{"total":108,"rows":[{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2402.11753","title":"ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs","created":"2024-02-19","cited_by_count":216,"area":"safety"},{"id":"2404.07921","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","created":"2024-04-11","cited_by_count":172,"area":"safety"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2405.18166","title":"Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editing","created":"2024-05-28","cited_by_count":79,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2403.00867","title":"Gradient Cuff: Detecting Jailbreak Attacks on Large Language Models by Exploring Refusal Loss Landscapes","created":"2024-03-01","cited_by_count":74,"area":"safety"},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2406.17092","title":"BEEAR: Embedding-based Adversarial Removal of Safety Backdoors in Instruction-tuned Language Models","created":"2024-06-24","cited_by_count":58,"area":"safety"},{"id":"2502.07557","title":"JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation","created":"2025-02-11","cited_by_count":54,"area":"safety"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2501.01765","title":"SaLoRA: Safety-Alignment Preserved Low-Rank Adaptation","created":"2025-01-03","cited_by_count":42,"area":"safety"},{"id":"2405.01229","title":"Boosting Jailbreak Attack with Momentum","created":"2024-05-02","cited_by_count":40,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2406.12257","title":"CleanGen: Mitigating Backdoor Attacks for Generation Tasks in Large Language Models","created":"2024-06-18","cited_by_count":24,"area":"safety"},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2412.17034","title":"Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language Models","created":"2024-12-22","cited_by_count":23,"area":"safety"},{"id":"2409.14866","title":"PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs","created":"2024-09-23","cited_by_count":21,"area":"safety"},{"id":"2505.15710","title":"Advancing LLM Safe Alignment with Safety Representation Ranking","created":"2025-05-21","cited_by_count":16,"area":"safety"},{"id":"2505.17568","title":"JALMBench: Benchmarking Jailbreak Vulnerabilities in Audio Language Models","created":"2025-05-23","cited_by_count":16,"area":"safety"},{"id":"2501.14250","title":"Siren: A Learning-Based Multi-Turn Attack Framework for Simulating Real-World Human Jailbreak Behaviors","created":"2025-01-24","cited_by_count":13,"area":"safety"},{"id":"2509.14558","title":"LLM Jailbreak Detection for (Almost) Free!","created":"2025-09-18","cited_by_count":13,"area":"safety"},{"id":"2411.14133","title":"GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs","created":"2024-11-21","cited_by_count":12,"area":"safety"},{"id":"2410.06809","title":"Root Defence Strategies: Ensuring Safety of LLM at the Decoding Level","created":"2024-10-09","cited_by_count":11,"area":"safety"},{"id":"2402.15727","title":"LLMs Can Defend Themselves Against Jailbreaking in a Practical Manner: A Vision Paper","created":"2024-02-24","cited_by_count":10,"area":"safety"},{"id":"2502.11647","title":"DELMAN: Dynamic Defense Against Large Language Model Jailbreaking with Model Editing","created":"2025-02-17","cited_by_count":10,"area":"safety"},{"id":"2504.13562","title":"DETAM: Defending LLMs Against Jailbreak Attacks via Targeted Attention Modification","created":"2025-04-18","cited_by_count":10,"area":"safety"},{"id":"2412.12621","title":"Jailbreaking? One Step Is Enough!","created":"2024-12-17","cited_by_count":9,"area":"safety"},{"id":"2510.09694","title":"Kelp: A Streaming Safeguard for Large Models via Latent Dynamics-Guided Risk Detection","created":"2025-10-09","cited_by_count":9,"area":"safety"},{"id":"2410.09097","title":"Recent advancements in LLM Red-Teaming: Techniques, Defenses, and Ethical Considerations","created":"2024-10-09","cited_by_count":8,"area":"safety"},{"id":"2505.12060","title":"Why Not Act on What You Know? Unleashing Safety Potential of LLMs via Self-Aware Guard Enhancement","created":"2025-05-17","cited_by_count":8,"area":"safety"},{"id":"2501.02629","title":"Layer-Level Self-Exposure and Patch: Affirmative Token Mitigation for Jailbreak Attack Defense","created":"2025-01-05","cited_by_count":7,"area":"safety"},{"id":"2505.15753","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","created":"2025-05-21","cited_by_count":7,"area":"safety"},{"id":"2506.02442","title":"Should LLM Safety Be More Than Refusing Harmful Instructions?","created":"2025-06-03","cited_by_count":7,"area":"safety"},{"id":"2509.01631","title":"Unraveling LLM Jailbreaks Through Safety Knowledge Neurons","created":"2025-09-01","cited_by_count":7,"area":"safety"},{"id":"2512.05485","title":"TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations","created":"2025-12-05","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2505.16765","title":"Hiding in Plain Sight: A Steganographic Approach to Stealthy LLM Jailbreaks","created":"2025-05-22","cited_by_count":6,"area":"safety"},{"id":"2410.16327","title":"Feint and Attack: Attention-Based Strategies for Jailbreaking and Protecting LLMs","created":"2024-10-18","cited_by_count":5,"area":"safety"},{"id":"2502.00653","title":"Towards Robust Multimodal Large Language Models Against Jailbreak Attacks","created":"2025-02-02","cited_by_count":5,"area":"safety"},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2505.09602","title":"Adversarial Suffix Filtering: a Defense Pipeline for LLMs","created":"2025-05-14","cited_by_count":5,"area":"safety"},{"id":"2507.04365","title":"Attention Slipping: A Mechanistic Understanding of Jailbreak Attacks and Defenses in LLMs","created":"2025-07-06","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2511.14423","title":"Unified Defense for Large Language Models against Jailbreak and Fine-Tuning Attacks in Education","created":"2025-11-18","cited_by_count":5,"area":"safety"},{"id":"2411.01565","title":"SQL Injection Jailbreak: A Structural Disaster of Large Language Models","created":"2024-11-03","cited_by_count":4,"area":"safety"},{"id":"2411.14502","title":"Global Challenge for Safe and Secure LLMs Track 1","created":"2024-11-21","cited_by_count":4,"area":"safety"},{"id":"2502.15594","title":"SafeInt: Shielding Large Language Models from Jailbreak Attacks via Safety-Aware Representation Intervention","created":"2025-02-21","cited_by_count":4,"area":"safety"},{"id":"2503.24191","title":"When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output","created":"2025-03-31","cited_by_count":4,"area":"safety"},{"id":"2508.15182","title":"SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks","created":"2025-08-21","cited_by_count":4,"area":"safety"},{"id":"2509.14651","title":"MUSE: MCTS-Driven Red Teaming Framework for Enhanced Multi-Turn Dialogue Safety in Large Language Models","created":"2025-09-18","cited_by_count":4,"area":"safety"},{"id":"2510.26096","title":"ALMGuard: Safety Shortcuts and Where to Find Them as Guardrails for Audio-Language Models","created":"2025-10-30","cited_by_count":4,"area":"safety"},{"id":"2601.10543","title":"Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing","created":"2026-01-15","cited_by_count":4,"area":"safety"},{"id":"2604.07727","title":"TrajGuard: Streaming Hidden-state Trajectory Detection for Decoding-time Jailbreak Defense","created":"2026-04-09","cited_by_count":4,"area":"safety"},{"id":"2504.12321","title":"AttentionDefense: Leveraging System Prompt Attention for Explainable Defense Against Novel Jailbreaks","created":"2025-04-10","cited_by_count":3,"area":"safety"},{"id":"2506.16792","title":"MIST: Jailbreaking Black-box Large Language Models via Iterative Semantic Tuning","created":"2025-06-20","cited_by_count":3,"area":"safety"},{"id":"2508.14128","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","created":"2025-08-19","cited_by_count":3,"area":"safety"},{"id":"2512.24044","title":"Jailbreaking Attacks vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?","created":"2025-12-30","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2601.03600","title":"ALERT: Zero-shot LLM Jailbreak Detection via Internal Discrepancy Amplification","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2602.13547","title":"AISA: Awakening Intrinsic Safety Awareness in Large Language Models against Jailbreak Attacks","created":"2026-02-14","cited_by_count":3,"area":"safety"},{"id":"2605.05058","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","created":"2026-05-06","cited_by_count":3,"area":"safety"},{"id":"2502.14486","title":"How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2502.19883","title":"Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models","created":"2025-02-27","cited_by_count":2,"area":"safety"},{"id":"2506.17881","title":"GRAF: Multi-turn Jailbreaking via Global Refinement and Active Fabrication","created":"2025-06-22","cited_by_count":2,"area":"safety"},{"id":"2507.07146","title":"Attention-Aware GNN-based Input Defense against Multi-Turn LLM Jailbreak","created":"2025-07-09","cited_by_count":2,"area":"safety"},{"id":"2606.05609","title":"SlotGCG: Exploiting the Positional Vulnerability in LLMs for Jailbreak Attacks","created":"2026-06-04","cited_by_count":2,"area":"safety"},{"id":"2503.03502","title":"Geometry-Guided Adversarial Prompt Detection via Curvature and Local Intrinsic Dimension","created":"2025-03-05","cited_by_count":1,"area":"safety"},{"id":"2503.12931","title":"MirrorShield: Towards Universal Defense Against Jailbreaks via Entropy-Guided Mirror Crafting","created":"2025-03-17","cited_by_count":1,"area":"safety"},{"id":"2504.01533","title":"LightDefense: A Lightweight Uncertainty-Driven Defense against Jailbreaks via Shifted Token Distribution","created":"2025-04-02","cited_by_count":1,"area":"safety"},{"id":"2508.00555","title":"Activation-Guided Local Editing for Jailbreaking Attacks","created":"2025-08-01","cited_by_count":1,"area":"safety"},{"id":"2509.24488","title":"Sanitize Your Responses: Mitigating Privacy Leakage in Large Language Models","created":"2025-09-29","cited_by_count":1,"area":"safety"},{"id":"2511.12217","title":"AlignTree: Efficient Defense Against LLM Jailbreak Attacks","created":"2025-11-15","cited_by_count":1,"area":"safety"},{"id":"2601.00213","title":"Overlooked Safety Vulnerability in LLMs: Malicious Intelligent Optimization Algorithm Request and its Jailbreak","created":"2026-01-01","cited_by_count":1,"area":"safety"},{"id":"2602.06440","title":"TrailBlazer: History-Guided Reinforcement Learning for Black-Box LLM Jailbreaking","created":"2026-02-06","cited_by_count":1,"area":"safety"},{"id":"2602.06623","title":"Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Intervention","created":"2026-02-06","cited_by_count":1,"area":"safety"},{"id":"2603.28817","title":"GUARD-SLM: Token Activation-Based Defense Against Jailbreak Attacks for Small Language Models","created":"2026-03-28","cited_by_count":1,"area":"safety"},{"id":"2606.12342","title":"ALIGNBEAM : Inference-Time Alignment Transfer via Cross-Vocabulary Logit Mixing","created":"2026-06-10","cited_by_count":1,"area":"safety"},{"id":"2606.16527","title":"DoubtProbe: Black-Box Jailbreak Defense via Structural Verification and Semantic Auditing","created":"2026-06-15","cited_by_count":1,"area":"safety"},{"id":"2608.23028","title":"PsychJail: Exploring Psychological Jailbreaks via Multi-Turn Persuasion of LLM Policies","created":"2026-08-24","cited_by_count":1,"area":"safety"},{"id":"2609.21793","title":"CASCADE Against Jailbreaks: Combination Across Stages with Controlled Attack-Defense Evaluation","created":"2026-09-18","cited_by_count":1,"area":"safety"},{"id":"2505.07167","title":"Decoding One Safety Trigger Token for Balancing Safety and Usability in Large Language Models","created":"2025-05-12","cited_by_count":0,"area":"safety"},{"id":"2505.17066","title":"Improving LLM Outputs Against Jailbreak Attacks with Expert Model Integration","created":"2025-05-18","cited_by_count":0,"area":"safety"},{"id":"2508.11290","title":"SafeConstellations: Mitigating Over-Refusals in LLMs Through Task-Aware Representation Steering","created":"2025-08-15","cited_by_count":0,"area":"safety"},{"id":"2508.15648","title":"SDGO: Self-Discrimination-Guided Optimization for Consistent Safety in Large Language Models","created":"2025-08-21","cited_by_count":0,"area":"safety"},{"id":"2511.18933","title":"Defending Large Language Models Against Jailbreak Exploits with Responsible AI Considerations","created":"2025-11-24","cited_by_count":0,"area":"safety"},{"id":"2512.04841","title":"SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2602.02027","title":"Light Alignment Improves LLM Safety via Model Self-Reflection with a Single Neuron","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2602.04893","title":"A Causal Perspective for Enhancing Jailbreak Attack and Defense","created":"2026-01-31","cited_by_count":0,"area":"safety"},{"id":"2602.06630","title":"TrapSuffix: Proactive Defense Against Adversarial Suffixes in Jailbreaking","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2602.19396","title":"Hiding in Plain Text: Detecting Concealed Jailbreaks via Activation Disentanglement","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2604.05179","title":"Gradient-Controlled Decoding: A Safety Guardrail for LLMs with Dual-Anchor Steering","created":"2026-04-06","cited_by_count":0,"area":"safety"},{"id":"2604.10326","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","created":"2026-04-11","cited_by_count":0,"area":"safety"},{"id":"2604.24082","title":"Jailbreaking Frontier Foundation Models Through Intention Deception","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.01758","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","created":"2026-05-03","cited_by_count":0,"area":"safety"},{"id":"2605.03095","title":"Revisiting JBShield: Breaking and Rebuilding Representation-Level Jailbreak Defenses","created":"2026-05-04","cited_by_count":0,"area":"safety"},{"id":"2605.10764","title":"Break the Brake, Not the Wheel: Untargeted Jailbreak via Entropy Maximization","created":"2026-05-11","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}