{"total":27,"rows":[{"id":"2405.09055","title":"A safety realignment framework via subspace-oriented model fusion for large language models","created":"2024-05-15","cited_by_count":41,"area":"safety"},{"id":"2503.00187","title":"Steering Dialogue Dynamics for Robustness against Multi-turn Jailbreaking Attacks","created":"2025-02-28","cited_by_count":20,"area":"safety"},{"id":"2502.11598","title":"Can LLM Watermarks Robustly Prevent Unauthorized Knowledge Distillation?","created":"2025-02-17","cited_by_count":19,"area":"safety"},{"id":"2505.18325","title":"Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundary","created":"2025-05-23","cited_by_count":18,"area":"safety"},{"id":"2409.08846","title":"Fingerprint Vector: Enabling Scalable and Efficient Model Fingerprint Transfer via Vector Addition","created":"2024-09-13","cited_by_count":10,"area":"safety"},{"id":"2505.16723","title":"LLM Fingerprinting via Semantically Conditioned Watermarks","created":"2025-05-22","cited_by_count":9,"area":"safety"},{"id":"2507.18302","title":"LoRA-Leak: Membership Inference Attacks Against LoRA Fine-tuned Language Models","created":"2025-07-24","cited_by_count":9,"area":"safety"},{"id":"2512.14741","title":"Persistent Backdoor Attacks under Continual Fine-Tuning of LLMs","created":"2025-12-12","cited_by_count":7,"area":"safety"},{"id":"2501.13677","title":"HumorReject: Decoupling LLM Safety from Refusal Prefix via A Little Humor","created":"2025-01-23","cited_by_count":6,"area":"safety"},{"id":"2506.07452","title":"When Style Breaks Safety: Defending LLMs Against Superficial Style Alignment","created":"2025-06-09","cited_by_count":6,"area":"safety"},{"id":"2505.16567","title":"Watch your steps: Dormant Adversarial Behaviors that Activate upon LLM Finetuning","created":"2025-05-22","cited_by_count":5,"area":"safety"},{"id":"2606.10813","title":"RedAct: Redacting Agent Capability Traces for Procedural Skill Protection","created":"2026-06-09","cited_by_count":3,"area":"safety"},{"id":"2411.00204","title":"RESTOR: Knowledge Recovery in Machine Unlearning","created":"2024-10-31","cited_by_count":2,"area":"safety"},{"id":"2502.14486","title":"How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation","created":"2025-02-20","cited_by_count":2,"area":"safety"},{"id":"2502.16708","title":"Exploring Incremental Unlearning: Techniques, Challenges, and Future Directions","created":"2025-02-23","cited_by_count":2,"area":"safety"},{"id":"2602.22562","title":"Layer-Targeted Multilingual Knowledge Erasure in Large Language Models","created":"2026-02-26","cited_by_count":2,"area":"safety"},{"id":"2604.11546","title":"RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience","created":"2026-04-13","cited_by_count":2,"area":"safety"},{"id":"2601.14310","title":"CORVUS: Red-Teaming Hallucination Detectors via Internal Signal Camouflage in Large Language Models","created":"2026-01-19","cited_by_count":1,"area":"safety"},{"id":"2603.02262","title":"Silent Sabotage During Fine-Tuning: Few-Shot Rationale Poisoning of Compact Medical LLMs","created":"2026-02-28","cited_by_count":1,"area":"safety"},{"id":"2502.20952","title":"Efficient Jailbreaking of Large Models by Freeze Training: Lower Layers Exhibit Greater Sensitivity to Harmful Content","created":"2025-02-28","cited_by_count":0,"area":"safety"},{"id":"2602.04893","title":"A Causal Perspective for Enhancing Jailbreak Attack and Defense","created":"2026-01-31","cited_by_count":0,"area":"safety"},{"id":"2603.14968","title":"Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework","created":"2026-03-16","cited_by_count":0,"area":"safety"},{"id":"2605.26595","title":"Cordyceps: Covert Control Attacks on LLMs via Data Poisoning","created":"2026-05-26","cited_by_count":0,"area":"safety"},{"id":"2608.11348","title":"An Empirical Study of Output-to-Input Loops for Black-Box Backdoor Detection in Fine-Tuned Open-Weight LLMs","created":"2026-08-11","cited_by_count":0,"area":"safety"},{"id":"2608.24354","title":"Not All Tokens Are Equal: Region-Aware Consistency Repair of Backdoors in MLLMs","created":"2026-08-25","cited_by_count":0,"area":"safety"},{"id":"2608.27548","title":"Nemotron 3.5 Content Safety Moderator: A Compact Multimodal, Multilingual, and Reasoning Enabled Content Safety Moderator","created":"2026-08-27","cited_by_count":0,"area":"safety"},{"id":"2610.02418","title":"Mitigating Private Data Leakage in LLMs with Whiteout","created":"2026-10-01","cited_by_count":0,"area":"safety"}],"next_cursor":null}