{"total":107,"rows":[{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2502.12893","title":"H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking","created":"2025-02-18","cited_by_count":99,"area":"lr"},{"id":"2503.15547","title":"Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents","created":"2025-03-17","cited_by_count":87,"area":"agents"},{"id":"2410.02832","title":"FlipAttack: Jailbreak LLMs via Flipping","created":"2024-10-02","cited_by_count":80,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2410.14923","title":"Imprompter: Tricking LLM Agents into Improper Tool Use","created":"2024-10-19","cited_by_count":68,"area":"agents"},{"id":"2411.09523","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","created":"2024-11-14","cited_by_count":65,"area":"agents"},{"id":"2506.19676","title":"A Survey of LLM-Driven AI Agent Communication: Protocols, Security Risks, and Defense Countermeasures","created":"2025-06-24","cited_by_count":57,"area":"agents"},{"id":"2408.04686","title":"Multi-Turn Context Jailbreak Attack on Large Language Models From First Principles","created":"2024-08-08","cited_by_count":56,"area":"safety"},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2407.16667","title":"RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agent","created":"2024-07-23","cited_by_count":44,"area":"agents"},{"id":"2502.10794","title":"Distraction is All You Need for Multimodal Large Language Model Jailbreaking","created":"2025-02-15","cited_by_count":36,"area":"mllm"},{"id":"2410.15236","title":"Jailbreaking and Mitigation of Vulnerabilities in Large Language Models","created":"2024-10-20","cited_by_count":34,"area":"safety"},{"id":"2412.05934","title":"Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models","created":"2024-12-08","cited_by_count":33,"area":"safety"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2406.06622","title":"Adversarial Tuning: Defending Against Jailbreak Attacks for LLMs","created":"2024-06-07","cited_by_count":26,"area":"safety"},{"id":"2506.11094","title":"The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs","created":"2025-06-06","cited_by_count":26,"area":null},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2408.04811","title":"h4rm3l: A language for Composable Jailbreak Attack Synthesis","created":"2024-08-09","cited_by_count":24,"area":"safety"},{"id":"2503.18991","title":"Inverse Reinforcement Learning with Dynamic Reward Scaling for LLM Alignment","created":"2025-03-23","cited_by_count":20,"area":"alignment"},{"id":"2506.08473","title":"AsFT: Anchoring Safety During LLM Fine-Tuning Within Narrow Safety Basin","created":"2025-06-10","cited_by_count":19,"area":null},{"id":"2409.11445","title":"Jailbreaking Large Language Models with Symbolic Mathematics","created":"2024-09-17","cited_by_count":16,"area":"safety"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2503.08195","title":"Dialogue Injection Attack: Jailbreaking LLMs through Context Manipulation","created":"2025-03-11","cited_by_count":14,"area":"safety"},{"id":"2602.22983","title":"Obscure but Effective: Classical Chinese Jailbreak Prompt Optimization via Bio-Inspired Search","created":"2026-02-26","cited_by_count":13,"area":"safety"},{"id":"2502.16903","title":"GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods","created":"2025-02-24","cited_by_count":12,"area":"safety"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2506.15170","title":"From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem","created":"2025-06-18","cited_by_count":12,"area":"agents"},{"id":"2509.01444","title":"Strata-Sword: A Hierarchical Safety Evaluation towards LLMs based on Reasoning Complexity of Jailbreak Instructions","created":"2025-09-01","cited_by_count":11,"area":"safety"},{"id":"2411.04223","title":"Diversity Helps Jailbreak Large Language Models","created":"2024-11-06","cited_by_count":10,"area":"safety"},{"id":"2412.12621","title":"Jailbreaking? One Step Is Enough!","created":"2024-12-17","cited_by_count":9,"area":"safety"},{"id":"2505.14316","title":"Exploring Jailbreak Attacks on LLMs through Intent Concealment and Diversion","created":"2025-05-20","cited_by_count":9,"area":"safety"},{"id":"2506.10022","title":"LLMs Caught in the Crossfire: Malware Requests and Jailbreak Challenges","created":"2025-06-09","cited_by_count":9,"area":"safety"},{"id":"2508.05775","title":"Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLM","created":"2025-08-07","cited_by_count":9,"area":"alignment"},{"id":"2407.16205","title":"Reasoning as a Weapon: Adaptive Dual-Path Jailbreak Attack on Large Language Models","created":"2024-07-23","cited_by_count":8,"area":"lr"},{"id":"2601.04034","title":"HoneyTrap: Deceiving Large Language Model Attackers to Honeypot Traps with Resilient Multi-Agent Defense","created":"2026-01-07","cited_by_count":8,"area":"agents"},{"id":"2502.00840","title":"Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense","created":"2025-02-02","cited_by_count":7,"area":null},{"id":"2503.21598","title":"Prompt, Divide, and Conquer: Bypassing Large Language Model Safety Filters via Segmented and Distributed Prompt Processing","created":"2025-03-27","cited_by_count":7,"area":"safety"},{"id":"2507.19598","title":"MOCHA: Are Code Language Models Robust Against Multi-Turn Malicious Coding Prompts?","created":"2025-07-25","cited_by_count":7,"area":null},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2601.10141","title":"Understanding and Preserving Safety in Fine-Tuned LLMs","created":"2026-01-15","cited_by_count":7,"area":"safety"},{"id":"2505.14368","title":"From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2505.16765","title":"Hiding in Plain Sight: A Steganographic Approach to Stealthy LLM Jailbreaks","created":"2025-05-22","cited_by_count":6,"area":"safety"},{"id":"2506.16760","title":"Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models","created":"2025-06-20","cited_by_count":6,"area":"mllm"},{"id":"2508.03936","title":"ASTRA: Autonomous Spatial-Temporal Red-teaming for AI Software Assistants","created":"2025-08-05","cited_by_count":6,"area":"safety"},{"id":"2512.10449","title":"When Reject Turns into Accept: Quantifying the Vulnerability of LLM-Based Scientific Reviewers to Indirect Prompt Injection","created":"2025-12-11","cited_by_count":6,"area":"safety"},{"id":"2602.12418","title":"Sparse Autoencoders are Capable LLM Jailbreak Mitigators","created":"2026-02-12","cited_by_count":6,"area":"safety"},{"id":"2605.06812","title":"Towards Security-Auditable LLM Agents: A Unified Graph Representation","created":"2026-05-07","cited_by_count":6,"area":"agents"},{"id":"2405.19668","title":"AutoBreach: Universal and Adaptive Jailbreaking with Efficient Wordplay-Guided Optimization","created":"2024-05-30","cited_by_count":5,"area":"safety"},{"id":"2502.05223","title":"KDA: A Knowledge-Distilled Attacker for Generating Diverse Prompts to Jailbreak LLMs","created":"2025-02-05","cited_by_count":5,"area":"safety"},{"id":"2503.11185","title":"Bleeding Pathways: Vanishing Discriminability in LLM Hidden States Fuels Jailbreak Attacks","created":"2025-03-14","cited_by_count":5,"area":"safety"},{"id":"2503.17953","title":"Smoke and Mirrors: Jailbreaking LLM-based Code Generation via Implicit Malicious Prompts","created":"2025-03-23","cited_by_count":5,"area":"safety"},{"id":"2504.08104","title":"Geneshift: Impact of different scenario shift on Jailbreaking LLM","created":"2025-04-10","cited_by_count":5,"area":"safety"},{"id":"2508.05658","title":"Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguards","created":"2025-07-30","cited_by_count":5,"area":"safety"},{"id":"2509.10931","title":"Harmful Prompt Laundering: Jailbreaking LLMs with Abductive Styles and Symbolic Encoding","created":"2025-09-13","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2411.14502","title":"Global Challenge for Safe and Secure LLMs Track 1","created":"2024-11-21","cited_by_count":4,"area":"safety"},{"id":"2412.08201","title":"Model-Editing-Based Jailbreak against Safety-aligned Large Language Models","created":"2024-12-11","cited_by_count":4,"area":"alignment"},{"id":"2509.08000","title":"AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs","created":"2025-09-06","cited_by_count":4,"area":"safety"},{"id":"2601.07084","title":"How Secure is Secure Code Generation? Adversarial Prompts Put LLM Defenses to the Test","created":"2026-01-11","cited_by_count":4,"area":"safety"},{"id":"2601.10543","title":"Defending Large Language Models Against Jailbreak Attacks via In-Decoding Safety-Awareness Probing","created":"2026-01-15","cited_by_count":4,"area":"safety"},{"id":"2406.02044","title":"Towards Universal and Black-Box Query-Response Only Attack on LLMs with QROA","created":"2024-06-04","cited_by_count":3,"area":"safety"},{"id":"2507.13474","title":"Paper Summary Attack: Jailbreaking LLMs through LLM Safety Papers","created":"2025-07-17","cited_by_count":3,"area":"safety"},{"id":"2510.17277","title":"PolyJailbreak: Cross-Modal Jailbreaking Attacks on Black-Box Multimodal LLMs","created":"2025-10-20","cited_by_count":3,"area":"safety"},{"id":"2409.20385","title":"Wait, but Tylenol is Acetaminophen... Investigating and Improving Language Models' Ability to Resist Requests for Misinformation","created":"2024-09-30","cited_by_count":2,"area":null},{"id":"2502.19883","title":"Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models","created":"2025-02-27","cited_by_count":2,"area":"safety"},{"id":"2504.02865","title":"The Illusionist's Prompt: Exposing the Factual Vulnerabilities of Large Language Models with Linguistic Nuances","created":"2025-04-01","cited_by_count":2,"area":null},{"id":"2506.02479","title":"BitBypass: A New Direction in Jailbreaking Aligned Large Language Models with Bitstream Camouflage","created":"2025-06-03","cited_by_count":2,"area":"alignment"},{"id":"2507.22564","title":"Exploiting Synergistic Cognitive Biases to Bypass Safety in LLMs","created":"2025-07-30","cited_by_count":2,"area":"safety"},{"id":"2509.05471","title":"Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models","created":"2025-09-05","cited_by_count":2,"area":"safety"},{"id":"2509.19839","title":"LatentGuard: Controllable Latent Steering for Robust Refusal of Attacks and Reliable Response Generation","created":"2025-09-24","cited_by_count":2,"area":"alignment"},{"id":"2509.23558","title":"Formalization Driven LLM Prompt Jailbreaking via Reinforcement Learning","created":"2025-09-28","cited_by_count":2,"area":"safety"},{"id":"2510.10281","title":"ArtPerception: ASCII Art-based Jailbreak on LLMs with Recognition Pre-test","created":"2025-10-11","cited_by_count":2,"area":"safety"},{"id":"2512.18244","title":"Breaking Minds, Breaking Systems: Jailbreaking Large Language Models via Human-like Psychological Manipulation","created":"2025-12-20","cited_by_count":2,"area":"safety"},{"id":"2512.23173","title":"EquaCode: A Multi-Strategy Jailbreak Approach for Large Language Models via Equation Solving and Code Completion","created":"2025-12-29","cited_by_count":2,"area":"safety"},{"id":"2601.05466","title":"Jailbreaking Large Language Models through Iterative Tool-Disguised Attacks via Reinforcement Learning","created":"2026-01-09","cited_by_count":2,"area":"safety"},{"id":"2405.20234","title":"Hidden in Plain Sight: Exploring Chat History Tampering in Interactive Language Models","created":"2024-05-30","cited_by_count":1,"area":null},{"id":"2503.12931","title":"MirrorShield: Towards Universal Defense Against Jailbreaks via Entropy-Guided Mirror Crafting","created":"2025-03-17","cited_by_count":1,"area":"safety"},{"id":"2505.00010","title":"Jailbreak Detection in Clinical Training LLMs Using Feature-Based Predictive Models","created":"2025-04-21","cited_by_count":1,"area":"safety"},{"id":"2505.05619","title":"LiteLMGuard: Seamless and Lightweight On-Device Prompt Filtering for Safeguarding Small Language Models against Quantization-induced Risks and Vulnerabilities","created":"2025-05-08","cited_by_count":1,"area":"safety"},{"id":"2508.10404","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","created":"2025-08-14","cited_by_count":1,"area":"safety"},{"id":"2512.21236","title":"Casting a SPELL: Sentence Pairing Exploration for LLM Limitation-breaking","created":"2025-12-24","cited_by_count":1,"area":"safety"},{"id":"2603.13847","title":"Sirens' Whisper: Inaudible Near-Ultrasonic Jailbreaks of Speech-Driven LLMs","created":"2026-03-14","cited_by_count":1,"area":"safety"},{"id":"2603.25164","title":"PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2026-03-26","cited_by_count":1,"area":"rag"},{"id":"2605.07250","title":"Hard to Read, Easy to Jailbreak: How Visual Degradation Bypasses MLLM Safety Alignment","created":"2026-05-08","cited_by_count":1,"area":"alignment"},{"id":"2608.01117","title":"SoK: Intent-Oriented Systematization of Multi-Turn LLM Jailbreaks","created":"2026-08-02","cited_by_count":1,"area":"safety"},{"id":"2507.02057","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","created":"2025-07-02","cited_by_count":0,"area":null},{"id":"2509.06338","title":"Embedding Poisoning: Bypassing Safety Alignment via Embedding Semantic Shift","created":"2025-09-08","cited_by_count":0,"area":"alignment"},{"id":"2511.18581","title":"TASO: Jailbreak LLMs via Alternative Template and Suffix Optimization","created":"2025-11-23","cited_by_count":0,"area":"safety"},{"id":"2512.10415","title":"How to Trick Your AI TA: A Systematic Study of Academic Jailbreaking in LLM Code Evaluation","created":"2025-12-11","cited_by_count":0,"area":"safety"},{"id":"2603.17123","title":"Security Assessment and Mitigation Strategies for Large Language Models: A Comprehensive Defensive Framework","created":"2026-03-17","cited_by_count":0,"area":null},{"id":"2605.08878","title":"Why Do Aligned LLMs Remain Jailbreakable: Refusal-Escape Directions, Operator-Level Sources, and Safety-Utility Trade-off","created":"2026-05-09","cited_by_count":0,"area":"alignment"},{"id":"2605.11664","title":"Safety Context Injection: Inference-Time Safety Alignment via Static Filtering and Agentic Analysis","created":"2026-05-12","cited_by_count":0,"area":"agents"},{"id":"2605.19321","title":"Exploring and Developing a Pre-Model Safeguard with Draft Models","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2605.20654","title":"REFLECTOR: Internalizing Step-wise Reflection against Indirect Jailbreak","created":"2026-05-20","cited_by_count":0,"area":"alignment"},{"id":"2605.21674","title":"Adversarial Reframing: A Framework for Targeted Generation in Language Models","created":"2026-05-20","cited_by_count":0,"area":"safety"},{"id":"2608.26008","title":"A Self-Evolving Multi-Agent Framework Defense against LLM Jailbreak Attacks","created":"2026-08-26","cited_by_count":0,"area":"agents"},{"id":"2608.29098","title":"SafeAtlas-VL: Beyond Binary Multimodal Safety with Large-Scale Data and Guard Models","created":"2026-08-29","cited_by_count":0,"area":null}],"next_cursor":"100"}