{"total":76,"rows":[{"id":"2404.16873","title":"AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs","created":"2024-04-21","cited_by_count":156,"area":"safety"},{"id":"2405.15589","title":"Efficient Adversarial Training in LLMs with Continuous Attacks","created":"2024-05-24","cited_by_count":113,"area":"safety"},{"id":"2404.13161","title":"CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Models","created":"2024-04-19","cited_by_count":89,"area":"safety"},{"id":"2412.03556","title":"Best-of-N Jailbreaking","created":"2024-12-04","cited_by_count":76,"area":"safety"},{"id":"2407.10264","title":"What Makes and Breaks Safety Fine-tuning? A Mechanistic Study","created":"2024-07-14","cited_by_count":55,"area":"safety"},{"id":"2405.18540","title":"Learning diverse attacks on large language models for robust red-teaming and safety tuning","created":"2024-05-28","cited_by_count":54,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2505.24119","title":"The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It","created":"2025-05-30","cited_by_count":45,"area":"safety"},{"id":"2503.15754","title":"AutoRedTeamer: Autonomous Red Teaming with Lifelong Attack Integration","created":"2025-03-20","cited_by_count":43,"area":"safety"},{"id":"2405.07932","title":"PARDEN, Can You Repeat That? Defending against Jailbreaks via Repetition","created":"2024-05-13","cited_by_count":35,"area":"safety"},{"id":"2410.22284","title":"Embedding-based classifiers can detect prompt injection attacks","created":"2024-10-29","cited_by_count":27,"area":"safety"},{"id":"2412.18693","title":"Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learning","created":"2024-12-24","cited_by_count":25,"area":"safety"},{"id":"2410.02298","title":"Jailbreak Antidote: Runtime Safety-Utility Balance via Sparse Representation Adjustment in Large Language Models","created":"2024-10-03","cited_by_count":23,"area":"safety"},{"id":"2405.01886","title":"Aloe: A Family of Fine-tuned Open Healthcare LLMs","created":"2024-05-03","cited_by_count":20,"area":"safety"},{"id":"2409.15398","title":"Attack Atlas: A Practitioner's Perspective on Challenges and Pitfalls in Red Teaming GenAI","created":"2024-09-23","cited_by_count":16,"area":"safety"},{"id":"2507.07417","title":"May I have your Attention? Breaking Fine-Tuning based Prompt Injection Defenses using Architecture-Aware Attacks","created":"2025-07-10","cited_by_count":15,"area":"safety"},{"id":"2512.07761","title":"TROJail: Trajectory-Level Optimization for Multi-Turn Large Language Model Jailbreaks with Process Rewards","created":"2025-12-08","cited_by_count":14,"area":"safety"},{"id":"2406.11757","title":"STAR: SocioTechnical Approach to Red Teaming Language Models","created":"2024-06-17","cited_by_count":13,"area":"safety"},{"id":"2509.24296","title":"DiffuGuard: How Intrinsic Safety is Lost and Found in Diffusion Large Language Models","created":"2025-09-29","cited_by_count":12,"area":"safety"},{"id":"2602.06854","title":"SEMA: Simple yet Effective Learning for Multi-Turn Jailbreak Attacks","created":"2026-02-06","cited_by_count":12,"area":"safety"},{"id":"2503.02174","title":"Adversarial Tokenization","created":"2025-03-04","cited_by_count":11,"area":"safety"},{"id":"2504.15047","title":"RainbowPlus: Enhancing Adversarial Prompt Generation via Evolutionary Quality-Diversity Search","created":"2025-04-21","cited_by_count":11,"area":"safety"},{"id":"2505.16947","title":"MixAT: Combining Continuous and Discrete Adversarial Training for LLMs","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2604.08499","title":"PIArena: A Platform for Prompt Injection Evaluation","created":"2026-04-09","cited_by_count":11,"area":"safety"},{"id":"2406.11654","title":"Ruby Teaming: Improving Quality Diversity Search with Memory for Automated Red Teaming","created":"2024-06-17","cited_by_count":10,"area":"safety"},{"id":"2502.09638","title":"Jailbreaking to Jailbreak","created":"2025-02-09","cited_by_count":9,"area":"safety"},{"id":"2506.07121","title":"Quality-Diversity Red-Teaming: Automated Generation of High-Quality and Diverse Attackers for Large Language Models","created":"2025-06-08","cited_by_count":9,"area":"safety"},{"id":"2509.03728","title":"PersonaTeaming: Exploring How Introducing Personas Can Improve Automated AI Red-Teaming","created":"2025-09-03","cited_by_count":9,"area":"safety"},{"id":"2505.23839","title":"GeneBreaker: Jailbreak Attacks against DNA Language Models with Pathogenicity Guidance","created":"2025-05-28","cited_by_count":8,"area":"safety"},{"id":"2507.01020","title":"AutoAdv: Automated Adversarial Prompting for Multi-Turn Jailbreaking of Large Language Models","created":"2025-04-18","cited_by_count":8,"area":"safety"},{"id":"2511.12710","title":"Evolve the Method, Not the Prompts: Evolutionary Synthesis of Jailbreak Attacks on LLMs","created":"2025-11-16","cited_by_count":8,"area":"safety"},{"id":"2509.21947","title":"Active Attacks: Red-teaming LLMs via Adaptive Environments","created":"2025-09-26","cited_by_count":7,"area":"safety"},{"id":"2408.16163","title":"FRACTURED-SORRY-Bench: Framework for Revealing Attacks in Conversational Turns Undermining Refusal Efficacy and Defenses over SORRY-Bench (Automated Multi-shot Jailbreaks)","created":"2024-08-28","cited_by_count":6,"area":"safety"},{"id":"2410.01088","title":"Exploring Empty Spaces: Human-in-the-Loop Data Augmentation","created":"2024-10-01","cited_by_count":6,"area":"safety"},{"id":"2502.18504","title":"TurboFuzzLLM: Turbocharging Mutation-based Fuzzing for Effectively Jailbreaking Large Language Models in Practice","created":"2025-02-21","cited_by_count":6,"area":"safety"},{"id":"2502.05223","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","created":"2025-02-05","cited_by_count":5,"area":"safety"},{"id":"2505.22037","title":"Jailbreak Distillation: Renewable Safety Benchmarking","created":"2025-05-28","cited_by_count":5,"area":"safety"},{"id":"2510.07239","title":"Red-Bandit: Test-Time Adaptation for LLM Red-Teaming via Bandit-Guided LoRA Experts","created":"2025-10-08","cited_by_count":5,"area":"safety"},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2508.13214","title":"Too Easily Fooled? Prompt Injection Breaks LLMs on Frustratingly Simple Multiple-Choice Questions","created":"2025-08-16","cited_by_count":4,"area":"safety"},{"id":"2510.01088","title":"Safety Instincts: LLMs Learn to Trust Their Internal Compass for Self-Defense","created":"2025-10-01","cited_by_count":4,"area":"safety"},{"id":"2511.00030","title":"Probing Knowledge Holes in Unlearned LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2412.16359","title":"Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context","created":"2024-12-20","cited_by_count":3,"area":"safety"},{"id":"2502.10487","title":"Fast Proxies for LLM Robustness Evaluation","created":"2025-02-14","cited_by_count":3,"area":"safety"},{"id":"2511.21145","title":"TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models","created":"2025-11-26","cited_by_count":3,"area":"safety"},{"id":"2601.03699","title":"RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2503.08990","title":"Effective and Efficient Jailbreaks of Black-Box LLMs with Cross-Behavior Attacks","created":"2025-03-12","cited_by_count":2,"area":"safety"},{"id":"2511.01375","title":"Align to Misalign: Automatic LLM Jailbreak with Meta-Optimized LLM Judges","created":"2025-11-03","cited_by_count":2,"area":"safety"},{"id":"2512.23173","title":"EquaCode: A Multi-Strategy Jailbreak Approach for Large Language Models via Equation Solving and Code Completion","created":"2025-12-29","cited_by_count":2,"area":"safety"},{"id":"2604.06436","title":"The Defense Trilemma: Why Prompt Injection Defense Wrappers Fail?","created":"2026-04-07","cited_by_count":2,"area":"safety"},{"id":"2604.18976","title":"STAR-Teaming: A Strategy-Response Multiplex Network Approach to Automated LLM Red Teaming","created":"2026-04-21","cited_by_count":2,"area":"safety"},{"id":"2503.06253","title":"MAD-MAX: Modular And Diverse Malicious Attack MiXtures for Automated LLM Red Teaming","created":"2025-03-08","cited_by_count":1,"area":"safety"},{"id":"2506.01770","title":"ReGA: Model-Based Safeguard for LLMs via Representation-Guided Abstraction","created":"2025-06-02","cited_by_count":1,"area":"safety"},{"id":"2510.08329","title":"AutoRed: A Free-form Adversarial Prompt Generation Framework for Automated Red Teaming","created":"2025-10-09","cited_by_count":1,"area":"safety"},{"id":"2512.21236","title":"Casting a SPELL: Sentence Pairing Exploration for LLM Limitation-breaking","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2601.03265","title":"Jailbreak-Zero: A Path to Pareto Optimal Red Teaming for Large Language Models","created":"2025-12-18","cited_by_count":1,"area":"safety"},{"id":"2601.10971","title":"AJAR: Adaptive Jailbreak Architecture for Red-teaming","created":"2026-01-16","cited_by_count":1,"area":"safety"},{"id":"2605.00553","title":"Stable-GFlowNet: Toward Diverse and Robust LLM Red-Teaming via Contrastive Trajectory Balance","created":"2026-05-01","cited_by_count":1,"area":"safety"},{"id":"2605.15598","title":"Compositional Jailbreaking: An Empirical Analysis of Mutator Chain Interactions in Aligned LLMs","created":"2026-05-15","cited_by_count":1,"area":"safety"},{"id":"2605.19190","title":"Going PLACES: Participatory Localized Red Teaming for Text-to-Image Safety in the Global South","created":"2026-05-18","cited_by_count":1,"area":"safety"},{"id":"2502.09175","title":"FLAME: Flexible LLM-Assisted Moderation Engine","created":"2025-02-13","cited_by_count":0,"area":"safety"},{"id":"2511.02376","title":"AutoAdv: Automated Adversarial Prompting for Multi-Turn Jailbreaking of Large Language Models","created":"2025-11-04","cited_by_count":0,"area":"safety"},{"id":"2601.12652","title":"Ethical Risks in Deploying Large Language Models: An Evaluation of Medical Ethics Jailbreaking","created":"2026-01-19","cited_by_count":0,"area":"safety"},{"id":"2602.02280","title":"RACC: Representation-Aware Coverage Criteria for LLM Safety Testing","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2604.24983","title":"Adaptive Prompt Embedding Optimization for LLM Jailbreaking","created":"2026-04-27","cited_by_count":0,"area":"safety"},{"id":"2605.05682","title":"PersonaTeaming: Supporting Persona-Driven Red-Teaming for Generative AI","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2605.06213","title":"Beyond Fixed Benchmarks and Worst-Case Attacks: Dynamic Boundary Evaluation for Language Models","created":"2026-05-07","cited_by_count":0,"area":"safety"},{"id":"2606.00801","title":"Quality-Diversity Evolution for Discovering Diverse Vulnerabilities in LLM Safety","created":"2026-05-30","cited_by_count":0,"area":"safety"},{"id":"2606.05101","title":"FoeGlass: Simple In-Context Learning Is Enough for Red Teaming Audio Deepfake Detectors","created":"2026-06-03","cited_by_count":0,"area":"safety"},{"id":"2606.25380","title":"A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models","created":"2026-06-24","cited_by_count":0,"area":"safety"},{"id":"2607.11070","title":"MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment","created":"2026-07-13","cited_by_count":0,"area":"safety"},{"id":"2608.10171","title":"Generating Attacks for LLMs with GFlowNets","created":"2026-08-10","cited_by_count":0,"area":"safety"},{"id":"2608.17360","title":"Fair ASR: Re-Evaluating Black-Box Jailbreaks under Shared Target-Call Budgets","created":"2026-08-18","cited_by_count":0,"area":"safety"},{"id":"2609.06612","title":"MechAudit-40: White-Box Auditing across 40 LLM Attack Mechanisms","created":"2026-09-06","cited_by_count":0,"area":"safety"},{"id":"2610.05282","title":"Red-TTT: Test-Time Training for Automated Jailbreaking Large Language Models","created":"2026-10-04","cited_by_count":0,"area":"safety"},{"id":"2610.17457","title":"BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views","created":"2026-10-12","cited_by_count":0,"area":"safety"}],"next_cursor":null}