{"total":95,"rows":[{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2405.21018","title":"Improved Techniques for Optimization-Based Jailbreaking on Large Language Models","created":"2024-05-31","cited_by_count":110,"area":"safety"},{"id":"2406.00799","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","created":"2024-06-02","cited_by_count":72,"area":"rag"},{"id":"2405.03644","title":"When LLMs Meet Cybersecurity: A Systematic Literature Review","created":"2024-05-06","cited_by_count":71,"area":null},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2405.19103","title":"Voice Jailbreak Attacks Against GPT-4o","created":"2024-05-29","cited_by_count":42,"area":"safety"},{"id":"2405.13967","title":"Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicity","created":"2024-05-22","cited_by_count":35,"area":"alignment"},{"id":"2406.12975","title":"SHIELD: Evaluation and Defense Strategies for Copyright Compliance in LLM Text Generation","created":"2024-06-18","cited_by_count":34,"area":null},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2406.06622","title":"Adversarial Tuning: Defending Against Jailbreak Attacks for LLMs","created":"2024-06-07","cited_by_count":26,"area":"safety"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2604.06811","title":"SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems","created":"2026-04-08","cited_by_count":25,"area":"agents"},{"id":"2412.17034","title":"Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language Models","created":"2024-12-22","cited_by_count":23,"area":"safety"},{"id":"2409.14866","title":"PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs","created":"2024-09-23","cited_by_count":21,"area":"safety"},{"id":"2411.02631","title":"Extracting Unlearned Information from LLMs with Activation Steering","created":"2024-11-04","cited_by_count":21,"area":"safety"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2406.18122","title":"Poisoned LangChain: Jailbreak LLMs by LangChain","created":"2024-06-26","cited_by_count":14,"area":"rag"},{"id":"2508.20848","title":"JADES: A Universal Framework for Jailbreak Assessment via Decompositional Scoring","created":"2025-08-28","cited_by_count":14,"area":"safety"},{"id":"2408.15488","title":"Legilimens: Practical and Unified Content Moderation for Large Language Model Services","created":"2024-08-28","cited_by_count":13,"area":"safety"},{"id":"2409.14177","title":"PathSeeker: Exploring LLM Security Vulnerabilities with a Reinforcement Learning-Based Jailbreak Approach","created":"2024-09-21","cited_by_count":11,"area":"safety"},{"id":"2412.16974","title":"Cannot or Should Not? Automatic Analysis of Refusal Composition in IFT/RLHF Datasets and Refusal Behavior of Black-Box LLMs","created":"2024-12-22","cited_by_count":11,"area":"alignment"},{"id":"2604.15415","title":"HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?","created":"2026-04-16","cited_by_count":11,"area":"agents"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2410.16527","title":"Insights and Current Gaps in Open-Source LLM Vulnerability Scanners: A Comparative Analysis","created":"2024-10-21","cited_by_count":10,"area":"safety"},{"id":"2505.14289","title":"EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks","created":"2025-05-20","cited_by_count":9,"area":"agents"},{"id":"2601.09625","title":"The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism","created":"2026-01-14","cited_by_count":9,"area":"safety"},{"id":"2502.08142","title":"Bridging the Safety Gap: A Guardrail Pipeline for Trustworthy LLM Inferences","created":"2025-02-12","cited_by_count":8,"area":"safety"},{"id":"2505.01177","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","created":"2025-05-02","cited_by_count":8,"area":null},{"id":"2406.18725","title":"Jailbreaking LLMs with Arabic Transliteration and Arabizi","created":"2024-06-26","cited_by_count":7,"area":"safety"},{"id":"2505.14368","title":"From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2601.20903","title":"ICON: Intent-Context Coupling for Efficient Multi-Turn Jailbreak Attack","created":"2026-01-28","cited_by_count":6,"area":"safety"},{"id":"2410.09804","title":"BlackDAN: A Black-Box Multi-Objective Approach for Effective and Contextual Jailbreaking of Large Language Models","created":"2024-10-13","cited_by_count":5,"area":"safety"},{"id":"2510.13893","title":"Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection","created":"2025-10-14","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2406.10847","title":"TorchOpera: A Compound AI System for LLM Safety","created":"2024-06-16","cited_by_count":4,"area":"safety"},{"id":"2407.00075","title":"Logicbreaks: A Framework for Understanding Subversion of Rule-based Inference","created":"2024-06-21","cited_by_count":4,"area":"safety"},{"id":"2505.13862","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","created":"2025-05-20","cited_by_count":4,"area":"alignment"},{"id":"2509.08000","title":"AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs","created":"2025-09-06","cited_by_count":4,"area":"safety"},{"id":"2603.04459","title":"Benchmark of Benchmarks: Unpacking Influence and Code Repository Quality in LLM Safety Benchmarks","created":"2026-03-03","cited_by_count":4,"area":"safety"},{"id":"2605.29960","title":"Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction","created":"2026-05-28","cited_by_count":4,"area":"agents"},{"id":"2406.02044","title":"Towards Universal and Black-Box Query-Response Only Attack on LLMs with QROA","created":"2024-06-04","cited_by_count":3,"area":"safety"},{"id":"2406.18812","title":"A Survey on Privacy Attacks Against Digital Twin Systems in AI-Robotics","created":"2024-06-27","cited_by_count":3,"area":null},{"id":"2501.16534","title":"Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs","created":"2025-01-27","cited_by_count":3,"area":"safety"},{"id":"2503.17932","title":"STShield: Single-Token Sentinel for Real-Time Jailbreak Detection in Large Language Models","created":"2025-03-23","cited_by_count":3,"area":"safety"},{"id":"2506.07402","title":"Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures","created":"2025-06-09","cited_by_count":3,"area":"alignment"},{"id":"2601.03288","title":"How Real is Your Jailbreak? Fine-grained Jailbreak Evaluation with Anchored Reference","created":"2026-01-04","cited_by_count":3,"area":"safety"},{"id":"2602.04448","title":"RASA: Routing-Aware Safety Alignment for Mixture-of-Experts Models","created":"2026-02-04","cited_by_count":3,"area":"alignment"},{"id":"2603.11914","title":"Understanding LLM Behavior When Encountering User-Supplied Harmful Content in Harmless Tasks","created":"2026-03-12","cited_by_count":3,"area":"safety"},{"id":"2605.05058","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","created":"2026-05-06","cited_by_count":3,"area":"safety"},{"id":"2605.29237","title":"Evolving Skill-Structured Attack Memory Enhances LLM Jailbreaking","created":"2026-05-28","cited_by_count":3,"area":"safety"},{"id":"2406.12702","title":"[WIP] Jailbreak Paradox: The Achilles' Heel of LLMs","created":"2024-06-18","cited_by_count":2,"area":"safety"},{"id":"2412.20087","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","created":"2024-12-28","cited_by_count":2,"area":null},{"id":"2506.12274","title":"InfoFlood: Jailbreaking Large Language Models with Information Overload","created":"2025-06-13","cited_by_count":2,"area":"safety"},{"id":"2511.01375","title":"Align to Misalign: Automatic LLM Jailbreak with Meta-Optimized LLM Judges","created":"2025-11-03","cited_by_count":2,"area":"safety"},{"id":"2603.24079","title":"When Understanding Becomes a Risk: Authenticity and Safety Risks in the Emerging Image Generation Paradigm","created":"2026-03-25","cited_by_count":2,"area":"mllm"},{"id":"2606.29623","title":"SCARCE: Scalable Cascade Analysis for Rare-event Characterisation via Embeddings","created":"2026-06-28","cited_by_count":2,"area":null},{"id":"2405.20806","title":"The AI Alignment Paradox","created":"2024-05-31","cited_by_count":1,"area":null},{"id":"2410.24049","title":"Desert Camels and Oil Sheikhs: Arab-Centric Red Teaming of Frontier LLMs","created":"2024-10-31","cited_by_count":1,"area":"safety"},{"id":"2502.16109","title":"Be a Multitude to Itself: A Prompt Evolution Framework for Red Teaming","created":"2025-02-22","cited_by_count":1,"area":"safety"},{"id":"2506.11521","title":"Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models","created":"2025-06-13","cited_by_count":1,"area":"mllm"},{"id":"2511.02356","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","created":"2025-11-04","cited_by_count":1,"area":"alignment"},{"id":"2511.19171","title":"Can LLMs Threaten Human Survival? Benchmarking Potential Existential Threats from LLMs via Prefix Completion","created":"2025-11-24","cited_by_count":1,"area":"safety"},{"id":"2512.03356","title":"From static to adaptive: immune memory-based jailbreak detection for large language models","created":"2025-12-03","cited_by_count":1,"area":"safety"},{"id":"2601.02670","title":"Break Me If You Can: Self-Jailbreaking of Aligned LLMs via Lexical Insertion Prompting","created":"2026-01-06","cited_by_count":1,"area":"safety"},{"id":"2601.09321","title":"SpatialJB: How Text Distribution Art Becomes the \"Jailbreak Key\" for LLM Guardrails","created":"2026-01-14","cited_by_count":1,"area":"safety"},{"id":"2604.01444","title":"Cooking Up Risks: Benchmarking and Reducing Food Safety Risks in Large Language Models","created":"2026-04-01","cited_by_count":1,"area":"safety"},{"id":"2604.09998","title":"Like a Hammer, It Can Build, It Can Break: Large Language Model Uses, Perceptions, and Adoption in Cybersecurity Operations on Reddit","created":"2026-04-11","cited_by_count":1,"area":null},{"id":"2607.02121","title":"Behind the Refusal: Determining Guardrail Activation via Behavioral Monitoring","created":"2026-07-02","cited_by_count":1,"area":"agents"},{"id":"2608.05210","title":"Innocent Panels, Hateful Stories: Evaluating and Detecting Hateful Intent in Multi-Turn Visual Story Generation","created":"2026-08-05","cited_by_count":1,"area":null},{"id":"2609.21793","title":"CASCADE Against Jailbreaks: Combination Across Stages with Controlled Attack-Defense Evaluation","created":"2026-09-18","cited_by_count":1,"area":"safety"},{"id":"2609.34457","title":"ZonoGPT: Towards An Abstract Domain for Verifying Large GPT Models","created":"2026-09-28","cited_by_count":1,"area":null},{"id":"2411.16730","title":"\"Moralized\" Multi-Step Jailbreak Prompts: Black-Box Testing of Guardrails in Large Language Models for Verbal Attacks","created":"2024-11-23","cited_by_count":0,"area":"safety"},{"id":"2411.19038","title":"DIESEL -- Dynamic Inference-Guidance via Evasion of Semantic Embeddings in LLMs","created":"2024-11-28","cited_by_count":0,"area":null},{"id":"2505.18212","title":"Towards medical AI misalignment: a preliminary study","created":"2025-05-22","cited_by_count":0,"area":"safety"},{"id":"2511.18933","title":"Defending Large Language Models Against Jailbreak Exploits with Responsible AI Considerations","created":"2025-11-24","cited_by_count":0,"area":"safety"},{"id":"2601.12652","title":"Ethical Risks in Deploying Large Language Models: An Evaluation of Medical Ethics Jailbreaking","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2602.03265","title":"Beyond Suffixes: Token Position in GCG Adversarial Attacks on Large Language Models","created":"2026-02-03","cited_by_count":0,"area":"alignment"},{"id":"2602.06630","title":"TrapSuffix: Proactive Defense Against Adversarial Suffixes in Jailbreaking","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2603.10012","title":"Measuring and Eliminating Refusals in Military Large Language Models","created":"2026-02-18","cited_by_count":0,"area":null},{"id":"2603.16192","title":"Structured Semantic Cloaking for Jailbreak Attacks on Large Language Models","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2604.15789","title":"A Systematic Study of Training-Free Methods for Trustworthy Large Language Models","created":"2026-04-17","cited_by_count":0,"area":null},{"id":"2605.00123","title":"Minimal, Local, Causal Explanations for Jailbreak Success in Large Language Models","created":"2026-04-30","cited_by_count":0,"area":"safety"},{"id":"2605.17971","title":"Babel: Jailbreaking Safety Attention via Obfuscation Distribution Optimized Sampling","created":"2026-05-18","cited_by_count":0,"area":"alignment"},{"id":"2605.19377","title":"The Evaluation Game: Beyond Static LLM Benchmarking","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2606.00686","title":"Dialectics of Alignment: Harnessing Unsafe Knowledge for Dynamic Safety Routing","created":"2026-05-30","cited_by_count":0,"area":"moe"},{"id":"2607.17152","title":"How Jailbreak Attacks Inform Safety Alignment: A Defender-Centric, Shapley-Based Evaluation of Jailbreak Contributions","created":"2026-07-19","cited_by_count":0,"area":"safety"},{"id":"2607.22671","title":"AIR-BENCH Live: An Evolving Safety Benchmark for Foundation Models","created":"2026-07-06","cited_by_count":0,"area":null},{"id":"2608.08164","title":"STEMMA: An Adversarial Multi-Agent Framework for Evaluating Self-Identity Consistency in LLMs","created":"2026-08-08","cited_by_count":0,"area":"agents"},{"id":"2608.30748","title":"The Fragility of Jailbreak Robustness Across Operational States","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2609.00519","title":"The Safeguard Worked. Is the LLM System Safer?","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.10594","title":"An Empirical Measurement of Jailbreaking Evaluators","created":"2026-09-07","cited_by_count":0,"area":"safety"}],"next_cursor":null}