{"total":66,"rows":[{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2502.11054","title":"Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Models","created":"2025-02-16","cited_by_count":64,"area":"lr"},{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56,"area":"safety"},{"id":"2502.19820","title":"Foot-In-The-Door: A Multi-turn Jailbreak for LLMs","created":"2025-02-27","cited_by_count":54,"area":"safety"},{"id":"2410.19317","title":"FairMT-Bench: Benchmarking Fairness for Multi-turn Dialogue in Conversational LLMs","created":"2024-10-25","cited_by_count":36,"area":null},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2411.03814","title":"MRJ-Agent: An Effective Jailbreak Agent for Multi-Round Dialogue","created":"2024-11-06","cited_by_count":33,"area":"agents"},{"id":"2505.17147","title":"MTSA: Multi-turn Safety Alignment for LLMs through Multi-round Red-teaming","created":"2025-05-22","cited_by_count":32,"area":"alignment"},{"id":"2602.13379","title":"Unsafer in Many Turns: Benchmarking and Defending Multi-Turn Safety Risks in Tool-Using Agents","created":"2026-02-13","cited_by_count":30,"area":"agents"},{"id":"2507.19227","title":"Jailbreaking Large Language Diffusion Models: Revealing Hidden Safety Flaws in Diffusion-Based Text Generation","created":"2025-07-25","cited_by_count":26,"area":"lr"},{"id":"2507.02844","title":"Visual Contextual Attack: Jailbreaking MLLMs with Image-Driven Context Injection","created":"2025-07-03","cited_by_count":25,"area":"mllm"},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2502.11090","title":"SafeDialBench: A Fine-Grained Safety Evaluation Benchmark for Large Language Models in Multi-Turn Dialogues with Diverse Jailbreak Attacks","created":"2025-02-16","cited_by_count":23,"area":"safety"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2502.09990","title":"X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability","created":"2025-02-14","cited_by_count":20,"area":"alignment"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2508.07646","title":"Multi-Turn Jailbreaks Are Simpler Than They Seem","created":"2025-08-11","cited_by_count":17,"area":"safety"},{"id":"2409.00137","title":"Emerging Vulnerabilities in Frontier Models: Multi-Turn Jailbreak Attacks","created":"2024-08-29","cited_by_count":16,"area":"safety"},{"id":"2501.14250","title":"Siren: A Learning-Based Multi-Turn Attack Framework for Simulating Real-World Human Jailbreak Behaviors","created":"2025-01-24","cited_by_count":13,"area":"safety"},{"id":"2508.04039","title":"Large Reasoning Models Are Autonomous Jailbreak Agents","created":"2025-08-04","cited_by_count":13,"area":"lr"},{"id":"2509.24296","title":"DiffuGuard: How Intrinsic Safety is Lost and Found in Diffusion Large Language Models","created":"2025-09-29","cited_by_count":12,"area":"safety"},{"id":"2501.19180","title":"Enhancing Model Defense Against Jailbreaks with Proactive Safety Reasoning","created":"2025-01-31","cited_by_count":11,"area":"lr"},{"id":"2503.01742","title":"Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models","created":"2025-03-03","cited_by_count":11,"area":"safety"},{"id":"2407.11733","title":"How Are LLMs Mitigating Stereotyping Harms? Learning from Search Engine Studies","created":"2024-07-16","cited_by_count":10,"area":null},{"id":"2503.19134","title":"MIRAGE: Multimodal Immersive Reasoning and Guided Exploration for Red-Team Jailbreak Attacks","created":"2025-03-24","cited_by_count":10,"area":"lr"},{"id":"2507.05248","title":"Response Attack: Exploiting Contextual Priming to Jailbreak Large Language Models","created":"2025-07-07","cited_by_count":10,"area":"safety"},{"id":"2505.14316","title":"Exploring Jailbreak Attacks on LLMs through Intent Concealment and Diversion","created":"2025-05-20","cited_by_count":9,"area":"safety"},{"id":"2505.17650","title":"Does Chain-of-Thought Reasoning Really Reduce Harmfulness from Jailbreaking?","created":"2025-05-23","cited_by_count":9,"area":"safety"},{"id":"2508.05775","title":"Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLM","created":"2025-08-07","cited_by_count":9,"area":"alignment"},{"id":"2512.01353","title":"The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search","created":"2025-12-01","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2501.13115","title":"Dagger Behind Smile: Fool LLMs with a Happy Ending Story","created":"2025-01-19","cited_by_count":6,"area":"safety"},{"id":"2508.11222","title":"ORFuzz: Fuzzing the \"Other Side\" of LLM Safety -- Testing Over-Refusal","created":"2025-08-15","cited_by_count":6,"area":"safety"},{"id":"2503.15560","title":"Temporal Context Awareness: A Defense Framework Against Multi-turn Manipulation Attacks on Large Language Models","created":"2025-03-18","cited_by_count":5,"area":null},{"id":"2504.13707","title":"OpenDeception: Learning Deception and Trust in Human-AI Interaction via Multi-Agent Simulation","created":"2025-04-18","cited_by_count":5,"area":"agents"},{"id":"2504.20376","title":"When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems","created":"2025-04-29","cited_by_count":5,"area":"safety"},{"id":"2505.04673","title":"REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM","created":"2025-05-07","cited_by_count":5,"area":null},{"id":"2510.09871","title":"CoBia: Constructed Conversations Can Trigger Otherwise Concealed Societal Biases in LLMs","created":"2025-10-10","cited_by_count":5,"area":"safety"},{"id":"2512.05853","title":"VRSA: Jailbreaking Multimodal Large Language Models through Visual Reasoning Sequential Attack","created":"2025-12-05","cited_by_count":5,"area":"lr"},{"id":"2508.06457","title":"ScamAgents: How AI Agents Can Simulate Human-Level Scam Calls","created":"2025-08-08","cited_by_count":4,"area":"lr"},{"id":"2512.23701","title":"Eliciting Behaviors in Multi-Turn Conversations","created":"2025-12-29","cited_by_count":4,"area":null},{"id":"2603.15684","title":"State-Dependent Safety Failures in Multi-Turn Language Model Interaction","created":"2026-03-15","cited_by_count":4,"area":"alignment"},{"id":"2409.04822","title":"Exploring Straightforward Conversational Red-Teaming","created":"2024-09-07","cited_by_count":3,"area":"safety"},{"id":"2508.06755","title":"Many-Turn Jailbreaking","created":"2025-08-09","cited_by_count":2,"area":"safety"},{"id":"2510.03969","title":"How Catastrophic is Your LLM? Certifying Risk in Conversation","created":"2025-10-04","cited_by_count":2,"area":null},{"id":"2512.18244","title":"Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulation","created":"2025-12-20","cited_by_count":2,"area":"safety"},{"id":"2604.16916","title":"When Choices Become Risks: Safety Failures of Large Language Models under Multiple-Choice Constraints","created":"2026-04-18","cited_by_count":2,"area":"alignment"},{"id":"2505.18680","title":"$PD^3F$: A Pluggable and Dynamic DoS-Defense Framework Against Resource Consumption Attacks Targeting Large Language Models","created":"2025-05-24","cited_by_count":1,"area":null},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2509.25896","title":"LLaVAShield: Safeguarding Multimodal Multi-Turn Dialogues in Vision-Language Models","created":"2025-09-30","cited_by_count":1,"area":"mllm"},{"id":"2510.08329","title":"AutoRed: A Free-form Adversarial Prompt Generation Framework for Automated Red Teaming","created":"2025-10-09","cited_by_count":1,"area":"safety"},{"id":"2603.13847","title":"Sirens' Whisper: Inaudible Near-Ultrasonic Jailbreaks of Speech-Driven LLMs","created":"2026-03-14","cited_by_count":1,"area":"safety"},{"id":"2603.22829","title":"Improving Safety Alignment via Balanced Direct Preference Optimization","created":"2026-03-24","cited_by_count":1,"area":"alignment"},{"id":"2603.24132","title":"MedAidDialog: A Multilingual Multi-Turn Medical Dialogue Dataset for Accessible Healthcare","created":"2026-03-25","cited_by_count":1,"area":null},{"id":"2604.16358","title":"SaFeR-Steer: Evolving Multi-Turn MLLMs via Synthetic Bootstrapping and Feedback Dynamics","created":"2026-03-18","cited_by_count":1,"area":"alignment"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2511.05018","title":"Pluralistic Behavior Suite: Stress-Testing Multi-Turn Adherence to Custom Behavioral Policies","created":"2025-11-07","cited_by_count":0,"area":null},{"id":"2605.25510","title":"The Age of Curiosity Meets the Age of AI: Benchmarking Child Safety in Large Language Models","created":"2026-05-25","cited_by_count":0,"area":"safety"},{"id":"2606.25782","title":"Do Encoders Suffice? A Systematic Comparison of Encoder and Decoder Safety Judges for LLM Adversarial Evaluation","created":"2026-06-24","cited_by_count":0,"area":"safety"},{"id":"2609.00487","title":"EvoFlint: An Evolutionary Atlas of Multi-Turn LLM Vulnerabilities","created":"2026-08-31","cited_by_count":0,"area":"safety"},{"id":"2609.01548","title":"SDARE-Bench: Evaluating Large Language Models on Conversational Stigma Detection and Response in Dyadic and Group Dialogue","created":"2026-09-01","cited_by_count":0,"area":null},{"id":"2609.03407","title":"Caught in the Story: Narrative Captivity in Multi-turn LLMs Conversation","created":"2026-09-03","cited_by_count":0,"area":null},{"id":"2609.18649","title":"DyMT-ESB: Dynamic Multi-Turn Evaluation of Social Bias in User-LLM Interactions","created":"2026-09-16","cited_by_count":0,"area":null},{"id":"2609.38389","title":"The Geometry of Harmfulness in Multi-Turn Attacks","created":"2026-09-29","cited_by_count":0,"area":"alignment"}],"next_cursor":null}