{"total":34,"rows":[{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2406.06622","title":"Adversarial Tuning: Defending Against Jailbreak Attacks for LLMs","created":"2024-06-07","cited_by_count":26,"area":"safety"},{"id":"2504.07467","title":"Defense against Prompt Injection Attacks via Mixture of Encodings","created":"2025-04-10","cited_by_count":14,"area":"safety"},{"id":"2501.14250","title":"Siren: A Learning-Based Multi-Turn Attack Framework for Simulating Real-World Human Jailbreak Behaviors","created":"2025-01-24","cited_by_count":13,"area":"safety"},{"id":"2505.24445","title":"Learning Safety Constraints for Large Language Models","created":"2025-05-30","cited_by_count":13,"area":"safety"},{"id":"2411.19530","title":"Quantized Delta Weight Is Safety Keeper","created":"2024-11-29","cited_by_count":12,"area":"safety"},{"id":"2504.13562","title":"DETAM: Defending LLMs Against Jailbreak Attacks via Targeted Attention Modification","created":"2025-04-18","cited_by_count":10,"area":"safety"},{"id":"2505.02862","title":"Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMs","created":"2025-05-03","cited_by_count":9,"area":"safety"},{"id":"2601.09625","title":"The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multistep Malware Delivery Mechanism","created":"2026-01-14","cited_by_count":9,"area":"safety"},{"id":"2406.07188","title":"Merging Improves Self-Critique Against Jailbreak Attacks","created":"2024-06-11","cited_by_count":8,"area":"safety"},{"id":"2504.02080","title":"Evolving Security in LLMs: A Study of Jailbreak Attacks and Defenses","created":"2025-04-02","cited_by_count":8,"area":"safety"},{"id":"2509.21947","title":"Active Attacks: Red-teaming LLMs via Adaptive Environments","created":"2025-09-26","cited_by_count":7,"area":"safety"},{"id":"2512.05485","title":"TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations","created":"2025-12-05","cited_by_count":7,"area":"safety"},{"id":"2505.07610","title":"Concept-Level Explainability for Auditing & Steering LLM Responses","created":"2025-05-12","cited_by_count":6,"area":"safety"},{"id":"2602.12418","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","created":"2026-02-12","cited_by_count":6,"area":"safety"},{"id":"2503.11185","title":"Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks","created":"2025-03-14","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2411.01565","title":"SQL Injection Jailbreak: A Structural Disaster of Large Language Models","created":"2024-11-03","cited_by_count":4,"area":"safety"},{"id":"2510.01088","title":"Safety Instincts: LLMs Learn to Trust Their Internal Compass for Self-Defense","created":"2025-10-01","cited_by_count":4,"area":"safety"},{"id":"2601.10543","title":"Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing","created":"2026-01-15","cited_by_count":4,"area":"safety"},{"id":"2602.11495","title":"Jailbreaking Leaves a Trace: Understanding and Detecting Jailbreak Attacks from Internal Representations of Large Language Models","created":"2026-02-12","cited_by_count":4,"area":"safety"},{"id":"2506.16792","title":"MIST: Jailbreaking Black-box Large Language Models via Iterative Semantic Tuning","created":"2025-06-20","cited_by_count":3,"area":"safety"},{"id":"2510.06594","title":"Do Internal Layers of LLMs Reveal Patterns for Jailbreak Detection?","created":"2025-10-08","cited_by_count":3,"area":"safety"},{"id":"2604.09544","title":"Large Language Models Generate Harmful Responses Using a Distinct Mechanism, Shared Across Harm Types","created":"2026-04-10","cited_by_count":3,"area":"safety"},{"id":"2605.11002","title":"MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks","created":"2026-05-10","cited_by_count":3,"area":"safety"},{"id":"2508.02997","title":"CoCoTen: Detecting Adversarial Inputs to Large Language Models through Latent Space Features of Contextual Co-occurrence Tensors","created":"2025-08-05","cited_by_count":2,"area":"safety"},{"id":"2606.02640","title":"D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting","created":"2026-05-31","cited_by_count":1,"area":"safety"},{"id":"2609.21793","title":"CASCADE Against Jailbreaks: Combination Across Stages with Controlled Attack-Defense Evaluation","created":"2026-09-18","cited_by_count":1,"area":"safety"},{"id":"2602.20102","title":"BarrierSteer: LLM Safety via Learning Barrier Steering","created":"2026-02-23","cited_by_count":0,"area":"safety"},{"id":"2607.24392","title":"When LLM Defenses Backfire: Characterizing Safety, Performance, and Cost Trade-offs","created":"2026-07-27","cited_by_count":0,"area":"safety"}],"next_cursor":null}