{"total":33,"rows":[{"id":"2406.12935","title":"ChatBug: A Common Vulnerability of Aligned LLMs Induced by Chat Templates","created":"2024-06-17","cited_by_count":30,"area":"alignment"},{"id":"2405.14023","title":"WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response","created":"2024-05-22","cited_by_count":29,"area":"alignment"},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2502.09723","title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language","created":"2025-02-13","cited_by_count":18,"area":"alignment"},{"id":"2505.20259","title":"Lifelong Safety Alignment for Language Models","created":"2025-05-26","cited_by_count":15,"area":"alignment"},{"id":"2505.21605","title":"SoSBench: Benchmarking Safety Alignment on Six Scientific Domains","created":"2025-05-27","cited_by_count":12,"area":"alignment"},{"id":"2411.12762","title":"Playing Language Game with LLMs Leads to Jailbreaking","created":"2024-11-16","cited_by_count":11,"area":"alignment"},{"id":"2412.15289","title":"SATA: A Paradigm for LLM Jailbreak via Simple Assistive Task Linkage","created":"2024-12-19","cited_by_count":11,"area":"alignment"},{"id":"2408.10701","title":"Ferret: Faster and Effective Automated Red Teaming with Reward-Based Scoring Technique","created":"2024-08-20","cited_by_count":8,"area":"alignment"},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2601.03868","title":"What Matters For Safety Alignment?","created":"2026-01-07","cited_by_count":7,"area":"alignment"},{"id":"2505.13862","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","created":"2025-05-20","cited_by_count":4,"area":"alignment"},{"id":"2510.21190","title":"The Trojan Example: Jailbreaking LLMs through Template Filling and Unsafety Reasoning","created":"2025-10-24","cited_by_count":3,"area":"alignment"},{"id":"2502.11853","title":"StructTransform: A Scalable Attack Surface for Safety-Aligned Large Language Models","created":"2025-02-17","cited_by_count":2,"area":"alignment"},{"id":"2506.02479","title":"BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage","created":"2025-06-03","cited_by_count":2,"area":"alignment"},{"id":"2602.16977","title":"Fail-Closed Alignment for Large Language Models","created":"2026-02-19","cited_by_count":2,"area":"alignment"},{"id":"2603.08104","title":"Invisible Safety Threat: Malicious Finetuning for LLM via Steganography","created":"2026-03-09","cited_by_count":2,"area":"alignment"},{"id":"2604.16916","title":"When Choices Become Risks: Safety Failures of Large Language Models under Multiple-Choice Constraints","created":"2026-04-18","cited_by_count":2,"area":"alignment"},{"id":"2604.19461","title":"Involuntary In-Context Learning: Exploiting Few-Shot Pattern Completion to Bypass Safety Alignment in GPT-5.4","created":"2026-04-21","cited_by_count":2,"area":"alignment"},{"id":"2511.02356","title":"ASTRA: An Automated Framework for Strategy Discovery, Retrieval, and Evolution for Jailbreaking LLMs","created":"2025-11-04","cited_by_count":1,"area":"alignment"},{"id":"2512.06515","title":"ProSocialAlign: Preference Conditioned Test Time Alignment in Language Models","created":"2025-12-06","cited_by_count":1,"area":"alignment"},{"id":"2510.20129","title":"SAID: Safety-Aware Intent Defense via Prefix Probing for Large Language Models","created":"2025-10-23","cited_by_count":0,"area":"alignment"},{"id":"2605.08878","title":"Why Do Aligned LLMs Remain Jailbreakable: Refusal-Escape Directions, Operator-Level Sources, and Safety-Utility Trade-off","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.21362","title":"LASH: Adaptive Semantic Hybridization for Black-Box Jailbreaking of Large Language Models","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2606.04160","title":"Decomposing Refusal Steering in Mixture-of-Experts Models","created":"2026-06-02","cited_by_count":0,"area":"alignment"},{"id":"2607.00572","title":"HARC: Coupling Harmfulness and Refusal Directions for Robust Safety Alignment","created":"2026-07-01","cited_by_count":0,"area":"alignment"},{"id":"2609.02215","title":"ASCII Attack: Recontextualising Harmful Requests as Artistic Critique in Large Language Models","created":"2026-09-02","cited_by_count":0,"area":"alignment"},{"id":"2609.03693","title":"AlcaTRAz - Anchored Tree-Rule Defense Against Jailbreaks","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.04022","title":"Representational alignment yields generalizable safety in language models","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.08634","title":"Suan: Rectifying Direct Preference Safety Alignment in Large Language Models","created":"2026-09-08","cited_by_count":0,"area":"alignment"},{"id":"2609.18515","title":"Beyond Routine Compliance: Cunning Data Cultivates Safety Vigilance in Large Language Models","created":"2026-09-16","cited_by_count":0,"area":"alignment"},{"id":"2609.39902","title":"CodeMimicry: Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion","created":"2026-09-30","cited_by_count":0,"area":"alignment"},{"id":"2610.11005","title":"How Narrative Wrapping Affects LLM Refusal: A Cross-Language Benchmark and Defense","created":"2026-10-07","cited_by_count":0,"area":"alignment"}],"next_cursor":null}