{"total":74,"rows":[{"id":"2407.04295","title":"Jailbreak Attacks and Defenses Against Large Language Models: A Survey","created":"2024-07-05","cited_by_count":230,"area":"safety"},{"id":"2504.15585","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","created":"2025-04-22","cited_by_count":116,"area":"lr"},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2406.05498","title":"SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner","created":"2024-06-08","cited_by_count":63,"area":"safety"},{"id":"2502.07557","title":"JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation","created":"2025-02-11","cited_by_count":54,"area":"safety"},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2406.06622","title":"Adversarial Tuning: Defending Against Jailbreak Attacks for LLMs","created":"2024-06-07","cited_by_count":26,"area":"safety"},{"id":"2408.01420","title":"Mission Impossible: A Statistical Perspective on Jailbreaking LLMs","created":"2024-08-02","cited_by_count":24,"area":"alignment"},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2502.09990","title":"X-Boundary: Establishing Exact Safety Boundary to Shield LLMs from Multi-Turn Jailbreaks without Compromising Usability","created":"2025-02-14","cited_by_count":20,"area":"alignment"},{"id":"2410.00296","title":"VLMGuard: Bootstrapping Malicious Prompt Detectors from Unlabeled Vision-Language Prompts in the Wild","created":"2024-10-01","cited_by_count":18,"area":"mllm"},{"id":"2406.03805","title":"AutoJailbreak: Exploring Jailbreak Attacks and Defenses through a Dependency Lens","created":"2024-06-06","cited_by_count":14,"area":"safety"},{"id":"2410.16638","title":"LLMScan: Causal Scan for LLM Misbehavior Detection","created":"2024-10-22","cited_by_count":13,"area":null},{"id":"2404.13752","title":"Adversarial Representation Engineering: A General Model Editing Framework for Large Language Models","created":"2024-04-21","cited_by_count":12,"area":"mechinterp"},{"id":"2510.01270","title":"Think Twice, Generate Once: Safeguarding by Progressive Self-Reflection","created":"2025-09-29","cited_by_count":11,"area":"lr"},{"id":"2403.06009","title":"Detectors for Safe and Reliable LLMs: Implementations, Uses, and Limitations","created":"2024-03-09","cited_by_count":10,"area":null},{"id":"2407.16318","title":"PrimeGuard: Safe and Helpful LLMs through Tuning-Free Routing","created":"2024-07-23","cited_by_count":10,"area":"safety"},{"id":"2502.09755","title":"Jailbreak Attack Initializations as Extractors of Compliance Directions","created":"2025-02-13","cited_by_count":10,"area":"safety"},{"id":"2505.12186","title":"Self-Destructive Language Model","created":"2025-05-18","cited_by_count":10,"area":"safety"},{"id":"2510.02833","title":"Attack via Overfitting: 10-shot Benign Fine-tuning to Jailbreak LLMs","created":"2025-10-03","cited_by_count":10,"area":"alignment"},{"id":"2406.01514","title":"Decoupled Alignment for Robust Plug-and-Play Adaptation","created":"2024-06-03","cited_by_count":9,"area":"alignment"},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2412.18171","title":"Token Highlighter: Inspecting and Mitigating Jailbreak Prompts for Large Language Models","created":"2024-12-24","cited_by_count":7,"area":"safety"},{"id":"2512.05485","title":"TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations","created":"2025-12-05","cited_by_count":7,"area":"safety"},{"id":"2601.05445","title":"Knowledge-Driven Multi-Turn Jailbreaking on Large Language Models","created":"2026-01-09","cited_by_count":7,"area":"safety"},{"id":"2504.00446","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","created":"2025-04-01","cited_by_count":6,"area":"safety"},{"id":"2509.06982","title":"CARE: Decoding Time Safety Alignment via Rollback and Introspection Intervention","created":"2025-09-01","cited_by_count":6,"area":"alignment"},{"id":"2412.07192","title":"PrisonBreak: Jailbreaking Large Language Models with at Most Twenty-Five Targeted Bit-flips","created":"2024-12-10","cited_by_count":5,"area":"alignment"},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2604.16242","title":"Detecting and Suppressing Reward Hacking with Gradient Fingerprints","created":"2026-04-17","cited_by_count":5,"area":"alignment"},{"id":"2508.04204","title":"ReasoningGuard: Safeguarding Large Reasoning Models with Inference-time Safety Aha Moments","created":"2025-08-06","cited_by_count":4,"area":"lr"},{"id":"2508.15182","title":"SafeLLM: Unlearning Harmful Outputs from Large Language Models against Jailbreak Attacks","created":"2025-08-21","cited_by_count":4,"area":"safety"},{"id":"2503.17932","title":"STShield: Single-Token Sentinel for Real-Time Jailbreak Detection in Large Language Models","created":"2025-03-23","cited_by_count":3,"area":"safety"},{"id":"2506.16792","title":"MIST: Jailbreaking Black-box Large Language Models via Iterative Semantic Tuning","created":"2025-06-20","cited_by_count":3,"area":"safety"},{"id":"2508.14128","title":"CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection","created":"2025-08-19","cited_by_count":3,"area":"safety"},{"id":"2601.03594","title":"Jailbreaking LLMs & VLMs: Mechanisms, Evaluation, and Unified Defense","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2601.03600","title":"ALERT: Zero-shot LLM Jailbreak Detection via Internal Discrepancy Amplification","created":"2026-01-07","cited_by_count":3,"area":"safety"},{"id":"2602.01834","title":"Concept-Based Dictionary Learning for Inference-Time Safety in Vision Language Action Models","created":"2026-02-02","cited_by_count":3,"area":"vla"},{"id":"2506.07356","title":"Safety-Aligned Weights Are Not Enough: Refusal-Teacher-Guided Finetuning Enhances Safety and Downstream Performance under Harmful Finetuning Attacks","created":"2025-06-09","cited_by_count":2,"area":"safety"},{"id":"2506.21972","title":"Advancing Jailbreak Strategies: A Hybrid Approach to Exploiting LLM Vulnerabilities and Bypassing Modern Defenses","created":"2025-06-27","cited_by_count":2,"area":"safety"},{"id":"2509.21401","title":"JaiLIP: Jailbreaking Vision-Language Models via Loss Guided Image Perturbation","created":"2025-09-24","cited_by_count":2,"area":"lr"},{"id":"2602.16977","title":"Fail-Closed Alignment for Large Language Models","created":"2026-02-19","cited_by_count":2,"area":"alignment"},{"id":"2603.17305","title":"Contrastive Reasoning Alignment: Reinforcement Learning from Hidden Representations","created":"2026-03-18","cited_by_count":2,"area":"lr"},{"id":"2604.18775","title":"An Empirical Study of Multi-Generation Sampling for Jailbreak Detection in Large Language Models","created":"2026-04-20","cited_by_count":2,"area":"safety"},{"id":"2604.26167","title":"Test-Time Safety Alignment","created":"2026-04-28","cited_by_count":2,"area":"alignment"},{"id":"2503.03502","title":"Geometry-Guided Adversarial Prompt Detection via Curvature and Local Intrinsic Dimension","created":"2025-03-05","cited_by_count":1,"area":"safety"},{"id":"2505.05619","title":"LiteLMGuard: Seamless and Lightweight On-Device Prompt Filtering for Safeguarding Small Language Models against Quantization-induced Risks and Vulnerabilities","created":"2025-05-08","cited_by_count":1,"area":"safety"},{"id":"2506.18543","title":"SoK: A Comprehensive Security Analysis of Jailbreak Resilience in GPT and DeepSeek Models","created":"2025-06-23","cited_by_count":1,"area":"safety"},{"id":"2509.10682","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","created":"2025-09-12","cited_by_count":1,"area":null},{"id":"2509.25843","title":"ASGuard: Activation-Scaling Guard to Mitigate Targeted Jailbreaking Attack","created":"2025-09-30","cited_by_count":1,"area":"safety"},{"id":"2512.03356","title":"From static to adaptive: immune memory-based jailbreak detection for large language models","created":"2025-12-03","cited_by_count":1,"area":"safety"},{"id":"2512.06655","title":"Graph-Regularized Sparse Autoencoders for LLM Safety Steering","created":"2025-12-07","cited_by_count":1,"area":"safety"},{"id":"2602.07107","title":"ShallowJail: Steering Jailbreaks against Large Language Models","created":"2026-02-06","cited_by_count":1,"area":"safety"},{"id":"2606.28153","title":"Robust Harmful Features Under Jailbreak Attacks: Mechanistic Evidence from Attention Head Specialization in Large Language Models","created":"2026-06-26","cited_by_count":1,"area":"alignment"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2502.12445","title":"Computational Safety for Generative AI: A Hypothesis Testing Perspective","created":"2025-02-18","cited_by_count":0,"area":"safety"},{"id":"2512.04841","title":"SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security","created":"2025-12-04","cited_by_count":0,"area":"safety"},{"id":"2602.06630","title":"TrapSuffix: Proactive Defense Against Adversarial Suffixes in Jailbreaking","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2602.13321","title":"Detecting Jailbreak Attempts in Clinical Training LLMs Through Automated Linguistic Feature Extraction","created":"2026-02-10","cited_by_count":0,"area":"safety"},{"id":"2602.17696","title":"Can LLM Safety Be Ensured by Constraining Parameter Regions?","created":"2026-02-06","cited_by_count":0,"area":"safety"},{"id":"2603.17123","title":"Security Assessment and Mitigation Strategies for Large Language Models: A Comprehensive Defensive Framework","created":"2026-03-17","cited_by_count":0,"area":null},{"id":"2604.01473","title":"SelfGrader: LLM Jailbreak Detection via Anchored Token-Level Logits","created":"2026-04-01","cited_by_count":0,"area":"safety"},{"id":"2604.08577","title":"Distributionally Robust Token Optimization in RLHF","created":"2026-03-27","cited_by_count":0,"area":"alignment"},{"id":"2604.17210","title":"Guardrails in Logit Space: Safety Token Regularization for LLM Alignment","created":"2026-04-19","cited_by_count":0,"area":"alignment"},{"id":"2605.24552","title":"Ellipsoid Control: A White-list Jailbreak Defense via Benign Latent Modeling","created":"2026-05-23","cited_by_count":0,"area":"safety"},{"id":"2606.22779","title":"DE-FIVE: Detecting Malicious Image Prompts via Fourier Features and Image Vector Embeddings","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2609.05850","title":"SAFEGuard: Detect Optimization-Based Jailbreak Attacks Through Harmful Semantic Analysis and Fluency Measurement","created":"2026-09-05","cited_by_count":0,"area":"alignment"},{"id":"2609.09798","title":"CS-Guard: Benchmarking LLM Guardrails for Code Generation Security","created":"2026-09-09","cited_by_count":0,"area":"safety"},{"id":"2609.30841","title":"Why Jailbreaks Succeed in Diffusion Language Models: An Energy Landscape Analysis","created":"2026-09-25","cited_by_count":0,"area":"diffusion"},{"id":"2609.36849","title":"Does the Unsafe Gradient Survive a Conversation? On the Fragility of Gradient-Based Jailbreak Detection in Multi-Turn Dialogue","created":"2026-09-29","cited_by_count":0,"area":"alignment"}],"next_cursor":null}