{"total":68,"rows":[{"id":"2404.07921","title":"AmpleGCG: Learning a Universal and Transferable Generative Model of Adversarial Suffixes for Jailbreaking Both Open and Closed LLMs","created":"2024-04-11","cited_by_count":172,"area":"safety"},{"id":"2408.00761","title":"Tamper-Resistant Safeguards for Open-Weight LLMs","created":"2024-08-01","cited_by_count":138,"area":"safety"},{"id":"2404.05993","title":"AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Experts","created":"2024-04-09","cited_by_count":136,"area":null},{"id":"2411.10414","title":"Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations","created":"2024-11-15","cited_by_count":129,"area":"mllm"},{"id":"2406.09187","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","created":"2024-06-13","cited_by_count":124,"area":"lr"},{"id":"2407.18418","title":"Know Your Limits: A Survey of Abstention in Large Language Models","created":"2024-07-25","cited_by_count":121,"area":null},{"id":"2406.07933","title":"Large Language Model Unlearning via Embedding-Corrupted Prompts","created":"2024-06-12","cited_by_count":116,"area":"safety"},{"id":"2501.18492","title":"GuardReasoner: Towards Reasoning-based LLM Safeguards","created":"2025-01-30","cited_by_count":100,"area":"lr"},{"id":"2502.11448","title":"AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detection","created":"2025-02-17","cited_by_count":89,"area":"agents"},{"id":"2410.10700","title":"LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts","created":"2024-10-14","cited_by_count":86,"area":null},{"id":"2406.01288","title":"Improved Few-Shot Jailbreaking Can Circumvent Aligned Language Models and Their Defenses","created":"2024-06-03","cited_by_count":70,"area":"safety"},{"id":"2407.09121","title":"Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Training","created":"2024-07-12","cited_by_count":69,"area":null},{"id":"2406.09324","title":"Bag of Tricks: Benchmarking of Jailbreak Attacks on LLMs","created":"2024-06-13","cited_by_count":51,"area":"safety"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2410.12855","title":"JAILJUDGE: A Comprehensive Jailbreak Judge Benchmark with Multi-Agent Enhanced Explanation Evaluation Framework","created":"2024-10-11","cited_by_count":47,"area":"agents"},{"id":"2407.14937","title":"Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)","created":"2024-07-20","cited_by_count":46,"area":"safety"},{"id":"2406.14563","title":"Model Merging and Safety Alignment: One Bad Model Spoils the Bunch","created":"2024-06-20","cited_by_count":43,"area":"alignment"},{"id":"2407.05557","title":"$R^2$-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning","created":"2024-07-08","cited_by_count":43,"area":"lr"},{"id":"2406.09321","title":"JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models","created":"2024-06-13","cited_by_count":31,"area":"safety"},{"id":"2406.00936","title":"A Survey of Useful LLM Evaluation","created":"2024-06-03","cited_by_count":29,"area":null},{"id":"2410.10414","title":"On Calibration of LLM-based Guard Models for Reliable Content Moderation","created":"2024-10-14","cited_by_count":23,"area":"safety"},{"id":"2504.05408","title":"Frontier AI's Impact on the Cybersecurity Landscape","created":"2025-04-07","cited_by_count":21,"area":null},{"id":"2506.10597","title":"SoK: Evaluating Jailbreak Guardrails for Large Language Models","created":"2025-06-12","cited_by_count":21,"area":"alignment"},{"id":"2509.02563","title":"DynaGuard: A Dynamic Guardian Model With User-Defined Policies","created":"2025-09-02","cited_by_count":19,"area":"safety"},{"id":"2409.19993","title":"Mitigating Backdoor Threats to Large Language Models: Advancement and Challenges","created":"2024-09-30","cited_by_count":15,"area":"safety"},{"id":"2408.02205","title":"Swiss Cheese Model for AI Safety: A Taxonomy and Reference Architecture for Multi-Layered Guardrails of Foundation Model Based Agents","created":"2024-08-05","cited_by_count":14,"area":"agents"},{"id":"2410.22153","title":"Benchmarking LLM Guardrails in Handling Multilingual Toxicity","created":"2024-10-29","cited_by_count":14,"area":"safety"},{"id":"2504.08848","title":"X-Guard: Multilingual Guard Agent for Content Moderation","created":"2025-04-11","cited_by_count":13,"area":"agents"},{"id":"2506.12707","title":"SecurityLingua: Efficient Defense of LLM Jailbreak Attacks via Security-Aware Prompt Compression","created":"2025-06-15","cited_by_count":13,"area":"inference"},{"id":"2509.14558","title":"LLM Jailbreak Detection for (Almost) Free!","created":"2025-09-18","cited_by_count":13,"area":"safety"},{"id":"2411.05214","title":"STAND-Guard: A Small Task-Adaptive Content Moderation Model","created":"2024-11-07","cited_by_count":12,"area":null},{"id":"2504.09593","title":"ControlNET: A Firewall for RAG-based LLM System","created":"2025-04-13","cited_by_count":12,"area":"rag"},{"id":"2504.00441","title":"No Free Lunch with Guardrails","created":"2025-04-01","cited_by_count":11,"area":"safety"},{"id":"2410.09652","title":"Survival of the Safest: Towards Secure Prompt Optimization through Interleaved Multi-Objective Evolution","created":"2024-10-12","cited_by_count":9,"area":null},{"id":"2504.08148","title":"Orchestrating Agents and Data for Enterprise: A Blueprint Architecture for Compound AI","created":"2025-04-10","cited_by_count":9,"area":"agents"},{"id":"2504.15241","title":"MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety","created":"2025-04-21","cited_by_count":9,"area":"lr"},{"id":"2507.11630","title":"Jailbreak-Tuning: Models Efficiently Learn Jailbreak Susceptibility","created":"2025-07-15","cited_by_count":9,"area":"safety"},{"id":"2404.05783","title":"A Survey on Responsible Generative AI: What to Generate and What Not","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2501.16497","title":"Smoothed Embeddings for Robust Language Models","created":"2025-01-27","cited_by_count":8,"area":"safety"},{"id":"2506.11938","title":"Improving Large Language Model Safety with Contrastive Representation Learning","created":"2025-06-13","cited_by_count":8,"area":"mechinterp"},{"id":"2410.02916","title":"LLM Safeguard is a Double-Edged Sword: Exploiting False Positives for Denial-of-Service Attacks","created":"2024-10-03","cited_by_count":6,"area":"safety"},{"id":"2508.15831","title":"Who's Asking? Investigating Bias Through the Lens of Disability Framed Queries in LLMs","created":"2025-08-18","cited_by_count":6,"area":null},{"id":"2509.03787","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","created":"2025-09-04","cited_by_count":6,"area":"rag"},{"id":"2512.03994","title":"Training-Free Policy Violation Detection via Activation-Space Whitening in LLMs","created":"2025-12-03","cited_by_count":6,"area":null},{"id":"2504.19440","title":"JailbreaksOverTime: Detecting Jailbreak Attacks Under Distribution Shift","created":"2025-04-28","cited_by_count":5,"area":"safety"},{"id":"2510.15476","title":"SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses","created":"2025-10-17","cited_by_count":5,"area":"safety"},{"id":"2504.20086","title":"Understanding and Mitigating Risks of Generative AI in Financial Services","created":"2025-04-25","cited_by_count":4,"area":"safety"},{"id":"2509.08380","title":"Co-Investigator AI: The Rise of Agentic AI for Smarter, Trustworthy AML Compliance Narratives","created":"2025-09-10","cited_by_count":4,"area":"agents"},{"id":"2512.16279","title":"QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems","created":"2025-12-18","cited_by_count":4,"area":"agents"},{"id":"2409.17699","title":"MoJE: Mixture of Jailbreak Experts, Naive Tabular Classifiers as Guard for Prompt Attacks","created":"2024-09-26","cited_by_count":3,"area":"safety"},{"id":"2412.07249","title":"Buster: Implanting Semantic Backdoor into Text Encoder to Mitigate NSFW Content Generation","created":"2024-12-10","cited_by_count":3,"area":"safety"},{"id":"2512.20061","title":"Scaling Reinforcement Learning for Content Moderation with Large Language Models","created":"2025-12-23","cited_by_count":3,"area":null},{"id":"2602.07013","title":"Steering to Say No: Configurable Refusal via Activation Steering in Vision Language Models","created":"2026-01-31","cited_by_count":3,"area":"mllm"},{"id":"2603.02588","title":"ExpGuard: LLM Content Moderation in Specialized Domains","created":"2026-03-03","cited_by_count":2,"area":"safety"},{"id":"2603.04259","title":"When AI Fails, What Works? A Data-Driven Taxonomy of Real-World AI Risk Mitigation Strategies","created":"2026-03-04","cited_by_count":2,"area":null},{"id":"2604.09235","title":"Unreal Thinking: Chain-of-Thought Hijacking via Two-stage Backdoor","created":"2026-04-10","cited_by_count":2,"area":"safety"},{"id":"2509.05608","title":"BinaryShield: Cross-Service Threat Intelligence in LLM Services using Privacy-Preserving Fingerprints","created":"2025-09-06","cited_by_count":1,"area":null},{"id":"2604.04992","title":"FreakOut-LLM: The Effect of Emotional Stimuli on Safety Alignment","created":"2026-04-05","cited_by_count":1,"area":"alignment"},{"id":"2605.01899","title":"Disentangling Intent from Role: Adversarial Self-Play for Persona-Invariant Safety Alignment","created":"2026-05-03","cited_by_count":1,"area":"alignment"},{"id":"2606.01513","title":"Compliance-Scored Best-of-N Guardrail Orchestration for Multimodal Document Generation in Payments Dispute Defense","created":"2026-06-01","cited_by_count":1,"area":"safety"},{"id":"2508.01198","title":"Adaptive Content Restriction for Large Language Models via Suffix Optimization","created":"2025-08-02","cited_by_count":0,"area":null},{"id":"2508.18384","title":"Backprompting: Leveraging Synthetic Production Data for Health Advice Guardrails","created":"2025-08-25","cited_by_count":0,"area":"safety"},{"id":"2603.15259","title":"Directional Embedding Smoothing for Robust Vision Language Models","created":"2026-03-16","cited_by_count":0,"area":"mllm"},{"id":"2604.10502","title":"CHAIRO: Contextual Hierarchical Analogical Induction and Reasoning Optimization for LLMs","created":"2026-04-12","cited_by_count":0,"area":"lr"},{"id":"2604.10504","title":"CARO: Chain-of-Analogy Reasoning Optimization for Robust Content Moderation","created":"2026-04-12","cited_by_count":0,"area":"lr"},{"id":"2605.21609","title":"CR4T: Rewrite-Based Guardrails for Adolescent LLM Safety","created":"2026-05-20","cited_by_count":0,"area":"safety"},{"id":"2607.25297","title":"Hybrid Analysis for Secure MCP Tool Use in LLM Agents","created":"2026-07-28","cited_by_count":0,"area":"agents"},{"id":"2609.36477","title":"Guard Models Are Overconfident Where Base Models Are Uncertain","created":"2026-09-29","cited_by_count":0,"area":null}],"next_cursor":null}