{"total":44,"rows":[{"id":"2404.16873","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","created":"2024-04-21","cited_by_count":156,"area":"safety"},{"id":"2409.18025","title":"An Adversarial Perspective on Machine Unlearning for AI Safety","created":"2024-09-26","cited_by_count":123,"area":"safety"},{"id":"2403.12171","title":"EasyJailbreak: A Unified Framework for Jailbreaking Large Language Models","created":"2024-03-18","cited_by_count":60,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2412.08608","title":"AdvWave: Stealthy Adversarial Jailbreak Attack against Large Audio-Language Models","created":"2024-12-11","cited_by_count":38,"area":"safety"},{"id":"2410.02760","title":"Erasing Conceptual Knowledge from Language Models","created":"2024-10-03","cited_by_count":34,"area":"safety"},{"id":"2411.06426","title":"SequentialBreak: Large Language Models Can be Fooled by Embedding Jailbreak Prompts into Sequential Prompt Chains","created":"2024-11-10","cited_by_count":19,"area":"safety"},{"id":"2501.09798","title":"Fun-tuning: Characterizing the Vulnerability of Proprietary LLMs to Optimization-based Prompt Injection Attacks via the Fine-Tuning Interface","created":"2025-01-16","cited_by_count":17,"area":"safety"},{"id":"2410.02163","title":"Adversarial Decoding: Generating Readable Documents for Adversarial Objectives","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2507.07417","title":"May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks","created":"2025-07-10","cited_by_count":15,"area":"safety"},{"id":"2502.04204","title":"Short-length Adversarial Training Helps LLMs Defend Long-length Jailbreak Attacks: Theoretical and Empirical Evidence","created":"2025-02-06","cited_by_count":14,"area":"safety"},{"id":"2505.16947","title":"MixAT: Combining Continuous and Discrete Adversarial Training for LLMs","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2502.09755","title":"Jailbreak Attack Initializations as Extractors of Compliance Directions","created":"2025-02-13","cited_by_count":10,"area":"safety"},{"id":"2506.12880","title":"Universal Jailbreak Suffixes Are Strong Attention Hijackers","created":"2025-06-15","cited_by_count":10,"area":"safety"},{"id":"2407.17447","title":"FLRT: Fluent Student-Teacher Redteaming","created":"2024-07-24","cited_by_count":9,"area":"safety"},{"id":"2403.14725","title":"Testing the Limits of Jailbreaking Defenses with the Purple Problem","created":"2024-03-20","cited_by_count":8,"area":"safety"},{"id":"2501.16497","title":"Smoothed Embeddings for Robust Language Models","created":"2025-01-27","cited_by_count":8,"area":"safety"},{"id":"2602.15001","title":"Boundary Point Jailbreaking of Black-Box LLMs","created":"2026-02-16","cited_by_count":8,"area":"safety"},{"id":"2408.14853","title":"Atoxia: Red-teaming Large Language Models with Target Toxic Answers","created":"2024-08-27","cited_by_count":7,"area":"safety"},{"id":"2510.21910","title":"Adversarial D\\'ej\\`a Vu: Jailbreak Dictionary Learning for Stronger Generalization to Unseen Attacks","created":"2025-10-24","cited_by_count":7,"area":"safety"},{"id":"2511.04316","title":"AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research","created":"2025-11-06","cited_by_count":6,"area":"safety"},{"id":"2505.09820","title":"Adversarial Attack on Large Language Models using Exponentiated Gradient Descent","created":"2025-05-14","cited_by_count":4,"area":"safety"},{"id":"2508.03365","title":"When Good Sounds Go Adversarial: Jailbreaking Audio-Language Models with Benign Inputs","created":"2025-08-05","cited_by_count":4,"area":"safety"},{"id":"2510.25117","title":"A Survey on Unlearning in Large Language Models","created":"2025-10-29","cited_by_count":4,"area":"safety"},{"id":"2501.16534","title":"Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs","created":"2025-01-27","cited_by_count":3,"area":"safety"},{"id":"2502.10487","title":"Fast Proxies for LLM Robustness Evaluation","created":"2025-02-14","cited_by_count":3,"area":"safety"},{"id":"2502.01154","title":"Jailbreaking with Universal Multi-Prompts","created":"2025-02-03","cited_by_count":2,"area":"safety"},{"id":"2508.06755","title":"Many-Turn Jailbreaking","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2510.07626","title":"LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics","created":"2025-10-08","cited_by_count":2,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2511.14195","title":"N-GLARE: An Non-Generative Latent Representation-Efficient LLM Safety Evaluator","created":"2025-11-18","cited_by_count":1,"area":"safety"},{"id":"2601.03420","title":"Jailbreaking LLMs Without Gradients or Priors: Effective and Transferable Attacks","created":"2026-01-06","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2604.12817","title":"Understanding and Improving Continuous Adversarial Training for LLMs via In-context Learning Theory","created":"2026-04-14","cited_by_count":1,"area":"safety"},{"id":"2606.11409","title":"Risk Under Pressure: Compute-Aware Evaluation of Adversarial Robustness in Language Models","created":"2026-06-09","cited_by_count":1,"area":"safety"},{"id":"2601.13359","title":"Sockpuppetting: Jailbreaking LLMs by Combining Prefilling with Optimization","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2604.18756","title":"Towards Understanding the Robustness of Sparse Autoencoders","created":"2026-04-20","cited_by_count":0,"area":"safety"},{"id":"2604.24983","title":"Adaptive Prompt Embedding Optimization for LLM Jailbreaking","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.08898","title":"LLM-Agnostic Semantic Representation Attack","created":"2026-05-09","cited_by_count":0,"area":"safety"},{"id":"2605.19321","title":"Exploring and Developing a Pre-Model Safeguard with Draft Models","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2606.21077","title":"OTTER: A Red-Teaming System for Toxicity-Evading Jailbreak Prompt Optimization","created":"2026-06-19","cited_by_count":0,"area":"safety"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2609.29948","title":"ENDOPROMPT: Victim-Side Pseudo-References for Utility Degradation","created":"2026-09-24","cited_by_count":0,"area":"safety"}],"next_cursor":null}