"safety"},{"id":"2410.01294","title":"Endless Jailbreaks with Bijection Learning","created":"2024-10-02","cited_by_count":19,"area":"safety"},{"id":"2410.02684","title":"HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2404.04392","title":"Fine-Tuning, Quantization, and LLMs: Navigating Unintended Outcomes","created":"2024-04-05","cited_by_count":14,"area":"safety"},{"id":"2410.06809","title":"Root Defence Strategies: Ensuring Safety of LLM at the Decoding Level","created":"2024-10-09","cited_by_count":11,"area":"safety"},{"id":"2505.16947","title":"MixAT: Combining Continuous and Discrete Adversarial Training for LLMs","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2502.11647","title":"DELMAN: Dynamic Defense Against Large Language Model Jailbreaking with Model Editing","created":"2025-02-17","cited_by_count":10,"area":"safety"},{"id":"2507.05248","title":"Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2504.02080","title":"Evolving Security in LLMs: A Study of Jailbreak Attacks and Defenses","created":"2025-04-02","cited_by_count":8,"area":"safety"},{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2605.27823","title":"Disentangling Adversarial Prompts: A Semantic-Graph Defense for Robust LLM Security","created":"2026-05-27","cited_by_count":8,"area":"safety"},{"id":"2509.21947","title":"Active Attacks: Red-teaming LLMs via Adaptive Environments","created":"2025-09-26","cited_by_count":7,"area":"safety"},{"id":"2512.05485","title":"TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations","created":"2025-12-05","cited_by_count":7,"area":"safety"},{"id":"2410.13691","title":"Jailbreaking LLM-Controlled Robots","created":"2024-10-17","cited_by_count":6,"area":"safety"},{"id":"2407.01461","title":"Enhancing the Capability and Robustness of Large Language Models through Reinforcement Learning-Driven Query Refinement","created":"2024-07-01","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2601.10543","title":"Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing","created":"2026-01-15","cited_by_count":4,"area":"safety"},{"id":"2503.17932","title":"STShield: Single-Token Sentinel for Real-Time Jailbreak Detection in Large Language Models","created":"2025-03-23","cited_by_count":3,"area":"safety"},{"id":"2506.16792","title":"MIST: Jailbreaking Black-box Large Language Models via Iterative Semantic Tuning","created":"2025-06-20","cited_by_count":3,"area":"safety"},{"id":"2508.14128","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","created":"2025-08-19","cited_by_count":3,"area":"safety"},{"id":"2509.00088","title":"AEGIS : Automated Co-Evolutionary Framework for Guarding Prompt Injections Schema","created":"2025-08-27","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2601.19726","title":"RvB: Automating AI System Hardening via Iterative Red-Blue Games","created":"2026-01-27","cited_by_count":3,"area":"safety"},{"id":"2407.16686","title":"Can Large Language Models Automatically Jailbreak GPT-4V?","created":"2024-07-23","cited_by_count":2,"area":"safety"},{"id":"2502.01154","title":"Jailbreaking with Universal Multi-Prompts","created":"2025-02-03","cited_by_count":2,"area":"safety"},{"id":"2512.18244","title":"Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulation","created":"2025-12-20","cited_by_count":2,"area":"safety"},{"id":"2604.09222","title":"GRM: Utility-Aware Jailbreak Attacks on Audio LLMs via Gradient-Ratio Masking","created":"2026-04-10","cited_by_count":2,"area":"safety"},{"id":"2606.05609","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","created":"2026-06-04","cited_by_count":2,"area":"safety"},{"id":"2503.12931","title":"MirrorShield: Towards Universal Defense Against Jailbreaks via Entropy-Guided Mirror Crafting","created":"2025-03-17","cited_by_count":1,"area":"safety"},{"id":"2505.00843","title":"OET: Optimization-based prompt injection Evaluation Toolkit","created":"2025-05-01","cited_by_count":1,"area":"safety"},{"id":"2511.07107","title":"MENTOR: A Metacognition-Driven Self-Evolution Framework for Uncovering and Mitigating Implicit Domain Risks in LLMs","created":"2025-11-10","cited_by_count":1,"area":"safety"},{"id":"2603.08234","title":"The Struggle Between Continuation and Refusal: A Mechanistic Analysis of the Continuation-Triggered Jailbreak in LLMs","created":"2026-03-09","cited_by_count":1,"area":"safety"},{"id":"2605.01034","title":"A Theoretical Game of Attacks via Compositional Skills","created":"2026-05-01","cited_by_count":1,"area":"safety"},{"id":"2606.04027","title":"MaskForge: Structure-Aware Adaptive Attacks for Jailbreaking Diffusion Large Language Models","created":"2026-06-01","cited_by_count":1,"area":"safety"},{"id":"2606.11425","title":"JailbreakOPT: Tool-Assisted Iterative Jailbreak Prompt Optimization","created":"2026-06-09","cited_by_count":1,"area":"safety"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2609.21793","title":"CASCADE Against Jailbreaks: Combination Across Stages with Controlled Attack-Defense Evaluation","created":"2026-09-18","cited_by_count":1,"area":"safety"},{"id":"2609.26185","title":"Dynamic Deep Prompt Optimization for Defending Against Jailbreak Attacks on LLMs","created":"2026-08-10","cited_by_count":1,"area":"safety"},{"id":"2505.11835","title":"Multilingual Collaborative Defense for Large Language Models","created":"2025-05-17","cited_by_count":0,"area":"safety"},{"id":"2505.20841","title":"Concealment of Intent: A Game-Theoretic Analysis","created":"2025-05-27","cited_by_count":0,"area":"safety"},{"id":"2511.07480","title":"KG-DF: A Black-box Defense Framework against Jailbreak Attacks Based on Knowledge Graphs","created":"2025-11-09","cited_by_count":0,"area":"safety"},{"id":"2512.04841","title":"SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2512.15081","title":"Quantifying Return on Security Controls in LLM Systems","created":"2025-12-17","cited_by_count":0,"area":"safety"},{"id":"2602.17696","title":"Can LLM Safety Be Ensured by Constraining Parameter Regions?","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2604.10326","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","created":"2026-04-11","cited_by_count":0,"area":"safety"},{"id":"2609.09798","title":"CS-Guard: Benchmarking LLM Guardrails for Code Generation Security","created":"2026-09-09","cited_by_count":0,"area":"safety"},{"id":"2610.04470","title":"Reactivating Alignment: Defending LLMs from Jailbreaks via Intention-Aware Input-Output Matching","created":"2026-10-03","cited_by_count":0,"area":"safety"}],"next_cursor":null}