{"total":130,"rows":[{"id":"2404.13501","title":"A Survey on the Memory Mechanism of Large Language Model based Agents","created":"2024-04-21","cited_by_count":634,"area":"wm"},{"id":"2412.14470","title":"Agent-SafetyBench: Evaluating the Safety of LLM Agents","created":"2024-12-19","cited_by_count":306,"area":"agents"},{"id":"2403.09513","title":"AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting","created":"2024-03-14","cited_by_count":125,"area":"mllm"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2411.13577","title":"WavChat: A Survey of Spoken Dialogue Models","created":"2024-11-15","cited_by_count":90,"area":null},{"id":"2502.02384","title":"STAIR: Improving Safety Alignment with Introspective Reasoning","created":"2025-02-04","cited_by_count":77,"area":"lr"},{"id":"2502.11127","title":"G-Safeguard: A Topology-Guided Security Lens and Treatment on LLM-based Multi-agent Systems","created":"2025-02-16","cited_by_count":59,"area":"agents"},{"id":"2503.22458","title":"Evaluating LLM-based Agents for Multi-Turn Conversations: A Survey","created":"2025-03-28","cited_by_count":57,"area":"agents"},{"id":"2406.06144","title":"Language Models Resist Alignment: Evidence From Data Compression","created":"2024-06-10","cited_by_count":53,"area":null},{"id":"2404.15676","title":"Beyond Chain-of-Thought: A Survey of Chain-of-X Paradigms for LLMs","created":"2024-04-24","cited_by_count":48,"area":"lr"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2505.24119","title":"The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It","created":"2025-05-30","cited_by_count":45,"area":"safety"},{"id":"2405.18634","title":"A Theoretical Understanding of Self-Correction through In-context Alignment","created":"2024-05-28","cited_by_count":44,"area":"lr"},{"id":"2503.04392","title":"AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Management","created":"2025-03-06","cited_by_count":38,"area":"agents"},{"id":"2402.12343","title":"Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!","created":"2024-02-19","cited_by_count":37,"area":"alignment"},{"id":"2402.16382","title":"Immunization against harmful fine-tuning attacks","created":"2024-02-26","cited_by_count":35,"area":null},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2510.13554","title":"Attention Illuminates LLM Reasoning: The Preplan-and-Anchor Rhythm Enables Fine-Grained Policy Optimization","created":"2025-10-15","cited_by_count":25,"area":"lr"},{"id":"2410.15267","title":"When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?","created":"2024-10-20","cited_by_count":24,"area":"rag"},{"id":"2412.18537","title":"Harnessing Large Language Models for Knowledge Graph Question Answering via Adaptive Multi-Aspect Retrieval-Augmentation","created":"2024-12-24","cited_by_count":24,"area":null},{"id":"2509.01909","title":"Oyster-I: Beyond Refusal -- Constructive Safety Alignment for Responsible Language Models","created":"2025-09-02","cited_by_count":19,"area":"alignment"},{"id":"2503.00596","title":"BadJudge: Backdoor Vulnerabilities of LLM-as-a-Judge","created":"2025-03-01","cited_by_count":18,"area":"safety"},{"id":"2502.13141","title":"UniGuardian: A Unified Defense for Detecting Prompt Injection, Backdoor Attacks and Adversarial Attacks in Large Language Models","created":"2025-02-18","cited_by_count":16,"area":"safety"},{"id":"2405.14488","title":"MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability","created":"2024-05-23","cited_by_count":15,"area":null},{"id":"2406.10311","title":"CHiSafetyBench: A Chinese Hierarchical Safety Benchmark for Large Language Models","created":"2024-06-14","cited_by_count":15,"area":null},{"id":"2502.01208","title":"On Almost Surely Safe Alignment of Large Language Models at Inference-Time","created":"2025-02-03","cited_by_count":14,"area":"alignment"},{"id":"2503.21720","title":"Collab: Controlled Decoding using Mixture of Agents for LLM Alignment","created":"2025-03-27","cited_by_count":14,"area":"agents"},{"id":"2504.09593","title":"ControlNET: A Firewall for RAG-based LLM System","created":"2025-04-13","cited_by_count":12,"area":"rag"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2502.07577","title":"Automated Capability Discovery via Foundation Model Self-Exploration","created":"2025-02-11","cited_by_count":10,"area":null},{"id":"2408.04650","title":"Building Trust in Mental Health Chatbots: Safety Metrics and LLM-Based Evaluation Tools","created":"2024-08-03","cited_by_count":9,"area":"agents"},{"id":"2502.19041","title":"Beyond Surface-Level Patterns: An Essence-Driven Defense Framework Against Jailbreak Attacks in LLMs","created":"2025-02-26","cited_by_count":9,"area":"safety"},{"id":"2509.23286","title":"A2D: Any-Order, Any-Step Safety Alignment for Diffusion Language Models","created":"2025-09-27","cited_by_count":9,"area":"diffusion"},{"id":"2510.24966","title":"Sequences of Logits Reveal the Low Rank Structure of Language Models","created":"2025-10-28","cited_by_count":9,"area":null},{"id":"2512.18733","title":"Explainable and Fine-Grained Safeguarding of LLM Multi-Agent Systems via Bi-Level Graph Anomaly Detection","created":"2025-12-21","cited_by_count":9,"area":"agents"},{"id":"2408.04643","title":"Risks, Causes, and Mitigations of Widespread Deployments of Large Language Models (LLMs): A Survey","created":"2024-08-01","cited_by_count":8,"area":null},{"id":"2503.19540","title":"FLEX: A Benchmark for Evaluating Robustness of Fairness in Large Language Models","created":"2025-03-25","cited_by_count":8,"area":null},{"id":"2505.12060","title":"Why Not Act on What You Know? Unleashing Safety Potential of LLMs via Self-Aware Guard Enhancement","created":"2025-05-17","cited_by_count":8,"area":"safety"},{"id":"2508.00935","title":"Measuring Harmfulness of Computer-Using Agents","created":"2025-07-31","cited_by_count":8,"area":"agents"},{"id":"2601.01887","title":"Safety at One Shot: Patching Fine-Tuned LLMs with A Single Instance","created":"2026-01-05","cited_by_count":8,"area":"alignment"},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2410.15641","title":"SMILES-Prompting: A Novel Approach to LLM Jailbreak Attacks in Chemical Synthesis","created":"2024-10-21","cited_by_count":7,"area":"safety"},{"id":"2410.18491","title":"ChineseSafe: A Chinese Benchmark for Evaluating Safety in Large Language Models","created":"2024-10-24","cited_by_count":7,"area":null},{"id":"2501.00055","title":"LLM-Virus: Evolutionary Jailbreak Attack on Large Language Models","created":"2024-12-28","cited_by_count":7,"area":"safety"},{"id":"2506.02442","title":"Should LLM Safety Be More Than Refusing Harmful Instructions?","created":"2025-06-03","cited_by_count":7,"area":"safety"},{"id":"2510.05052","title":"Proactive defense against LLM Jailbreak","created":"2025-10-06","cited_by_count":7,"area":"alignment"},{"id":"2512.04785","title":"ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications","created":"2025-12-04","cited_by_count":7,"area":"agents"},{"id":"2601.07853","title":"FinVault: Benchmarking Financial Agent Safety in Execution-Grounded Environments","created":"2026-01-09","cited_by_count":7,"area":"agents"},{"id":"2601.10141","title":"Understanding and Preserving Safety in Fine-Tuned LLMs","created":"2026-01-15","cited_by_count":7,"area":"safety"},{"id":"2602.05176","title":"Among Us: Measuring and Mitigating Malicious Contributions in Model Collaboration Systems","created":"2026-02-05","cited_by_count":7,"area":"agents"},{"id":"2605.23723","title":"MemAudit: Post-hoc Auditing of Poisoned Agent Memory via Causal Attribution and Structural Anomaly Detection","created":"2026-05-22","cited_by_count":7,"area":"agents"},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2410.02916","title":"LLM Safeguard is a Double-Edged Sword: Exploiting False Positives for Denial-of-Service Attacks","created":"2024-10-03","cited_by_count":6,"area":"safety"},{"id":"2410.20016","title":"Vulnerability of LLMs to Vertically Aligned Text Manipulations","created":"2024-10-26","cited_by_count":6,"area":null},{"id":"2505.14368","title":"From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2506.07452","title":"When Style Breaks Safety: Defending LLMs Against Superficial Style Alignment","created":"2025-06-09","cited_by_count":6,"area":"safety"},{"id":"2601.14667","title":"INFA-Guard: Mitigating Malicious Propagation via Infection-Aware Safeguarding in LLM-Based Multi-Agent Systems","created":"2026-01-21","cited_by_count":6,"area":"agents"},{"id":"2409.14710","title":"ERABAL: Enhancing Role-Playing Agents through Boundary-Aware Learning","created":"2024-09-23","cited_by_count":5,"area":"agents"},{"id":"2410.19933","title":"Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization","created":"2024-10-25","cited_by_count":5,"area":"alignment"},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2510.04891","title":"SocialHarmBench: Revealing LLM Vulnerabilities to Socially Harmful Requests","created":"2025-10-06","cited_by_count":5,"area":"safety"},{"id":"2412.10807","title":"Towards Action Hijacking of Large Language Model-based Agent","created":"2024-12-14","cited_by_count":4,"area":"agents"},{"id":"2607.01243","title":"STRUCTSURVEY: Structured Agentic Retrieval for Automated Survey Paper Generation","created":"2026-05-12","cited_by_count":4,"area":"agents"},{"id":"2406.04752","title":"CRiskEval: A Chinese Multi-Level Risk Evaluation Benchmark Dataset for Large Language Models","created":"2024-06-07","cited_by_count":3,"area":null},{"id":"2409.04822","title":"Exploring Straightforward Conversational Red-Teaming","created":"2024-09-07","cited_by_count":3,"area":"safety"},{"id":"2411.07845","title":"Ethical Concern Identification in NLP: A Corpus of ACL Anthology Ethics Statements","created":"2024-11-12","cited_by_count":3,"area":null},{"id":"2504.21700","title":"XBreaking: Understanding how LLMs security alignment can be broken","created":"2025-04-30","cited_by_count":3,"area":null},{"id":"2507.21170","title":"OneShield -- the Next Generation of LLM Guardrails","created":"2025-07-25","cited_by_count":3,"area":"safety"},{"id":"2511.22924","title":"MAS-Shield: A Defense Framework for Secure and Efficient LLM MAS","created":"2025-11-28","cited_by_count":3,"area":null},{"id":"2604.02359","title":"Using LLM-as-a-Judge/Jury to Advance Scalable, Clinically-Validated Safety Evaluations of Model Responses to Users Demonstrating Psychosis","created":"2026-03-20","cited_by_count":3,"area":null},{"id":"2606.10646","title":"How Does Reasoning Flow? Tracing Attention-Induced Information Flow for Targeted RL in LLMs","created":"2026-06-09","cited_by_count":3,"area":"lr"},{"id":"2508.06755","title":"Many-Turn Jailbreaking","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2509.06921","title":"Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunities","created":"2025-09-08","cited_by_count":2,"area":null},{"id":"2511.06396","title":"Efficient LLM Safety Evaluation through Multi-Agent Debate","created":"2025-11-09","cited_by_count":2,"area":"agents"},{"id":"2511.08319","title":"Adaptive Multi-Agent Response Refinement in Conversational Systems","created":"2025-11-11","cited_by_count":2,"area":"agents"},{"id":"2512.00412","title":"Red Teaming Large Reasoning Models","created":"2025-11-29","cited_by_count":2,"area":"lr"},{"id":"2605.28104","title":"Defending LLM-based Multi-Agent Systems Against Cooperative Attacks with Sentence-Level Rectification","created":"2026-05-27","cited_by_count":2,"area":"agents"},{"id":"2608.28327","title":"Layered LLM Defenses as an Ensemble: Access Tiers, Inference Cost, and the Measured Failure Correlation Between Defense Layers","created":"2026-08-28","cited_by_count":2,"area":null},{"id":"2501.07959","title":"Self-Instruct Few-Shot Jailbreaking: Decompose the Attack into Pattern and Behavior Learning","created":"2025-01-14","cited_by_count":1,"area":"synth"},{"id":"2502.05739","title":"Mitigating Sensitive Information Leakage in LLMs4Code through Machine Unlearning","created":"2025-02-09","cited_by_count":1,"area":"safety"},{"id":"2503.12931","title":"MirrorShield: Towards Universal Defense Against Jailbreaks via Entropy-Guided Mirror Crafting","created":"2025-03-17","cited_by_count":1,"area":"safety"},{"id":"2506.07031","title":"HauntAttack: When Attack Follows Reasoning as a Shadow","created":"2025-06-08","cited_by_count":1,"area":"lr"},{"id":"2506.23296","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","created":"2025-06-29","cited_by_count":1,"area":null},{"id":"2507.22133","title":"Prompt Optimization and Evaluation for LLM Automated Red Teaming","created":"2025-07-29","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2508.20333","title":"Poison Once, Refuse Forever: Weaponizing Alignment for Injecting Bias in LLMs","created":"2025-08-28","cited_by_count":1,"area":null},{"id":"2509.06807","title":"MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security","created":"2025-09-08","cited_by_count":1,"area":null},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2509.16870","title":"DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems","created":"2025-09-21","cited_by_count":1,"area":"safety"},{"id":"2509.25843","title":"ASGuard: Activation-Scaling Guard to Mitigate Targeted Jailbreaking Attack","created":"2025-09-30","cited_by_count":1,"area":"safety"},{"id":"2511.14195","title":"N-GLARE: An Non-Generative Latent Representation-Efficient LLM Safety Evaluator","created":"2025-11-18","cited_by_count":1,"area":"safety"},{"id":"2512.19016","title":"DREAM: Dynamic Red-teaming across Environments for AI Models","created":"2025-12-22","cited_by_count":1,"area":"agents"},{"id":"2601.00213","title":"Overlooked Safety Vulnerability in LLMs: Malicious Intelligent Optimization Algorithm Request and its Jailbreak","created":"2026-01-01","cited_by_count":1,"area":"safety"},{"id":"2602.05386","title":"Spider-Sense: Intrinsic Risk Sensing for Efficient Agent Defense with Hierarchical Adaptive Screening","created":"2026-02-05","cited_by_count":1,"area":"agents"},{"id":"2604.16037","title":"Stochasticity in Tokenisation Improves Robustness","created":"2026-04-17","cited_by_count":1,"area":null},{"id":"2605.01899","title":"Disentangling Intent from Role: Adversarial Self-Play for Persona-Invariant Safety Alignment","created":"2026-05-03","cited_by_count":1,"area":"alignment"},{"id":"2605.18104","title":"Safety Geometry Collapse in Multimodal LLMs and Adaptive Drift Correction","created":"2026-05-18","cited_by_count":1,"area":"mllm"},{"id":"2607.01277","title":"Cognitive Firewall: A Proactive, Zero-Trust, Multi-Gate Framework for LLM Safety","created":"2026-07-01","cited_by_count":1,"area":"safety"}],"next_cursor":"100"}