{"total":76,"rows":[{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2410.05295","title":"AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs","created":"2024-10-03","cited_by_count":199,"area":"safety"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2502.05206","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","created":"2025-02-02","cited_by_count":67,"area":"mllm"},{"id":"2412.17686","title":"Large Language Model Safety: A Holistic Survey","created":"2024-12-23","cited_by_count":59,"area":"safety"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2502.13175","title":"Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks","created":"2025-02-18","cited_by_count":34,"area":null},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2410.02828","title":"PyRIT: A Framework for Security Risk Identification and Red Teaming in Generative AI System","created":"2024-10-01","cited_by_count":31,"area":"safety"},{"id":"2506.13666","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","created":"2025-06-16","cited_by_count":27,"area":"agents"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2411.11114","title":"JailbreakLens: Interpreting Jailbreak Mechanism in the Lens of Representation and Circuit","created":"2024-11-17","cited_by_count":22,"area":"safety"},{"id":"2407.12344","title":"The Better Angels of Machine Personality: How Personality Relates to LLM Safety","created":"2024-07-17","cited_by_count":21,"area":null},{"id":"2407.17915","title":"The Dark Side of Function Calling: Pathways to Jailbreaking Large Language Models","created":"2024-07-25","cited_by_count":20,"area":"agents"},{"id":"2409.14729","title":"PROMPTFUZZ: Harnessing Fuzzing Techniques for Robust Testing of Prompt Injection in LLMs","created":"2024-09-23","cited_by_count":17,"area":"safety"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2410.03857","title":"You Know What I'm Saying: Jailbreak Attack via Implicit Reference","created":"2024-10-04","cited_by_count":14,"area":"safety"},{"id":"2502.16903","title":"GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods","created":"2025-02-24","cited_by_count":12,"area":"safety"},{"id":"2505.17598","title":"One Model Transfer to All: On Robust Jailbreak Prompts Generation against LLMs","created":"2025-05-23","cited_by_count":12,"area":"alignment"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2409.14177","title":"PathSeeker: Exploring LLM Security Vulnerabilities with a Reinforcement Learning-Based Jailbreak Approach","created":"2024-09-21","cited_by_count":11,"area":"safety"},{"id":"2508.16347","title":"Confusion is the Final Barrier: Rethinking Jailbreak Evaluation and Investigating the Real Misuse Threat of LLMs","created":"2025-08-22","cited_by_count":11,"area":"lr"},{"id":"2510.01270","title":"Think Twice, Generate Once: Safeguarding by Progressive Self-Reflection","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2501.18632","title":"Towards Safe AI Clinicians: A Comprehensive Study on Large Language Model Jailbreaking in Healthcare","created":"2025-01-27","cited_by_count":10,"area":"safety"},{"id":"2504.16489","title":"Amplified Vulnerabilities: Structured Jailbreak Attacks on LLM-based Multi-Agent Debate","created":"2025-04-23","cited_by_count":10,"area":"lr"},{"id":"2504.21038","title":"Prefill-level Jailbreak: A Black-Box Risk Analysis of Large Language Models","created":"2025-04-28","cited_by_count":10,"area":"safety"},{"id":"2510.04398","title":"SECA: Semantically Equivalent and Coherent Attacks for Eliciting LLM Hallucinations","created":"2025-10-05","cited_by_count":9,"area":null},{"id":"2408.09326","title":"Characterizing and Evaluating the Reliability of LLMs against Jailbreak Attacks","created":"2024-08-18","cited_by_count":8,"area":"safety"},{"id":"2504.01444","title":"PiCo: Jailbreaking Multimodal Large Language Models via Pictorial Code Contextualization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2505.23839","title":"GeneBreaker: Jailbreak Attacks against DNA Language Models with Pathogenicity Guidance","created":"2025-05-28","cited_by_count":8,"area":"safety"},{"id":"2510.01529","title":"Bypassing Prompt Guards in Production with Controlled-Release Prompting","created":"2025-10-02","cited_by_count":7,"area":null},{"id":"2501.13677","title":"HumorReject: Decoupling LLM Safety from Refusal Prefix via A Little Humor","created":"2025-01-23","cited_by_count":6,"area":"safety"},{"id":"2505.16446","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","created":"2025-05-22","cited_by_count":6,"area":"lr"},{"id":"2508.03936","title":"ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants","created":"2025-08-05","cited_by_count":6,"area":"safety"},{"id":"2502.05223","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","created":"2025-02-05","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2411.01565","title":"SQL Injection Jailbreak: A Structural Disaster of Large Language Models","created":"2024-11-03","cited_by_count":4,"area":"safety"},{"id":"2505.17089","title":"Chain-of-Thought Driven Adversarial Scenario Extrapolation for Robust Language Models","created":"2025-05-20","cited_by_count":4,"area":"lr"},{"id":"2508.03864","title":"Evo-MARL: Co-Evolutionary Multi-Agent Reinforcement Learning for Internalized Safety","created":"2025-08-05","cited_by_count":4,"area":"agents"},{"id":"2510.21190","title":"The Trojan Example: Jailbreaking LLMs through Template Filling and Unsafety Reasoning","created":"2025-10-24","cited_by_count":3,"area":"alignment"},{"id":"2601.03288","title":"How Real is Your Jailbreak? Fine-grained Jailbreak Evaluation with Anchored Reference","created":"2026-01-04","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2502.11853","title":"StructTransform: A Scalable Attack Surface for Safety-Aligned Large Language Models","created":"2025-02-17","cited_by_count":2,"area":"alignment"},{"id":"2503.08990","title":"Effective and Efficient Jailbreaks of Black-Box LLMs with Cross-Behavior Attacks","created":"2025-03-12","cited_by_count":2,"area":"safety"},{"id":"2509.16861","title":"AdaptiveGuard: Towards Adaptive Runtime Safety for LLM-Powered Software","created":"2025-09-21","cited_by_count":2,"area":"safety"},{"id":"2512.23173","title":"EquaCode: A Multi-Strategy Jailbreak Approach for Large Language Models via Equation Solving and Code Completion","created":"2025-12-29","cited_by_count":2,"area":"safety"},{"id":"2602.13234","title":"Stay in Character, Stay Safe: Dual-Cycle Adversarial Self-Evolution for Safety Role-Playing Agents","created":"2026-01-29","cited_by_count":2,"area":"agents"},{"id":"2603.08104","title":"Invisible Safety Threat: Malicious Finetuning for LLM via Steganography","created":"2026-03-09","cited_by_count":2,"area":"alignment"},{"id":"2605.24817","title":"RouteScan: A Non-Intrusive Approach to Auditing MoE LLMs Safety via Expert Routing Telemetry","created":"2026-05-24","cited_by_count":2,"area":"moe"},{"id":"2508.03054","title":"Beyond Surface-Level Detection: Towards Cognitive-Driven Defense Against Jailbreak Attacks via Meta-Operations Reasoning","created":"2025-08-05","cited_by_count":1,"area":"lr"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2509.16870","title":"DecipherGuard: Understanding and Deciphering Jailbreak Prompts for a Safer Deployment of Intelligent Software Systems","created":"2025-09-21","cited_by_count":1,"area":"safety"},{"id":"2510.08329","title":"AutoRed: A Free-form Adversarial Prompt Generation Framework for Automated Red Teaming","created":"2025-10-09","cited_by_count":1,"area":"safety"},{"id":"2601.03265","title":"Jailbreak-Zero: A Path to Pareto Optimal Red Teaming for Large Language Models","created":"2025-12-18","cited_by_count":1,"area":"safety"},{"id":"2604.01444","title":"Cooking Up Risks: Benchmarking and Reducing Food Safety Risks in Large Language Models","created":"2026-04-01","cited_by_count":1,"area":"safety"},{"id":"2604.22427","title":"Automation-Exploit: A Multi-Agent LLM Framework for Adaptive Offensive Security with Digital Twin-Based Risk-Mitigated Exploitation","created":"2026-04-24","cited_by_count":1,"area":"agents"},{"id":"2606.11425","title":"JailbreakOPT: Tool-Assisted Iterative Jailbreak Prompt Optimization","created":"2026-06-09","cited_by_count":1,"area":"safety"},{"id":"2504.04981","title":"TestDG: Test-time Domain Generalization for Continual Test-time Adaptation","created":"2025-04-07","cited_by_count":0,"area":null},{"id":"2505.23404","title":"AJF: Adaptive Jailbreak Framework Based on the Comprehension Ability of Black-Box Large Language Models","created":"2025-05-29","cited_by_count":0,"area":"safety"},{"id":"2509.26345","title":"SafeBehavior: Simulating Human-Like Multistage Reasoning to Mitigate Jailbreak Attacks in Large Language Models","created":"2025-09-30","cited_by_count":0,"area":"lr"},{"id":"2603.02675","title":"From Shallow to Deep: Pinning Semantic Intent via Causal GRPO","created":"2026-03-03","cited_by_count":0,"area":"lr"},{"id":"2603.16192","title":"Structured Semantic Cloaking for Jailbreak Attacks on Large Language Models","created":"2026-03-17","cited_by_count":0,"area":"safety"},{"id":"2603.20122","title":"Evolving Jailbreaks: Automated Multi-Objective Long-Tail Attacks on Large Language Models","created":"2026-03-20","cited_by_count":0,"area":"safety"},{"id":"2604.10326","title":"Jailbreaking the Matrix: Nullspace Steering for Controlled Model Subversion","created":"2026-04-11","cited_by_count":0,"area":"safety"},{"id":"2604.17614","title":"Characterizing Model-Native Skills","created":"2026-04-19","cited_by_count":0,"area":null},{"id":"2607.11070","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2608.08471","title":"Yesterday's Shield, Today's Spear: A Self-Evolving Safety Guardrail in Production","created":"2026-08-09","cited_by_count":0,"area":"synth"},{"id":"2609.03693","title":"AlcaTRAz - Anchored Tree-Rule Defense Against Jailbreaks","created":"2026-09-03","cited_by_count":0,"area":"alignment"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2609.10594","title":"An Empirical Measurement of Jailbreaking Evaluators","created":"2026-09-07","cited_by_count":0,"area":"safety"},{"id":"2609.39902","title":"CodeMimicry: Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion","created":"2026-09-30","cited_by_count":0,"area":"alignment"},{"id":"2610.05282","title":"Red-TTT: Test-Time Training for Automated Jailbreaking Large Language Models","created":"2026-10-04","cited_by_count":0,"area":"safety"}],"next_cursor":null}