{"total":216,"rows":[{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2402.16822","title":"Rainbow Teaming: Open-Ended Generation of Diverse Adversarial Prompts","created":"2024-02-26","cited_by_count":205,"area":"safety"},{"id":"2410.05295","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","created":"2024-10-03","cited_by_count":199,"area":"safety"},{"id":"2407.15549","title":"Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs","created":"2024-07-22","cited_by_count":173,"area":"safety"},{"id":"2408.15221","title":"LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yet","created":"2024-08-27","cited_by_count":151,"area":"safety"},{"id":"2407.12404","title":"Analyzing the Generalization and Reliability of Steering Vectors","created":"2024-07-17","cited_by_count":143,"area":"mechinterp"},{"id":"2502.12025","title":"SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities","created":"2025-02-17","cited_by_count":136,"area":"lr"},{"id":"2403.05030","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","created":"2024-03-08","cited_by_count":88,"area":"safety"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2410.14923","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","created":"2024-10-19","cited_by_count":68,"area":"agents"},{"id":"2406.15518","title":"Steering Without Side Effects: Improving Post-Deployment Control of Language Models","created":"2024-06-21","cited_by_count":46,"area":"safety"},{"id":"2407.16667","title":"RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agent","created":"2024-07-23","cited_by_count":44,"area":"agents"},{"id":"2502.15806","title":"A Mousetrap: Fooling Large Reasoning Models for Jailbreak with Chain of Iterative Chaos","created":"2025-02-19","cited_by_count":43,"area":"lr"},{"id":"2502.09674","title":"The Hidden Dimensions of LLM Alignment: A Multi-Dimensional Analysis of Orthogonal Safety Directions","created":"2025-02-13","cited_by_count":41,"area":"lr"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2507.11097","title":"The Devil behind the mask: An emergent safety vulnerability of Diffusion LLMs","created":"2025-07-15","cited_by_count":34,"area":"inference"},{"id":"2411.03814","title":"MRJ-Agent: An Effective Jailbreak Agent for Multi-Round Dialogue","created":"2024-11-06","cited_by_count":33,"area":"agents"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2504.01094","title":"Multilingual and Multi-Accent Jailbreaking of Audio LLMs","created":"2025-04-01","cited_by_count":31,"area":"safety"},{"id":"2406.12935","title":"ChatBug: A Common Vulnerability of Aligned LLMs Induced by Chat Templates","created":"2024-06-17","cited_by_count":30,"area":"alignment"},{"id":"2405.14023","title":"WordGame: Efficient & Effective LLM Jailbreak via Simultaneous Obfuscation in Query and Response","created":"2024-05-22","cited_by_count":29,"area":"alignment"},{"id":"2406.03589","title":"Ranking Manipulation for Conversational Search Engines","created":"2024-06-05","cited_by_count":26,"area":"safety"},{"id":"2509.09660","title":"Steering MoE LLMs via Expert (De)Activation","created":"2025-09-11","cited_by_count":26,"area":"moe"},{"id":"2412.17034","title":"Shaping the Safety Boundaries: Understanding and Defending Against Jailbreaks in Large Language Models","created":"2024-12-22","cited_by_count":23,"area":"safety"},{"id":"2501.07238","title":"Lessons From Red Teaming 100 Generative AI Products","created":"2025-01-13","cited_by_count":23,"area":"safety"},{"id":"2407.13934","title":"Towards Trustworthy AI: A Review of Ethical and Robust Large Language Models","created":"2024-06-01","cited_by_count":22,"area":null},{"id":"2602.01539","title":"MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety","created":"2026-02-02","cited_by_count":21,"area":"alignment"},{"id":"2407.00869","title":"Large Language Models Are Involuntary Truth-Tellers: Exploiting Fallacy Failure for Jailbreak Attacks","created":"2024-07-01","cited_by_count":19,"area":"safety"},{"id":"2410.01294","title":"Endless Jailbreaks with Bijection Learning","created":"2024-10-02","cited_by_count":19,"area":"safety"},{"id":"2506.08473","title":"AsFT: Anchoring Safety During LLM Fine-Tuning Within Narrow Safety Basin","created":"2025-06-10","cited_by_count":19,"area":null},{"id":"2405.15604","title":"Text Generation: A Systematic Literature Review of Tasks, Evaluation, and Challenges","created":"2024-05-24","cited_by_count":18,"area":null},{"id":"2502.09723","title":"QueryAttack: Jailbreaking Aligned Large Language Models Using Structured Non-natural Query Language","created":"2025-02-13","cited_by_count":18,"area":"alignment"},{"id":"2507.19060","title":"PurpCode: Reasoning for Safer Code Generation","created":"2025-07-25","cited_by_count":18,"area":"lr"},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17,"area":"safety"},{"id":"2406.14562","title":"Whiteboard-of-Thought: Thinking Step-by-Step Across Modalities","created":"2024-06-20","cited_by_count":16,"area":"lr"},{"id":"2409.11445","title":"Jailbreaking Large Language Models with Symbolic Mathematics","created":"2024-09-17","cited_by_count":16,"area":"safety"},{"id":"2505.20259","title":"Lifelong Safety Alignment for Language Models","created":"2025-05-26","cited_by_count":15,"area":"alignment"},{"id":"2406.01364","title":"BELLS: A Framework Towards Future Proof Benchmarks for the Evaluation of LLM Safeguards","created":"2024-06-03","cited_by_count":14,"area":null},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2512.07761","title":"TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards","created":"2025-12-08","cited_by_count":14,"area":"safety"},{"id":"2505.21605","title":"SoSBench: Benchmarking Safety Alignment on Six Scientific Domains","created":"2025-05-27","cited_by_count":12,"area":"alignment"},{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2411.12762","title":"Playing Language Game with LLMs Leads to Jailbreaking","created":"2024-11-16","cited_by_count":11,"area":"alignment"},{"id":"2412.15289","title":"SATA: A Paradigm for LLM Jailbreak via Simple Assistive Task Linkage","created":"2024-12-19","cited_by_count":11,"area":"alignment"},{"id":"2503.02174","title":"Adversarial Tokenization","created":"2025-03-04","cited_by_count":11,"area":"safety"},{"id":"2504.15047","title":"RainbowPlus: Enhancing Adversarial Prompt Generation via Evolutionary Quality-Diversity Search","created":"2025-04-21","cited_by_count":11,"area":"safety"},{"id":"2504.19093","title":"CipherBank: Exploring the Boundary of LLM Reasoning Capabilities through Cryptography Challenges","created":"2025-04-27","cited_by_count":11,"area":"lr"},{"id":"2505.16947","title":"MixAT: Combining Continuous and Discrete Adversarial Training for LLMs","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2507.22171","title":"Enhancing Jailbreak Attacks on LLMs via Persona Prompts","created":"2025-07-28","cited_by_count":11,"area":"safety"},{"id":"2509.01444","title":"Strata-Sword: A Hierarchical Safety Evaluation towards LLMs based on Reasoning Complexity of Jailbreak Instructions","created":"2025-09-01","cited_by_count":11,"area":"safety"},{"id":"2512.12069","title":"Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring","created":"2025-12-12","cited_by_count":11,"area":"lr"},{"id":"2604.08499","title":"PIArena: A Platform for Prompt Injection Evaluation","created":"2026-04-09","cited_by_count":11,"area":"safety"},{"id":"2411.11407","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","created":"2024-11-18","cited_by_count":10,"area":"safety"},{"id":"2501.12210","title":"You Can't Eat Your Cake and Have It Too: The Performance Degradation of LLMs with Jailbreak Defense","created":"2025-01-21","cited_by_count":10,"area":"safety"},{"id":"2502.09755","title":"Jailbreak Attack Initializations as Extractors of Compliance Directions","created":"2025-02-13","cited_by_count":10,"area":"safety"},{"id":"2504.21038","title":"Prefill-level Jailbreak: A Black-Box Risk Analysis of Large Language Models","created":"2025-04-28","cited_by_count":10,"area":"safety"},{"id":"2506.10022","title":"LLMs Caught in the Crossfire: Malware Requests and Jailbreak Challenges","created":"2025-06-09","cited_by_count":9,"area":"safety"},{"id":"2601.09625","title":"The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism","created":"2026-01-14","cited_by_count":9,"area":"safety"},{"id":"2405.00711","title":"Fake Artificial Intelligence Generated Contents (FAIGC): A Survey of Theories, Detection Methods, and Opportunities","created":"2024-04-25","cited_by_count":8,"area":"diffusion"},{"id":"2408.10701","title":"Ferret: Faster and Effective Automated Red Teaming with Reward-Based Scoring Technique","created":"2024-08-20","cited_by_count":8,"area":"alignment"},{"id":"2504.02080","title":"Evolving Security in LLMs: A Study of Jailbreak Attacks and Defenses","created":"2025-04-02","cited_by_count":8,"area":"safety"},{"id":"2407.02987","title":"LoRA-Guard: Parameter-Efficient Guardrail Adaptation for Content Moderation of Large Language Models","created":"2024-07-03","cited_by_count":7,"area":"alignment"},{"id":"2501.07927","title":"Gandalf the Red: Adaptive Security for LLMs","created":"2025-01-14","cited_by_count":7,"area":null},{"id":"2501.18626","title":"The TIP of the Iceberg: Revealing a Hidden Class of Task-in-Prompt Adversarial Attacks on LLMs","created":"2025-01-27","cited_by_count":7,"area":"safety"},{"id":"2503.21598","title":"Prompt, Divide, and Conquer: Bypassing Large Language Model Safety Filters via Segmented and Distributed Prompt Processing","created":"2025-03-27","cited_by_count":7,"area":"safety"},{"id":"2505.15753","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","created":"2025-05-21","cited_by_count":7,"area":"safety"},{"id":"2505.23856","title":"OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities","created":"2025-05-29","cited_by_count":7,"area":"safety"},{"id":"2506.02442","title":"Should LLM Safety Be More Than Refusing Harmful Instructions?","created":"2025-06-03","cited_by_count":7,"area":"safety"},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2512.05485","title":"TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations","created":"2025-12-05","cited_by_count":7,"area":"safety"},{"id":"2601.03868","title":"What Matters For Safety Alignment?","created":"2026-01-07","cited_by_count":7,"area":"alignment"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2605.30883","title":"TRACE: Task-Aware Adaptive Self-Evolving Agentic Jailbreaking","created":"2026-05-29","cited_by_count":7,"area":"agents"},{"id":"2412.04415","title":"Targeting the Core: A Simple and Effective Method to Attack RAG-based Agents via Direct LLM Manipulation","created":"2024-12-05","cited_by_count":6,"area":"agents"},{"id":"2504.05652","title":"Sugar-Coated Poison: Benign Generation Unlocks LLM Jailbreaking","created":"2025-04-08","cited_by_count":6,"area":"safety"},{"id":"2505.16765","title":"Hiding in Plain Sight: A Steganographic Approach to Stealthy LLM Jailbreaks","created":"2025-05-22","cited_by_count":6,"area":"safety"},{"id":"2508.03936","title":"ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants","created":"2025-08-05","cited_by_count":6,"area":"safety"},{"id":"2509.10546","title":"Learning to Conceal Risk: Controllable Multi-turn Red Teaming for LLMs in the Financial Domain","created":"2025-09-07","cited_by_count":6,"area":"safety"},{"id":"2502.05223","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","created":"2025-02-05","cited_by_count":5,"area":"safety"},{"id":"2503.06950","title":"CtrlRAG: Black-box Document Poisoning Attacks for Retrieval-Augmented Generation of Large Language Models","created":"2025-03-10","cited_by_count":5,"area":"rag"},{"id":"2504.01589","title":"Text Speaks Louder than Vision: ASCII Art Reveals Textual Biases in Vision-Language Models","created":"2025-04-02","cited_by_count":5,"area":"mllm"},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2505.24621","title":"Benchmarking Large Language Models for Cryptanalysis and Side-Channel Vulnerabilities","created":"2025-05-30","cited_by_count":5,"area":null},{"id":"2507.18202","title":"Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection","created":"2025-07-24","cited_by_count":5,"area":"rag"},{"id":"2509.10931","title":"Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encoding","created":"2025-09-13","cited_by_count":5,"area":"safety"},{"id":"2510.13893","title":"Guarding the Guardrails: A Taxonomy-Driven Approach to Jailbreak Detection","created":"2025-10-14","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2511.14423","title":"Unified Defense for Large Language Models against Jailbreak and Fine-Tuning Attacks in Education","created":"2025-11-18","cited_by_count":5,"area":"safety"},{"id":"2511.22047","title":"Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks","created":"2025-11-27","cited_by_count":5,"area":"safety"},{"id":"2410.01733","title":"ASCIIEval: Benchmarking Models' Visual Perception in Text Strings via ASCII Art","created":"2024-10-02","cited_by_count":4,"area":"mllm"},{"id":"2410.04190","title":"Harnessing Task Overload for Scalable Jailbreak Attacks on Large Language Models","created":"2024-10-05","cited_by_count":4,"area":"safety"},{"id":"2411.01084","title":"Plentiful Jailbreaks with String Compositions","created":"2024-11-01","cited_by_count":4,"area":"safety"},{"id":"2411.01565","title":"SQL Injection Jailbreak: A Structural Disaster of Large Language Models","created":"2024-11-03","cited_by_count":4,"area":"safety"},{"id":"2505.13862","title":"PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks","created":"2025-05-20","cited_by_count":4,"area":"alignment"},{"id":"2505.18556","title":"Exploring the Vulnerability of the Content Moderation Guardrail in Large Language Models via Intent Manipulation","created":"2025-05-24","cited_by_count":4,"area":"safety"},{"id":"2505.24672","title":"TRIDENT: Enhancing Large Language Model Safety with Tri-Dimensional Diversified Red-Teaming Data Synthesis","created":"2025-05-30","cited_by_count":4,"area":"synth"},{"id":"2508.15182","title":"SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks","created":"2025-08-21","cited_by_count":4,"area":"safety"},{"id":"2509.25271","title":"RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration","created":"2025-09-28","cited_by_count":4,"area":"agents"},{"id":"2510.01088","title":"Safety Instincts: LLMs Learn to Trust Their Internal Compass for Self-Defense","created":"2025-10-01","cited_by_count":4,"area":"safety"}],"next_cursor":"100"}