{"total":62,"rows":[{"id":"2404.01318","title":"JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Models","created":"2024-03-28","cited_by_count":536,"area":"safety"},{"id":"2404.02151","title":"Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attacks","created":"2024-04-02","cited_by_count":486,"area":"safety"},{"id":"2407.13692","title":"Prover-Verifier Games improve legibility of LLM outputs","created":"2024-07-18","cited_by_count":85,"area":null},{"id":"2405.18166","title":"Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editing","created":"2024-05-28","cited_by_count":79,"area":"safety"},{"id":"2407.11969","title":"Does Refusal Training in LLMs Generalize to the Past Tense?","created":"2024-07-16","cited_by_count":79,"area":"safety"},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2410.01606","title":"Automated Red Teaming with GOAT: the Generative Offensive Agent Tester","created":"2024-10-02","cited_by_count":45,"area":"agents"},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2411.18688","title":"Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment","created":"2024-11-27","cited_by_count":44,"area":"lr"},{"id":"2405.20413","title":"Jailbreaking Large Language Models Against Moderation Guardrails via Cipher Characters","created":"2024-05-30","cited_by_count":42,"area":"safety"},{"id":"2405.15012","title":"Extracting Prompts by Inverting LLM Outputs","created":"2024-05-23","cited_by_count":41,"area":null},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2409.08045","title":"Unleashing Worms and Extracting Data: Escalating the Outcome of Attacks against RAG-based Inference in Scale and Severity Using Jailbreaking","created":"2024-09-12","cited_by_count":30,"area":"safety"},{"id":"2502.01633","title":"Adversarial Reasoning at Jailbreaking Time","created":"2025-02-03","cited_by_count":29,"area":"lr"},{"id":"2411.01077","title":"Emoji Attack: Enhancing Jailbreak Attacks Against Judge LLM Detection","created":"2024-11-01","cited_by_count":23,"area":"safety"},{"id":"2406.04331","title":"PaCE: Parsimonious Concept Engineering for Large Language Models","created":"2024-06-06","cited_by_count":19,"area":null},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17,"area":"safety"},{"id":"2507.07417","title":"May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks","created":"2025-07-10","cited_by_count":15,"area":"safety"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2502.04204","title":"Short-length Adversarial Training Helps LLMs Defend Long-length Jailbreak Attacks: Theoretical and Empirical Evidence","created":"2025-02-06","cited_by_count":14,"area":"safety"},{"id":"2502.16903","title":"GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods","created":"2025-02-24","cited_by_count":12,"area":"safety"},{"id":"2503.06269","title":"Using Mechanistic Interpretability to Craft Adversarial Attacks against Large Language Models","created":"2025-03-08","cited_by_count":10,"area":"mechinterp"},{"id":"2506.12880","title":"Universal Jailbreak Suffixes Are Strong Attention Hijackers","created":"2025-06-15","cited_by_count":10,"area":"safety"},{"id":"2407.17447","title":"FLRT: Fluent Student-Teacher Redteaming","created":"2024-07-24","cited_by_count":9,"area":"safety"},{"id":"2501.16497","title":"Smoothed Embeddings for Robust Language Models","created":"2025-01-27","cited_by_count":8,"area":"safety"},{"id":"2509.26598","title":"Are Robust LLM Fingerprints Adversarially Robust?","created":"2025-09-30","cited_by_count":8,"area":null},{"id":"2510.16794","title":"Black-box Optimization of LLM Outputs by Asking for Directions","created":"2025-10-19","cited_by_count":7,"area":"safety"},{"id":"2410.09569","title":"Are You Human? An Adversarial Benchmark to Expose LLMs","created":"2024-10-12","cited_by_count":5,"area":null},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2412.05232","title":"LIAR: Leveraging Inference Time Alignment (Best-of-N) to Jailbreak LLMs in Seconds","created":"2024-12-06","cited_by_count":4,"area":"safety"},{"id":"2506.17299","title":"Toward Principled LLM Safety Testing: Solving the Jailbreak Oracle Problem","created":"2025-06-17","cited_by_count":4,"area":"safety"},{"id":"2406.02044","title":"Towards Universal and Black-Box Query-Response Only Attack on LLMs with QROA","created":"2024-06-04","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2602.11096","title":"Safety Recovery in Reasoning Models Is Only a Few Early Steering Steps Away","created":"2026-02-11","cited_by_count":3,"area":"lr"},{"id":"2602.11528","title":"Stop Tracking Me! Proactive Defense Against Attribute Inference Attack in LLMs","created":"2026-02-12","cited_by_count":3,"area":null},{"id":"2412.20087","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","created":"2024-12-28","cited_by_count":2,"area":null},{"id":"2505.15738","title":"Checkpoint-GCG: Auditing and Attacking Fine-Tuning-Based Prompt Injection Defenses","created":"2025-05-21","cited_by_count":2,"area":"agents"},{"id":"2505.24232","title":"From Hallucinations to Jailbreaks: Rethinking the Vulnerability of Large Foundation Models","created":"2025-05-30","cited_by_count":2,"area":"safety"},{"id":"2511.16229","title":"Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security","created":"2025-11-20","cited_by_count":2,"area":"mllm"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2509.15478","title":"Red Teaming Multimodal Language Models: Evaluating Harm Across Prompt Modalities and Models","created":"2025-09-18","cited_by_count":1,"area":"mllm"},{"id":"2603.13420","title":"Accelerating Suffix Jailbreak attacks with Prefix-Shared KV-cache","created":"2026-03-12","cited_by_count":1,"area":"inference"},{"id":"2604.12817","title":"Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory","created":"2026-04-14","cited_by_count":1,"area":"safety"},{"id":"2605.00553","title":"Stable-GFlowNet: Toward Diverse and Robust LLM Red-Teaming via Contrastive Trajectory Balance","created":"2026-05-01","cited_by_count":1,"area":"safety"},{"id":"2605.01034","title":"A Theoretical Game of Attacks via Compositional Skills","created":"2026-05-01","cited_by_count":1,"area":"safety"},{"id":"2605.02921","title":"EvoJail: Evolutionary Diverse Jailbreak Prompt Generation for Large Language Models","created":"2026-04-22","cited_by_count":1,"area":"safety"},{"id":"2605.25073","title":"Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions","created":"2026-05-24","cited_by_count":1,"area":"safety"},{"id":"2606.19887","title":"FinRED: An Expert-Guided Benchmark Generation and Evaluation Framework for Financial LLM Red-Teaming","created":"2026-06-18","cited_by_count":1,"area":"safety"},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2505.20841","title":"Concealment of Intent: A Game-Theoretic Analysis","created":"2025-05-27","cited_by_count":0,"area":"safety"},{"id":"2511.18581","title":"TASO: Jailbreak LLMs via Alternative Template and Suffix Optimization","created":"2025-11-23","cited_by_count":0,"area":"safety"},{"id":"2603.15259","title":"Directional Embedding Smoothing for Robust Vision Language Models","created":"2026-03-16","cited_by_count":0,"area":"mllm"},{"id":"2605.05116","title":"On the Hardness of Junking LLMs","created":"2026-05-06","cited_by_count":0,"area":"safety"},{"id":"2605.21674","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","created":"2026-05-20","cited_by_count":0,"area":"safety"},{"id":"2605.22984","title":"Test-Time Training Undermines Safety Guardrails","created":"2026-05-21","cited_by_count":0,"area":"safety"},{"id":"2605.23157","title":"Same Model, Different Weakness: How Language and Modality Reshape the Jailbreak Attack Surface in Frontier MLLMs","created":"2026-05-22","cited_by_count":0,"area":"mllm"},{"id":"2607.02961","title":"Overloading Large Vision-Language Models for Jailbreaking","created":"2026-07-03","cited_by_count":0,"area":"mllm"},{"id":"2607.18622","title":"CPInj: Uncovering Prompt Injection Risks in Textual Collaborative Prompt Optimization","created":"2026-07-21","cited_by_count":0,"area":"safety"},{"id":"2610.04169","title":"Language Model Fingerprinting Requires Rethinking Watermark Teachers","created":"2026-10-03","cited_by_count":0,"area":"safety"},{"id":"2610.15207","title":"Exploring Jailbreak Vulnerability Across Depth-Based Dynamic Inference in Large Language Models","created":"2026-10-10","cited_by_count":0,"area":"alignment"}],"next_cursor":null}