{"total":53,"rows":[{"id":"2505.02077","title":"Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents","created":"2025-05-04","cited_by_count":71,"area":"safety"},{"id":"2409.08087","title":"Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks","created":"2024-09-12","cited_by_count":26,"area":"safety"},{"id":"2502.11090","title":"SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attacks","created":"2025-02-16","cited_by_count":23,"area":"safety"},{"id":"2411.08410","title":"The VLLM Safety Paradox: Dual Ease in Jailbreak Attack and Defense","created":"2024-11-13","cited_by_count":21,"area":"safety"},{"id":"2504.15512","title":"T2VShield: Model-Agnostic Jailbreak Defense for Text-to-Video Models","created":"2025-04-22","cited_by_count":18,"area":"safety"},{"id":"2503.08195","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","created":"2025-03-11","cited_by_count":14,"area":"safety"},{"id":"2411.19530","title":"Quantized Delta Weight Is Safety Keeper","created":"2024-11-29","cited_by_count":12,"area":"safety"},{"id":"2507.07341","title":"On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignment","created":"2025-07-09","cited_by_count":12,"area":"safety"},{"id":"2404.04849","title":"Hidden You Malicious Goal Into Benign Narratives: Jailbreak Large Language Models through Logic Chain Injection","created":"2024-04-07","cited_by_count":9,"area":"safety"},{"id":"2505.02862","title":"Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMs","created":"2025-05-03","cited_by_count":9,"area":"safety"},{"id":"2506.07121","title":"Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models","created":"2025-06-08","cited_by_count":9,"area":"safety"},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2502.00718","title":"\"I am bad\": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models","created":"2025-02-02","cited_by_count":8,"area":"safety"},{"id":"2502.00735","title":"`From Prompt to Perturbation': An Adaptive Framework for Voice-Based Jailbreaks on Audio LLMs","created":"2025-02-02","cited_by_count":7,"area":"safety"},{"id":"2503.05445","title":"Are Your LLM-based Text-to-SQL Models Secure? Exploring SQL Injection via Backdoor Attacks","created":"2025-03-07","cited_by_count":6,"area":"safety"},{"id":"2504.00446","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","created":"2025-04-01","cited_by_count":6,"area":"safety"},{"id":"2508.11222","title":"ORFuzz: Fuzzing the \"Other Side\" of LLM Safety -- Testing Over-Refusal","created":"2025-08-15","cited_by_count":6,"area":"safety"},{"id":"2411.19335","title":"PEFT-as-an-Attack! Jailbreaking Language Models during Federated Parameter-Efficient Fine-Tuning","created":"2024-11-28","cited_by_count":5,"area":"safety"},{"id":"2505.09602","title":"Adversarial Suffix Filtering: a Defense Pipeline for LLMs","created":"2025-05-14","cited_by_count":5,"area":"safety"},{"id":"2505.17519","title":"Chain-of-Lure: A Universal Jailbreak Attack Framework using Unconstrained Synthetic Narratives","created":"2025-05-23","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2511.22047","title":"Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks","created":"2025-11-27","cited_by_count":5,"area":"safety"},{"id":"2410.04190","title":"Harnessing Task Overload for Scalable Jailbreak Attacks on Large Language Models","created":"2024-10-05","cited_by_count":4,"area":"safety"},{"id":"2411.01565","title":"SQL Injection Jailbreak: A Structural Disaster of Large Language Models","created":"2024-11-03","cited_by_count":4,"area":"safety"},{"id":"2503.24191","title":"When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output","created":"2025-03-31","cited_by_count":4,"area":"safety"},{"id":"2406.02044","title":"Towards Universal and Black-Box Query-Response Only Attack on LLMs with QROA","created":"2024-06-04","cited_by_count":3,"area":"safety"},{"id":"2501.16534","title":"Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs","created":"2025-01-27","cited_by_count":3,"area":"safety"},{"id":"2506.16792","title":"MIST: Jailbreaking Black-box Large Language Models via Iterative Semantic Tuning","created":"2025-06-20","cited_by_count":3,"area":"safety"},{"id":"2510.17277","title":"PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2604.21159","title":"Adaptive Instruction Composition for Automated LLM Red-Teaming","created":"2026-04-22","cited_by_count":3,"area":"safety"},{"id":"2605.03441","title":"Exposing LLM Safety Gaps Through Mathematical Encoding:New Attacks and Systematic Analysis","created":"2026-05-05","cited_by_count":3,"area":"safety"},{"id":"2605.05058","title":"SoK: Robustness in Large Language Models against Jailbreak Attacks","created":"2026-05-06","cited_by_count":3,"area":"safety"},{"id":"2501.08814","title":"SAIF: A Comprehensive Framework for Evaluating the Risks of Generative AI in the Public Sector","created":"2025-01-15","cited_by_count":2,"area":"safety"},{"id":"2512.18244","title":"Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulation","created":"2025-12-20","cited_by_count":2,"area":"safety"},{"id":"2410.06462","title":"Hallucinating AI Hijacking Attack: Large Language Models and Malicious Code Recommenders","created":"2024-10-09","cited_by_count":1,"area":"safety"},{"id":"2503.03502","title":"Geometry-Guided Adversarial Prompt Detection via Curvature and Local Intrinsic Dimension","created":"2025-03-05","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2509.16870","title":"DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems","created":"2025-09-21","cited_by_count":1,"area":"safety"},{"id":"2510.01644","title":"Machine Learning for Detection and Analysis of Novel LLM Jailbreaks","created":"2025-10-02","cited_by_count":1,"area":"safety"},{"id":"2512.21236","title":"Casting a SPELL: Sentence Pairing Exploration for LLM Limitation-breaking","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2601.09321","title":"SpatialJB: How Text Distribution Art Becomes the \"Jailbreak Key\" for LLM Guardrails","created":"2026-01-14","cited_by_count":1,"area":"safety"},{"id":"2604.11309","title":"The Salami Slicing Threat: Exploiting Cumulative Risks in LLM Systems","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2507.12185","title":"Jailbreaking Generative AI: Multivector Phishing Threats and Transformer based Defenses","created":"2025-07-16","cited_by_count":0,"area":"safety"},{"id":"2508.02312","title":"Data Security in Large Language Models: Risks, Defense, and Directions","created":"2025-08-04","cited_by_count":0,"area":"safety"},{"id":"2512.04841","title":"SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2604.20833","title":"AVISE: Framework for Evaluating the Security of AI Systems","created":"2026-04-22","cited_by_count":0,"area":"safety"},{"id":"2605.05116","title":"On the Hardness of Junking LLMs","created":"2026-05-06","cited_by_count":0,"area":"safety"},{"id":"2606.00150","title":"Persona Attack: Incremental Memory Injection Jailbreak Attack against Large Language Models","created":"2026-05-29","cited_by_count":0,"area":"safety"},{"id":"2606.09388","title":"Distilling Safe LLM Systems via Soft Prompts for On Device Settings","created":"2026-06-08","cited_by_count":0,"area":"safety"},{"id":"2607.24392","title":"When LLM Defenses Backfire: Characterizing Safety, Performance, and Cost Trade-offs","created":"2026-07-27","cited_by_count":0,"area":"safety"},{"id":"2609.09553","title":"Arbitrary Cipher Attacks Against Large Language Models Do Not Require Fine-Tuning","created":"2026-09-09","cited_by_count":0,"area":"safety"}],"next_cursor":null}