{"total":96,"rows":[{"id":"2406.05946","title":"Safety Alignment Should Be Made More Than Just a Few Tokens Deep","created":"2024-06-10","cited_by_count":472,"area":"alignment"},{"id":"2408.17003","title":"Safety Layers in Aligned Large Language Models: The Key to LLM Security","created":"2024-08-30","cited_by_count":134,"area":"alignment"},{"id":"2504.01990","title":"Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems","created":"2025-03-31","cited_by_count":126,"area":"agents"},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2404.01099","title":"What is in Your Safe Data? Identifying Benign Data that Breaks Safety","created":"2024-04-01","cited_by_count":118,"area":"safety"},{"id":"2405.14577","title":"Representation Noising: A Defence Mechanism Against Harmful Finetuning","created":"2024-05-23","cited_by_count":96,"area":"safety"},{"id":"2406.18853","title":"Decoding-Time Language Model Alignment with Multiple Objectives","created":"2024-06-27","cited_by_count":94,"area":"alignment"},{"id":"2405.18641","title":"Lisa: Lazy Safety Alignment for Large Language Models against Harmful Fine-tuning Attack","created":"2024-05-28","cited_by_count":92,"area":"alignment"},{"id":"2409.01586","title":"Booster: Tackling Harmful Fine-tuning for Large Language Models via Attenuating Harmful Perturbation","created":"2024-09-03","cited_by_count":92,"area":null},{"id":"2409.18169","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","created":"2024-09-26","cited_by_count":90,"area":"alignment"},{"id":"2408.09600","title":"Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning","created":"2024-08-18","cited_by_count":72,"area":"alignment"},{"id":"2410.08847","title":"Unintentional Unalignment: Likelihood Displacement in Direct Preference Optimization","created":"2024-10-11","cited_by_count":67,"area":"alignment"},{"id":"2410.07471","title":"SEAL: Safety-enhanced Aligned LLM Fine-tuning via Bilevel Data Selection","created":"2024-10-09","cited_by_count":64,"area":null},{"id":"2405.20446","title":"Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation","created":"2024-05-30","cited_by_count":44,"area":"rag"},{"id":"2510.05024","title":"Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignment","created":"2025-10-06","cited_by_count":43,"area":"alignment"},{"id":"2410.09760","title":"Targeted Vaccine: Safety Alignment for Large Language Models against Harmful Fine-Tuning via Layer-wise Perturbation","created":"2024-10-13","cited_by_count":37,"area":"alignment"},{"id":"2504.01550","title":"Representation Bending for Large Language Model Safety","created":"2025-04-02","cited_by_count":30,"area":"safety"},{"id":"2405.16229","title":"No Two Devils Alike: Unveiling Distinct Mechanisms of Fine-tuning Attacks","created":"2024-05-25","cited_by_count":29,"area":"alignment"},{"id":"2506.17209","title":"Fine-Tuning Lowers Safety and Disrupts Evaluation Consistency","created":"2025-06-20","cited_by_count":27,"area":"safety"},{"id":"2503.17239","title":"SafeMERGE: Preserving Safety Alignment in Fine-Tuned Large Language Models via Selective Layer-Wise Model Merging","created":"2025-03-21","cited_by_count":25,"area":"alignment"},{"id":"2507.18631","title":"Layer-Aware Representation Filtering: Purifying Finetuning Data to Preserve LLM Safety Alignment","created":"2025-07-24","cited_by_count":24,"area":"alignment"},{"id":"2505.06843","title":"Benign Samples Matter! Fine-tuning On Outlier Benign Samples Severely Breaks Safety","created":"2025-05-11","cited_by_count":22,"area":"safety"},{"id":"2501.18100","title":"Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbation","created":"2025-01-30","cited_by_count":20,"area":null},{"id":"2502.09673","title":"Are Smarter LLMs Safer? Exploring Safety-Reasoning Trade-offs in Prompting and Fine-Tuning","created":"2025-02-13","cited_by_count":20,"area":"lr"},{"id":"2511.05408","title":"Steering Language Models with Weight Arithmetic","created":"2025-11-07","cited_by_count":20,"area":null},{"id":"2506.03850","title":"Vulnerability-Aware Alignment: Mitigating Uneven Forgetting in Harmful Fine-Tuning","created":"2025-06-04","cited_by_count":17,"area":"alignment"},{"id":"2512.19027","title":"Recontextualization Mitigates Specification Gaming without Modifying the Specification","created":"2025-12-22","cited_by_count":14,"area":null},{"id":"2505.17646","title":"Unveiling the Basin-Like Loss Landscape in Large Language Models","created":"2025-05-23","cited_by_count":13,"area":null},{"id":"2505.16559","title":"CTRAP: Embedding Collapse Trap to Safeguard Large Language Models from Harmful Fine-Tuning","created":"2025-05-22","cited_by_count":11,"area":"safety"},{"id":"2505.17196","title":"Shape it Up! Restoring LLM Safety during Finetuning","created":"2025-05-22","cited_by_count":11,"area":"alignment"},{"id":"2508.07172","title":"Gradient Surgery for Safe LLM Fine-Tuning","created":"2025-08-10","cited_by_count":11,"area":"alignment"},{"id":"2502.15435","title":"Single-pass Detection of Jailbreaking Input in Large Language Models","created":"2025-02-21","cited_by_count":10,"area":"alignment"},{"id":"2505.12186","title":"Self-Destructive Language Model","created":"2025-05-18","cited_by_count":10,"area":"safety"},{"id":"2512.10150","title":"Unforgotten Safety: Preserving Safety Alignment of Large Language Models with Continual Learning","created":"2025-12-10","cited_by_count":10,"area":"alignment"},{"id":"2508.14031","title":"Unintended Misalignment from Agentic Fine-Tuning: Risks and Mitigation","created":"2025-08-19","cited_by_count":9,"area":"agents"},{"id":"2408.13467","title":"LlamaDuo: LLMOps Pipeline for Seamless Migration from Service LLMs to Small-Scale Local LLMs","created":"2024-08-24","cited_by_count":8,"area":null},{"id":"2510.07835","title":"MetaDefense: Defending Finetuning-based Jailbreak Attack Before and During Generation","created":"2025-10-09","cited_by_count":8,"area":"safety"},{"id":"2502.00840","title":"Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense","created":"2025-02-02","cited_by_count":7,"area":null},{"id":"2503.19041","title":"LookAhead Tuning: Safer Language Models via Partial Answer Previews","created":"2025-03-24","cited_by_count":7,"area":"alignment"},{"id":"2505.19670","title":"Reshaping Representation Space to Balance the Safety and Over-rejection in Large Audio Language Models","created":"2025-05-26","cited_by_count":7,"area":null},{"id":"2409.03274","title":"Recent Advances in Attack and Defense Approaches of Large Language Models","created":"2024-09-05","cited_by_count":6,"area":null},{"id":"2502.13946","title":"Why Safeguarded Ships Run Aground? Aligned Large Language Models' Safety Mechanisms Tend to Be Anchored in The Template Region","created":"2025-02-19","cited_by_count":6,"area":"alignment"},{"id":"2502.19537","title":"No, of Course I Can! Deeper Fine-Tuning Attacks That Bypass Token-Level Safety Mechanisms","created":"2025-02-26","cited_by_count":6,"area":"safety"},{"id":"2505.14185","title":"Safety Subspaces are Not Linearly Distinct: A Fine-Tuning Case Study","created":"2025-05-20","cited_by_count":6,"area":"alignment"},{"id":"2506.07452","title":"When Style Breaks Safety: Defending LLMs Against Superficial Style Alignment","created":"2025-06-09","cited_by_count":6,"area":"safety"},{"id":"2507.17075","title":"LoRA is All You Need for Safety Alignment of Reasoning LLMs","created":"2025-07-22","cited_by_count":6,"area":"lr"},{"id":"2603.00498","title":"Antibody: Strengthening Defense Against Harmful Fine-Tuning for Large Language Models via Attenuating Harmful Gradient Influence","created":"2026-02-28","cited_by_count":6,"area":"safety"},{"id":"2603.23530","title":"Did You Forget What I Asked? Prospective Memory Failures in Large Language Models","created":"2026-03-07","cited_by_count":6,"area":null},{"id":"2510.04891","title":"SocialHarmBench: Revealing LLM Vulnerabilities to Socially Harmful Requests","created":"2025-10-06","cited_by_count":5,"area":"safety"},{"id":"2601.08089","title":"Q-realign: Piggybacking Realignment on Quantization for Safe and Efficient LLM Deployment","created":"2026-01-13","cited_by_count":5,"area":"safety"},{"id":"2404.09005","title":"Proof-of-Learning with Incentive Security","created":"2024-04-13","cited_by_count":4,"area":null},{"id":"2511.00382","title":"Efficiency vs. Alignment: Investigating Safety and Fairness Risks in Parameter-Efficient Fine-Tuning of LLMs","created":"2025-11-01","cited_by_count":4,"area":null},{"id":"2602.01025","title":"Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models","created":"2026-02-01","cited_by_count":4,"area":"mllm"},{"id":"2602.05228","title":"Surgery: Mitigating Harmful Fine-Tuning for Large Language Models via Attention Sink","created":"2026-02-05","cited_by_count":4,"area":"alignment"},{"id":"2412.16469","title":"Chained Tuning Leads to Biased Forgetting","created":"2024-12-21","cited_by_count":3,"area":null},{"id":"2412.19496","title":"Multi-PA: A Multi-perspective Benchmark on Privacy Assessment for Large Vision-Language Models","created":"2024-12-27","cited_by_count":3,"area":"mllm"},{"id":"2505.05327","title":"RICo: Refined In-Context Contribution for Automatic Instruction-Tuning Data Selection","created":"2025-05-08","cited_by_count":3,"area":null},{"id":"2605.01771","title":"The Compliance Gap: Why AI Systems Promise to Follow Process Instructions but Don't","created":"2026-05-03","cited_by_count":3,"area":null},{"id":"2408.05149","title":"AttackER: Towards Enhancing Cyber-Attack Attribution with a Named Entity Recognition Dataset","created":"2024-08-09","cited_by_count":2,"area":null},{"id":"2507.00239","title":"Linearly Decoding Refused Knowledge in Aligned Language Models","created":"2025-06-30","cited_by_count":2,"area":"alignment"},{"id":"2510.01342","title":"Fine-Tuning Jailbreaks under Highly Constrained Black-Box Settings: A Three-Pronged Approach","created":"2025-10-01","cited_by_count":2,"area":"safety"},{"id":"2510.07775","title":"The Unintended Trade-off of AI Alignment:Balancing Hallucination Mitigation and Safety in LLMs","created":"2025-10-09","cited_by_count":2,"area":"safety"},{"id":"2601.07200","title":"Safeguarding LLM Fine-tuning via Push-Pull Distributional Alignment","created":"2026-01-12","cited_by_count":2,"area":"alignment"},{"id":"2604.11838","title":"A Layer-wise Analysis of Supervised Fine-Tuning","created":"2026-04-12","cited_by_count":2,"area":null},{"id":"2606.06667","title":"The Piggyback Hypothesis of Generalization: Explaining and Mitigating Emergent Misalignment","created":"2026-06-04","cited_by_count":2,"area":null},{"id":"2412.18639","title":"A Grounded Observer Framework for Establishing Guardrails for Foundation Models in Socially Sensitive Domains","created":"2024-12-23","cited_by_count":1,"area":null},{"id":"2506.00676","title":"SafeTuneBed: A Toolkit for Benchmarking LLM Safety Alignment in Fine-Tuning","created":"2025-05-31","cited_by_count":1,"area":"alignment"},{"id":"2509.21861","title":"SpecMol: A Spectroscopy-Grounded Foundation Model for Multi-Task Molecular Learning","created":"2025-09-26","cited_by_count":1,"area":null},{"id":"2601.16506","title":"SafeThinker: Reasoning about Risk to Deepen Safety Beyond Shallow Alignment","created":"2026-01-23","cited_by_count":1,"area":"lr"},{"id":"2602.00061","title":"Simple Role Assignment is Extraordinarily Effective for Safety Alignment","created":"2026-01-20","cited_by_count":1,"area":"alignment"},{"id":"2603.00061","title":"The Hidden Costs of Domain Fine-Tuning: Pii-Bearing Data Degrades Safety and Increases Leakage","created":"2026-02-10","cited_by_count":1,"area":null},{"id":"2604.16659","title":"Benign Fine-Tuning Breaks Safety Alignment in Audio LLMs","created":"2026-04-17","cited_by_count":1,"area":"alignment"},{"id":"2605.01913","title":"RefusalGuard: Geometry-Preserving Fine-Tuning for Safety in LLMs","created":"2026-05-03","cited_by_count":1,"area":"alignment"},{"id":"2606.00160","title":"DataShield: Safety-degrading Data Filtering for LLM Benign Instruction Fine-Tuning","created":"2026-05-29","cited_by_count":1,"area":null},{"id":"2606.19168","title":"Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflection","created":"2026-06-17","cited_by_count":1,"area":"alignment"},{"id":"2607.05120","title":"Agent Data Injection Attacks are Realistic Threats to AI Agents","created":"2026-07-06","cited_by_count":1,"area":"agents"},{"id":"2607.27081","title":"On-Policy Distillation for LLM Safety: A Routing Approach to Template-Robust Realignment","created":"2026-07-29","cited_by_count":1,"area":"safety"},{"id":"2608.30319","title":"Beyond Token-Level Guidance: Inference-Time Alignment of Specialized LLMs via Cross-Family Representation Steering","created":"2026-08-31","cited_by_count":1,"area":"mechinterp"},{"id":"2406.14051","title":"How Many Parameters Does it Take to Change a Light Bulb? Evaluating Performance in Self-Play of Conversational Games as a Function of Model Characteristics","created":"2024-06-20","cited_by_count":0,"area":"synth"},{"id":"2506.00062","title":"SafeCOMM: A Study on Safety Degradation in Fine-Tuned Telecom Large Language Models","created":"2025-05-29","cited_by_count":0,"area":"safety"},{"id":"2506.02478","title":"FroM: Frobenius Norm-Based Data-Free Adaptive Model Merging","created":"2025-06-03","cited_by_count":0,"area":null},{"id":"2602.02258","title":"Alignment-Aware Model Adaptation via Feedback-Guided Optimization","created":"2026-02-02","cited_by_count":0,"area":null},{"id":"2604.16845","title":"DART: Mitigating Harm Drift in Difference-Aware LLMs via Distill-Audit-Repair Training","created":"2026-04-18","cited_by_count":0,"area":null},{"id":"2605.19940","title":"Robotics-Inspired Guardrails for Foundation Models in Socially Sensitive Domains","created":"2026-05-19","cited_by_count":0,"area":"safety"},{"id":"2605.28030","title":"SPARD: Defending Harmful Fine-Tuning Attack via Safety Projection with Relevance-Diversity Data Selection","created":"2026-05-27","cited_by_count":0,"area":"alignment"},{"id":"2606.03648","title":"Safety Measurements for Fine-tuned LLMs Should be Grounded in Capability","created":"2026-06-02","cited_by_count":0,"area":null},{"id":"2606.07970","title":"Defending Against Malicious Finetuning by Scaling Train-time Adversarial Attacks","created":"2026-06-06","cited_by_count":0,"area":"alignment"},{"id":"2606.28525","title":"A Gravitational Interpretation of Safety Reversion under Fine-Tuning","created":"2026-06-26","cited_by_count":0,"area":"safety"},{"id":"2607.23446","title":"Do Small Models Use the Law You Give Them? Context-Injected Fine-Tuning for Legal QA in Bangladesh","created":"2026-07-26","cited_by_count":0,"area":null},{"id":"2608.00042","title":"Trustworthiness Costs of Domain Adaptation in Small Language Models:A Cross-Architecture Empirical Study","created":"2026-07-23","cited_by_count":0,"area":null},{"id":"2608.04322","title":"DataRx: Missingness-Aware Sampling for Safer Large Language Model Task-Specific Fine-Tuning","created":"2026-08-05","cited_by_count":0,"area":null},{"id":"2608.18351","title":"Task-Conditioned Least-Privilege Learning for Executable Terminal and MCP Agents","created":"2026-08-18","cited_by_count":0,"area":"agents"},{"id":"2609.06934","title":"The Geometry of Refusal: Why Post-Hoc Safety Is Fragile and Pretraining-Time Safety Persists","created":"2026-09-07","cited_by_count":0,"area":"alignment"},{"id":"2609.29045","title":"The Tokens Remember: When Tokenization Bypasses Knowledge Editing and Unlearning","created":"2026-09-24","cited_by_count":0,"area":"safety"},{"id":"2609.30802","title":"Understanding the Role of Prompt Template in Knowledge Distillation for Safety Alignment","created":"2026-09-25","cited_by_count":0,"area":"alignment"},{"id":"2610.02092","title":"Scalable, Transferable Meta-network for Data Selection Requires a Different Loss (and Why the Obvious Choice is Problematic)","created":"2026-10-01","cited_by_count":0,"area":null}],"next_cursor":null}